# Top **URL:** https://discuss.elastic.co/top.md?page=1076&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1077 --- ## [Kibana realm-specific login URL (or another way to pre-select the realm)?](https://discuss.elastic.co/t/kibana-realm-specific-login-url-or-another-way-to-pre-select-the-realm/263533)
**Author:** [@ngrigoriev](https://discuss.elastic.co/u/ngrigoriev)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 9:07pm UTC](https://discuss.elastic.co/t/kibana-realm-specific-login-url-or-another-way-to-pre-select-the-realm/263533 "2021-02-09T21:07:45Z")
Hi! I am trying to define several authc providers/realms in Elastic + Kibana but I do not want my clients to select a realm. Instead, I would like to drive them to a particular one that corresponds to them. Is there a w… --- ## [Is this a good way to combine 'Index per Time Frame' amd 'Index per User'?](https://discuss.elastic.co/t/is-this-a-good-way-to-combine-index-per-time-frame-amd-index-per-user/59637)
**Author:** [@perryn](https://discuss.elastic.co/u/perryn)\ **Replies:** 5\ **Last updated:** [September 6, 2016, 12:25am UTC](https://discuss.elastic.co/t/is-this-a-good-way-to-combine-index-per-time-frame-amd-index-per-user/59637 "2016-09-06T00:25:12Z")
Hello, I want to provide different users with different levels of data longevity. ( eg user a only pays me to keep 1 month of data but user b want to keep 12 months) In order to make this manageable I am planning to … --- ## [ES OOMing and not triggering cache circuit breakers, using LocalManualCache](https://discuss.elastic.co/t/es-ooming-and-not-triggering-cache-circuit-breakers-using-localmanualcache/22101)
**Author:** [@Wilfred\_Hughes](https://discuss.elastic.co/u/Wilfred_Hughes)\ **Replies:** 5\ **Last updated:** [June 24, 2015, 3:44pm UTC](https://discuss.elastic.co/t/es-ooming-and-not-triggering-cache-circuit-breakers-using-localmanualcache/22101 "2015-06-24T15:44:32Z")
Hi all I have an ES 1.2.4 cluster which is occasionally running out of heap. I have ES\_HEAP\_SIZE=31G and according to the heap dump generated, my biggest memory users were: org.elasticsearch.common.cache.LocalC… --- ## [JVM very greedy with memory. How do I get it to shrink when possible?](https://discuss.elastic.co/t/jvm-very-greedy-with-memory-how-do-i-get-it-to-shrink-when-possible/348657)
**Author:** [@Vulume](https://discuss.elastic.co/u/Vulume)\ **Replies:** 2\ **Last updated:** [December 6, 2023, 1:57pm UTC](https://discuss.elastic.co/t/jvm-very-greedy-with-memory-how-do-i-get-it-to-shrink-when-possible/348657 "2023-12-06T13:57:37Z")
I want my JVM to give back memory to the OS if it's not using it. I don't care about performance. When I set -Xms128m -Xmx4g, I see the JVM's memory usage grow while indexing and searching, but it never shrinks again af… --- ## [Auditbeat: specified rules don't apply](https://discuss.elastic.co/t/auditbeat-specified-rules-dont-apply/146519)
**Author:** [@Guillaume\_Bettayeb](https://discuss.elastic.co/u/Guillaume_Bettayeb)\ **Replies:** 2\ **Last updated:** [September 5, 2018, 11:28am UTC](https://discuss.elastic.co/t/auditbeat-specified-rules-dont-apply/146519 "2018-09-05T11:28:05Z")
Hi Everyone, Not sure what I am doing wrong here but it seems like auditd does not apply the auditd rules I defined. our Auditbeat uses both available modules, auditd and file\_integrity. and it looks like only the file… --- ## [Add links to kibana dashboard panels](https://discuss.elastic.co/t/add-links-to-kibana-dashboard-panels/135097)
**Author:** [@jan-niklaas](https://discuss.elastic.co/u/jan-niklaas)\ **Replies:** 1\ **Last updated:** [June 8, 2018, 4:44pm UTC](https://discuss.elastic.co/t/add-links-to-kibana-dashboard-panels/135097 "2018-06-08T16:44:29Z")
I have recently build a feature for Kibana 6.1.4, where you can add a dashboard link to the panel header. \[image\] When you add a link the panel title becomes clickable and opens the linked dashboard. It's a pretty simp… --- ## [Akamai logs to logstash](https://discuss.elastic.co/t/akamai-logs-to-logstash/185595)
**Author:** [@dheeraj\_kumar](https://discuss.elastic.co/u/dheeraj_kumar)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 9:05am UTC](https://discuss.elastic.co/t/akamai-logs-to-logstash/185595 "2019-06-14T09:05:50Z")
Hi, Could anyone help me with the basic logstash config to parse Akamai logs to Elasticsearch. Any help would be much appreciated, i have log files on FTP which i can download locally, looking for approach to handle th… --- ## ["Unknown" logs in observability overview](https://discuss.elastic.co/t/unknown-logs-in-observability-overview/273240)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 3\ **Last updated:** [May 20, 2021, 8:29am UTC](https://discuss.elastic.co/t/unknown-logs-in-observability-overview/273240 "2021-05-20T08:29:58Z")
Good morning. When I click on the menu called "Observability Overview" it shows me an image with "Logs per minute rate" but all the bars in this image appear as "Unknown". I was searching in this forum and I could find a… --- ## [Elasticsearch not showing data to Kibana on Centos 8](https://discuss.elastic.co/t/elasticsearch-not-showing-data-to-kibana-on-centos-8/251202)
**Author:** [@Taufik\_Maulana](https://discuss.elastic.co/u/Taufik_Maulana)\ **Replies:** 8\ **Last updated:** [October 7, 2020, 7:43am UTC](https://discuss.elastic.co/t/elasticsearch-not-showing-data-to-kibana-on-centos-8/251202 "2020-10-07T07:43:12Z")
Hello everyone, I've just install my Elasticsearch, Kibana, and FIlebeat on my Centos 8 (fresh minimal install). I also have configured xpack basic on each node. But when i wanted to see data on Discover tab on Kibana,… --- ## [Multiple separators when importing CSV files in logstash](https://discuss.elastic.co/t/multiple-separators-when-importing-csv-files-in-logstash/177722)
**Author:** [@flavienbwk](https://discuss.elastic.co/u/flavienbwk)\ **Replies:** 3\ **Last updated:** [April 20, 2019, 6:50pm UTC](https://discuss.elastic.co/t/multiple-separators-when-importing-csv-files-in-logstash/177722 "2019-04-20T18:50:40Z")
Hello, I have a bunch of CSV files I want to import with each, data of this format : first\_name;last\_name The problem is that sometimes, the format will be : first\_name:last\_name (the ; is :) Is there a way to provi… --- ## [How many Primary and Replica shards will be allotted for a Dynamic elasticsearch Index (ex:index =\> "sample-%(YYYY.MM.DD)")](https://discuss.elastic.co/t/how-many-primary-and-replica-shards-will-be-allotted-for-a-dynamic-elasticsearch-index-ex-index-sample-yyyy-mm-dd/97460)
**Author:** [@rajesh](https://discuss.elastic.co/u/rajesh)\ **Replies:** 8\ **Last updated:** [August 20, 2017, 10:17pm UTC](https://discuss.elastic.co/t/how-many-primary-and-replica-shards-will-be-allotted-for-a-dynamic-elasticsearch-index-ex-index-sample-yyyy-mm-dd/97460 "2017-08-20T22:17:43Z")
Hi, My logstash is indexing to a dynamic index “sample-%(YYYY.MM.DD)”). I have assigned Primary Shards and Replica shards as 3 and 2 respectively. But when logstash sends to the dynamic index it’s creating an index(sam… --- ## [Benchmarking Elasticsearch vs InfluxDB](https://discuss.elastic.co/t/benchmarking-elasticsearch-vs-influxdb/84706)
**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\ **Replies:** 3\ **Last updated:** [May 5, 2017, 3:10pm UTC](https://discuss.elastic.co/t/benchmarking-elasticsearch-vs-influxdb/84706 "2017-05-05T15:10:32Z")
Bonjour, J'ai défini un nouveau mapping pour utiliser Elasticsearch (v 5.3.2) comme base de données chronologique. Mon but est de réaliser un Benchmark entre Elasticsearch et InfluxDB. Je veux comparer leurs query perf… --- ## [Kibana json aggregration query not working](https://discuss.elastic.co/t/kibana-json-aggregration-query-not-working/44098)
**Author:** [@sivakalyan](https://discuss.elastic.co/u/sivakalyan)\ **Replies:** 3\ **Last updated:** [March 11, 2016, 10:44pm UTC](https://discuss.elastic.co/t/kibana-json-aggregration-query-not-working/44098 "2016-03-11T22:44:55Z")
Hi, I'm trying examples from https://www.elastic.co/guide/en/elasticsearch/reference/current/\_executing\_aggregations.html to run searches on the banking data. The below json query works fine when I query elasticsear… --- ## [FATAL CLI ERROR YAMLException: can not read a block mapping entry; a multiline key may not be an implicit key at line 32, column 1:](https://discuss.elastic.co/t/fatal-cli-error-yamlexception-can-not-read-a-block-mapping-entry-a-multiline-key-may-not-be-an-implicit-key-at-line-32-column-1/276796)
**Author:** [@bera5186](https://discuss.elastic.co/u/bera5186)\ **Replies:** 0\ **Last updated:** [June 23, 2021, 1:30pm UTC](https://discuss.elastic.co/t/fatal-cli-error-yamlexception-can-not-read-a-block-mapping-entry-a-multiline-key-may-not-be-an-implicit-key-at-line-32-column-1/276796 "2021-06-23T13:30:31Z")
I am getting this error while running kibana and inspecting kibana logs with journalctl -u kibana I am starting kibana with sudo systemctl start kibana Kibana version 7.10 link to my kibana.yml    /var/log… --- ## [Logstash filter condition statement not working as expected](https://discuss.elastic.co/t/logstash-filter-condition-statement-not-working-as-expected/114424)
**Author:** [@shankar1](https://discuss.elastic.co/u/shankar1)\ **Replies:** 6\ **Last updated:** [January 8, 2018, 8:17am UTC](https://discuss.elastic.co/t/logstash-filter-condition-statement-not-working-as-expected/114424 "2018-01-08T08:17:35Z")
Version Used: Logstash 5.5.0 Data Flow -\> Filebeat (5.5.0)\_ Logstash 5.5.0\_Elasticsearch 5.5.0 Input Case1: \\\\\Data 1\ \\\\ Input Case 2: \\ **Author:** [@ddpaimon](https://discuss.elastic.co/u/ddpaimon)\ **Replies:** 6\ **Last updated:** [December 16, 2016, 8:19am UTC](https://discuss.elastic.co/t/transportclient-in-scala/69246 "2016-12-16T08:19:38Z") How to create transport client in Scala for Elasticsearch 5.1.1 version? I try to create class extends on abstract class TransportClient named PreBuiltTransportClient (like in docs). class PreBuiltTransportClient(set… --- ## [Filebeat not sending ModSecurity log files](https://discuss.elastic.co/t/filebeat-not-sending-modsecurity-log-files/191224)
**Author:** [@maxxer](https://discuss.elastic.co/u/maxxer)\ **Replies:** 4\ **Last updated:** [July 23, 2019, 8:53am UTC](https://discuss.elastic.co/t/filebeat-not-sending-modsecurity-log-files/191224 "2019-07-23T08:53:56Z")
Hi. I've configured ModSecurity to generate JSON files this way: SecAuditEngine On SecAuditLogType Concurrent SecAuditLogFormat JSON SecAuditLogStorageDir /data/nginx/log/modsecurity This means ModSec will generate a … --- ## [How to create logstash-\* index pattern to see syslog messages](https://discuss.elastic.co/t/how-to-create-logstash-index-pattern-to-see-syslog-messages/277705)
**Author:** [@ankan1979](https://discuss.elastic.co/u/ankan1979)\ **Replies:** 2\ **Last updated:** [July 7, 2021, 5:56am UTC](https://discuss.elastic.co/t/how-to-create-logstash-index-pattern-to-see-syslog-messages/277705 "2021-07-07T05:56:07Z")
Hi, I am very new to ILK stack. I am forwarding syslog messages from my routers and switches to Logstash and want to see those in Kibana. When I am trying to add index pattern named logstash-\* from Kibana portal it's no… --- ## [Logstash cannot open file located in /etc/logstash](https://discuss.elastic.co/t/logstash-cannot-open-file-located-in-etc-logstash/162855)
**Author:** [@bigdamhero](https://discuss.elastic.co/u/bigdamhero)\ **Replies:** 2\ **Last updated:** [January 4, 2019, 12:59pm UTC](https://discuss.elastic.co/t/logstash-cannot-open-file-located-in-etc-logstash/162855 "2019-01-04T12:59:03Z")
I am trying (for the first time) to get an instance of logstash (running on ubuntu) to connect with my secured cluster. I am confused a bit on the security certificate formats but I am receiving this error so I am worki… --- ## [Nested aggregation on ctx.payload.hits](https://discuss.elastic.co/t/nested-aggregation-on-ctx-payload-hits/124584)
**Author:** [@erickiersky](https://discuss.elastic.co/u/erickiersky)\ **Replies:** 2\ **Last updated:** [March 21, 2018, 5:57pm UTC](https://discuss.elastic.co/t/nested-aggregation-on-ctx-payload-hits/124584 "2018-03-21T17:57:45Z")
Hello, Elastic Fans! I am trying to use this example as a starting point: The changes I am making are detecting a steep rise, not a drop. And for the input, I need to aggregate a bucket that is simply the average doc… --- ## [How to list all index patterns using DevTools](https://discuss.elastic.co/t/how-to-list-all-index-patterns-using-devtools/295725)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 5:15pm UTC](https://discuss.elastic.co/t/how-to-list-all-index-patterns-using-devtools/295725 "2022-01-28T17:15:36Z")
Hi, Is there a GET command that I can run in Kibana's dev tools console that will list all my index patterns and their IDs? I'm trying to delete some index patterns but I believe I need to delete them by ID. I'm trying… --- ## [I get error with Logstash: IllegalStateException](https://discuss.elastic.co/t/i-get-error-with-logstash-illegalstateexception/276486)
**Author:** [@an\_dinh](https://discuss.elastic.co/u/an_dinh)\ **Replies:** 1\ **Last updated:** [June 21, 2021, 12:09pm UTC](https://discuss.elastic.co/t/i-get-error-with-logstash-illegalstateexception/276486 "2021-06-21T12:09:02Z")
Here is my logstash.conf: input { mongodb{ uri =\> 'mongodb://localhost:27017/vnExpressCrawler?authSource=vnExpressCrawler' placeholder\_db\_dir =\> '/opt/logstash-mongodb/' placeholder\_db\_name =\> 'logstash\_s… --- ## [Can java.util.regex.Pattern be used in a painless script?](https://discuss.elastic.co/t/can-java-util-regex-pattern-be-used-in-a-painless-script/213789)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 10:29am UTC](https://discuss.elastic.co/t/can-java-util-regex-pattern-be-used-in-a-painless-script/213789 "2020-01-08T10:29:43Z")
Is there a way to use java.util.regex.Pattern in a painless script? I get an error: curl -i -XPOST http://localhost:9200/\_scripts/painless/\_execute -H 'Content-type: application/json' --data-binary '{"script": {"source"… --- ## [Augment the "font-size" value for labels in diagrams](https://discuss.elastic.co/t/augment-the-font-size-value-for-labels-in-diagrams/140668)
**Author:** [@Jawhar\_Mbarek](https://discuss.elastic.co/u/Jawhar_Mbarek)\ **Replies:** 1\ **Last updated:** [July 19, 2018, 9:47pm UTC](https://discuss.elastic.co/t/augment-the-font-size-value-for-labels-in-diagrams/140668 "2018-07-19T21:47:09Z")
the needed feature: Please can Someone provide me with a Plugin or solution to configure the font-size labels for the diagrams. a specific use case for the feature: The labels on the X, Y axes look very small, and I n… --- ## [Reindex data with new field patterns?](https://discuss.elastic.co/t/reindex-data-with-new-field-patterns/65439)
**Author:** [@rogerwang](https://discuss.elastic.co/u/rogerwang)\ **Replies:** 1\ **Last updated:** [November 9, 2016, 6:53am UTC](https://discuss.elastic.co/t/reindex-data-with-new-field-patterns/65439 "2016-11-09T06:53:30Z")
Hello, I have been gone trough most documents about how to reindex Elasticsearch data. However, I am still not quite satified with the result I am getting. Question: sometimes we would like to change the logstash grok … --- ## [Using filename from filebeat in index pattern](https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602)
**Author:** [@Anubhav\_Bimbisariye](https://discuss.elastic.co/u/Anubhav_Bimbisariye)\ **Replies:** 1\ **Last updated:** [September 29, 2016, 9:52am UTC](https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602 "2016-09-29T09:52:16Z")
paths: - /var/log/\*.log The output is elasticsearch. the logs are already formatted in json, I just want index to reflect where the logs come from. In my scenario, anyone may put a file abcd.log in the logs folde… --- ## [Cannot change DocValues type from SORTED\_SET to BINARY](https://discuss.elastic.co/t/cannot-change-docvalues-type-from-sorted-set-to-binary/39520)
**Author:** [@justnj](https://discuss.elastic.co/u/justnj)\ **Replies:** 1\ **Last updated:** [January 19, 2016, 9:37am UTC](https://discuss.elastic.co/t/cannot-change-docvalues-type-from-sorted-set-to-binary/39520 "2016-01-19T09:37:41Z")
Pls tell why this error occured how to diagonose and rectify cannot change DocValues type from SORTED\_SET to BINARY --- ## [Direct buffer memory problem on master Discovery](https://discuss.elastic.co/t/direct-buffer-memory-problem-on-master-discovery/18676)
**Author:** [@Pedro\_Jeronimo](https://discuss.elastic.co/u/Pedro_Jeronimo)\ **Replies:** 7\ **Last updated:** [July 16, 2014, 5:55pm UTC](https://discuss.elastic.co/t/direct-buffer-memory-problem-on-master-discovery/18676 "2014-07-16T17:55:30Z")
I have a cluster of 2 ES machines with a lot of indexing, not so much searching. I'm using 2 EC2 machines with 30gb of RAM and I'm running ES on each with 12gb heap (ES\_HEAP\_SIZE) and one of them (let's call it logs1… --- ## [Elastic Timeout not working](https://discuss.elastic.co/t/elastic-timeout-not-working/314791)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 5\ **Last updated:** [September 21, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-timeout-not-working/314791 "2022-09-21T07:18:47Z")
When I am passing the timeout value 1ms in the request, still the result is coming with took value being more than 1ms. How does this timeout value work? Request - GET dco-preview/\_search { "timeout": "10ms", "qu… --- ## [SRE-Ansible To Install ELK Stack](https://discuss.elastic.co/t/sre-ansible-to-install-elk-stack/274086)
**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 8:13am UTC](https://discuss.elastic.co/t/sre-ansible-to-install-elk-stack/274086 "2021-05-28T08:13:24Z")
Our task is related to SRE-Ansible To Install ELK Stack i.e. Write an ansible script to install ELK stack and filebeat locally. To do so, create a directory structure as mentioned below ansible\_ELK |\_site.yml |\_… --- ## [Restrict specific time range](https://discuss.elastic.co/t/restrict-specific-time-range/261496)
**Author:** [@andyet921](https://discuss.elastic.co/u/andyet921)\ **Replies:** 5\ **Last updated:** [January 21, 2021, 8:41am UTC](https://discuss.elastic.co/t/restrict-specific-time-range/261496 "2021-01-21T08:41:10Z")
Hello all, is there any method that I can restrict specific time range? I want to restrict time range from yesterday 12 p.m. to today 12:00 p.m. so that my Kibana dashboard can show the specific time range's data. Thank… --- ## [Issues while using SQL queries with curl](https://discuss.elastic.co/t/issues-while-using-sql-queries-with-curl/223118)
**Author:** [@tarund](https://discuss.elastic.co/u/tarund)\ **Replies:** 5\ **Last updated:** [March 12, 2020, 3:10pm UTC](https://discuss.elastic.co/t/issues-while-using-sql-queries-with-curl/223118 "2020-03-12T15:10:42Z")
Hi there, I am trying to export data out of Elasticsearch into csv files using SQL queries through curl. Most of the basic queries work fine, but when I try to use LIKE operator or CASE WHEN operators, I get exceptions.… --- ## [Segments memory increases after search](https://discuss.elastic.co/t/segments-memory-increases-after-search/33633)
**Author:** [@Alex\_F](https://discuss.elastic.co/u/Alex_F)\ **Replies:** 5\ **Last updated:** [December 17, 2015, 2:13pm UTC](https://discuss.elastic.co/t/segments-memory-increases-after-search/33633 "2015-12-17T14:13:51Z")
Hello everyone! Does anybody know why segments memory increases (column 'sm' in \_cat API) after searches. For example, I have the next stat before searches: n hp hm fm fe fcm sm … --- ## [ES integration with couchdb on windows](https://discuss.elastic.co/t/es-integration-with-couchdb-on-windows/4044)
**Author:** [@jason](https://discuss.elastic.co/u/jason)\ **Replies:** 5\ **Last updated:** [March 6, 2011, 7:48pm UTC](https://discuss.elastic.co/t/es-integration-with-couchdb-on-windows/4044 "2011-03-06T19:48:43Z")
Hello everyone, I installed elasticsearch and couchdb on Windows, and have followed the instructions on their website: http://www.elasticsearch.org/tutorials/2010/08/01/couchb-integration.html I opened dos c… --- ## [Index name for modules](https://discuss.elastic.co/t/index-name-for-modules/194893)
**Author:** [@tenney](https://discuss.elastic.co/u/tenney)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 9:37am UTC](https://discuss.elastic.co/t/index-name-for-modules/194893 "2019-08-14T09:37:56Z")
Using filebeat 7.3.0 on ubuntu and can't seem to change the index name for any modules that get enabled. All I want to do is make the indexes that get created be done so monthly names instead of daily. I would expect t… --- ## [Getting errors while running tests for plugin](https://discuss.elastic.co/t/getting-errors-while-running-tests-for-plugin/74300)
**Author:** [@mkelkar](https://discuss.elastic.co/u/mkelkar)\ **Replies:** 3\ **Last updated:** [March 20, 2017, 11:08am UTC](https://discuss.elastic.co/t/getting-errors-while-running-tests-for-plugin/74300 "2017-03-20T11:08:44Z")
Hi All, I am trying to write tests for my logstash plugin. When I try to run rspec, this is what I get bundle exec rspec NameError: missing class name (\`org.apache.logging.log4j.Level') method\_missing at … --- ## [Can logstash-file-plugin listen to "symlink"?](https://discuss.elastic.co/t/can-logstash-file-plugin-listen-to-symlink/2771)
**Author:** [@ohadR](https://discuss.elastic.co/u/ohadR)\ **Replies:** 3\ **Last updated:** [January 13, 2017, 4:34pm UTC](https://discuss.elastic.co/t/can-logstash-file-plugin-listen-to-symlink/2771 "2017-01-13T16:34:02Z")
hi I'm using the "file" as imput plugin, and I direct it to a path in unix machine. This path consists of links to log files that reside in other directories. Can it listen to "symlink"? --- ## [Logstash jruby behavior on windows](https://discuss.elastic.co/t/logstash-jruby-behavior-on-windows/50955)
**Author:** [@mmarkzon](https://discuss.elastic.co/u/mmarkzon)\ **Replies:** 3\ **Last updated:** [June 2, 2016, 7:22pm UTC](https://discuss.elastic.co/t/logstash-jruby-behavior-on-windows/50955 "2016-06-02T19:22:24Z")
I have two identical Windows 2012 R2 boxes that I am seeing different behavior on when I try to run Logstash 2.3.2. Both have JRE 1.8.0\_73 with JAVA\_HOME set. On one box, when I run logstash I get a java.exe process … --- ## [Filter on "more like this" query?](https://discuss.elastic.co/t/filter-on-more-like-this-query/3370)
**Author:** [@Ask\_Bjorn\_Hansen](https://discuss.elastic.co/u/Ask_Bjorn_Hansen)\ **Replies:** 3\ **Last updated:** [September 27, 2010, 9:22am UTC](https://discuss.elastic.co/t/filter-on-more-like-this-query/3370 "2010-09-27T09:22:44Z")
Hi everyone, I'm replacing the search on http://jobs.perl.org/ with Elastic Search. So far everything is working very nicely - it's been a pleasure to work with (well, except the obscure errors while I was learni… --- ## [XPOST Failing](https://discuss.elastic.co/t/xpost-failing/308153)
**Author:** [@chandramouli\_ravi](https://discuss.elastic.co/u/chandramouli_ravi)\ **Replies:** 5\ **Last updated:** [June 25, 2022, 2:50pm UTC](https://discuss.elastic.co/t/xpost-failing/308153 "2022-06-25T14:50:47Z")
Hi, I am running elasticsearch 8.2.3 from my laptop. Able to check health, create index but insert document is failing. Could you please help what's the problem here. C:\\Users\\ravich\>curl --insecure -H "Content-Type:… --- ## [How can I collect Palo Alto firewall metrics (CPU, RAM, Disk usage)](https://discuss.elastic.co/t/how-can-i-collect-palo-alto-firewall-metrics-cpu-ram-disk-usage/316097)
**Author:** [@shortone](https://discuss.elastic.co/u/shortone)\ **Replies:** 1\ **Last updated:** [October 12, 2022, 6:52pm UTC](https://discuss.elastic.co/t/how-can-i-collect-palo-alto-firewall-metrics-cpu-ram-disk-usage/316097 "2022-10-12T18:52:42Z")
Hello! I've recently setup the elastic agent on an intermediate host, I have syslog forwarding from our palo alto firewall to this host which is then shipping to elasticsearch and the palo alto integration seems to be w… --- ## [How to show full field content in kibana](https://discuss.elastic.co/t/how-to-show-full-field-content-in-kibana/32150)
**Author:** [@macymin](https://discuss.elastic.co/u/macymin)\ **Replies:** 1\ **Last updated:** [October 19, 2015, 4:01am UTC](https://discuss.elastic.co/t/how-to-show-full-field-content-in-kibana/32150 "2015-10-19T04:01:04Z")
hi I have a question regarding the filed content list in kibana Discover page. in left side, there is the list of all the available fields. when I click one of field, it doesn't show full content under the field name,… --- ## [FS Crawler - Issue with OCR](https://discuss.elastic.co/t/fs-crawler-issue-with-ocr/311409)
**Author:** [@Julien70](https://discuss.elastic.co/u/Julien70)\ **Replies:** 6\ **Last updated:** [August 5, 2022, 12:12pm UTC](https://discuss.elastic.co/t/fs-crawler-issue-with-ocr/311409 "2022-08-05T12:12:11Z")
Hi everyone, I'm facing issue with FSCrawler and OCR: I have a small PDF datasets. Some are filled with "real" text and others with scanned text. When I activate the OCR module, I received this message: " \[I regret t… --- ## [How much index size is allowed in free subscription?](https://discuss.elastic.co/t/how-much-index-size-is-allowed-in-free-subscription/214055)
**Author:** [@Rachit\_Gargava](https://discuss.elastic.co/u/Rachit_Gargava)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 12:57pm UTC](https://discuss.elastic.co/t/how-much-index-size-is-allowed-in-free-subscription/214055 "2020-01-08T12:57:03Z")
Hi, I am new to ELK; I am using the free subscription to store, index and Visualize my data using Elastic Search, Logstash and Kibana. What is the maximum limit till that I can store the data in index for free tier sub… --- ## [Gcp health check not working on a securised kibana with xPack](https://discuss.elastic.co/t/gcp-health-check-not-working-on-a-securised-kibana-with-xpack/186679)
**Author:** [@manuBriot](https://discuss.elastic.co/u/manuBriot)\ **Replies:** 2\ **Last updated:** [June 28, 2019, 3:20pm UTC](https://discuss.elastic.co/t/gcp-health-check-not-working-on-a-securised-kibana-with-xpack/186679 "2019-06-28T15:20:38Z")
0 I'm configuring a securised ELK cluster on GKE using the free xpack Basic authentication. I've build a k8s StatefullSet elastcisearch manifest with xpack-security-enabled to true and so on. My kibana deployment has a… --- ## [Index mapping error](https://discuss.elastic.co/t/index-mapping-error/140224)
**Author:** [@Krishna2](https://discuss.elastic.co/u/Krishna2)\ **Replies:** 2\ **Last updated:** [July 17, 2018, 6:00am UTC](https://discuss.elastic.co/t/index-mapping-error/140224 "2018-07-17T06:00:14Z")
I am trying to create index as below. It throws error either thru curl or kibana dev console. curl -XPUT localhost:9200/fassicountry -d '{ "settings" : { "number\_of\_shards" : 1 }, "mappings" : { "type1" : { "pro… --- ## [Reduce Swapping for ES Nodes](https://discuss.elastic.co/t/reduce-swapping-for-es-nodes/111441)
**Author:** [@corona](https://discuss.elastic.co/u/corona)\ **Replies:** 2\ **Last updated:** [December 13, 2017, 2:25pm UTC](https://discuss.elastic.co/t/reduce-swapping-for-es-nodes/111441 "2017-12-13T14:25:49Z")
Hi, I'm running version 2.4.1. I have confirmed the bootstrap.mlockall setting is true for the nodes in my cluster. I've been monitoring swap space usage on two servers (which run the ES nodes). I've found that the swap… --- ## [Sorting results with Elastic Search, Mongo Db and PHP](https://discuss.elastic.co/t/sorting-results-with-elastic-search-mongo-db-and-php/16476)
**Author:** [@Marc\_Witteveen](https://discuss.elastic.co/u/Marc_Witteveen)\ **Replies:** 2\ **Last updated:** [March 20, 2014, 9:12am UTC](https://discuss.elastic.co/t/sorting-results-with-elastic-search-mongo-db-and-php/16476 "2014-03-20T09:12:10Z")
Hi, I hope somebody can help me, though my question mentions PHP the sort problem happens when I use the console to fetch data. I am having a MongoDb database with data and use elastic search and PHP to search … --- ## [Roles to support lowest privilege](https://discuss.elastic.co/t/roles-to-support-lowest-privilege/289216)
**Author:** [@tractor\_boy](https://discuss.elastic.co/u/tractor_boy)\ **Replies:** 8\ **Last updated:** [November 18, 2021, 4:55pm UTC](https://discuss.elastic.co/t/roles-to-support-lowest-privilege/289216 "2021-11-18T16:55:58Z")
Hi, I'd like to have a user configured in kibana/elastic that has limited permissions. In this case the user should be able to insert data into elastic. I believe that this will require a role. What I do not understa… --- ## [Logstash access dynamic field with ruby filter](https://discuss.elastic.co/t/logstash-access-dynamic-field-with-ruby-filter/266489)
**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\ **Replies:** 8\ **Last updated:** [March 8, 2021, 5:45pm UTC](https://discuss.elastic.co/t/logstash-access-dynamic-field-with-ruby-filter/266489 "2021-03-08T17:45:19Z")
Hello I have nested field looks like this \[field1\]\[field2\]\[field3\] I want to remove field1 and field2 so the expected output will be \[field3\] I already manage to remove field1 with this ruby filter ruby { … [Previous page](https://discuss.elastic.co/top.md?page=1075&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1077&per_page=50&period=all)