# Top

**URL:** https://discuss.elastic.co/top.md?page=1075&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1076

---

## [Where is the Custom plugins page (to upload synonyms)?](https://discuss.elastic.co/t/where-is-the-custom-plugins-page-to-upload-synonyms/181389)

<div class="topic-metadata">

**Author:** [@apaulsen](https://discuss.elastic.co/u/apaulsen)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 1:26pm UTC](https://discuss.elastic.co/t/where-is-the-custom-plugins-page-to-upload-synonyms/181389 "2019-05-20T13:26:13Z")

</div>

We've pepared azip-file with internal structure └── dictionaries └── synonyms.txt We can't find "Custom plugins page" for uploading the synonyms.txt which is described in the following URL: Upload custom plugins …

---

## [Failed at installing an example plugin](https://discuss.elastic.co/t/failed-at-installing-an-example-plugin/88078)

<div class="topic-metadata">

**Author:** [@Bdriss\_Sana](https://discuss.elastic.co/u/Bdriss_Sana)\
**Replies:** 3\
**Last updated:** [June 2, 2017, 12:15pm UTC](https://discuss.elastic.co/t/failed-at-installing-an-example-plugin/88078 "2017-06-02T12:15:58Z")

</div>

I tried to install this plugin : GitHub - elastic/generator-kibana-plugin: DEPRECATED Yeoman Generator for Kibana Plugins, please use https://github.com/elastic/template-kibana-plugin/ as a kick-starter to learn how deve…

---

## [部分一致の曖昧検索について](https://discuss.elastic.co/t/topic/207614)

<div class="topic-metadata">

**Author:** [@b18bd8be4bf795b30ee7](https://discuss.elastic.co/u/b18bd8be4bf795b30ee7)\
**Replies:** 0\
**Last updated:** [November 13, 2019, 2:30am UTC](https://discuss.elastic.co/t/topic/207614 "2019-11-13T02:30:28Z")

</div>

match\_phrase queryと曖昧検索を組み合わせたような検索をしたいと考えております。 バージョン：Elasticsearch6.3（AWSのElasticsearch Serviceを使用しております。） 具体的には データ1：(株)テスト春夏秋冬 データ2：株式会社テスト冬秋夏春 が存在するとして、下記2点を実現させたいです。 ①『テスあ春』で検索を実行した場合、１だけをヒットさせる。 ②『株式会社テスあ』で…

---

## [Using Environment variable in ES index name](https://discuss.elastic.co/t/using-environment-variable-in-es-index-name/172862)

<div class="topic-metadata">

**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 11:28pm UTC](https://discuss.elastic.co/t/using-environment-variable-in-es-index-name/172862 "2019-03-18T23:28:16Z")

</div>

I was hopping to use an env variable as part of the index name: ... output.elasticsearch: ... index: 'auditbeat-${ENVIRONMENT\_NAME}-%{\[host\]\[name\]}-%{+yyyy.MM.dd}' ... But when setting up the Kibana dashboard manuall…

---

## [Logstash\[2.4.0\] JDBC input plugin not working](https://discuss.elastic.co/t/logstash-2-4-0-jdbc-input-plugin-not-working/65213)

<div class="topic-metadata">

**Author:** [@Sasi\_Kumar](https://discuss.elastic.co/u/Sasi_Kumar)\
**Replies:** 2\
**Last updated:** [November 7, 2016, 12:41pm UTC](https://discuss.elastic.co/t/logstash-2-4-0-jdbc-input-plugin-not-working/65213 "2016-11-07T12:41:21Z")

</div>

Hi all, https://www.elastic.co/blog/logstash-jdbc-input-plugin Am new to logstash, not able to inject the data into elasticsearch from logstash. Elastic was up and running in the port numb…

---

## [A question about sort order query in elasticsearch](https://discuss.elastic.co/t/a-question-about-sort-order-query-in-elasticsearch/51703)

<div class="topic-metadata">

**Author:** [@smile-sunsshine](https://discuss.elastic.co/u/smile-sunsshine)\
**Replies:** 2\
**Last updated:** [June 3, 2016, 11:44am UTC](https://discuss.elastic.co/t/a-question-about-sort-order-query-in-elasticsearch/51703 "2016-06-03T11:44:57Z")

</div>

Hi,I have a problem on sorting order in elasticsearch. When i use elasticsearch to do full-text search,i use text's score as the first order in descending and use update time field as the second order in descending. I …

---

## [Difficulties to parse/filter on xml file](https://discuss.elastic.co/t/difficulties-to-parse-filter-on-xml-file/2649)

<div class="topic-metadata">

**Author:** [@juju](https://discuss.elastic.co/u/juju)\
**Replies:** 2\
**Last updated:** [June 18, 2015, 12:32am UTC](https://discuss.elastic.co/t/difficulties-to-parse-filter-on-xml-file/2649 "2015-06-18T00:32:45Z")

</div>

Hello, I'm trying to parse a xml file (Export of Arbor Alerts. example here http://pastebin.com/jpQWMbjz) but it currently fails. Either Most lines are going unparsed into kibana, either nothing get inserted in elastic…

---

## ["Locale" parameter in query\_string query](https://discuss.elastic.co/t/locale-parameter-in-query-string-query/16667)

<div class="topic-metadata">

**Author:** [@Prashant\_Pal](https://discuss.elastic.co/u/Prashant_Pal)\
**Replies:** 2\
**Last updated:** [April 1, 2014, 7:34am UTC](https://discuss.elastic.co/t/locale-parameter-in-query-string-query/16667 "2014-04-01T07:34:55Z")

</div>

Hi ES users, In ES 1.1.0 there is an add-on parameter "Locale" with query\_string query so what exactly this parameter is all about? source:https://github.com/elasticsearch/elasticsearch/pull/5131 As I didnt g…

---

## [Dashboards and index patterns lost after every upgrade](https://discuss.elastic.co/t/dashboards-and-index-patterns-lost-after-every-upgrade/305155)

<div class="topic-metadata">

**Author:** [@Roberto\_D\_Arco](https://discuss.elastic.co/u/Roberto_D_Arco)\
**Replies:** 4\
**Last updated:** [May 25, 2022, 12:50pm UTC](https://discuss.elastic.co/t/dashboards-and-index-patterns-lost-after-every-upgrade/305155 "2022-05-25T12:50:48Z")

</div>

Hello, I 'inherited' the clusters so I don't know the details of 'how we reached this situation', but I hope that the facts that I have will be enough to have a possible solution. I have 3 very similar clusters: staging…

---

## [Download data from data table visualization using webapi calls](https://discuss.elastic.co/t/download-data-from-data-table-visualization-using-webapi-calls/242793)

<div class="topic-metadata">

**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\
**Replies:** 4\
**Last updated:** [July 28, 2020, 8:52pm UTC](https://discuss.elastic.co/t/download-data-from-data-table-visualization-using-webapi-calls/242793 "2020-07-28T20:52:56Z")

</div>

Hi , I want to fetch my visualize/ dashboard data in Kibana from the API How do I approach this issue ? I need to get the data from data table and would like to use in format and send it to users

---

## [Elasticsearch down after server backup](https://discuss.elastic.co/t/elasticsearch-down-after-server-backup/138614)

<div class="topic-metadata">

**Author:** [@sadeshdrj](https://discuss.elastic.co/u/sadeshdrj)\
**Replies:** 4\
**Last updated:** [July 5, 2018, 2:55am UTC](https://discuss.elastic.co/t/elasticsearch-down-after-server-backup/138614 "2018-07-05T02:55:38Z")

</div>

later i checked in my elasticsearch logs it shows the service has been shutdown, when i run systemctl start elasticsearch.serivce and later systemctl status elasticsearch.serivice, it shows active failed. Jul 05 10:21:…

---

## [Logstash elasticsearch output plugin takes extremely long time](https://discuss.elastic.co/t/logstash-elasticsearch-output-plugin-takes-extremely-long-time/107198)

<div class="topic-metadata">

**Author:** [@shaowencheng](https://discuss.elastic.co/u/shaowencheng)\
**Replies:** 4\
**Last updated:** [November 13, 2017, 4:20pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-plugin-takes-extremely-long-time/107198 "2017-11-13T16:20:26Z")

</div>

Could someone help identify the problem and advice? Thanks in advance. The following logstash stats are obtained from the logstash management API: curl –X GET http://127.0.0.1/\_node/stats Cluster configuration is as f…

---

## [Logstash influxdb](https://discuss.elastic.co/t/logstash-influxdb/72175)

<div class="topic-metadata">

**Author:** [@irom77](https://discuss.elastic.co/u/irom77)\
**Replies:** 4\
**Last updated:** [January 19, 2017, 8:30pm UTC](https://discuss.elastic.co/t/logstash-influxdb/72175 "2017-01-19T20:30:03Z")

</div>

Having problems with setup of logstash-output-influxdb. My config is below: input { udp { port =\> 11514 type =\> "threat" } } filter { if \[type\] =="threat" { …

---

## [How to create a role in order to have access in Kibana 4 for some indexes](https://discuss.elastic.co/t/how-to-create-a-role-in-order-to-have-access-in-kibana-4-for-some-indexes/47898)

<div class="topic-metadata">

**Author:** [@djvidov](https://discuss.elastic.co/u/djvidov)\
**Replies:** 4\
**Last updated:** [April 21, 2016, 8:48am UTC](https://discuss.elastic.co/t/how-to-create-a-role-in-order-to-have-access-in-kibana-4-for-some-indexes/47898 "2016-04-21T08:48:03Z")

</div>

Hello, I have a ELK server into a redhat OS, with kibana version 4.4.1. In order to have access from kibana to indexes I have made this role: config\_user: cluster: monitor indices: '\*': privileges: all …

---

## [What is the difference between a filter clause in a query or a filter](https://discuss.elastic.co/t/what-is-the-difference-between-a-filter-clause-in-a-query-or-a-filter/44232)

<div class="topic-metadata">

**Author:** [@WilliamRoma](https://discuss.elastic.co/u/WilliamRoma)\
**Replies:** 4\
**Last updated:** [March 18, 2016, 11:09am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-a-filter-clause-in-a-query-or-a-filter/44232 "2016-03-18T11:09:11Z")

</div>

I have these two queries First GET propertywebsites3/\_search { "\_source": "city", "query": { "bool": { "filter": { "term": { "city.raw": "Dubai" } } } } } Seond …

---

## [Logstash 2.2.2 Not reading file input](https://discuss.elastic.co/t/logstash-2-2-2-not-reading-file-input/43353)

<div class="topic-metadata">

**Author:** [@mr\_pkd](https://discuss.elastic.co/u/mr_pkd)\
**Replies:** 4\
**Last updated:** [March 6, 2016, 7:42am UTC](https://discuss.elastic.co/t/logstash-2-2-2-not-reading-file-input/43353 "2016-03-06T07:42:29Z")

</div>

New to logstash. I am trying to read a simple input and output it to command window. Logstash version: 2.2.2 Below is my .conf file input { file { path =\> "/home/pdutt/CollPoll/Data/logstash-test-data.…

---

## [Cant stream data from client node to ES after upgrade to 2.1](https://discuss.elastic.co/t/cant-stream-data-from-client-node-to-es-after-upgrade-to-2-1/38391)

<div class="topic-metadata">

**Author:** [@andreynikk](https://discuss.elastic.co/u/andreynikk)\
**Replies:** 4\
**Last updated:** [January 6, 2016, 1:19pm UTC](https://discuss.elastic.co/t/cant-stream-data-from-client-node-to-es-after-upgrade-to-2-1/38391 "2016-01-06T13:19:23Z")

</div>

Hi, we are testing an upgrade to 2.1 and managed to successfully install ES 2.1 with kibana, all the plugins we use, and created a few mock indexes to store the data we receive from the client nodes (we use the same sc…

---

## [Stringify object during reindexing](https://discuss.elastic.co/t/stringify-object-during-reindexing/295900)

<div class="topic-metadata">

**Author:** [@Animesh\_Agarwal](https://discuss.elastic.co/u/Animesh_Agarwal)\
**Replies:** 5\
**Last updated:** [February 1, 2022, 11:38am UTC](https://discuss.elastic.co/t/stringify-object-during-reindexing/295900 "2022-02-01T11:38:30Z")

</div>

Hi Team, I am looking for a solution to convert an object to string during reindexing. I searched for solutions using painless scripting but was unable to do so as it seems painless doesn't support JSON ( might be wrong…

---

## [\[LogStash\] Génération automatique du schéma dans ELS?](https://discuss.elastic.co/t/logstash-generation-automatique-du-schema-dans-els/28029)

<div class="topic-metadata">

**Author:** [@Blured\_Derulb](https://discuss.elastic.co/u/Blured_Derulb)\
**Replies:** 5\
**Last updated:** [August 26, 2015, 7:46am UTC](https://discuss.elastic.co/t/logstash-generation-automatique-du-schema-dans-els/28029 "2015-08-26T07:46:06Z")

</div>

Bonjour, Suite au passage de LogStash avec cette conf input { file { path =\> "C:/logstash-1.5.4/logstash-1.5.4/middle-global.2015-08-15.log" start\_position =\> beginning } } filter { grok…

---

## [Can you segregate visualization based on type in Kibana](https://discuss.elastic.co/t/can-you-segregate-visualization-based-on-type-in-kibana/26129)

<div class="topic-metadata">

**Author:** [@Aditya\_Patel](https://discuss.elastic.co/u/Aditya_Patel)\
**Replies:** 5\
**Last updated:** [July 24, 2015, 5:49am UTC](https://discuss.elastic.co/t/can-you-segregate-visualization-based-on-type-in-kibana/26129 "2015-07-24T05:49:28Z")

</div>

Hi, Suppose i have two types in the same index eg. /index\_1/type\_1 and /index\_2/type\_2 , But when i am trying to plot line chart , but i am not able to segregate type\_1 and type\_2. I want to explore data though having …

---

## [Timestamp format in logstash 1.5.6](https://discuss.elastic.co/t/timestamp-format-in-logstash-1-5-6/79755)

<div class="topic-metadata">

**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\
**Replies:** 8\
**Last updated:** [March 24, 2017, 6:02am UTC](https://discuss.elastic.co/t/timestamp-format-in-logstash-1-5-6/79755 "2017-03-24T06:02:30Z")

</div>

My log have this format 11-30-2016 12:13:57 INFO - Mapped "{\[/transaction/get-account-history\],methods=\[POST\],params=\[\],headers=\[\],consumes=\[\],produces=\[\],custom=\[\]}" then how do i include timestamp format in filter …

---

## [Filebeat: How to convert data from bytes to mb in a Kibana panel?](https://discuss.elastic.co/t/filebeat-how-to-convert-data-from-bytes-to-mb-in-a-kibana-panel/287798)

<div class="topic-metadata">

**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 1:17pm UTC](https://discuss.elastic.co/t/filebeat-how-to-convert-data-from-bytes-to-mb-in-a-kibana-panel/287798 "2021-10-27T13:17:47Z")

</div>

Hey there! I am building a panel in Kibana. My source is a field in Filebeat called network.bytes. Does anyone know how to convert it ( and visualize it ) from bytes to mb or even gb? Thanks

---

## [Convert SQL query to Java Elastic Query](https://discuss.elastic.co/t/convert-sql-query-to-java-elastic-query/103017)

<div class="topic-metadata">

**Author:** [@kedarsdixit](https://discuss.elastic.co/u/kedarsdixit)\
**Replies:** 1\
**Last updated:** [October 6, 2017, 9:47pm UTC](https://discuss.elastic.co/t/convert-sql-query-to-java-elastic-query/103017 "2017-10-06T21:47:50Z")

</div>

I am using Transport client to query ES. Need to convert below sql query to Java Queries: SELECT id,max(timestamp2) FROM table GROUP BY id AVING timestamp1 \> "2017-07-13T21:01:00.013Z" I know TermsQueryBuilder and Aggr…

---

## [Logstash unable to read messages from kafka](https://discuss.elastic.co/t/logstash-unable-to-read-messages-from-kafka/102666)

<div class="topic-metadata">

**Author:** [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 11:59am UTC](https://discuss.elastic.co/t/logstash-unable-to-read-messages-from-kafka/102666 "2017-10-04T11:59:36Z")

</div>

Following is the configuration : input { kafka { codec =\> "json" bootstrap\_servers =\> "10.0.20.50:4000,10.0.20.50:4001,10.0.20.4:4000,10.0.20.4:4001,10.0.20.62:4000,10.0.20.62:4001" group\_id =\> "logstash"…

---

## [Compare two nested fields inside one document](https://discuss.elastic.co/t/compare-two-nested-fields-inside-one-document/94903)

<div class="topic-metadata">

**Author:** [@tokraft](https://discuss.elastic.co/u/tokraft)\
**Replies:** 1\
**Last updated:** [July 30, 2017, 11:40am UTC](https://discuss.elastic.co/t/compare-two-nested-fields-inside-one-document/94903 "2017-07-30T11:40:45Z")

</div>

I have an index with two nested documents. Is there any possibility two compare two fields of the same document that are in different nested objects? This is my sample mapping: "mappings": { "person": { "p…

---

## [Logstash with elasticsearch input loops results and always gives the error " Failed to parse request body "](https://discuss.elastic.co/t/logstash-with-elasticsearch-input-loops-results-and-always-gives-the-error-failed-to-parse-request-body/80947)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 1\
**Last updated:** [April 6, 2017, 1:15pm UTC](https://discuss.elastic.co/t/logstash-with-elasticsearch-input-loops-results-and-always-gives-the-error-failed-to-parse-request-body/80947 "2017-04-06T13:15:38Z")

</div>

I'm getting this error no matter how I tweak my very basic logstash configuration: Error: \[400\] {"error":{"root\_cause":\[{"type":"illegal\_argument\_exception","reason":"Failed to parse request body"}\],"type":"illegal\_argum…

---

## [Extremely large translog files per shard in Elasticsearch 6.2.4](https://discuss.elastic.co/t/extremely-large-translog-files-per-shard-in-elasticsearch-6-2-4/174041)

<div class="topic-metadata">

**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\
**Replies:** 6\
**Last updated:** [April 16, 2019, 8:01am UTC](https://discuss.elastic.co/t/extremely-large-translog-files-per-shard-in-elasticsearch-6-2-4/174041 "2019-04-16T08:01:48Z")

</div>

After upgrading all our production clusters to ES 6.2.4 from ES 5.6.10, we have on two instances on two separate clusters seen translog files for a shard grow much more than the configured 512MB. Interestingly this has o…

---

## [Splitting an existing Single Large Lndex (1tb) in to small without reindexing](https://discuss.elastic.co/t/splitting-an-existing-single-large-lndex-1tb-in-to-small-without-reindexing/87885)

<div class="topic-metadata">

**Author:** [@john.akash](https://discuss.elastic.co/u/john.akash)\
**Replies:** 6\
**Last updated:** [June 22, 2017, 12:48pm UTC](https://discuss.elastic.co/t/splitting-an-existing-single-large-lndex-1tb-in-to-small-without-reindexing/87885 "2017-06-22T12:48:52Z")

</div>

Hi Team, We have an index which having a storage size of 1 TB. We are planning to splitting up the single index in to multiple pieces for getting better performance. Could you please let us know how can we split up the…

---

## [Failed to fetch rules and timelines: Failed to parse field \[filter\]: x\_content\_parse\_exception](https://discuss.elastic.co/t/failed-to-fetch-rules-and-timelines-failed-to-parse-field-filter-x-content-parse-exception/269624)

<div class="topic-metadata">

**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\
**Replies:** 2\
**Last updated:** [April 29, 2021, 3:42pm UTC](https://discuss.elastic.co/t/failed-to-fetch-rules-and-timelines-failed-to-parse-field-filter-x-content-parse-exception/269624 "2021-04-29T15:42:03Z")

</div>

I am unable to find what went wrong. Can anyone help me out ? PS: 1)Not able to see pre-configured rules and customised one(for superuser role) 2)No alert is getting triggered

---

## [How to connect ElasticSearch from other machine or same machine using IP address instead of localhost](https://discuss.elastic.co/t/how-to-connect-elasticsearch-from-other-machine-or-same-machine-using-ip-address-instead-of-localhost/187148)

<div class="topic-metadata">

**Author:** [@NAHA](https://discuss.elastic.co/u/NAHA)\
**Replies:** 2\
**Last updated:** [June 24, 2019, 2:09pm UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-from-other-machine-or-same-machine-using-ip-address-instead-of-localhost/187148 "2019-06-24T14:09:31Z")

</div>

Hi , I am using ElasticSearch version 6.7.0 and it works fine when I call http://localhost:9200/ { "name" : "ea31Cfe", "cluster\_name" : "elasticsearch", "cluster\_uuid" : "K1KpeRbhSYKa0UFEaqVKrg", "version" : { …

---

## [Is it possible to parse and store a field as an array of objects in Elasticsearch?](https://discuss.elastic.co/t/is-it-possible-to-parse-and-store-a-field-as-an-array-of-objects-in-elasticsearch/148566)

<div class="topic-metadata">

**Author:** [@anra137](https://discuss.elastic.co/u/anra137)\
**Replies:** 2\
**Last updated:** [September 18, 2018, 7:54am UTC](https://discuss.elastic.co/t/is-it-possible-to-parse-and-store-a-field-as-an-array-of-objects-in-elasticsearch/148566 "2018-09-18T07:54:03Z")

</div>

My logline would look like this 2018-03-09 16:12:20,315 INFO \[com.sample.teste.TestClass\] (https-express.sample.com-433-8) {my-name-1=my-value-1, my-name-2=my-value-2} Testing logger And I have pipeline config as filt…

---

## [File beat multiple path to multiple end points](https://discuss.elastic.co/t/file-beat-multiple-path-to-multiple-end-points/147338)

<div class="topic-metadata">

**Author:** [@vasudevan](https://discuss.elastic.co/u/vasudevan)\
**Replies:** 2\
**Last updated:** [September 14, 2018, 11:31am UTC](https://discuss.elastic.co/t/file-beat-multiple-path-to-multiple-end-points/147338 "2018-09-14T11:31:37Z")

</div>

I wanted to grab logs from different path and then will send it to different end points of logstash. And I am following your official document for the same(https://www.elastic.co/guide/en/beats/filebeat/current/filebeat…

---

## [Advantages of base64 encoded content in ingest attachment plugin](https://discuss.elastic.co/t/advantages-of-base64-encoded-content-in-ingest-attachment-plugin/126452)

<div class="topic-metadata">

**Author:** [@Hemanth\_Gowda](https://discuss.elastic.co/u/Hemanth_Gowda)\
**Replies:** 2\
**Last updated:** [April 3, 2018, 2:44am UTC](https://discuss.elastic.co/t/advantages-of-base64-encoded-content-in-ingest-attachment-plugin/126452 "2018-04-03T02:44:50Z")

</div>

Hi, I am using ingest attachment plugin to index my PDF files.In the query during ingestion the source field is expecting base64 content.Below are my questions. Why we need to pass base64 content as source to plugin.Ho…

---

## [Kibana api](https://discuss.elastic.co/t/kibana-api/68551)

<div class="topic-metadata">

**Author:** [@arnel.m.capendit](https://discuss.elastic.co/u/arnel.m.capendit)\
**Replies:** 2\
**Last updated:** [December 12, 2016, 4:34am UTC](https://discuss.elastic.co/t/kibana-api/68551 "2016-12-12T04:34:48Z")

</div>

Hello Team, Seeking some advice here, We are trying to make a JSON API that we wanted to share to our client for them to consume our data. However, API's available on devtools of KIBANA are not web based URL. Can you h…

---

## [Grok Filter with alternative](https://discuss.elastic.co/t/grok-filter-with-alternative/38858)

<div class="topic-metadata">

**Author:** [@golauty](https://discuss.elastic.co/u/golauty)\
**Replies:** 2\
**Last updated:** [January 12, 2016, 5:50am UTC](https://discuss.elastic.co/t/grok-filter-with-alternative/38858 "2016-01-12T05:50:18Z")

</div>

Hi, i have following GrokFilter extract: \[%{WORD:result}\]\\s+\[Warnings: %{WORD:WarningCount}\]|\[%{WORD:result}\]\\s\*\[Warnings: %{WORD:WarningCount}\]\\s\*\[Errors: %{WORD:ErrorCount}\]\\s\*\[Exceptions: %{WORD:ExceptionCount}\] F…

---

## [Restore snapshot to new server](https://discuss.elastic.co/t/restore-snapshot-to-new-server/301598)

<div class="topic-metadata">

**Author:** [@Rizky\_Hudha](https://discuss.elastic.co/u/Rizky_Hudha)\
**Replies:** 3\
**Last updated:** [April 5, 2022, 9:25am UTC](https://discuss.elastic.co/t/restore-snapshot-to-new-server/301598 "2022-04-05T09:25:51Z")

</div>

hello i want to ask, is it possible to restore snapshot from old server to new server

---

## [How to validate the data after parsing with KV Filter](https://discuss.elastic.co/t/how-to-validate-the-data-after-parsing-with-kv-filter/70811)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 3\
**Last updated:** [January 9, 2017, 10:26am UTC](https://discuss.elastic.co/t/how-to-validate-the-data-after-parsing-with-kv-filter/70811 "2017-01-09T10:26:19Z")

</div>

I have log messages like: 2017-01-06 19:27:53,893 INFO \[\[ACTIVE\] ExecuteThread: '10' for queue: 'weblogic.kernel.Default (self-tuning)'\] com.symantec.olp.sas.log.SummaryLogAspect - {country=JP, svid=182, typ=sassum, vi…

---

## [Sorting reverse nested aggregations](https://discuss.elastic.co/t/sorting-reverse-nested-aggregations/55190)

<div class="topic-metadata">

**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\
**Replies:** 3\
**Last updated:** [July 11, 2016, 3:08pm UTC](https://discuss.elastic.co/t/sorting-reverse-nested-aggregations/55190 "2016-07-11T15:08:10Z")

</div>

Hi all, I would like to sort a list of nested aggregations by their document count (and not terms count). This can be done using a reverse nested aggregation. More than a year ago I've asked this question on the old ma…

---

## [Filebeat 5.0.0-alpha3 not parsing the JSON messages, it shows up as a string](https://discuss.elastic.co/t/filebeat-5-0-0-alpha3-not-parsing-the-json-messages-it-shows-up-as-a-string/53679)

<div class="topic-metadata">

**Author:** [@keya](https://discuss.elastic.co/u/keya)\
**Replies:** 3\
**Last updated:** [June 28, 2016, 10:15am UTC](https://discuss.elastic.co/t/filebeat-5-0-0-alpha3-not-parsing-the-json-messages-it-shows-up-as-a-string/53679 "2016-06-28T10:15:05Z")

</div>

Hi, I am sending logs from Filebeat to Elasticsearch directly. My logs are in JSON format and some have nested JSON objects too. I am using Filebeat 5.0.0-alpha3 version for parsing the log files, but I still see the …

---

## [Fluentd sending to Logstash leads to lot of garbage data](https://discuss.elastic.co/t/fluentd-sending-to-logstash-leads-to-lot-of-garbage-data/26848)

<div class="topic-metadata">

**Author:** [@Zeal\_Vora](https://discuss.elastic.co/u/Zeal_Vora)\
**Replies:** 3\
**Last updated:** [August 7, 2015, 1:44am UTC](https://discuss.elastic.co/t/fluentd-sending-to-logstash-leads-to-lot-of-garbage-data/26848 "2015-08-07T01:44:16Z")

</div>

Hi We have fluentd which is sending logs from client server to our main ELK Server. In the Kibana, when i read the logs, there is lot of garbage data that comes along with the message. On the Logstash log, server w…

---

## [Is there a way to do scan with limit?](https://discuss.elastic.co/t/is-there-a-way-to-do-scan-with-limit/23076)

<div class="topic-metadata">

**Author:** [@Chen\_Wang](https://discuss.elastic.co/u/Chen_Wang)\
**Replies:** 3\
**Last updated:** [April 3, 2015, 8:25pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-do-scan-with-limit/23076 "2015-04-03T20:25:10Z")

</div>

I want to for example, fast get 1m out of 5m records. I am currently using: SearchResponse scrollResp = this.client .prepareSearch(esQuery.indices) .addFields(esQuery.fields) .setSearchType(SearchType.SCA…

---

## [Force merge reduced performance](https://discuss.elastic.co/t/force-merge-reduced-performance/163838)

<div class="topic-metadata">

**Author:** [@nuwancs](https://discuss.elastic.co/u/nuwancs)\
**Replies:** 1\
**Last updated:** [January 11, 2019, 7:16am UTC](https://discuss.elastic.co/t/force-merge-reduced-performance/163838 "2019-01-11T07:16:24Z")

</div>

Hi Team, I forced merged my index to reduce segment size from 82 to 5, with the hope of increasing the search performance. Dashboard load time for the same index was as follows, 82 segments - 10 seconds 5 segments - …

---

## [Cluster status RED for one index](https://discuss.elastic.co/t/cluster-status-red-for-one-index/44871)

<div class="topic-metadata">

**Author:** [@irumman](https://discuss.elastic.co/u/irumman)\
**Replies:** 1\
**Last updated:** [March 18, 2016, 10:16pm UTC](https://discuss.elastic.co/t/cluster-status-red-for-one-index/44871 "2016-03-18T22:16:32Z")

</div>

Hi, This is first post here as I started working with ES recently. I am using ES of AWS where I have daily log indexing on ES. Currently my cluster is status RED. I found that one of the index is read and the status of…

---

## [External URL links](https://discuss.elastic.co/t/external-url-links/452)

<div class="topic-metadata">

**Author:** [@tba](https://discuss.elastic.co/u/tba)\
**Replies:** 1\
**Last updated:** [May 11, 2015, 3:42pm UTC](https://discuss.elastic.co/t/external-url-links/452 "2015-05-11T15:42:38Z")

</div>

Hello, Can you please tell me if Kibana4 latest version (4.0.2) supports the following feature: When the value of a field contains an url, make it clickable Thanks!

---

## [Set password during deployment elasticsearch for my app](https://discuss.elastic.co/t/set-password-during-deployment-elasticsearch-for-my-app/286548)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 4\
**Last updated:** [October 13, 2021, 1:53am UTC](https://discuss.elastic.co/t/set-password-during-deployment-elasticsearch-for-my-app/286548 "2021-10-13T01:53:04Z")

</div>

I am running my app as a container that need to access Elasticsearch deployed as container also, so in my app settings yaml i have to enter credentials and url for elastic that will be deployed also in docker. How can i…

---

## [Connect elastic search or Kibana with SQL database](https://discuss.elastic.co/t/connect-elastic-search-or-kibana-with-sql-database/269189)

<div class="topic-metadata">

**Author:** [@pooja1](https://discuss.elastic.co/u/pooja1)\
**Replies:** 4\
**Last updated:** [April 5, 2021, 6:03am UTC](https://discuss.elastic.co/t/connect-elastic-search-or-kibana-with-sql-database/269189 "2021-04-05T06:03:22Z")

</div>

I have a database that is build in MYSQL. I want to connect it with Kibana so that I can access the data by a query Please let me know how should I do it?

---

## [Cannot find logs for .NET agent](https://discuss.elastic.co/t/cannot-find-logs-for-net-agent/211350)

<div class="topic-metadata">

**Author:** [@JValenzani](https://discuss.elastic.co/u/JValenzani)\
**Replies:** 4\
**Last updated:** [December 12, 2019, 4:05pm UTC](https://discuss.elastic.co/t/cannot-find-logs-for-net-agent/211350 "2019-12-12T16:05:47Z")

</div>

I've configured the APM agent to monitor a running application on IIS 7. I can't see the service in the APM server, so i thinks there's a problem somewhere. Looking around the forum i found this answer (https://discuss.e…

---

## [Elastic APM js agent for angular throws console error Cannot read property 'events'](https://discuss.elastic.co/t/elastic-apm-js-agent-for-angular-throws-console-error-cannot-read-property-events/202405)

<div class="topic-metadata">

**Author:** [@Kartheek\_Mannepalli](https://discuss.elastic.co/u/Kartheek_Mannepalli)\
**Replies:** 4\
**Last updated:** [October 10, 2019, 12:49am UTC](https://discuss.elastic.co/t/elastic-apm-js-agent-for-angular-throws-console-error-cannot-read-property-events/202405 "2019-10-10T00:49:00Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.4.…

---

## [\[IMPROVEMENT REQUEST\] Disk Available in Monitoring can be misleading](https://discuss.elastic.co/t/improvement-request-disk-available-in-monitoring-can-be-misleading/119032)

<div class="topic-metadata">

**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\
**Replies:** 4\
**Last updated:** [March 1, 2018, 2:34pm UTC](https://discuss.elastic.co/t/improvement-request-disk-available-in-monitoring-can-be-misleading/119032 "2018-03-01T14:34:27Z")

</div>

Feature request Describe the feature: Improve the "Disk Available" value on the main "Monitoring" page, by only counting the free disk space on nodes that have node.data=true in their config. Elasticsearch version: Ver…

---

## [How to create visualization group by part of file name?](https://discuss.elastic.co/t/how-to-create-visualization-group-by-part-of-file-name/74414)

<div class="topic-metadata">

**Author:** [@vinsse2001](https://discuss.elastic.co/u/vinsse2001)\
**Replies:** 4\
**Last updated:** [February 9, 2017, 4:18pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-group-by-part-of-file-name/74414 "2017-02-09T16:18:18Z")

</div>

Hi, I'm trying to create a visualization in Kibana (v4.6.1) so as to list log files by part of their names. For example, I can view this files in Kibana : /path1/path2/path3/myapp1.log.2017-02-07 =\> 1000 lines /path1…

[Previous page](https://discuss.elastic.co/top.md?page=1074&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1076&per_page=50&period=all)
