# Top **URL:** https://discuss.elastic.co/top.md?page=1060&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1061 --- ## [How do I create an index name based on a time field that is not the timestamp?](https://discuss.elastic.co/t/how-do-i-create-an-index-name-based-on-a-time-field-that-is-not-the-timestamp/112035)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 2\ **Last updated:** [December 18, 2017, 6:25am UTC](https://discuss.elastic.co/t/how-do-i-create-an-index-name-based-on-a-time-field-that-is-not-the-timestamp/112035 "2017-12-18T06:25:19Z")
I am using the @timestamp field for when the document was indexed, but have a separate field (\[page\]\[post\_date\]) for a date of when the event occurred. I would like to create index names based on the \[page\]\[post\_date\] fi… --- ## [Filebeat doesn't seem to be doing anything (new to this software) #321 #322](https://discuss.elastic.co/t/filebeat-doesnt-seem-to-be-doing-anything-new-to-this-software-321-322/38184)
**Author:** [@PeterV19823](https://discuss.elastic.co/u/PeterV19823)\ **Replies:** 2\ **Last updated:** [January 2, 2016, 10:40am UTC](https://discuss.elastic.co/t/filebeat-doesnt-seem-to-be-doing-anything-new-to-this-software-321-322/38184 "2016-01-02T10:40:32Z")
 PeterV1982 commented 5 minutes ago Follow up somhow i don't know why my code missed something instead off •c://programdata//elasticsearch//logs// the actual code says •c://programdata//elasticsearch//log… --- ## [Set vega background color with threshold](https://discuss.elastic.co/t/set-vega-background-color-with-threshold/265038)
**Author:** [@111439](https://discuss.elastic.co/u/111439)\ **Replies:** 3\ **Last updated:** [March 2, 2021, 11:11am UTC](https://discuss.elastic.co/t/set-vega-background-color-with-threshold/265038 "2021-03-02T11:11:11Z")
Hello Everybody, I have question with vega visualize (pie chart). I want to set background color on vega visualize by condition using data. {"key": "tier1", "doc\_count": 1}, {"key": "tier2", "doc\_count": 2}, {"key": … --- ## [Draw a colored circle](https://discuss.elastic.co/t/draw-a-colored-circle/216980)
**Author:** [@Mouloud\_CHIKHOUNE](https://discuss.elastic.co/u/Mouloud_CHIKHOUNE)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 8:35pm UTC](https://discuss.elastic.co/t/draw-a-colored-circle/216980 "2020-01-31T20:35:32Z")
Hi, I have the file log below and I want to draw a colored circle in function of the input : "header.message" (green for sucess and red for failure). PS: I want to do that just for the last document. thanks --- ## [Exact search results not shown at the top](https://discuss.elastic.co/t/exact-search-results-not-shown-at-the-top/154211)
**Author:** [@Veenudheepithi\_Muthu](https://discuss.elastic.co/u/Veenudheepithi_Muthu)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 9:48am UTC](https://discuss.elastic.co/t/exact-search-results-not-shown-at-the-top/154211 "2018-10-29T09:48:08Z")
I am using Elasticsearch version 5.2. When I try to query a combination of two words that are stored in two different attributes, I get the search result but the record with the exact search words are not displayed at th… --- ## [Synonyms: Explicit mapping behaving like Equivalent synonyms](https://discuss.elastic.co/t/synonyms-explicit-mapping-behaving-like-equivalent-synonyms/136125)
**Author:** [@dmbaughman](https://discuss.elastic.co/u/dmbaughman)\ **Replies:** 3\ **Last updated:** [June 18, 2018, 6:05pm UTC](https://discuss.elastic.co/t/synonyms-explicit-mapping-behaving-like-equivalent-synonyms/136125 "2018-06-18T18:05:56Z")
For context, I'm using AWS Elasticsearch service, v6.2 I am trying to define a set of simple contraction synonyms for an index, but they are behaving like equivalent synonyms. For example, we have a multivitamin produc… --- ## [Your git version is 1.8, but Rally requires at least git 1.9](https://discuss.elastic.co/t/your-git-version-is-1-8-but-rally-requires-at-least-git-1-9/129315)
**Author:** [@Anuj\_Kulkarni](https://discuss.elastic.co/u/Anuj_Kulkarni)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 4:44pm UTC](https://discuss.elastic.co/t/your-git-version-is-1-8-but-rally-requires-at-least-git-1-9/129315 "2018-04-24T16:44:38Z")
I configured ESrally with my ElasticSearch. The problem I have is I am unable to run the race command as mentioned here - https://esrally.readthedocs.io/en/stable/race.html The log says that I am using git 1.8, but I am… --- ## [Elastic co docker registry URL](https://discuss.elastic.co/t/elastic-co-docker-registry-url/114562)
**Author:** [@Marc\_L](https://discuss.elastic.co/u/Marc_L)\ **Replies:** 3\ **Last updated:** [January 10, 2018, 12:12am UTC](https://discuss.elastic.co/t/elastic-co-docker-registry-url/114562 "2018-01-10T00:12:55Z")
Can someone confirm the URL of the official Elastic docker repository? I am trying to add the Elastic docker repository to my QNAP Container Station but when I add it as https://docker.elastic.co it is failing the "Test… --- ## [Reading from jms with input-jms](https://discuss.elastic.co/t/reading-from-jms-with-input-jms/106968)
**Author:** [@nugusbayevkk](https://discuss.elastic.co/u/nugusbayevkk)\ **Replies:** 3\ **Last updated:** [November 9, 2017, 9:57am UTC](https://discuss.elastic.co/t/reading-from-jms-with-input-jms/106968 "2017-11-09T09:57:33Z")
guys hello, i test to read message from websphere mq, logstash 5.5.2 - windows 8 elasticsearch 5.5.2 - linux websphere mq 8.0.0.4 i have 2 test case: #1) with filter in logstash.conf #2) without filter #1) averag… --- ## [Filebeat throwing error while run the files](https://discuss.elastic.co/t/filebeat-throwing-error-while-run-the-files/46540)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 3\ **Last updated:** [April 11, 2016, 8:53am UTC](https://discuss.elastic.co/t/filebeat-throwing-error-while-run-the-files/46540 "2016-04-11T08:53:47Z")
Hi, when i run my filebeat file im getting following error plz help to resolve it, goroutine 49260 \[runnable\]: syscall.Syscall(0x0, 0x6028, 0xc8e08a8000, 0x4000, 0x1826, 0x4000, 0x0) /usr/local/go/src/syscall… --- ## [How we can create custom filter plugin in logstash?](https://discuss.elastic.co/t/how-we-can-create-custom-filter-plugin-in-logstash/113571)
**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\ **Replies:** 1\ **Last updated:** [December 31, 2017, 1:27pm UTC](https://discuss.elastic.co/t/how-we-can-create-custom-filter-plugin-in-logstash/113571 "2017-12-31T13:27:25Z")
Hello Folks, I am using logstash 5.6.3 and I have written python script for parsing the some part of logs. i want to call this script from filter section of logstash. I look around almost all the ways to look into it.… --- ## ["io/console not supported; tty will not be manipulated" msg](https://discuss.elastic.co/t/io-console-not-supported-tty-will-not-be-manipulated-msg/24218)
**Author:** [@samding](https://discuss.elastic.co/u/samding)\ **Replies:** 1\ **Last updated:** [June 24, 2015, 5:19am UTC](https://discuss.elastic.co/t/io-console-not-supported-tty-will-not-be-manipulated-msg/24218 "2015-06-24T05:19:00Z")
Hello, I run LS on SLES12 of s390 and get this msg as follows: " bin/logstash -e 'input { stdin { } } output { stdout { codec =\> rubydebug } }' io/console not supported; tty will not be manipulated Logstash startup com… --- ## [org.elasticsearch.action.ActionRequestValidationException: Validation Failed: 1: id is missing](https://discuss.elastic.co/t/org-elasticsearch-action-actionrequestvalidationexception-validation-failed-1-id-is-missing/257084)
**Author:** [@andy4195](https://discuss.elastic.co/u/andy4195)\ **Replies:** 4\ **Last updated:** [December 8, 2020, 6:40pm UTC](https://discuss.elastic.co/t/org-elasticsearch-action-actionrequestvalidationexception-validation-failed-1-id-is-missing/257084 "2020-12-08T18:40:05Z")
При операции Bulk проиходит данная ошибка. Не очень понятно почему? Это ошибка потому что id пустой или не находит данное ID в БД? Там две операции, одна с добавление записи в в один индекс, вторая с удаление записи из… --- ## [Detections will not setup](https://discuss.elastic.co/t/detections-will-not-setup/227297)
**Author:** [@xennn](https://discuss.elastic.co/u/xennn)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 5:41pm UTC](https://discuss.elastic.co/t/detections-will-not-setup/227297 "2020-04-10T17:41:11Z")
Hello, i have a problem with setup detections in SIEM. I always get a message with Let's set up your detection engine. I have logged in as a superuser i cannot see the .siem-signals index. I have check the role i hav… --- ## ["no shard follow tasks" when pausing following on follower index](https://discuss.elastic.co/t/no-shard-follow-tasks-when-pausing-following-on-follower-index/207074)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 4\ **Last updated:** [November 11, 2019, 1:49pm UTC](https://discuss.elastic.co/t/no-shard-follow-tasks-when-pausing-following-on-follower-index/207074 "2019-11-11T13:49:54Z")
:wave: everyone! We are using CCR (elasticsearch v 6.8.x) for quite a time now to run in code where we automatically delete old indices. The documentation states: The follower index must be paused and closed before in… --- ## [How can I identify fuzzy search results with exact results and suggested results?](https://discuss.elastic.co/t/how-can-i-identify-fuzzy-search-results-with-exact-results-and-suggested-results/96628)
**Author:** [@Vinothkumar](https://discuss.elastic.co/u/Vinothkumar)\ **Replies:** 4\ **Last updated:** [August 21, 2017, 11:28am UTC](https://discuss.elastic.co/t/how-can-i-identify-fuzzy-search-results-with-exact-results-and-suggested-results/96628 "2017-08-21T11:28:27Z")
Hi Members Currently Elastic Search fuzzy search is giving results though it matches the query exactly or related to the query . But how can I separate results with exact matched results and suggested or related match … --- ## [Error in Logstash log . "Error: Disc quota exceeded"](https://discuss.elastic.co/t/error-in-logstash-log-error-disc-quota-exceeded/94102)
**Author:** [@sreepatch](https://discuss.elastic.co/u/sreepatch)\ **Replies:** 4\ **Last updated:** [July 27, 2017, 6:55am UTC](https://discuss.elastic.co/t/error-in-logstash-log-error-disc-quota-exceeded/94102 "2017-07-27T06:55:37Z")
i am getting Error: Disc quota exceeded", :level=\>:error in the logstash log. why this occurs and how can it be resolved? Logstash is being used to Push the data to ELastic Search. In the OuptFilter of Logstash we hav… --- ## [Filebeat forwarding to Logstash running in Mesos](https://discuss.elastic.co/t/filebeat-forwarding-to-logstash-running-in-mesos/59238)
**Author:** [@surajs](https://discuss.elastic.co/u/surajs)\ **Replies:** 4\ **Last updated:** [August 30, 2016, 9:32pm UTC](https://discuss.elastic.co/t/filebeat-forwarding-to-logstash-running-in-mesos/59238 "2016-08-30T21:32:25Z")
In my current organization, we are planning to run our ELK stack on Mesos. For log-forwarding, we plan on having filebeat instance running on each of the hosts that run a backend service. Is there a recommended way to… --- ## [Throughput chart for selected transaction in APM view is not calculated correctly](https://discuss.elastic.co/t/throughput-chart-for-selected-transaction-in-apm-view-is-not-calculated-correctly/286895)
**Author:** [@molsza](https://discuss.elastic.co/u/molsza)\ **Replies:** 3\ **Last updated:** [October 18, 2021, 9:07pm UTC](https://discuss.elastic.co/t/throughput-chart-for-selected-transaction-in-apm-view-is-not-calculated-correctly/286895 "2021-10-18T21:07:16Z")
When particular transaction is selected on APM service view. There are 4 charts: Latency, Throughput, Error rate, Time per span. All but Throughput are showing data for selected transaction. Throughput chart is calculate… --- ## [Placing multiple files and data under an index](https://discuss.elastic.co/t/placing-multiple-files-and-data-under-an-index/238630)
**Author:** [@Romy\_Bobby](https://discuss.elastic.co/u/Romy_Bobby)\ **Replies:** 8\ **Last updated:** [June 26, 2020, 5:04am UTC](https://discuss.elastic.co/t/placing-multiple-files-and-data-under-an-index/238630 "2020-06-26T05:04:00Z")
Hi, I am creating Faq for organisation to enable elastic search in it . I would like to limit my search to each organisation. is it possible to add files and documents under one index so that i can filter according to o… --- ## [Trying to export data reports using Kibana discover but could not be able to export large no. of data](https://discuss.elastic.co/t/trying-to-export-data-reports-using-kibana-discover-but-could-not-be-able-to-export-large-no-of-data/329018)
**Author:** [@Mangesh\_Mathe](https://discuss.elastic.co/u/Mangesh_Mathe)\ **Replies:** 6\ **Last updated:** [March 31, 2023, 12:28pm UTC](https://discuss.elastic.co/t/trying-to-export-data-reports-using-kibana-discover-but-could-not-be-able-to-export-large-no-of-data/329018 "2023-03-31T12:28:37Z")
Hello Team, I'm trying to download discover search data with some of my filters. However, When I download I see that document limit in CSV is at 10,000 documents. Any way or setting to increase document download limit… --- ## [Using update API to change the contents of a text field](https://discuss.elastic.co/t/using-update-api-to-change-the-contents-of-a-text-field/231418)
**Author:** [@Tim\_Estes](https://discuss.elastic.co/u/Tim_Estes)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 12:15am UTC](https://discuss.elastic.co/t/using-update-api-to-change-the-contents-of-a-text-field/231418 "2020-05-07T00:15:22Z")
Hello, I have the following schema for an index, with some example documents. My use-case is that I'm indexing a book and I am indexing by page. I'm trying to update the contents of a page if the user decides to edit a … --- ## [Harvester in loop while parsing JSON data](https://discuss.elastic.co/t/harvester-in-loop-while-parsing-json-data/220612)
**Author:** [@aksroh](https://discuss.elastic.co/u/aksroh)\ **Replies:** 6\ **Last updated:** [February 26, 2020, 4:34am UTC](https://discuss.elastic.co/t/harvester-in-loop-while-parsing-json-data/220612 "2020-02-26T04:34:30Z")
Trying to parse JSON data from file (single line JSON data), harvester is being started again and again after close\_inactive time. filebeat.yml: filebeat.inputs: - type: log enabled: true paths: - D:\\ELK\\Logs\\\*… --- ## [Elasticsearch 7.2.0 | Windows | Basic Plan | Elasticsearch service doesn't start when x-pack.security.enabled=true](https://discuss.elastic.co/t/elasticsearch-7-2-0-windows-basic-plan-elasticsearch-service-doesnt-start-when-x-pack-security-enabled-true/189338)
**Author:** [@Andrew\_James](https://discuss.elastic.co/u/Andrew_James)\ **Replies:** 6\ **Last updated:** [July 10, 2019, 8:25am UTC](https://discuss.elastic.co/t/elasticsearch-7-2-0-windows-basic-plan-elasticsearch-service-doesnt-start-when-x-pack-security-enabled-true/189338 "2019-07-10T08:25:48Z")
Hi Team, This is the continuation of the Github issue page that I have opened. Elasticsearch Version: 7.2.0 Java Version: 12 OS: Windows Environment: Development / Local Installation Mode: .ZIP file Java Heap Size… --- ## [Issue with Logstash](https://discuss.elastic.co/t/issue-with-logstash/131343)
**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\ **Replies:** 6\ **Last updated:** [May 11, 2018, 3:11pm UTC](https://discuss.elastic.co/t/issue-with-logstash/131343 "2018-05-11T15:11:19Z")
usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:385\] elasticsearch - retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"blocked by: \[FORBIDDEN/12/index read-only / al… --- ## [100% peak of processing in all nodes](https://discuss.elastic.co/t/100-peak-of-processing-in-all-nodes/77171)
**Author:** [@pjpizarro](https://discuss.elastic.co/u/pjpizarro)\ **Replies:** 6\ **Last updated:** [March 14, 2017, 12:37am UTC](https://discuss.elastic.co/t/100-peak-of-processing-in-all-nodes/77171 "2017-03-14T00:37:07Z")
Good Morning, All nodes (11 data nodes) were 100% cpu after due to some query (or queries) and did not return to normal after 10 minutes. Monitoring: https://snapshot.raintank.io/dashboard/snapshot/Vvcn2sxInYPjMoFWtA… --- ## [Logstash Syntax :: Add a new field... which is the product of other fields?](https://discuss.elastic.co/t/logstash-syntax-add-a-new-field-which-is-the-product-of-other-fields/208369)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 4:42pm UTC](https://discuss.elastic.co/t/logstash-syntax-add-a-new-field-which-is-the-product-of-other-fields/208369 "2019-11-19T16:42:04Z")
Hello Lords of Logstash, In my data, I need to add a new field that multiplies the integer values of two other fields and a constant. In other words, if I have this: FieldA FieldB ================ 1 5 2… --- ## [Forwarding windows event logs in another language](https://discuss.elastic.co/t/forwarding-windows-event-logs-in-another-language/204067)
**Author:** [@username11](https://discuss.elastic.co/u/username11)\ **Replies:** 2\ **Last updated:** [October 18, 2019, 6:43am UTC](https://discuss.elastic.co/t/forwarding-windows-event-logs-in-another-language/204067 "2019-10-18T06:43:10Z")
Greetings. We are currently trying to ingest logs from a Windows server with a system language other than English. Because of that, the logs retrieved by Winlogbeat are not in English, and we need to get them in line wit… --- ## [Timeout/Connection error](https://discuss.elastic.co/t/timeout-connection-error/63455)
**Author:** [@mattj83](https://discuss.elastic.co/u/mattj83)\ **Replies:** 2\ **Last updated:** [October 20, 2016, 12:24am UTC](https://discuss.elastic.co/t/timeout-connection-error/63455 "2016-10-20T00:24:52Z")
I have an error that I hope I some one in the group can help. In my client log I get the following error: \_Caused by: org.elasticsearch.discovery.MasterNotDiscoveredException: waited for \[30s\] at org.elasticse… --- ## [How to pass multiple arguments to shell script in execbeat?](https://discuss.elastic.co/t/how-to-pass-multiple-arguments-to-shell-script-in-execbeat/75715)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [February 20, 2017, 11:38pm UTC](https://discuss.elastic.co/t/how-to-pass-multiple-arguments-to-shell-script-in-execbeat/75715 "2017-02-20T23:38:44Z")
Hi, I use execbeat to execute my shellscript, which accept multiple arguments. I have my execbeat configuration like; execbeat: execs: - cron: "@every 5s" command: "/shellscripts/test.sh" args… --- ## [Formatting output of Filebeat Kafka plugin](https://discuss.elastic.co/t/formatting-output-of-filebeat-kafka-plugin/72528)
**Author:** [@Arvind\_Kalyan](https://discuss.elastic.co/u/Arvind_Kalyan)\ **Replies:** 1\ **Last updated:** [January 23, 2017, 8:43pm UTC](https://discuss.elastic.co/t/formatting-output-of-filebeat-kafka-plugin/72528 "2017-01-23T20:43:32Z")
Hi, Using Filebeat 5.1 (latest). Currently when I log one line with message "hello", it comes in Kafka as this: {"@timestamp":"2017-01-23T19:42:22.991Z","beat":{"hostname":"ip-10-0-14-90","name":"ip-10-0-14-90","ver… --- ## [How to add Document View to a Dashboard](https://discuss.elastic.co/t/how-to-add-document-view-to-a-dashboard/304072)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 5\ **Last updated:** [May 11, 2022, 8:41am UTC](https://discuss.elastic.co/t/how-to-add-document-view-to-a-dashboard/304072 "2022-05-11T08:41:24Z")
In Discover, there is a document table that always appears. It never appears on my Dashboard even though I saved the query in Discover, and loaded the query for my Dashboard. What else must I do? I set doc\_table:lega… --- ## [Error running Metricbeat 7.6 on AKS K8S cluster](https://discuss.elastic.co/t/error-running-metricbeat-7-6-on-aks-k8s-cluster/246608)
**Author:** [@mirii1994](https://discuss.elastic.co/u/mirii1994)\ **Replies:** 5\ **Last updated:** [September 3, 2020, 2:38pm UTC](https://discuss.elastic.co/t/error-running-metricbeat-7-6-on-aks-k8s-cluster/246608 "2020-09-03T14:38:03Z")
I'm trying to run metricbeat 7.6.2 on my AKS cluster (k8s version 1.16), And getting the following errors: 2020-08-27T11:00:03.417Z INFO module/wrapper.go:252 Error fetching data for metricset kubernetes.volume: error … --- ## [Cant find data/registry on Centos 7 with yum repository,](https://discuss.elastic.co/t/cant-find-data-registry-on-centos-7-with-yum-repository/217555)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 5\ **Last updated:** [February 4, 2020, 1:44am UTC](https://discuss.elastic.co/t/cant-find-data-registry-on-centos-7-with-yum-repository/217555 "2020-02-04T01:44:58Z")
Hi, Im am testing configurations for a log file, and I want to use it many times, until the desired result is achieved, the problem is that I can not find the data/registry folder where the already processed files are … --- ## [\[Jolokia module\] Get value from inner path (substructure)](https://discuss.elastic.co/t/jolokia-module-get-value-from-inner-path-substructure/210391)
**Author:** [@misocurdo](https://discuss.elastic.co/u/misocurdo)\ **Replies:** 5\ **Last updated:** [December 6, 2019, 4:09pm UTC](https://discuss.elastic.co/t/jolokia-module-get-value-from-inner-path-substructure/210391 "2019-12-06T16:09:03Z")
The Jolokia documentation (https://jolokia.org/reference/html/protocol.html#paths) shows that is possibile to retrieve value from "An inner path points to a certain substructure (plain value, array, hash) within a a comp… --- ## [How can we monitor SAP Adapter through ELK?](https://discuss.elastic.co/t/how-can-we-monitor-sap-adapter-through-elk/128630)
**Author:** [@priti](https://discuss.elastic.co/u/priti)\ **Replies:** 5\ **Last updated:** [April 19, 2018, 11:23am UTC](https://discuss.elastic.co/t/how-can-we-monitor-sap-adapter-through-elk/128630 "2018-04-19T11:23:12Z")
I have to check SAP RFC Connection Status through ELK. How we can do ? --- ## [Occasional Bulk Insert Failure (ES 2.4.4)](https://discuss.elastic.co/t/occasional-bulk-insert-failure-es-2-4-4/73287)
**Author:** [@vyazici](https://discuss.elastic.co/u/vyazici)\ **Replies:** 5\ **Last updated:** [February 1, 2017, 1:16pm UTC](https://discuss.elastic.co/t/occasional-bulk-insert-failure-es-2-4-4/73287 "2017-02-01T13:16:22Z")
Hi all! In an application, I fetch rows from multiple tables over distinct JDBC connections in parallel, transform rows into document fields, and send it to ES in batches of size 1000 using the Java Bulk API. There I s… --- ## [Completely lost](https://discuss.elastic.co/t/completely-lost/37632)
**Author:** [@new2logstash](https://discuss.elastic.co/u/new2logstash)\ **Replies:** 5\ **Last updated:** [December 21, 2015, 2:38am UTC](https://discuss.elastic.co/t/completely-lost/37632 "2015-12-21T02:38:02Z")
Hello all. I have followed the excellent Digital Ocean filebeat/logstash/ES/Kibana (How To Install Elasticsearch, Logstash, and Kibana (ELK Stack) on CentOS 7 | DigitalOcean). I am getting messages from one of my files i… --- ## [Filter not getting applied on ganglia input in logstash](https://discuss.elastic.co/t/filter-not-getting-applied-on-ganglia-input-in-logstash/28826)
**Author:** [@dhar](https://discuss.elastic.co/u/dhar)\ **Replies:** 5\ **Last updated:** [September 8, 2015, 10:53am UTC](https://discuss.elastic.co/t/filter-not-getting-applied-on-ganglia-input-in-logstash/28826 "2015-09-08T10:53:48Z")
Continuing the discussion from Report logged in user stats in kibana: Continuing the discussion from Not able to filter certian ganglia gmond ouput using logstash: --- ## [Kibana Line Chart - Average - Limit input to range or min/max](https://discuss.elastic.co/t/kibana-line-chart-average-limit-input-to-range-or-min-max/208667)
**Author:** [@Bastian\_Jager](https://discuss.elastic.co/u/Bastian_Jager)\ **Replies:** 3\ **Last updated:** [November 21, 2019, 4:27pm UTC](https://discuss.elastic.co/t/kibana-line-chart-average-limit-input-to-range-or-min-max/208667 "2019-11-21T16:27:18Z")
Hi, looked now quiet a while though the forum, but without success. Only thing close was https://discuss.elastic.co/t/average-aggregation/67826 I am looking for a way to exclude values from averaging. Lets say we have… --- ## [Es 5.2 logging to /var/log/messages](https://discuss.elastic.co/t/es-5-2-logging-to-var-log-messages/79302)
**Author:** [@GCAppArch](https://discuss.elastic.co/u/GCAppArch)\ **Replies:** 3\ **Last updated:** [April 10, 2017, 3:23pm UTC](https://discuss.elastic.co/t/es-5-2-logging-to-var-log-messages/79302 "2017-04-10T15:23:15Z")
Hi I have a problem with our es setup. Although we have configured the path.logs property in our config properties file, elastic continues to spew messages to /var/log/messages. The underlying file system ran out of di… --- ## [Most frequently occurring phrases?](https://discuss.elastic.co/t/most-frequently-occurring-phrases/16859)
**Author:** [@John\_Stanford](https://discuss.elastic.co/u/John_Stanford)\ **Replies:** 3\ **Last updated:** [April 11, 2014, 1:58pm UTC](https://discuss.elastic.co/t/most-frequently-occurring-phrases/16859 "2014-04-11T13:58:34Z")
Hi, I have a bunch of text events indexed as a message field, and in many cases, they are similar but not exactly the same. Is there a way to return the top n most frequently occurring similar phrases, and if so,… --- ## [Elastic Cloud Enterprise 3.7.2 Security Update (ESA-2024-18)](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-2-security-update-esa-2024-18/362181)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [June 28, 2024, 4:54am UTC](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-2-security-update-esa-2024-18/362181 "2024-06-28T04:54:13Z")
ECE Improper Authorization (ESA-2024-18) It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys th… --- ## [After provide time format I get; (elastic: Error 400 (Bad Request): all shards failed \[type=search\_phase\_execution\_exception\] ) error](https://discuss.elastic.co/t/after-provide-time-format-i-get-elastic-error-400-bad-request-all-shards-failed-type-search-phase-execution-exception-error/314243)
**Author:** [@golofetuk](https://discuss.elastic.co/u/golofetuk)\ **Replies:** 1\ **Last updated:** [September 13, 2022, 7:18am UTC](https://discuss.elastic.co/t/after-provide-time-format-i-get-elastic-error-400-bad-request-all-shards-failed-type-search-phase-execution-exception-error/314243 "2022-09-13T07:18:44Z")
Please use the following questions as a guideline to help me answer your issue/question without further inquiry. Thank you. Which version of Elastic are you using? \[ v\] elastic.v7 (for Elasticsearch 7.x) Please descri… --- ## [Can Logstash 7.x work with elastic 8.x](https://discuss.elastic.co/t/can-logstash-7-x-work-with-elastic-8-x/300512)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 1\ **Last updated:** [March 27, 2022, 11:56pm UTC](https://discuss.elastic.co/t/can-logstash-7-x-work-with-elastic-8-x/300512 "2022-03-27T23:56:26Z")
Hi all I have a question before upgrading elastic to 8.x Do i have to upgrade all logstash and filebeat node to version 8.x or it can be keep at version 7.17 Since there is a lot of logstash and filebeat node in my sy… --- ## [Transaction support in ES](https://discuss.elastic.co/t/transaction-support-in-es/175621)
**Author:** [@valsaraj\_pv](https://discuss.elastic.co/u/valsaraj_pv)\ **Replies:** 1\ **Last updated:** [April 5, 2019, 3:43pm UTC](https://discuss.elastic.co/t/transaction-support-in-es/175621 "2019-04-05T15:43:24Z")
Does ES support transactions commit and rollback. For eg: when a row is saved into a table which is in a transaction, we need to add/update the subset of that in the index for real time search. In case any error happens … --- ## [How do I match a log pattern to different log files?](https://discuss.elastic.co/t/how-do-i-match-a-log-pattern-to-different-log-files/28661)
**Author:** [@ushadatt](https://discuss.elastic.co/u/ushadatt)\ **Replies:** 1\ **Last updated:** [September 4, 2015, 1:59pm UTC](https://discuss.elastic.co/t/how-do-i-match-a-log-pattern-to-different-log-files/28661 "2015-09-04T13:59:49Z")
I have two patterns defined for two different kind of logs in my config file.. example: simple\_logs and error\_logs So, now I am adding a new field, if the pattern matches simple-logs. But even if my log file contains t… --- ## [How to match IP address to hostname (dns filter)](https://discuss.elastic.co/t/how-to-match-ip-address-to-hostname-dns-filter/246988)
**Author:** [@lilyyy](https://discuss.elastic.co/u/lilyyy)\ **Replies:** 2\ **Last updated:** [September 21, 2020, 4:26pm UTC](https://discuss.elastic.co/t/how-to-match-ip-address-to-hostname-dns-filter/246988 "2020-09-21T16:26:30Z")
Hi all, I'm trying to match the IP address to hostname. Data is json file and it is originally pcap file. I used dns filter in logstash.conf file. mutate { add\_field =\> { "src\_hostname" =\> "%{\[layers\]\[ip\]\[ip\_ip\_sr… --- ## [Tell Logstash to ignore old files in s3 bucket](https://discuss.elastic.co/t/tell-logstash-to-ignore-old-files-in-s3-bucket/226759)
**Author:** [@clarkritchie](https://discuss.elastic.co/u/clarkritchie)\ **Replies:** 2\ **Last updated:** [April 6, 2020, 7:47pm UTC](https://discuss.elastic.co/t/tell-logstash-to-ignore-old-files-in-s3-bucket/226759 "2020-04-06T19:47:25Z")
I'm using the Logstash s3 plugin to ingest logs from a partner's S3 bucket. Logstash itself runs in a container, so its sincedb is not persistent. When the container re-starts, Logstash restarts and begins ingesting lo… --- ## [Kibana and ElasticSearch X-Opaque-ID header](https://discuss.elastic.co/t/kibana-and-elasticsearch-x-opaque-id-header/222080)
**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\ **Replies:** 2\ **Last updated:** [March 5, 2020, 8:29am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-x-opaque-id-header/222080 "2020-03-05T08:29:46Z")
Hello ! ElasticSearch slow log search and tasks management use the X-Opaque-ID header to identify tasks running in the cluster. Is there a way to set the X-Opaque-ID header with the current Kibana user name ? Thank you… [Previous page](https://discuss.elastic.co/top.md?page=1059&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1061&per_page=50&period=all)