# Top **URL:** https://discuss.elastic.co/top.md?page=1056&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1057 --- ## [Filebeat.input and filebeat.config.modules:](https://discuss.elastic.co/t/filebeat-input-and-filebeat-config-modules/314773)
**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\ **Replies:** 7\ **Last updated:** [September 21, 2022, 1:16pm UTC](https://discuss.elastic.co/t/filebeat-input-and-filebeat-config-modules/314773 "2022-09-21T13:16:32Z")
Hello, First I don't understand the role of this option in the config of filebeat , i read the docuentation but i don't understand exactly the fonction of it because i let it false and i receive the logs of the ubuntu in… --- ## [Error Fleet Server - Error - x509: cannot validate certificate for x.x.x.x because it doesn't contain any IP SANs](https://discuss.elastic.co/t/error-fleet-server-error-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/282170)
**Author:** [@Carlos\_Velasquez](https://discuss.elastic.co/u/Carlos_Velasquez)\ **Replies:** 1\ **Last updated:** [August 23, 2021, 10:36am UTC](https://discuss.elastic.co/t/error-fleet-server-error-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/282170 "2021-08-23T10:36:41Z")
hello I am trying to connect to Fleet but I get the following error, I have created the certificates but I can't solve the problem 2021-08-20T21:50:53.027-0500 ERROR status/reporter.go:236 Elastic Agent status cha… --- ## [Help in visualizing custom query/aggregation](https://discuss.elastic.co/t/help-in-visualizing-custom-query-aggregation/261881)
**Author:** [@Christoph\_Quadt](https://discuss.elastic.co/u/Christoph_Quadt)\ **Replies:** 7\ **Last updated:** [January 25, 2021, 7:41pm UTC](https://discuss.elastic.co/t/help-in-visualizing-custom-query-aggregation/261881 "2021-01-25T19:41:18Z")
Hi there, I am having trouble in visualizing the following elasticsearch query: { "query": { "exists": { "field": "log\_transaction\_status" } }, "size": 0, "aggs": {… --- ## [Winlogbeat does not write specific eventlog status in registry file](https://discuss.elastic.co/t/winlogbeat-does-not-write-specific-eventlog-status-in-registry-file/128750)
**Author:** [@ld57](https://discuss.elastic.co/u/ld57)\ **Replies:** 7\ **Last updated:** [June 18, 2018, 12:16pm UTC](https://discuss.elastic.co/t/winlogbeat-does-not-write-specific-eventlog-status-in-registry-file/128750 "2018-06-18T12:16:38Z")
Hello all, We meet a strange issue where a specific monitored eventlog does not appear in the registry file, and when we restart winlogbeat, it resends again from the beginning. This does not affect eventlogs system, s… --- ## [Filebeat nested 'fields' values](https://discuss.elastic.co/t/filebeat-nested-fields-values/40281)
**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\ **Replies:** 1\ **Last updated:** [January 27, 2016, 7:59pm UTC](https://discuss.elastic.co/t/filebeat-nested-fields-values/40281 "2016-01-27T19:59:15Z")
Hello, I'm looking to use Filebeat to ship logs to our ELK stack cluster. Editing the yml file, I tried this kind of configuration: fields: debug: true banana: split: chocolate but when starting the … --- ## [Find document position in query](https://discuss.elastic.co/t/find-document-position-in-query/268581)
**Author:** [@vradder](https://discuss.elastic.co/u/vradder)\ **Replies:** 8\ **Last updated:** [March 28, 2021, 5:35pm UTC](https://discuss.elastic.co/t/find-document-position-in-query/268581 "2021-03-28T17:35:15Z")
Hi, I am using ES for log viewer.. logs are displayed in timestamp ascending order with some boolQuery filters.. initially 10,000 records are displayed in first page there could be around 10 pages of query results.. and … --- ## [Kibana rule - raise alert when CPU is over 90% for the last 5 min](https://discuss.elastic.co/t/kibana-rule-raise-alert-when-cpu-is-over-90-for-the-last-5-min/344404)
**Author:** [@catalin.bulancea](https://discuss.elastic.co/u/catalin.bulancea)\ **Replies:** 6\ **Last updated:** [October 16, 2023, 5:02pm UTC](https://discuss.elastic.co/t/kibana-rule-raise-alert-when-cpu-is-over-90-for-the-last-5-min/344404 "2023-10-16T17:02:22Z")
Hi gurus, I'm new to Rules in Kibana so I need your help. I need to raise an email alert when the CPU is constantly exceeding 90% for the past 5 minutes. The way I configured the rule is the following: The alert i… --- ## [Logstash throws java.lang.OutOfMemoryError: Java heap space no matter the heap size](https://discuss.elastic.co/t/logstash-throws-java-lang-outofmemoryerror-java-heap-space-no-matter-the-heap-size/330089)
**Author:** [@ste1](https://discuss.elastic.co/u/ste1)\ **Replies:** 6\ **Last updated:** [April 17, 2023, 10:57am UTC](https://discuss.elastic.co/t/logstash-throws-java-lang-outofmemoryerror-java-heap-space-no-matter-the-heap-size/330089 "2023-04-17T10:57:36Z")
Im attempting to parse a huge (few million lines) csv file with logstash and output it to elasticsearch. \[FATAL\] 2023-04-16 19:00:19.011 \[LogStash::Runner\] Logstash - java.lang.OutOfMemoryError: Java heap space … --- ## [Unassigned shards during upgrade](https://discuss.elastic.co/t/unassigned-shards-during-upgrade/93051)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 6\ **Last updated:** [July 24, 2017, 1:30pm UTC](https://discuss.elastic.co/t/unassigned-shards-during-upgrade/93051 "2017-07-24T13:30:13Z")
Hi all, I peformed an upgrade from ES 5.0.1 to 5.5. Each time I reloaded a node it tooks a long time (hours) to realocate unassigned shards ! I tried to avoid it with the commands below: PUT \_cluster/settings { "… --- ## [Не могу составить запрос типа (name=aaa AND type=2) OR (name=bbb AND type=3)](https://discuss.elastic.co/t/name-aaa-and-type-2-or-name-bbb-and-type-3/75372)
**Author:** [@Pashkevich\_Aleksandr](https://discuss.elastic.co/u/Pashkevich_Aleksandr)\ **Replies:** 6\ **Last updated:** [March 9, 2017, 1:02pm UTC](https://discuss.elastic.co/t/name-aaa-and-type-2-or-name-bbb-and-type-3/75372 "2017-03-09T13:02:04Z")
Здравствуйте, долго мучался с bool запроса так и не смогу составить запрос типа (name=aaa AND type=2) OR (name=bbb AND type=3) По памяти вспомнил, что тестировал вот такие запросы, по факту ещё несколько запросов было. … --- ## [Problem with recovery after power failure](https://discuss.elastic.co/t/problem-with-recovery-after-power-failure/7226)
**Author:** [@thinusp](https://discuss.elastic.co/u/thinusp)\ **Replies:** 6\ **Last updated:** [May 23, 2012, 8:46am UTC](https://discuss.elastic.co/t/problem-with-recovery-after-power-failure/7226 "2012-05-23T08:46:23Z")
I am having serious problems with recovering my index after a power failure. The setup I have is as follows: - 1 master-only node - 4 data-only node - Indexed around 20mill documents, over 8 shards with replication… --- ## [To use or not to use NodeSelector.SKIP\_DEDICATED\_MASTERS with high level rest client](https://discuss.elastic.co/t/to-use-or-not-to-use-nodeselector-skip-dedicated-masters-with-high-level-rest-client/278310)
**Author:** [@blindwitness](https://discuss.elastic.co/u/blindwitness)\ **Replies:** 1\ **Last updated:** [July 12, 2021, 8:24am UTC](https://discuss.elastic.co/t/to-use-or-not-to-use-nodeselector-skip-dedicated-masters-with-high-level-rest-client/278310 "2021-07-12T08:24:12Z")
Hello, The documentation is slightly unclear in regards to using NodeSelectors for the rest client. We have a cluster with dedicated master-eligible nodes and dedicated data/ingest nodes. It seems that with this config… --- ## [Applying My First Index Template](https://discuss.elastic.co/t/applying-my-first-index-template/196967)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [September 4, 2019, 5:49pm UTC](https://discuss.elastic.co/t/applying-my-first-index-template/196967 "2019-09-04T17:49:33Z")
Hi everyone, I’m trying to apply my first ElasticSearch Index Template, and am having some issues. I think I’m both a little confused about the process of wedding a Template to an Index, and about the exact syntax of t… --- ## [Kibana number format display wrong](https://discuss.elastic.co/t/kibana-number-format-display-wrong/173238)
**Author:** [@weizhu](https://discuss.elastic.co/u/weizhu)\ **Replies:** 4\ **Last updated:** [March 25, 2019, 5:12pm UTC](https://discuss.elastic.co/t/kibana-number-format-display-wrong/173238 "2019-03-25T17:12:16Z")
I have a json number field. When I choose the display to be "Number", the value displayed are different from what's in the json. If I switch to "String" display, the value is correct. It seems to happen only to the large… --- ## [Fatal exception while booting Elasticsearch](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/316884)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 3\ **Last updated:** [October 19, 2022, 3:59am UTC](https://discuss.elastic.co/t/fatal-exception-while-booting-elasticsearch/316884 "2022-10-19T03:59:49Z")
Hello, While I am trying to upgrade from 8.3.2 to 8.4.1 Its upgrading the Elasticsearch but the service is not running. \[2022-10-18T11:15:37,060\]\[ERROR\]\[o.e.b.Elasticsearch \] \[vm0dnelkdma0003.corp.chartercom.com\] … --- ## [Save search in Kibana](https://discuss.elastic.co/t/save-search-in-kibana/154049)
**Author:** [@rohitg](https://discuss.elastic.co/u/rohitg)\ **Replies:** 3\ **Last updated:** [October 25, 2018, 5:50pm UTC](https://discuss.elastic.co/t/save-search-in-kibana/154049 "2018-10-25T17:50:53Z")
My ELK cluster on Windows server and have one node only. When trying to Save search in Kibana, I am getting below error. Please help how to fix it. Thanks in Advance. Discover: blocked by: \[FORBIDDEN/12/index read-onl… --- ## [How to Flush\_pattern](https://discuss.elastic.co/t/how-to-flush-pattern/133154)
**Author:** [@jurisn](https://discuss.elastic.co/u/jurisn)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 10:45am UTC](https://discuss.elastic.co/t/how-to-flush-pattern/133154 "2018-06-01T10:45:15Z")
Hi, I have some log file: 12:07:10.698 \[ INFO\] \[aa\] MqConsume(): New message "Message108" received from Topic "Topic1" 12:07:10.698 \[DEBUG\] \[aa\] MqMessageHeaders(): Processing message headers 12:07:10.699 \[ INFO\] \[aa… --- ## [Can't Load/Save Dashboard nor find Data](https://discuss.elastic.co/t/cant-load-save-dashboard-nor-find-data/46357)
**Author:** [@NicoYUE](https://discuss.elastic.co/u/NicoYUE)\ **Replies:** 3\ **Last updated:** [April 5, 2016, 6:39pm UTC](https://discuss.elastic.co/t/cant-load-save-dashboard-nor-find-data/46357 "2016-04-05T18:39:33Z")
Hello, I'm having some problem setting up Kibana, seems like it can't reach Elasticsearch. I'm using ELS 2.3 with a modified Kibana 3.1.3 which was made to work with ELS 2. After a while with this set up, Kibana st… --- ## [Range Filter slower then no range query (full scan)](https://discuss.elastic.co/t/range-filter-slower-then-no-range-query-full-scan/14594)
**Author:** [@zuhaib\_2](https://discuss.elastic.co/u/zuhaib_2)\ **Replies:** 3\ **Last updated:** [December 3, 2013, 12:41am UTC](https://discuss.elastic.co/t/range-filter-slower-then-no-range-query-full-scan/14594 "2013-12-03T00:41:28Z")
Hey, So we have a query like the following: { "sort": { "date.untouched": "desc" }, "query": { "constant\_score": { "filter": { "bool": { "must": \[ { … --- ## [Quote\_char not working in csv filter logstash](https://discuss.elastic.co/t/quote-char-not-working-in-csv-filter-logstash/176386)
**Author:** [@Smack\_Alpha](https://discuss.elastic.co/u/Smack_Alpha)\ **Replies:** 1\ **Last updated:** [April 11, 2019, 12:16pm UTC](https://discuss.elastic.co/t/quote-char-not-working-in-csv-filter-logstash/176386 "2019-04-11T12:16:20Z")
I am working on the csv filter. The Separator and the Columns works fine. I came to know that the quotes\_char assign the charater to every output i get. So in the quotes\_char, i added a "^" string. But It doesn't made an… --- ## [JSON & Index conversion factors Elastic sizing factors](https://discuss.elastic.co/t/json-index-conversion-factors-elastic-sizing-factors/169211)
**Author:** [@manikandanid](https://discuss.elastic.co/u/manikandanid)\ **Replies:** 1\ **Last updated:** [February 24, 2019, 8:10pm UTC](https://discuss.elastic.co/t/json-index-conversion-factors-elastic-sizing-factors/169211 "2019-02-24T20:10:33Z")
I am trying to come up with the cluster sizing for our centralised logging system. On reading the factors influencing the size i came across two terms JSON conversion factor Index conversion factor Not sure what are … --- ## [How to install logstash plugins Leef and syslog plugin](https://discuss.elastic.co/t/how-to-install-logstash-plugins-leef-and-syslog-plugin/157448)
**Author:** [@van](https://discuss.elastic.co/u/van)\ **Replies:** 1\ **Last updated:** [November 19, 2018, 10:16pm UTC](https://discuss.elastic.co/t/how-to-install-logstash-plugins-leef-and-syslog-plugin/157448 "2018-11-19T22:16:26Z")
How to install logstash plugins Leef and syslog plugin Tried using the commands : export http\_proxy=http://proxy.kohls.com:3128 export https\_proxy=http://proxy.kohls.com:3128 bin/logstash-plugin install logstash-… --- ## [Use multi match query in Kibana](https://discuss.elastic.co/t/use-multi-match-query-in-kibana/48897)
**Author:** [@swturner](https://discuss.elastic.co/u/swturner)\ **Replies:** 1\ **Last updated:** [May 2, 2016, 5:38pm UTC](https://discuss.elastic.co/t/use-multi-match-query-in-kibana/48897 "2016-05-02T17:38:44Z")
I have a query that needs to match against multiple different fields for a visualization. The only way I can see to do that in Kibana is by explicitly writing out the Lucene syntax with a set of coupled "OR" searches. … --- ## [Is it planned to support Openshift Metrics such as DeploymentConfig?](https://discuss.elastic.co/t/is-it-planned-to-support-openshift-metrics-such-as-deploymentconfig/299312)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [April 15, 2022, 9:41am UTC](https://discuss.elastic.co/t/is-it-planned-to-support-openshift-metrics-such-as-deploymentconfig/299312 "2022-04-15T09:41:37Z")
Hi, as I noticed one cannot use metricbeat to retrieve metrics from objects like DeploymentConfig (maybe others) from Openshift. Is there a plan to make it possible ? Thanks --- ## [Data/write/bulk \[s\]\[r\] - Some task running from more than 70days](https://discuss.elastic.co/t/data-write-bulk-s-r-some-task-running-from-more-than-70days/180128)
**Author:** [@Vikash\_Kumar1](https://discuss.elastic.co/u/Vikash_Kumar1)\ **Replies:** 5\ **Last updated:** [May 14, 2019, 1:17am UTC](https://discuss.elastic.co/t/data-write-bulk-s-r-some-task-running-from-more-than-70days/180128 "2019-05-14T01:17:49Z")
Hi All, I wanted to understand what is the below task that is executing from past 76 days. Is it expected to run for such a long time or is there any issue with my elasticsearch cluster. Also, we frequently face long G… --- ## [Setting up a basic high availability cluster](https://discuss.elastic.co/t/setting-up-a-basic-high-availability-cluster/145206)
**Author:** [@tim2](https://discuss.elastic.co/u/tim2)\ **Replies:** 5\ **Last updated:** [August 20, 2018, 7:07pm UTC](https://discuss.elastic.co/t/setting-up-a-basic-high-availability-cluster/145206 "2018-08-20T19:07:36Z")
Im planning to set up a high availability cluster with 2 physical host machines hosting a number of VMs / elasticsearch nodes How many nodes do I need on each host machine so that I can safely restart a host machine and… --- ## [How to wait for asynch requests to finish](https://discuss.elastic.co/t/how-to-wait-for-asynch-requests-to-finish/136569)
**Author:** [@Roman\_G](https://discuss.elastic.co/u/Roman_G)\ **Replies:** 5\ **Last updated:** [June 20, 2018, 7:42pm UTC](https://discuss.elastic.co/t/how-to-wait-for-asynch-requests-to-finish/136569 "2018-06-20T19:42:25Z")
I am using bulk request to insert/update data in Elastic, I send a bunch of asynch requests with 10k documents in each one. What I want to do is at the end of the process to wait for each request to finish to make sure … --- ## [Beats / Filebeat / Topbeat / packetbeat / SSL connections](https://discuss.elastic.co/t/beats-filebeat-topbeat-packetbeat-ssl-connections/61003)
**Author:** [@leoaraujo79](https://discuss.elastic.co/u/leoaraujo79)\ **Replies:** 5\ **Last updated:** [September 20, 2016, 11:58pm UTC](https://discuss.elastic.co/t/beats-filebeat-topbeat-packetbeat-ssl-connections/61003 "2016-09-20T23:58:36Z")
Hi, I installed all Filebeat - Topbeat and Packetbeat on 5 servers and they all connect back to my ELK server delivering the files to logs to logstash. Some how the connections keep droping. For example: Srv1 wi… --- ## [How can I store 2 different data types in same field of 2 different document?](https://discuss.elastic.co/t/how-can-i-store-2-different-data-types-in-same-field-of-2-different-document/21532)
**Author:** [@Paresh\_Behede](https://discuss.elastic.co/u/Paresh_Behede)\ **Replies:** 5\ **Last updated:** [January 9, 2015, 7:55am UTC](https://discuss.elastic.co/t/how-can-i-store-2-different-data-types-in-same-field-of-2-different-document/21532 "2015-01-09T07:55:06Z")
Hi, I have requirement of storing document in elastic search which will have dynamic fields + those fields could have different data types values... For e.g., Document 1 could have age field with value = 32, so… --- ## [Geoquery Against Pre-Indexed Shape is Failing \[Second Try\]](https://discuss.elastic.co/t/geoquery-against-pre-indexed-shape-is-failing-second-try/21469)
**Author:** [@Waldo\_Jaquith](https://discuss.elastic.co/u/Waldo_Jaquith)\ **Replies:** 5\ **Last updated:** [January 8, 2015, 3:37am UTC](https://discuss.elastic.co/t/geoquery-against-pre-indexed-shape-is-failing-second-try/21469 "2015-01-08T03:37:50Z")
Folks, \[I sent the following on December 7, and got no reply. I’m sending it again and, if nobody tells me otherwise, I’ll assume that this is a bug, and file a report accordingly.\] I’m trying to run a geo\_shape fi… --- ## [Filebeat duplicate logs](https://discuss.elastic.co/t/filebeat-duplicate-logs/321032)
**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\ **Replies:** 7\ **Last updated:** [December 13, 2022, 8:46am UTC](https://discuss.elastic.co/t/filebeat-duplicate-logs/321032 "2022-12-13T08:46:57Z")
Hello everyone, for prevent the duplication data that can be received from Filebeat I used this Logstash filtration fingerprint { source =\> "message" target =\> "\[@metadata\]\[fingerprint\]" method =\> "SHA1" key =\> "ke… --- ## [Can't remove allicator role from first host](https://discuss.elastic.co/t/cant-remove-allicator-role-from-first-host/221923)
**Author:** [@andrew.luke](https://discuss.elastic.co/u/andrew.luke)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 12:24pm UTC](https://discuss.elastic.co/t/cant-remove-allicator-role-from-first-host/221923 "2020-03-05T12:24:58Z")
We've deployed a 2 AZ ECE enclave (for lack of a better term). The first host has all the roles enabled on it by default. We've added other hot/warm allocators in each AZ, and we're trying to move the running nodes/ins… --- ## [Droping events based on ip adr from sysmon](https://discuss.elastic.co/t/droping-events-based-on-ip-adr-from-sysmon/155734)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 7\ **Last updated:** [November 9, 2018, 12:32am UTC](https://discuss.elastic.co/t/droping-events-based-on-ip-adr-from-sysmon/155734 "2018-11-09T00:32:05Z")
hi i believe this is close to what im seeing, at least im trying the same thing and not getting any success. the sysmon is being send from a windows event collector with a winlogbeat agent on to logstash here is the … --- ## [Elasticsearch Input Plugin - Faraday::ConnectionFailed](https://discuss.elastic.co/t/elasticsearch-input-plugin-faraday-connectionfailed/123703)
**Author:** [@f.hiekel](https://discuss.elastic.co/u/f.hiekel)\ **Replies:** 1\ **Last updated:** [March 13, 2018, 1:21pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-faraday-connectionfailed/123703 "2018-03-13T13:21:04Z")
Hey, currently i try to execute an aggregation function and wirte the resul back to an index. Therefore I thought it would be a good idea to do it with the elasticserach input plugin to execute the query. My configurat… --- ## [Unknown setting 'autodetect\_column\_names' for csv](https://discuss.elastic.co/t/unknown-setting-autodetect-column-names-for-csv/97618)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 1\ **Last updated:** [August 20, 2017, 6:31pm UTC](https://discuss.elastic.co/t/unknown-setting-autodetect-column-names-for-csv/97618 "2017-08-20T18:31:43Z")
Hello, I am trying to test out a config to the console for a csv file and am getting the following error: Unknown setting ‘autodetect\_column\_names’ for csv My config: input { file { path =\> "/apps/logstash-5.2.0/bi… --- ## [Implementing Blacklist with Terms Lookup](https://discuss.elastic.co/t/implementing-blacklist-with-terms-lookup/107920)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [November 25, 2017, 11:36pm UTC](https://discuss.elastic.co/t/implementing-blacklist-with-terms-lookup/107920 "2017-11-25T23:36:14Z")
Hi all, I have a set of documents representing data of a phone call, basically from, to, duration I want to implement a watcher that if a document with certain from number is being inserted an alarm is raised. So I de… --- ## [Missing fields Filebeat -\> Logstash -\> Elasticsearch](https://discuss.elastic.co/t/missing-fields-filebeat-logstash-elasticsearch/101747)
**Author:** [@Matt\_Shields](https://discuss.elastic.co/u/Matt_Shields)\ **Replies:** 2\ **Last updated:** [September 29, 2017, 2:37pm UTC](https://discuss.elastic.co/t/missing-fields-filebeat-logstash-elasticsearch/101747 "2017-09-29T14:37:41Z")
I'm using Filebeat on Windows to send some custom logs to a custom index on an Elasticsearch server, but I'm sending them through Logstash so I can apply a custom filter. Previously I tried sending them directly from Fi… --- ## [Enable login on kibana dashboard](https://discuss.elastic.co/t/enable-login-on-kibana-dashboard/87114)
**Author:** [@thiru7](https://discuss.elastic.co/u/thiru7)\ **Replies:** 2\ **Last updated:** [May 25, 2017, 5:26pm UTC](https://discuss.elastic.co/t/enable-login-on-kibana-dashboard/87114 "2017-05-25T17:26:47Z")
I would like to use kibana dashboard with login window(username/password) without using xpack or shield plugin as it requires subscription. We want to do in production environment. Please suggest a method or way to imple… --- ## [XML attributes and arrays](https://discuss.elastic.co/t/xml-attributes-and-arrays/66522)
**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\ **Replies:** 2\ **Last updated:** [November 22, 2016, 9:06pm UTC](https://discuss.elastic.co/t/xml-attributes-and-arrays/66522 "2016-11-22T21:06:52Z")
Hi, what about parsing this XML with Logstash \ \ \ \ \ \ \ \ I'm using the… --- ## [Adding analyzers during runtime](https://discuss.elastic.co/t/adding-analyzers-during-runtime/5562)
**Author:** [@vpunski](https://discuss.elastic.co/u/vpunski)\ **Replies:** 2\ **Last updated:** [October 12, 2011, 9:25pm UTC](https://discuss.elastic.co/t/adding-analyzers-during-runtime/5562 "2011-10-12T21:25:23Z")
The message was originally published on nabble.com, but not appeared here. Sorry for potential double posting. I have an index of 65 millions records working on production system. In a new version of the applicat… --- ## [Querying on multiple flattened sub-fields for an array of items](https://discuss.elastic.co/t/querying-on-multiple-flattened-sub-fields-for-an-array-of-items/294990)
**Author:** [@robert-n-stewart](https://discuss.elastic.co/u/robert-n-stewart)\ **Replies:** 4\ **Last updated:** [January 21, 2022, 5:00pm UTC](https://discuss.elastic.co/t/querying-on-multiple-flattened-sub-fields-for-an-array-of-items/294990 "2022-01-21T17:00:01Z")
If I have a flattened or object field named X, which is an array of objects with subfields A and B, how can I query for an item that has specific values for both A and B? E.g. if I run the following: { "query": { … --- ## [Customizing kibana deployment (logos, css, etc.)](https://discuss.elastic.co/t/customizing-kibana-deployment-logos-css-etc/214305)
**Author:** [@ebalmeida](https://discuss.elastic.co/u/ebalmeida)\ **Replies:** 4\ **Last updated:** [January 13, 2020, 8:21pm UTC](https://discuss.elastic.co/t/customizing-kibana-deployment-logos-css-etc/214305 "2020-01-13T20:21:20Z")
Hello team, On a local kibana deployment it's possible (however unwieldy, because version updates) to customize logos and other graphical settings by directly changing the relevant files (svg logos or related css). Is t… --- ## [Split email address from existing field into new field without changing original field](https://discuss.elastic.co/t/split-email-address-from-existing-field-into-new-field-without-changing-original-field/199477)
**Author:** [@hueyg](https://discuss.elastic.co/u/hueyg)\ **Replies:** 4\ **Last updated:** [September 16, 2019, 8:10pm UTC](https://discuss.elastic.co/t/split-email-address-from-existing-field-into-new-field-without-changing-original-field/199477 "2019-09-16T20:10:23Z")
I have a working grok filter for a log file just like I want it. Currently the full email is currently parsed into a single field I call "user". I do not want to split this in the original grok unless I have to. I wou… --- ## [Monitoring of logstash in kibana not working](https://discuss.elastic.co/t/monitoring-of-logstash-in-kibana-not-working/184100)
**Author:** [@yossib](https://discuss.elastic.co/u/yossib)\ **Replies:** 4\ **Last updated:** [June 6, 2019, 8:52am UTC](https://discuss.elastic.co/t/monitoring-of-logstash-in-kibana-not-working/184100 "2019-06-06T08:52:53Z")
3 node cluster, https configured configuration in logstash.yml: xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.hosts: \["https://esnode3.iucc.ac.il:9200", "https://esnode2.iucc.ac.il:9200", "https://esno… --- ## [Logstash input http plugin, curl return nothing](https://discuss.elastic.co/t/logstash-input-http-plugin-curl-return-nothing/104720)
**Author:** [@vasina](https://discuss.elastic.co/u/vasina)\ **Replies:** 4\ **Last updated:** [October 20, 2017, 3:33pm UTC](https://discuss.elastic.co/t/logstash-input-http-plugin-curl-return-nothing/104720 "2017-10-20T15:33:24Z")
Добрый вечер! Наверное, это глупый вопрос, но подскажите пожалуйста. Я пытаюсь выполнить простой тестовый пример, как описано в статье https://www.elastic.co/blog/introducing-logstash-input-http-plugin . Я запустила E… --- ## [Test fails on Travis but pass locally](https://discuss.elastic.co/t/test-fails-on-travis-but-pass-locally/84794)
**Author:** [@Braulio\_Bhavamitra](https://discuss.elastic.co/u/Braulio_Bhavamitra)\ **Replies:** 4\ **Last updated:** [May 6, 2017, 4:23pm UTC](https://discuss.elastic.co/t/test-fails-on-travis-but-pass-locally/84794 "2017-05-06T16:23:27Z")
Tried everything I could, but still tests don't pass on Travis. Locally everything is ok! The error is Caused by: org.elasticsearch.index.mapper.MapperParsingException: No handler for type \[text\] declared on field \[ide… --- ## [Elasticsearch search migration issues from 1.5.2 to 2.3.3](https://discuss.elastic.co/t/elasticsearch-search-migration-issues-from-1-5-2-to-2-3-3/51897)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 4\ **Last updated:** [June 16, 2016, 7:31am UTC](https://discuss.elastic.co/t/elasticsearch-search-migration-issues-from-1-5-2-to-2-3-3/51897 "2016-06-16T07:31:00Z")
Hi Team, Facing restart issues when migrating elasticsearch version from 1.5.2 to 2.3.3 getting below error on executing " service elasticsearch restart" as root; \[ERROR\]\[bootstrap \] Exception java.la… --- ## [Kafka(input) + logstash-1.5.1 + elasticsearch 1.5(output) action update?](https://discuss.elastic.co/t/kafka-input-logstash-1-5-1-elasticsearch-1-5-output-action-update/23995)
**Author:** [@Camilo\_Sierra](https://discuss.elastic.co/u/Camilo_Sierra)\ **Replies:** 4\ **Last updated:** [July 1, 2015, 2:17pm UTC](https://discuss.elastic.co/t/kafka-input-logstash-1-5-1-elasticsearch-1-5-output-action-update/23995 "2015-07-01T14:17:52Z")
i need to update documents in my elasticsearch, documentation for "action" speak about index/create/delete, someone has a idea for how update documents using logstash ? thanks! --- ## [Problems with an Id with a number sign](https://discuss.elastic.co/t/problems-with-an-id-with-a-number-sign/127614)
**Author:** [@majid\_zarrin](https://discuss.elastic.co/u/majid_zarrin)\ **Replies:** 3\ **Last updated:** [April 11, 2018, 2:01pm UTC](https://discuss.elastic.co/t/problems-with-an-id-with-a-number-sign/127614 "2018-04-11T14:01:11Z")
Hello, I have a document with a number sign (#) at the end of its Id. It makes some problems. I tried to delete it inside Kibana but no success. \[43%20PM\] Also, I tried with Java High-Level REST Client but again no … --- ## [Can you ingest Spring boot logs directly from the App into elastic via TCP](https://discuss.elastic.co/t/can-you-ingest-spring-boot-logs-directly-from-the-app-into-elastic-via-tcp/96302)
**Author:** [@Rob\_Davidson](https://discuss.elastic.co/u/Rob_Davidson)\ **Replies:** 0\ **Last updated:** [August 8, 2017, 3:46pm UTC](https://discuss.elastic.co/t/can-you-ingest-spring-boot-logs-directly-from-the-app-into-elastic-via-tcp/96302 "2017-08-08T15:46:38Z")
I'm investigating feasability of sending spring boot application logs directly into Elasticsearch. Without using filebeats or logstash. But with the Ingest plugin. I'm wondering if this is possible? If it is possible… [Previous page](https://discuss.elastic.co/top.md?page=1055&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1057&per_page=50&period=all)