# Top **URL:** https://discuss.elastic.co/top.md?page=1050&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1051 --- ## [Upgrade 1.3.0 -\> 5.6.4: deprecated document\_type use fileds](https://discuss.elastic.co/t/upgrade-1-3-0-5-6-4-deprecated-document-type-use-fileds/107202)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 6:20pm UTC](https://discuss.elastic.co/t/upgrade-1-3-0-5-6-4-deprecated-document-type-use-fileds/107202 "2017-11-13T18:20:53Z")
Upgraded a filebeat from 1.3.0 to 5.6.4 but it doesn't seem to collect and ship data to logstash. Upon launch filebeat complains i log about deprecated feature document\_type in my prospector: 2017-11-10T15:22:37+01:00 W… --- ## [Filebeat logging directly to elasticsearch](https://discuss.elastic.co/t/filebeat-logging-directly-to-elasticsearch/43638)
**Author:** [@mbst83r](https://discuss.elastic.co/u/mbst83r)\ **Replies:** 2\ **Last updated:** [March 7, 2016, 1:10pm UTC](https://discuss.elastic.co/t/filebeat-logging-directly-to-elasticsearch/43638 "2016-03-07T13:10:09Z")
Hi guys, i am trying to log from filebeat directly to elasticsearch. Could it be possible that this feature isn't working properly at all? I get no erros on startup, during the run and on shutdown, even not in debug… --- ## [Validation Failed: 1: id is too long, must be no longer than 512 bytes](https://discuss.elastic.co/t/validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes/101924)
**Author:** [@stp\_ra](https://discuss.elastic.co/u/stp_ra)\ **Replies:** 1\ **Last updated:** [October 8, 2017, 11:03am UTC](https://discuss.elastic.co/t/validation-failed-1-id-is-too-long-must-be-no-longer-than-512-bytes/101924 "2017-10-08T11:03:51Z")
From this closed thread: Id is too long, must be no longer than 512 I understand that \_id cannot be longer than 512 bytes. Now I am stuck. Since there isn't a unique constraint for a field I have chosen to use \_id. Now t… --- ## [Filebeats, unable to read all the data from log file](https://discuss.elastic.co/t/filebeats-unable-to-read-all-the-data-from-log-file/316102)
**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\ **Replies:** 8\ **Last updated:** [October 13, 2022, 6:17pm UTC](https://discuss.elastic.co/t/filebeats-unable-to-read-all-the-data-from-log-file/316102 "2022-10-13T18:17:30Z")
Hello Team, Greetings, I am trying to ingest data from log file to elastic via logstash. Here is the pipeline -\> LOG\_FILE \> FILEBEAT \> LOGSTASH \> ELASTIC. Not sure but recently been observing the logs are missing in … --- ## [EMPTY\_BYTE\_ARRAY error for for log4j configuration file after update](https://discuss.elastic.co/t/empty-byte-array-error-for-for-log4j-configuration-file-after-update/302560)
**Author:** [@roman-tasi](https://discuss.elastic.co/u/roman-tasi)\ **Replies:** 0\ **Last updated:** [April 16, 2022, 7:40pm UTC](https://discuss.elastic.co/t/empty-byte-array-error-for-for-log4j-configuration-file-after-update/302560 "2022-04-16T19:40:36Z")
I just did a full system update for my Linux machine and now have this error when trying to start the Elasticsearch service: Apr 14 09:58:38 ELK-Stack.uhtasi.local systemd-entrypoint\[16746\]: Exception in thread "main" j… --- ## [In Ubuntu 18.04 auditbeat logs goes to syslog than /var/log/auditbeat](https://discuss.elastic.co/t/in-ubuntu-18-04-auditbeat-logs-goes-to-syslog-than-var-log-auditbeat/206269)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 3\ **Last updated:** [November 13, 2019, 9:03pm UTC](https://discuss.elastic.co/t/in-ubuntu-18-04-auditbeat-logs-goes-to-syslog-than-var-log-auditbeat/206269 "2019-11-13T21:03:29Z")
Hi All, Good morning I am using Ubuntu 18.04 I have auditbeat installed and running on my system, in the auditbeat.yml files I have given the following logging.level: info path.logs: /var/log/auditbeat When I chec… --- ## [Not able to add new indices](https://discuss.elastic.co/t/not-able-to-add-new-indices/101114)
**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\ **Replies:** 8\ **Last updated:** [September 21, 2017, 4:43am UTC](https://discuss.elastic.co/t/not-able-to-add-new-indices/101114 "2017-09-21T04:43:20Z")
Hi, I have installed X-pack and now when i am trying to add new indices, it is not happening. when i'm checking for all the indices using the command curl '10.1.1.150:9200/\_cat/indices?v' then i'm getting following … --- ## [Color change of bar graph](https://discuss.elastic.co/t/color-change-of-bar-graph/26059)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 3\ **Last updated:** [July 22, 2015, 3:58pm UTC](https://discuss.elastic.co/t/color-change-of-bar-graph/26059 "2015-07-22T15:58:19Z")
i want to make a bar graph but i want to change the color .of bar if it exceed some limit and it should change from the point where it starts exceeding. is it possible in kibana ?? if yes then how? plz reply soon --- ## [How to search association rules for best match using ES](https://discuss.elastic.co/t/how-to-search-association-rules-for-best-match-using-es/441)
**Author:** [@Zoran\_Jeremic](https://discuss.elastic.co/u/Zoran_Jeremic)\ **Replies:** 3\ **Last updated:** [May 11, 2015, 7:31am UTC](https://discuss.elastic.co/t/how-to-search-association-rules-for-best-match-using-es/441 "2015-05-11T07:31:53Z")
Hi, I'm developing Java application that should recommend users activities that are most often used to reach specific competence. My approach was to use association rules, so I already have generated association rules … --- ## [Query seach in elasticsearch](https://discuss.elastic.co/t/query-seach-in-elasticsearch/257939)
**Author:** [@111411](https://discuss.elastic.co/u/111411)\ **Replies:** 6\ **Last updated:** [December 8, 2020, 7:24am UTC](https://discuss.elastic.co/t/query-seach-in-elasticsearch/257939 "2020-12-08T07:24:24Z")
I'm trying to search in elasticsearch by query. I'm want to get uuid = 002A13AC-93E6-4141-AA28-0A86F1B5E5C2 of device index. GET device/\_search? { "query": { "match": { "uuid" : "0aaa02A13AC-93E6-4141-AA28-0A86F1B5… --- ## [Detect if event.get("message").scan fails](https://discuss.elastic.co/t/detect-if-event-get-message-scan-fails/224818)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 7\ **Last updated:** [March 24, 2020, 6:53pm UTC](https://discuss.elastic.co/t/detect-if-event-get-message-scan-fails/224818 "2020-03-24T18:53:41Z")
Hello All, i would like to detect if "pattternmatch4" fails and do another process. How can i detect if it fails? ruby { code =\> 'event.set("patternmatch3", event.get("message").scan(/text.… --- ## [Increase Elastic Heap After Installation](https://discuss.elastic.co/t/increase-elastic-heap-after-installation/167837)
**Author:** [@joubeh](https://discuss.elastic.co/u/joubeh)\ **Replies:** 7\ **Last updated:** [February 11, 2019, 1:21pm UTC](https://discuss.elastic.co/t/increase-elastic-heap-after-installation/167837 "2019-02-11T13:21:32Z")
Hello, please note that I've installed ES using windows MSI I'm trying to increase heap size using jvm.options as below JVM configuration ################################################################ ## IMPORTANT: … --- ## [Backfilling with filebeat "projectwide" -- how best to enrich?](https://discuss.elastic.co/t/backfilling-with-filebeat-projectwide-how-best-to-enrich/72796)
**Author:** [@cprior](https://discuss.elastic.co/u/cprior)\ **Replies:** 7\ **Last updated:** [January 31, 2017, 12:10pm UTC](https://discuss.elastic.co/t/backfilling-with-filebeat-projectwide-how-best-to-enrich/72796 "2017-01-31T12:10:59Z")
Hi there! Occasionally I get a bunch of logfiles from several machines, dating back a couple of weeks. These are similar machines in terms of hardware and software, and have a few different config items like hostname /… --- ## [Failed to Load Service Token](https://discuss.elastic.co/t/failed-to-load-service-token/317391)
**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 1:17am UTC](https://discuss.elastic.co/t/failed-to-load-service-token/317391 "2022-10-26T01:17:06Z")
Hello, at the start of Elastic I got these errors: \[2022-10-25T09:31:12,342\]\[ERROR\]\[o.e.b.Elasticsearch \] \[node-1\] fatal exception while booting Elasticsearch java.lang.IllegalStateException: security initializati… --- ## [IBM\\WebSphere was unexpected at this time](https://discuss.elastic.co/t/ibm-websphere-was-unexpected-at-this-time/193870)
**Author:** [@nim\_alan1](https://discuss.elastic.co/u/nim_alan1)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 1:11pm UTC](https://discuss.elastic.co/t/ibm-websphere-was-unexpected-at-this-time/193870 "2019-08-09T13:11:10Z")
elk newbie here, trying to follow the logstash guide for version 7.3.0. when running the command as in guide "bin\\logstash -e 'input { stdin { } } output { stdout {} }'" I get the below error. "IBM\\WebSphere was unexpe… --- ## [Plotting Cumulative Distribution Function over Kibana](https://discuss.elastic.co/t/plotting-cumulative-distribution-function-over-kibana/93274)
**Author:** [@Sachin\_Gupta](https://discuss.elastic.co/u/Sachin_Gupta)\ **Replies:** 1\ **Last updated:** [July 17, 2017, 7:29am UTC](https://discuss.elastic.co/t/plotting-cumulative-distribution-function-over-kibana/93274 "2017-07-17T07:29:58Z")
Hi All, We need to plot the KPI as Cumulative Distribution Function. We could fine 2 alternative but stuck at step. Please help Alternative 1 : Plot Cumulative Sum and then chose Custom Metrics with Aggregation method… --- ## [Logstash config for using filebeat auditd module](https://discuss.elastic.co/t/logstash-config-for-using-filebeat-auditd-module/87033)
**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\ **Replies:** 1\ **Last updated:** [May 29, 2017, 1:33pm UTC](https://discuss.elastic.co/t/logstash-config-for-using-filebeat-auditd-module/87033 "2017-05-29T13:33:52Z")
We would like to use filebeat to collect audit logs across several systems. We put our Elastic cluster behind a security VLAN, and don't want to open up ports to the public. So the best solution here is to simply pu… --- ## [Cloudtrail logs parsing with logstash](https://discuss.elastic.co/t/cloudtrail-logs-parsing-with-logstash/75806)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 1\ **Last updated:** [February 21, 2017, 8:09pm UTC](https://discuss.elastic.co/t/cloudtrail-logs-parsing-with-logstash/75806 "2017-02-21T20:09:11Z")
Hi All, I am trying to parse Amazon Cloudtrail logs to Elasticsearch using logstash. I have my s3 plugin configured and output been set to Elasticsearch but i find out that there is no grok pattern defined as to pass t… --- ## [Elastic Agents Sending Large Amounts of Data](https://discuss.elastic.co/t/elastic-agents-sending-large-amounts-of-data/350413)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 5\ **Last updated:** [January 10, 2024, 3:37pm UTC](https://discuss.elastic.co/t/elastic-agents-sending-large-amounts-of-data/350413 "2024-01-10T15:37:34Z")
Some of my agents are sending 1GB of data every hour. They are all laptops and desktops with a basic setup. Would they do that if the elasticsearch destination they are sending data to is down? --- ## [Index alias with wildcard?](https://discuss.elastic.co/t/index-alias-with-wildcard/247026)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 5\ **Last updated:** [September 1, 2020, 6:36am UTC](https://discuss.elastic.co/t/index-alias-with-wildcard/247026 "2020-09-01T06:36:05Z")
Hello, I am creating a daily index. Indices look like the following my-index-2020-08-31 my-index-2020-08-30 my-index-2020-08-29 my-index-yyyy-mm-dd Is t possible to add to the template an index alias with wildcard? … --- ## [Any plan for support opentracing baggage?](https://discuss.elastic.co/t/any-plan-for-support-opentracing-baggage/182672)
**Author:** [@dozer47528](https://discuss.elastic.co/u/dozer47528)\ **Replies:** 5\ **Last updated:** [May 27, 2019, 5:20pm UTC](https://discuss.elastic.co/t/any-plan-for-support-opentracing-baggage/182672 "2019-05-27T17:20:03Z")
We are working on the Jaeger to Elastic APM migrating. We are using the opentracing baggage in our system. Everything works fine with Elastic APM except baggage. Any plan for that? --- ## [Number of active sessions](https://discuss.elastic.co/t/number-of-active-sessions/167090)
**Author:** [@Costi](https://discuss.elastic.co/u/Costi)\ **Replies:** 5\ **Last updated:** [February 9, 2019, 2:02am UTC](https://discuss.elastic.co/t/number-of-active-sessions/167090 "2019-02-09T02:02:55Z")
Hi! Does anyone know how can i see the total number of active sessions? I tried to use winlogbeat and search by event\_id but i think my approach isn't the correct one. Thanks! --- ## [Creating Multiple Logstash indexes from Filebeat logs of different machines](https://discuss.elastic.co/t/creating-multiple-logstash-indexes-from-filebeat-logs-of-different-machines/226588)
**Author:** [@Claire08](https://discuss.elastic.co/u/Claire08)\ **Replies:** 2\ **Last updated:** [April 5, 2020, 10:48pm UTC](https://discuss.elastic.co/t/creating-multiple-logstash-indexes-from-filebeat-logs-of-different-machines/226588 "2020-04-05T22:48:06Z")
I am fairly new to ES and I have been testing filebeat/logstash configurations. I am trying to get Logstash to output to multiple indexes based on the logs collected from another remote machine. For example, I wanted to … --- ## [Use different columns for valueColumn and filterColumn in a Dropdown Filter](https://discuss.elastic.co/t/use-different-columns-for-valuecolumn-and-filtercolumn-in-a-dropdown-filter/215890)
**Author:** [@steamed\_buns](https://discuss.elastic.co/u/steamed_buns)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 9:43am UTC](https://discuss.elastic.co/t/use-different-columns-for-valuecolumn-and-filtercolumn-in-a-dropdown-filter/215890 "2020-01-29T09:43:35Z")
Hello, I am trying to understand how exactly the dropdown filter in Kibana works. Since I am able to separately specify columns for valueColumn and filterColumn, I assumed that it would be possible to use one column to … --- ## [How to get kv filter to ignore value\_split in data](https://discuss.elastic.co/t/how-to-get-kv-filter-to-ignore-value-split-in-data/115846)
**Author:** [@Nofar](https://discuss.elastic.co/u/Nofar)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 11:58am UTC](https://discuss.elastic.co/t/how-to-get-kv-filter-to-ignore-value-split-in-data/115846 "2018-01-17T11:58:55Z")
My conf file: kv { source =\> "cp\_keyValueData" field\_split =\> ";" value\_split =\> ":" trim\_key =\> " " } data example: key1: val1; key2: val2; key3: https://site/?g={......"...;%20%20CLR%20;%20rv:11.0)"..}; key… --- ## [Request header field kbn-version is not allowed by Access-Control-Allow-Headers in preflight response Errror when doing Rest Call in Kibana Plugin](https://discuss.elastic.co/t/request-header-field-kbn-version-is-not-allowed-by-access-control-allow-headers-in-preflight-response-errror-when-doing-rest-call-in-kibana-plugin/44824)
**Author:** [@ksuperman](https://discuss.elastic.co/u/ksuperman)\ **Replies:** 2\ **Last updated:** [May 11, 2016, 4:45am UTC](https://discuss.elastic.co/t/request-header-field-kbn-version-is-not-allowed-by-access-control-allow-headers-in-preflight-response-errror-when-doing-rest-call-in-kibana-plugin/44824 "2016-05-11T04:45:54Z")
Hello all, I have a problem when making a rest API Call to external URL inside a custom visualization plugin, where i keep getting this error. I have CORS enabled on the Node server where this call is bein… --- ## [Convert string field to geo\_point field for map visualisation](https://discuss.elastic.co/t/convert-string-field-to-geo-point-field-for-map-visualisation/324397)
**Author:** [@cf4455](https://discuss.elastic.co/u/cf4455)\ **Replies:** 4\ **Last updated:** [February 6, 2023, 2:42pm UTC](https://discuss.elastic.co/t/convert-string-field-to-geo-point-field-for-map-visualisation/324397 "2023-02-06T14:42:59Z")
Hello, We collect in our logs, among other things, geo-coordinates and their accuracy in 2 "string" fields. Currently there are over 3,200,000 logs since the beginning of 2021. Now we want to display these coordinates o… --- ## [HTTP and JDBC connectionPool Stats](https://discuss.elastic.co/t/http-and-jdbc-connectionpool-stats/177154)
**Author:** [@rdhanpal](https://discuss.elastic.co/u/rdhanpal)\ **Replies:** 4\ **Last updated:** [April 17, 2019, 1:50pm UTC](https://discuss.elastic.co/t/http-and-jdbc-connectionpool-stats/177154 "2019-04-17T13:50:24Z")
Hello, I would like to know if java apm agent supports/captures http and jdbc connection pool metrics for application running on websphere Liberty or tomcat container. Please advise. Kibana version:6.7 Elasticsearch v… --- ## [\[Elasticsearch\] Rechercher dans des array](https://discuss.elastic.co/t/elasticsearch-rechercher-dans-des-array/77141)
**Author:** [@Benjamin\_Carriou](https://discuss.elastic.co/u/Benjamin_Carriou)\ **Replies:** 4\ **Last updated:** [March 6, 2017, 8:23am UTC](https://discuss.elastic.co/t/elasticsearch-rechercher-dans-des-array/77141 "2017-03-06T08:23:56Z")
Bonjour ! Actuellement, j'indexe des documents de la sorte:: { "took": 6, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "failed": 0 }, "hits": { "total": 3, "max\_score": … --- ## [Query to be used to find substring in a column](https://discuss.elastic.co/t/query-to-be-used-to-find-substring-in-a-column/45507)
**Author:** [@nitin](https://discuss.elastic.co/u/nitin)\ **Replies:** 4\ **Last updated:** [March 27, 2016, 2:24pm UTC](https://discuss.elastic.co/t/query-to-be-used-to-find-substring-in-a-column/45507 "2016-03-27T14:24:29Z")
Hi, I have a field as TAGS which contains various tags for an indexed document. I have to search over these tags and if the entered string matches partially or fully to any of these tags then search result should displ… --- ## [ES 1.3 - Calculating+updating a field in millions of documents](https://discuss.elastic.co/t/es-1-3-calculating-updating-a-field-in-millions-of-documents/36114)
**Author:** [@jdyck](https://discuss.elastic.co/u/jdyck)\ **Replies:** 4\ **Last updated:** [December 2, 2015, 7:28am UTC](https://discuss.elastic.co/t/es-1-3-calculating-updating-a-field-in-millions-of-documents/36114 "2015-12-02T07:28:23Z")
Hey all, I have an ES index containing several million records. I'm adding a field to the document's mapping, afterwards I'll have to go back and calculate the value for this new field for every existing document. The… --- ## [Set primary shards location](https://discuss.elastic.co/t/set-primary-shards-location/34904)
**Author:** [@israel](https://discuss.elastic.co/u/israel)\ **Replies:** 4\ **Last updated:** [November 18, 2015, 11:14am UTC](https://discuss.elastic.co/t/set-primary-shards-location/34904 "2015-11-18T11:14:34Z")
Hi, I have 10 machines and configured 10 shards (2 replicas for each). Is there a way for me to set that Shard 1 primary will reside on machine 1, Shard 2 primary will reside on machine 2 and so on...? Thanks, --- ## [ES Mapping template taking "index : analyzed" despite I am using "index : not\_analyzed"](https://discuss.elastic.co/t/es-mapping-template-taking-index-analyzed-despite-i-am-using-index-not-analyzed/28592)
**Author:** [@peterj](https://discuss.elastic.co/u/peterj)\ **Replies:** 4\ **Last updated:** [September 4, 2015, 5:56pm UTC](https://discuss.elastic.co/t/es-mapping-template-taking-index-analyzed-despite-i-am-using-index-not-analyzed/28592 "2015-09-04T17:56:55Z")
Hello Experts, I am using below ES/logstash template to create a mapping. I used "index : not\_analyzed" in my template but after index creation when I look it via kibana/curl I am getting index as analyzed. Why did ind… --- ## [3.0.0 Released](https://discuss.elastic.co/t/3-0-0-released/296957)
**Author:** [@atorok](https://discuss.elastic.co/u/atorok)\ **Replies:** 0\ **Last updated:** [February 11, 2022, 10:12am UTC](https://discuss.elastic.co/t/3-0-0-released/296957 "2022-02-11T10:12:34Z")
We are pleased to announce that a new major, ECE 3.0.0 has been released today. Release notes: https://www.elastic.co/guide/en/cloud-enterprise/current/ece-release-notes-3.0.0.html --- ## [Logstash File Input Won't Re-read Files](https://discuss.elastic.co/t/logstash-file-input-wont-re-read-files/217684)
**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\ **Replies:** 3\ **Last updated:** [February 3, 2020, 9:51pm UTC](https://discuss.elastic.co/t/logstash-file-input-wont-re-read-files/217684 "2020-02-03T21:51:45Z")
I've configured logstash to read all .system files from a specific directory and it works for new files. However after the file is read and indexed it won't re-read a file with the same file name even if I edit it or de… --- ## [filebeat往Central Management 注册失败后第二次注册会提示empty access\_token](https://discuss.elastic.co/t/filebeat-central-management-empty-access-token/170103)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 0\ **Last updated:** [February 27, 2019, 5:47am UTC](https://discuss.elastic.co/t/filebeat-central-management-empty-access-token/170103 "2019-02-27T05:47:55Z")
filebeat enroll http://192.168.10.161:5601 --username elastic --password stdin Enter password: Error while enrolling: empty access\_token 不管是用kibana生成的token url注册还是以用户密码的方式注册，后面都会提示Error while enrolling: empty access\_t… --- ## [Cannot handle query parameters in plugin](https://discuss.elastic.co/t/cannot-handle-query-parameters-in-plugin/73339)
**Author:** [@vglazkov](https://discuss.elastic.co/u/vglazkov)\ **Replies:** 3\ **Last updated:** [January 31, 2017, 2:25pm UTC](https://discuss.elastic.co/t/cannot-handle-query-parameters-in-plugin/73339 "2017-01-31T14:25:58Z")
Hi, I'm trying to register custom query parameter in my plugin handler like this one: public class EssenceRestAction extends BaseRestHandler { @Inject public EssenceRestAction(Settings settings, RestControll… --- ## [Does Winlogbeat work with the Semantic Logging Application Block (SLAB)?](https://discuss.elastic.co/t/does-winlogbeat-work-with-the-semantic-logging-application-block-slab/47524)
**Author:** [@tlv324](https://discuss.elastic.co/u/tlv324)\ **Replies:** 3\ **Last updated:** [April 18, 2016, 1:44pm UTC](https://discuss.elastic.co/t/does-winlogbeat-work-with-the-semantic-logging-application-block-slab/47524 "2016-04-18T13:44:29Z")
I am currently using a shipper than works with SLAB, but has an issue with Shield Authentication. If Winlogbeat works with SLAB, I would be able to switch to that and make my shipping experience much easier! Thanks in … --- ## [How to iterate multiple S3 inputs?](https://discuss.elastic.co/t/how-to-iterate-multiple-s3-inputs/100424)
**Author:** [@android.kc](https://discuss.elastic.co/u/android.kc)\ **Replies:** 1\ **Last updated:** [September 14, 2017, 9:36am UTC](https://discuss.elastic.co/t/how-to-iterate-multiple-s3-inputs/100424 "2017-09-14T09:36:03Z")
I am using s3 input plugin to download/unzip .gz file and feed to Logstash. Here is the input part of my working config for Logstash input { s3 { interval =\> 86400 bucket =\> "us-west-1" aws\_credentials\_fil… --- ## [Unable to delete dashboard and visualizations through Kibana GUI](https://discuss.elastic.co/t/unable-to-delete-dashboard-and-visualizations-through-kibana-gui/48131)
**Author:** [@PKA](https://discuss.elastic.co/u/PKA)\ **Replies:** 1\ **Last updated:** [April 22, 2016, 6:48pm UTC](https://discuss.elastic.co/t/unable-to-delete-dashboard-and-visualizations-through-kibana-gui/48131 "2016-04-22T18:48:48Z")
I am unable to delete dashboard and visualizations through Kibana GUI. There are no error messages as well that are displayed. Is this a bug? I am using Kibana 4.4. Is there a curl command that I can use as a workaroun… --- ## [Filebeat on Kubernetes, host.name got the pod names (and not the Kubernetes host name ?)](https://discuss.elastic.co/t/filebeat-on-kubernetes-host-name-got-the-pod-names-and-not-the-kubernetes-host-name/189951)
**Author:** [@twiggy](https://discuss.elastic.co/u/twiggy)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 12:25pm UTC](https://discuss.elastic.co/t/filebeat-on-kubernetes-host-name-got-the-pod-names-and-not-the-kubernetes-host-name/189951 "2019-07-19T12:25:24Z")
Hello, Environment : Kibana, metricbeat, filebeat (all 7.2) I've deployed Filebeat on my Kubernetes cluster using this yaml. It's the one from the official website, but with namespaces (elastic) and elasticsearch host … --- ## [Issues with Regex in Kibana](https://discuss.elastic.co/t/issues-with-regex-in-kibana/165773)
**Author:** [@franciobr](https://discuss.elastic.co/u/franciobr)\ **Replies:** 2\ **Last updated:** [January 31, 2019, 8:42pm UTC](https://discuss.elastic.co/t/issues-with-regex-in-kibana/165773 "2019-01-31T20:42:30Z")
I am having a hard time using a regex pattern inside Kibana/Elasticsearch version 6.5.4. The field I am searching for has the following mapping: "field": { "type": "text", "analyzer": "custom\_analyze… --- ## [Legend width shouldn't be hard-coded](https://discuss.elastic.co/t/legend-width-shouldnt-be-hard-coded/99023)
**Author:** [@bh9](https://discuss.elastic.co/u/bh9)\ **Replies:** 2\ **Last updated:** [September 1, 2017, 8:20am UTC](https://discuss.elastic.co/t/legend-width-shouldnt-be-hard-coded/99023 "2017-09-01T08:20:28Z")
The legend width is hard coded to 150px. This causes problems for entries with long names and is compounded with long lists of entries by the scroll bar. While I appreciate that it should have an upper and lower bound, i… --- ## [Different poll periods for different stats](https://discuss.elastic.co/t/different-poll-periods-for-different-stats/54833)
**Author:** [@Zfs](https://discuss.elastic.co/u/Zfs)\ **Replies:** 2\ **Last updated:** [July 6, 2016, 5:36pm UTC](https://discuss.elastic.co/t/different-poll-periods-for-different-stats/54833 "2016-07-06T17:36:51Z")
Running the daily build - filebeat-5.0.0-alpha5-SNAPSHOT-windows-x86 Is it possible to have multiple metricsets that support different polling periods? I would like to have the filesystem metric checked at a slower int… --- ## [Install elasticsearch plugins with Ansible](https://discuss.elastic.co/t/install-elasticsearch-plugins-with-ansible/37113)
**Author:** [@arok](https://discuss.elastic.co/u/arok)\ **Replies:** 2\ **Last updated:** [December 15, 2015, 7:01am UTC](https://discuss.elastic.co/t/install-elasticsearch-plugins-with-ansible/37113 "2015-12-15T07:01:47Z")
hello, how to install elasticsearch plugin with ansible?? I have this command: shell: chdir=/usr/share/elasticsearch/plugins/ state=present name={{ item }} owner=root group=root mode=0755 with\_items: royr… --- ## [Russian words not work with synonym token filter](https://discuss.elastic.co/t/russian-words-not-work-with-synonym-token-filter/16186)
**Author:** [@marvin](https://discuss.elastic.co/u/marvin)\ **Replies:** 2\ **Last updated:** [December 22, 2014, 10:19am UTC](https://discuss.elastic.co/t/russian-words-not-work-with-synonym-token-filter/16186 "2014-12-22T10:19:28Z")
Hi. I have test index with settings: curl -XPOST 'http://localhost:9200/test\_index' -d ' { "settings" : { "number\_of\_shards" : 5, "language":"javascript", "analysis": { … --- ## [Filebeat high availability, avoiding duplicated results](https://discuss.elastic.co/t/filebeat-high-availability-avoiding-duplicated-results/324615)
**Author:** [@yago82](https://discuss.elastic.co/u/yago82)\ **Replies:** 6\ **Last updated:** [February 13, 2023, 2:00pm UTC](https://discuss.elastic.co/t/filebeat-high-availability-avoiding-duplicated-results/324615 "2023-02-13T14:00:09Z")
Dear Elastic Community, I am looking for a solution to retrieve logs from multiple servers and I have considered using Filebeat for this purpose. My main concern is to ensure high availability, avoiding duplicated resu… --- ## [Disable 'Apply these filters?' dialog box in embedded visualizations](https://discuss.elastic.co/t/disable-apply-these-filters-dialog-box-in-embedded-visualizations/102070)
**Author:** [@massim0](https://discuss.elastic.co/u/massim0)\ **Replies:** 6\ **Last updated:** [October 12, 2017, 3:45am UTC](https://discuss.elastic.co/t/disable-apply-these-filters-dialog-box-in-embedded-visualizations/102070 "2017-10-12T03:45:01Z")
Hello All, I use kibana 5.5.2. I would like the ability to block out the 'Apply these filters?' dialog box. it is possible in some ways? thank you very much for help me!! --- ## [Invalid top-level key 'setup' found](https://discuss.elastic.co/t/invalid-top-level-key-setup-found/101367)
**Author:** [@igormarqs](https://discuss.elastic.co/u/igormarqs)\ **Replies:** 6\ **Last updated:** [September 26, 2017, 9:57pm UTC](https://discuss.elastic.co/t/invalid-top-level-key-setup-found/101367 "2017-09-26T21:57:38Z")
hi, i have try to install winlogbeat on Windows Server Datacenter and failed. i download winlogbeat from here extract the content into C:\\Program Files and rename the winlogbeat- directory to Winlogbeat. edit winlogbe… --- ## [Elastic search with lots of small writes](https://discuss.elastic.co/t/elastic-search-with-lots-of-small-writes/10685)
**Author:** [@Alexis\_Okuwa](https://discuss.elastic.co/u/Alexis_Okuwa)\ **Replies:** 6\ **Last updated:** [February 10, 2013, 7:28pm UTC](https://discuss.elastic.co/t/elastic-search-with-lots-of-small-writes/10685 "2013-02-10T19:28:34Z")
I had the great idea (and sometimes i regret it) of using elasticsearch as the primary (and only) db for a web project I am working on. It has been great with the large reads and writes (a few kb a document), But the… [Previous page](https://discuss.elastic.co/top.md?page=1049&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1051&per_page=50&period=all)