# Top

**URL:** https://discuss.elastic.co/top.md?page=1051&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1052

---

## [Vega & response filtering (filter\_path)](https://discuss.elastic.co/t/vega-response-filtering-filter-path/148101)

<div class="topic-metadata">

**Author:** [@Daire\_Byrne](https://discuss.elastic.co/u/Daire_Byrne)\
**Replies:** 5\
**Last updated:** [September 14, 2018, 1:46pm UTC](https://discuss.elastic.co/t/vega-response-filtering-filter-path/148101 "2018-09-14T13:46:37Z")

</div>

Hi, I've been playing with Vega (love it!) and I have a use case that is generating a lot of unnecessary data that is slowing kibana/vega to a crawl. It's because I am doing a pipeline aggregation of an aggregation... I…

---

## [Cannot Create a keystore in elasticsearch 5.6.5](https://discuss.elastic.co/t/cannot-create-a-keystore-in-elasticsearch-5-6-5/112417)

<div class="topic-metadata">

**Author:** [@shwan](https://discuss.elastic.co/u/shwan)\
**Replies:** 5\
**Last updated:** [December 19, 2017, 12:52pm UTC](https://discuss.elastic.co/t/cannot-create-a-keystore-in-elasticsearch-5-6-5/112417 "2017-12-19T12:52:50Z")

</div>

Hello, I'm following the documentation on the official website of elastic. However, it gives me this error: ERROR: String value must contain only ASCII the steps i'm doing are the following: bin/elasticsearch-keystor…

---

## [Newbie trying to use syslog date and time as timestamp in Logstash](https://discuss.elastic.co/t/newbie-trying-to-use-syslog-date-and-time-as-timestamp-in-logstash/226948)

<div class="topic-metadata">

**Author:** [@dbaddorf](https://discuss.elastic.co/u/dbaddorf)\
**Replies:** 4\
**Last updated:** [April 7, 2020, 8:25pm UTC](https://discuss.elastic.co/t/newbie-trying-to-use-syslog-date-and-time-as-timestamp-in-logstash/226948 "2020-04-07T20:25:40Z")

</div>

Hello! I know that I'm trying to do something simple, and I'm just getting started with Elasticsearch/Logstash, but I just can't seem to get the right combination, so I was hoping that someone might point me in the corr…

---

## [Ctrl A separated csv file elasticsearch not indexing using logstash](https://discuss.elastic.co/t/ctrl-a-separated-csv-file-elasticsearch-not-indexing-using-logstash/32077)

<div class="topic-metadata">

**Author:** [@Avinash\_Garg](https://discuss.elastic.co/u/Avinash_Garg)\
**Replies:** 4\
**Last updated:** [October 20, 2015, 6:44am UTC](https://discuss.elastic.co/t/ctrl-a-separated-csv-file-elasticsearch-not-indexing-using-logstash/32077 "2015-10-20T06:44:04Z")

</div>

0 down vote favorite I am using the config: input { file { path =\> "/tmp/test12.csv" type =\> "Sample" start\_position =\> "beginning" } } filter { csv { columns =\> …

---

## [Elastic Endpoint Crashes and digital signature error](https://discuss.elastic.co/t/elastic-endpoint-crashes-and-digital-signature-error/323869)

<div class="topic-metadata">

**Author:** [@Global\_Helpdesk](https://discuss.elastic.co/u/Global_Helpdesk)\
**Replies:** 2\
**Last updated:** [January 25, 2023, 2:32pm UTC](https://discuss.elastic.co/t/elastic-endpoint-crashes-and-digital-signature-error/323869 "2023-01-25T14:32:22Z")

</div>

Hello, I am seeing a problem with the Elastic Endpoint service on a couple of windows servers. When trying to start the service we get the error: The Elastic Endpoint service failed to start due to the following error:…

---

## [Run multiple instances of logstash](https://discuss.elastic.co/t/run-multiple-instances-of-logstash/96803)

<div class="topic-metadata">

**Author:** [@ashvita](https://discuss.elastic.co/u/ashvita)\
**Replies:** 1\
**Last updated:** [August 11, 2017, 6:00pm UTC](https://discuss.elastic.co/t/run-multiple-instances-of-logstash/96803 "2017-08-11T18:00:41Z")

</div>

Hi, I am new to ELK stack. I am not sure how to run multiple instances of logstash. I have 5 config files with kafka streaming various topics as input and output as elastic search. How do I stream multiple config files …

---

## [Store selected JSON field as string](https://discuss.elastic.co/t/store-selected-json-field-as-string/65815)

<div class="topic-metadata">

**Author:** [@Lars2](https://discuss.elastic.co/u/Lars2)\
**Replies:** 1\
**Last updated:** [November 11, 2016, 5:57pm UTC](https://discuss.elastic.co/t/store-selected-json-field-as-string/65815 "2016-11-11T17:57:23Z")

</div>

I currently have two database columns which contain JSON as a nvarchar(max). I need ElasticSearch to analyze one of them, but ignore the other one so it will be stored as a string. Is this possible? I tried the follo…

---

## [Elasticsearch javaApi](https://discuss.elastic.co/t/elasticsearch-javaapi/51528)

<div class="topic-metadata">

**Author:** [@omar\_romdhane](https://discuss.elastic.co/u/omar_romdhane)\
**Replies:** 7\
**Last updated:** [June 2, 2016, 7:58am UTC](https://discuss.elastic.co/t/elasticsearch-javaapi/51528 "2016-06-02T07:58:10Z")

</div>

hi , when i use searsh-api to retrieve data from one index using this code : Settings settings = Settings.settingsBuilder().put("cluster.name", "elasticsearch-cluster").build(); client = TransportClient.builder().sett…

---

## [Whole word search with elasticsearch](https://discuss.elastic.co/t/whole-word-search-with-elasticsearch/34164)

<div class="topic-metadata">

**Author:** [@\_axl](https://discuss.elastic.co/u/_axl)\
**Replies:** 1\
**Last updated:** [November 9, 2015, 4:23pm UTC](https://discuss.elastic.co/t/whole-word-search-with-elasticsearch/34164 "2015-11-09T16:23:02Z")

</div>

Just started wtih elasticsearch. And stuck with a question: I have following strings in my es index: "favourites", "favourites\\a1" If I try to search only first string with 'query' =\> \[ 'match' =\> \[ 'na…

---

## [Kibana Build "ERROR \[bootstrap\] failed":](https://discuss.elastic.co/t/kibana-build-error-bootstrap-failed/259776)

<div class="topic-metadata">

**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\
**Replies:** 3\
**Last updated:** [January 4, 2021, 4:07pm UTC](https://discuss.elastic.co/t/kibana-build-error-bootstrap-failed/259776 "2021-01-04T16:07:28Z")

</div>

I have downloaded kibana 7.10 from Github. I am not able to build kibana. After running, yarn kbn bootstrap I am getting below error. yarn run v1.22.5 $ node scripts/kbn bootstrap info \[kibana\] running yarn $ node…

---

## [2 X-axis buckets in vertical bars visualization](https://discuss.elastic.co/t/2-x-axis-buckets-in-vertical-bars-visualization/208297)

<div class="topic-metadata">

**Author:** [@yoav1](https://discuss.elastic.co/u/yoav1)\
**Replies:** 3\
**Last updated:** [November 19, 2019, 12:20pm UTC](https://discuss.elastic.co/t/2-x-axis-buckets-in-vertical-bars-visualization/208297 "2019-11-19T12:20:43Z")

</div>

HI, I have an elasticsearch index that represents software automation tests regressions. each document represents a test The index has the following fields: regression\_id, start\_date,attr\_x,attr\_y. I have Vertical Ba…

---

## [Disappearing scripted field in Kibana](https://discuss.elastic.co/t/disappearing-scripted-field-in-kibana/122364)

<div class="topic-metadata">

**Author:** [@shafeequeaslam](https://discuss.elastic.co/u/shafeequeaslam)\
**Replies:** 3\
**Last updated:** [March 5, 2018, 8:07pm UTC](https://discuss.elastic.co/t/disappearing-scripted-field-in-kibana/122364 "2018-03-05T20:07:17Z")

</div>

I created a scripted field in Kibana for timestamp conversion from Epoch to Epoch\_MS, Each time I'm closing the tab, all the scripted fields getting disappeared. !

---

## [Sense intro: "and a response pane (black)"](https://discuss.elastic.co/t/sense-intro-and-a-response-pane-black/26924)

<div class="topic-metadata">

**Author:** [@lloydde](https://discuss.elastic.co/u/lloydde)\
**Replies:** 3\
**Last updated:** [August 11, 2015, 9:11pm UTC](https://discuss.elastic.co/t/sense-intro-and-a-response-pane-black/26924 "2015-08-11T21:11:30Z")

</div>

I can't figure out what "black" pane that is referring to. Sense makes sense, but not this part of the introduction. What am I missing?

---

## [How to filter only specific objects from nested array in elasticsearch?](https://discuss.elastic.co/t/how-to-filter-only-specific-objects-from-nested-array-in-elasticsearch/310691)

<div class="topic-metadata">

**Author:** [@Munam\_Tariq](https://discuss.elastic.co/u/Munam_Tariq)\
**Replies:** 1\
**Last updated:** [August 4, 2022, 7:08am UTC](https://discuss.elastic.co/t/how-to-filter-only-specific-objects-from-nested-array-in-elasticsearch/310691 "2022-08-04T07:08:07Z")

</div>

{ "sku\_id": 12, "product\_id": 1, "product\_name": "coca-cola 1.5 L", "category\_name": "beverages", "brand\_name": "coca cola", "sellers": \[ { "seller": 1, "price": 50 }, { "seller"…

---

## [Hide Management app in Home app (Kibana 7.9.1)](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 2\
**Last updated:** [September 24, 2020, 6:52pm UTC](https://discuss.elastic.co/t/hide-management-app-in-home-app-kibana-7-9-1/249861 "2020-09-24T18:52:24Z")

</div>

Hi, Note: I am using ELK 7.9.1 I am trying to grant users the "minimum access required" to do their job and at the same time I am trying to maximize security all I can. I'm aware that system role kibana\_dashboard\_only\_…

---

## [Secure log4j for elasticsearch](https://discuss.elastic.co/t/secure-log4j-for-elasticsearch/291684)

<div class="topic-metadata">

**Author:** [@beci](https://discuss.elastic.co/u/beci)\
**Replies:** 1\
**Last updated:** [December 14, 2021, 10:47am UTC](https://discuss.elastic.co/t/secure-log4j-for-elasticsearch/291684 "2021-12-14T10:47:12Z")

</div>

Hello, We have a server with logstash and Elasticsearch installed on it, I updated these two items to 7.16.1. When I search for files that say "\* log4j \*", there are always items mentioning version 2.11.1 of log4j : /…

---

## [Disable tlsv1 and tlsv1.1 in kibana](https://discuss.elastic.co/t/disable-tlsv1-and-tlsv1-1-in-kibana/120610)

<div class="topic-metadata">

**Author:** [@pallavi117](https://discuss.elastic.co/u/pallavi117)\
**Replies:** 1\
**Last updated:** [February 20, 2018, 11:53am UTC](https://discuss.elastic.co/t/disable-tlsv1-and-tlsv1-1-in-kibana/120610 "2018-02-20T11:53:32Z")

</div>

How can we disallow tlsv1 and tlsv1.1 in kibana 4.0.1? I do not wish to use Xpack. It is running along with elasticsearch version 1.5.0.

---

## [Failed to create query: the query vector has a different dimension \[384\] than the index vectors \[768\]](https://discuss.elastic.co/t/failed-to-create-query-the-query-vector-has-a-different-dimension-384-than-the-index-vectors-768/357317)

<div class="topic-metadata">

**Author:** [@wnmills3](https://discuss.elastic.co/u/wnmills3)\
**Replies:** 6\
**Last updated:** [April 12, 2024, 8:05pm UTC](https://discuss.elastic.co/t/failed-to-create-query-the-query-vector-has-a-different-dimension-384-than-the-index-vectors-768/357317 "2024-04-12T20:05:37Z")

</div>

How does one set the dimension in the query to avoid this message?

---

## [ES indexing throughput and scalability](https://discuss.elastic.co/t/es-indexing-throughput-and-scalability/6679)

<div class="topic-metadata">

**Author:** [@Raaka](https://discuss.elastic.co/u/Raaka)\
**Replies:** 6\
**Last updated:** [February 14, 2012, 10:04pm UTC](https://discuss.elastic.co/t/es-indexing-throughput-and-scalability/6679 "2012-02-14T22:04:30Z")

</div>

Hi there, I'm considering to use Flume to collect logs from systems running in multiple datacenters. Flume would fork the data flow to HDFS and NRT indexing. The goal is to have the log entry searchable in less tha…

---

## [APM dotnet core agent - disable logging](https://discuss.elastic.co/t/apm-dotnet-core-agent-disable-logging/346542)

<div class="topic-metadata">

**Author:** [@shlomys](https://discuss.elastic.co/u/shlomys)\
**Replies:** 4\
**Last updated:** [November 7, 2023, 10:21am UTC](https://discuss.elastic.co/t/apm-dotnet-core-agent-disable-logging/346542 "2023-11-07T10:21:38Z")

</div>

Hi, I am using elastic apm Elastic.Apm.NetCoreAll version 1.25.0. Tried every possible way to disable the logs: ElasticApm:LogLevel=None Logging:LogLevel:Elastic.Apm=None environment variable .... Nothing seems to wo…

---

## [ES S3 plugin](https://discuss.elastic.co/t/es-s3-plugin/340892)

<div class="topic-metadata">

**Author:** [@EshaSingh32000](https://discuss.elastic.co/u/EshaSingh32000)\
**Replies:** 4\
**Last updated:** [August 16, 2023, 10:44am UTC](https://discuss.elastic.co/t/es-s3-plugin/340892 "2023-08-16T10:44:23Z")

</div>

Currently my Es Version is 7.17.1, and i want to download s3 plugin for same, can anyone provide me link to download s3 plugin for es version 7.17.1

---

## [Generate apm secret token](https://discuss.elastic.co/t/generate-apm-secret-token/322808)

<div class="topic-metadata">

**Author:** [@irivas95](https://discuss.elastic.co/u/irivas95)\
**Replies:** 4\
**Last updated:** [January 13, 2023, 12:30pm UTC](https://discuss.elastic.co/t/generate-apm-secret-token/322808 "2023-01-13T12:30:35Z")

</div>

Hi, I am trying to set up an apm server and was wondering if anyone knows how to generate a secret token for authentication as I need it. thanks and best regards

---

## [Visualize buckets by using text fields](https://discuss.elastic.co/t/visualize-buckets-by-using-text-fields/260646)

<div class="topic-metadata">

**Author:** [@imaneg](https://discuss.elastic.co/u/imaneg)\
**Replies:** 4\
**Last updated:** [January 12, 2021, 6:01pm UTC](https://discuss.elastic.co/t/visualize-buckets-by-using-text-fields/260646 "2021-01-12T18:01:59Z")

</div>

Hello, I would like to visualize buckets by using text fields rather than keywords. For doing this I enabled fielddata on the targeted text field. I am able to see the results when I am running the aggregation from dev …

---

## [Watcher to check if the VM is down](https://discuss.elastic.co/t/watcher-to-check-if-the-vm-is-down/247642)

<div class="topic-metadata">

**Author:** [@vamsikrishna\_medeti](https://discuss.elastic.co/u/vamsikrishna_medeti)\
**Replies:** 4\
**Last updated:** [September 6, 2020, 4:24am UTC](https://discuss.elastic.co/t/watcher-to-check-if-the-vm-is-down/247642 "2020-09-06T04:24:17Z")

</div>

Hi, We are using metricbeat/ELK for monitoring our kubernetes (EKS) cluster. I would like to create an alert if the node is down. May I know how to do it? Because when the VM is down, the metricbeat daemonset can not s…

---

## [There was an error retrieving the index pattern](https://discuss.elastic.co/t/there-was-an-error-retrieving-the-index-pattern/218610)

<div class="topic-metadata">

**Author:** [@OrangeDog](https://discuss.elastic.co/u/OrangeDog)\
**Replies:** 4\
**Last updated:** [February 12, 2020, 2:01pm UTC](https://discuss.elastic.co/t/there-was-an-error-retrieving-the-index-pattern/218610 "2020-02-12T14:01:58Z")

</div>

Continuing https://discuss.elastic.co/t/7-5-there-was-an-error-retrieving-the-index-pattern/210742 I had the same issue and tried removing the xpack.security.enabled: false setting. However, then kibana failed to comple…

---

## [Kibana scatter Plot](https://discuss.elastic.co/t/kibana-scatter-plot/208408)

<div class="topic-metadata">

**Author:** [@cookie](https://discuss.elastic.co/u/cookie)\
**Replies:** 4\
**Last updated:** [December 3, 2019, 11:13am UTC](https://discuss.elastic.co/t/kibana-scatter-plot/208408 "2019-12-03T11:13:05Z")

</div>

Hi Guys, I am trying to have a crack at creating a vega graph from our database. However, for some reason there is is no error in the code but there aren't! If anyone can see if I am missing anything? I've been scratchi…

---

## [Elasticsearch start failed when Path.data change in elasticsearch.yml](https://discuss.elastic.co/t/elasticsearch-start-failed-when-path-data-change-in-elasticsearch-yml/149218)

<div class="topic-metadata">

**Author:** [@phongddh](https://discuss.elastic.co/u/phongddh)\
**Replies:** 4\
**Last updated:** [September 20, 2018, 9:31pm UTC](https://discuss.elastic.co/t/elasticsearch-start-failed-when-path-data-change-in-elasticsearch-yml/149218 "2018-09-20T21:31:23Z")

</div>

I setup the elasticsearch 6.4.1 on CentOS machine and its works fine until i uncomment the "path.data: /var/www/STO-44/elasticsearch/" setting in elasticsearch.yml . Info: \[root@elk-fshare ~\]# ll /var/www/STO-44/ tot…

---

## [Node Leaving Cluster on Reindex](https://discuss.elastic.co/t/node-leaving-cluster-on-reindex/68334)

<div class="topic-metadata">

**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\
**Replies:** 4\
**Last updated:** [December 8, 2016, 8:07pm UTC](https://discuss.elastic.co/t/node-leaving-cluster-on-reindex/68334 "2016-12-08T20:07:54Z")

</div>

Hello all! So I have been having this issue lately with elasticseach 2.4. When I run POST /\_reindex { "source": { "index": "indextest-2016.12.04" }, "dest": { "index": "indextest-2016.12.04-2" } } …

---

## [Connecting FSCrawler to Workplace Enterprise Search](https://discuss.elastic.co/t/connecting-fscrawler-to-workplace-enterprise-search/319871)

<div class="topic-metadata">

**Author:** [@Hoang\_Quan\_Nguyen](https://discuss.elastic.co/u/Hoang_Quan_Nguyen)\
**Replies:** 5\
**Last updated:** [December 5, 2022, 5:37pm UTC](https://discuss.elastic.co/t/connecting-fscrawler-to-workplace-enterprise-search/319871 "2022-12-05T17:37:21Z")

</div>

Hi, I'm currently using FSCrawler connecting to Workplace Enterprise Search. The FSCrawler was working and connecting to my personal deployment's Enterprise Search. However, when I tried with my company deployment, I re…

---

## [Elastic Endpoint not showing up error](https://discuss.elastic.co/t/elastic-endpoint-not-showing-up-error/259327)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 5\
**Last updated:** [January 6, 2021, 3:53am UTC](https://discuss.elastic.co/t/elastic-endpoint-not-showing-up-error/259327 "2021-01-06T03:53:06Z")

</div>

Hi all I have been trying out the elastic endpoint security since yesterday and i have been having some issue with it. So there are a few question i have to address in order to work this out: How to set the ssl to sen…

---

## [Modifying Elasticsearch Basic License](https://discuss.elastic.co/t/modifying-elasticsearch-basic-license/180065)

<div class="topic-metadata">

**Author:** [@Tyler\_Buckwalter](https://discuss.elastic.co/u/Tyler_Buckwalter)\
**Replies:** 5\
**Last updated:** [May 8, 2019, 2:25pm UTC](https://discuss.elastic.co/t/modifying-elasticsearch-basic-license/180065 "2019-05-08T14:25:29Z")

</div>

I am setting up a forensics virtual training environment where the system date/time is in May 2016. A lot of the basic features are turned off and the Beats agents are not able to communicate. the Elasticsearch basic l…

---

## [APM AspNet Core](https://discuss.elastic.co/t/apm-aspnet-core/176161)

<div class="topic-metadata">

**Author:** [@Ruslan\_Filipov](https://discuss.elastic.co/u/Ruslan_Filipov)\
**Replies:** 5\
**Last updated:** [April 10, 2019, 11:38am UTC](https://discuss.elastic.co/t/apm-aspnet-core/176161 "2019-04-10T11:38:39Z")

</div>

Hello, I have an AspNet Core application (2.2). I install APM server and add the APM nuget package on local machine and while the APM server is running logs are successfully sent to elastic cloud based cluster. How woul…

---

## [Exception while installing plugin](https://discuss.elastic.co/t/exception-while-installing-plugin/40354)

<div class="topic-metadata">

**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\
**Replies:** 5\
**Last updated:** [September 8, 2016, 4:26pm UTC](https://discuss.elastic.co/t/exception-while-installing-plugin/40354 "2016-09-08T16:26:29Z")

</div>

I am trying to install plugins, getting below error. "Exception in thread "main" java.lang.NoSuchMethodError: org.elasticsearch.common.settings.Settings.builder()Lorg/elasticsearch/common/settings/Settings$Builder; \* …

---

## [Logging.yml configuration for emailing errors](https://discuss.elastic.co/t/logging-yml-configuration-for-emailing-errors/10751)

<div class="topic-metadata">

**Author:** [@rene\_z](https://discuss.elastic.co/u/rene_z)\
**Replies:** 5\
**Last updated:** [July 23, 2015, 5:34pm UTC](https://discuss.elastic.co/t/logging-yml-configuration-for-emailing-errors/10751 "2015-07-23T17:34:13Z")

</div>

Hi, I would like to receive an email when my cluster logs an error. How do I configure the logging.yml? Bye, René -- You received this message because you are subscribed to the Google Groups "elasticsearch" gr…

---

## [Sharding unbalance problem](https://discuss.elastic.co/t/sharding-unbalance-problem/9194)

<div class="topic-metadata">

**Author:** [@Jae](https://discuss.elastic.co/u/Jae)\
**Replies:** 5\
**Last updated:** [October 3, 2012, 9:22pm UTC](https://discuss.elastic.co/t/sharding-unbalance-problem/9194 "2012-10-03T21:22:25Z")

</div>

Hi Today, my elasticsearch 0.19.9 cluster was down because of 'no free space'. I am seeing shards are not allocated with balance. My question is how to monitor free space of each instance and what the best method …

---

## [Logstash does not open a socket to elastic search](https://discuss.elastic.co/t/logstash-does-not-open-a-socket-to-elastic-search/98758)

<div class="topic-metadata">

**Author:** [@denzuko](https://discuss.elastic.co/u/denzuko)\
**Replies:** 3\
**Last updated:** [August 31, 2017, 8:53pm UTC](https://discuss.elastic.co/t/logstash-does-not-open-a-socket-to-elastic-search/98758 "2017-08-31T20:53:16Z")

</div>

Hi guys, I’ve been butting heads with setting up my ELK stack inside docker. At this point I’ve traced the point of fault down to logstash and currently believe it is either the pipeline or something simple that one wit…

---

## [Changing the date Filter to get exact same timestamp in kibana as in log](https://discuss.elastic.co/t/changing-the-date-filter-to-get-exact-same-timestamp-in-kibana-as-in-log/76009)

<div class="topic-metadata">

**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\
**Replies:** 3\
**Last updated:** [February 22, 2017, 1:25pm UTC](https://discuss.elastic.co/t/changing-the-date-filter-to-get-exact-same-timestamp-in-kibana-as-in-log/76009 "2017-02-22T13:25:14Z")

</div>

Hi, My log looks like below: www.xyz.com 100.181.12.41 - - \[04/Dec/2013:07:35:39 -0600\] "GET /abc/images/someimage.png HTTP/1.1" 200 My Grok filter is as below: grok { match =\> { "message" =\> '%{NOTSPACE:…

---

## [JSON filter (attempt to either prevent recursion or drop unwanted objects / nested fields)](https://discuss.elastic.co/t/json-filter-attempt-to-either-prevent-recursion-or-drop-unwanted-objects-nested-fields/52903)

<div class="topic-metadata">

**Author:** [@robinpblanchard](https://discuss.elastic.co/u/robinpblanchard)\
**Replies:** 3\
**Last updated:** [September 8, 2016, 8:05am UTC](https://discuss.elastic.co/t/json-filter-attempt-to-either-prevent-recursion-or-drop-unwanted-objects-nested-fields/52903 "2016-09-08T08:05:31Z")

</div>

I have java/logback feeding a template a la: \<pattern\> { "environment" : "somecrazyenvironme…

---

## [How to parse different format logs from same directory](https://discuss.elastic.co/t/how-to-parse-different-format-logs-from-same-directory/54772)

<div class="topic-metadata">

**Author:** [@Sri\_ram](https://discuss.elastic.co/u/Sri_ram)\
**Replies:** 3\
**Last updated:** [July 20, 2016, 2:33pm UTC](https://discuss.elastic.co/t/how-to-parse-different-format-logs-from-same-directory/54772 "2016-07-20T14:33:35Z")

</div>

I have multiple log files in the same directory, that I want to run through Logstash, every file is having different format than other. My log files can be named randomly by different network providers (I dont have cont…

---

## [Fingerprint filter and concatenate\_sources](https://discuss.elastic.co/t/fingerprint-filter-and-concatenate-sources/43498)

<div class="topic-metadata">

**Author:** [@peppetrick](https://discuss.elastic.co/u/peppetrick)\
**Replies:** 3\
**Last updated:** [March 4, 2016, 2:00pm UTC](https://discuss.elastic.co/t/fingerprint-filter-and-concatenate-sources/43498 "2016-03-04T14:00:20Z")

</div>

Hi I have a doubt about documentation for fingerprint filter. regarding concatenate\_sources Documentation states "When set to true, we concatenate the values of all fields into 1 string like the old checksum fi…

---

## [Feed Data to Elastic Serach Via Logstash using CSV](https://discuss.elastic.co/t/feed-data-to-elastic-serach-via-logstash-using-csv/38400)

<div class="topic-metadata">

**Author:** [@sharan\_jain](https://discuss.elastic.co/u/sharan_jain)\
**Replies:** 3\
**Last updated:** [January 5, 2016, 6:50pm UTC](https://discuss.elastic.co/t/feed-data-to-elastic-serach-via-logstash-using-csv/38400 "2016-01-05T18:50:35Z")

</div>

Hi Team , I am using Logstast To read the data from CSV file and Output to Elastic search . Below is Conf File : input { file { path =\> "/opt/app/data/TC\_Export\_CSV.csv" start\_position =\> "beginning" } } filter …

---

## [Cassandra to Kibana](https://discuss.elastic.co/t/cassandra-to-kibana/218062)

<div class="topic-metadata">

**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\
**Replies:** 2\
**Last updated:** [February 12, 2020, 6:56pm UTC](https://discuss.elastic.co/t/cassandra-to-kibana/218062 "2020-02-12T18:56:56Z")

</div>

I am trying to constantly check the status of cassandra for every one hour and send all the information into kibana so that I can create a watcher that reports whenever I find a failure in the log. Would it be possible f…

---

## [Nodes are not joining cluster](https://discuss.elastic.co/t/nodes-are-not-joining-cluster/195248)

<div class="topic-metadata">

**Author:** [@David04](https://discuss.elastic.co/u/David04)\
**Replies:** 2\
**Last updated:** [August 26, 2019, 1:59pm UTC](https://discuss.elastic.co/t/nodes-are-not-joining-cluster/195248 "2019-08-26T13:59:32Z")

</div>

Hello, I am trying to build a 3-node Elasticsearch cluster. I am using Elasticsearch 7.3. When I check the health of the cluster, it tells me the number of nodes = 1. Here are the node settings for all three: Start …

---

## [Cloudwatch Logs to Logstash Input plugin has no result](https://discuss.elastic.co/t/cloudwatch-logs-to-logstash-input-plugin-has-no-result/183170)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 2\
**Last updated:** [May 29, 2019, 10:42pm UTC](https://discuss.elastic.co/t/cloudwatch-logs-to-logstash-input-plugin-has-no-result/183170 "2019-05-29T22:42:39Z")

</div>

Code: input{ cloudwatch { access\_key\_id =\> "...id..." secret\_access\_key =\> "...key..." namespace =\> "AWS/Logs" metrics =\> \["IncomingBytes", "ForwardedBytes", "IncomingLogEvents", "ForwardedLogEvents"\] …

---

## [Iterate over array in logstash](https://discuss.elastic.co/t/iterate-over-array-in-logstash/94491)

<div class="topic-metadata">

**Author:** [@vids](https://discuss.elastic.co/u/vids)\
**Replies:** 2\
**Last updated:** [July 28, 2017, 6:53am UTC](https://discuss.elastic.co/t/iterate-over-array-in-logstash/94491 "2017-07-28T06:53:58Z")

</div>

can we iterate over array in logstash under xml filter by using for loop for dynamic array?

---

## [Kibana is running but extremely slow](https://discuss.elastic.co/t/kibana-is-running-but-extremely-slow/279843)

<div class="topic-metadata">

**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\
**Replies:** 1\
**Last updated:** [July 28, 2021, 1:26pm UTC](https://discuss.elastic.co/t/kibana-is-running-but-extremely-slow/279843 "2021-07-28T13:26:08Z")

</div>

Hi Fellows, i am suffering with this issue. I do not know how i could fix this. I would be glad if you could give a direction to go for it. Kibana is working but extremely slow running. I have 10 nodes elasticsearch ho…

---

## [Referring to fields with a "-" character in Painless](https://discuss.elastic.co/t/referring-to-fields-with-a-character-in-painless/180468)

<div class="topic-metadata">

**Author:** [@vkandiva](https://discuss.elastic.co/u/vkandiva)\
**Replies:** 1\
**Last updated:** [May 10, 2019, 6:53am UTC](https://discuss.elastic.co/t/referring-to-fields-with-a-character-in-painless/180468 "2019-05-10T06:53:59Z")

</div>

So one of our legacy indexes has a field with a name "inbound-value-id". I was using the Update by Query API to update some field using Painless scripting and it was working well but just for this field with special char…

---

## [\[Reindexing\] Is there any drawback to writing to a new index while re-indexing?](https://discuss.elastic.co/t/reindexing-is-there-any-drawback-to-writing-to-a-new-index-while-re-indexing/148686)

<div class="topic-metadata">

**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\
**Replies:** 1\
**Last updated:** [September 15, 2018, 3:25am UTC](https://discuss.elastic.co/t/reindexing-is-there-any-drawback-to-writing-to-a-new-index-while-re-indexing/148686 "2018-09-15T03:25:47Z")

</div>

I'm working on a project where we are considering two approaches for zero-downtime re-indexing: Create new index and begin re-indexing data into it. While re-indexing, new indexing requests get written to the new ind…

---

## [Configuring index template to set number of shards](https://discuss.elastic.co/t/configuring-index-template-to-set-number-of-shards/116774)

<div class="topic-metadata">

**Author:** [@zachy](https://discuss.elastic.co/u/zachy)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 6:38am UTC](https://discuss.elastic.co/t/configuring-index-template-to-set-number-of-shards/116774 "2018-01-24T06:38:40Z")

</div>

Hi I was wondering how one would be able to change the default index template. For instance, I would like to configure the number of primary and replica shards for each index. Is there a way to do it without the API? T…

---

## [Parse json query into querybuilder](https://discuss.elastic.co/t/parse-json-query-into-querybuilder/69358)

<div class="topic-metadata">

**Author:** [@Silvestre\_Losada](https://discuss.elastic.co/u/Silvestre_Losada)\
**Replies:** 1\
**Last updated:** [January 12, 2017, 9:13am UTC](https://discuss.elastic.co/t/parse-json-query-into-querybuilder/69358 "2017-01-12T09:13:39Z")

</div>

I have a javascript application with java backend. The application that submit json queries (not the hole object just the query part) tose queries are stored into database. I want to take those small queries and parse th…

[Previous page](https://discuss.elastic.co/top.md?page=1050&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1052&per_page=50&period=all)
