# Top **URL:** https://discuss.elastic.co/top.md?page=1085&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1086 --- ## [Append field to json](https://discuss.elastic.co/t/append-field-to-json/175857)
**Author:** [@arp220](https://discuss.elastic.co/u/arp220)\ **Replies:** 6\ **Last updated:** [April 11, 2019, 3:54am UTC](https://discuss.elastic.co/t/append-field-to-json/175857 "2019-04-11T03:54:25Z")
Hi, i have this json message: {id:123456,time:20190225,color:black,result:1} i want append filed to this json and send to kafka. What i want: {id:123456,time:20190225,color:black,result:1,tag:server1} How should I do… --- ## [Mapper parser exception when creating an index with mapping](https://discuss.elastic.co/t/mapper-parser-exception-when-creating-an-index-with-mapping/235833)
**Author:** [@Sesha\_Sai\_Suhash\_Des](https://discuss.elastic.co/u/Sesha_Sai_Suhash_Des)\ **Replies:** 3\ **Last updated:** [June 9, 2020, 10:03am UTC](https://discuss.elastic.co/t/mapper-parser-exception-when-creating-an-index-with-mapping/235833 "2020-06-09T10:03:26Z")
I am getting error when running the following command. I am a noob please help me. command : PUT /companydatabase?pretty { "mappings": { "employees": { "properties": { "FirstName… --- ## [Error en los dashboards](https://discuss.elastic.co/t/error-en-los-dashboards/118788)
**Author:** [@davidsoler95](https://discuss.elastic.co/u/davidsoler95)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 12:27pm UTC](https://discuss.elastic.co/t/error-en-los-dashboards/118788 "2018-02-09T12:27:25Z")
Hola, Estoy utilizando el Stack 5.6.6, Estoy tratando de ver un dashboard de 9 visualizaciones en un intervalo temporal que tiene unos 4.000.000 de documentos (aunque no todos afectan a la visualizacion por los filtros… --- ## [How to set /n as delimiter in dissect filter](https://discuss.elastic.co/t/how-to-set-n-as-delimiter-in-dissect-filter/112588)
**Author:** [@George\_Cherian](https://discuss.elastic.co/u/George_Cherian)\ **Replies:** 3\ **Last updated:** [January 17, 2018, 10:39am UTC](https://discuss.elastic.co/t/how-to-set-n-as-delimiter-in-dissect-filter/112588 "2018-01-17T10:39:25Z")
Hi Elastic Team, I need to filter of the field with \\n as the delimiter in dissect filter. Saw that logstash 6.0 has feature enabled. config.support\_escapes: true The filter what I have written is as follows; disse… --- ## [Precreated dashboards - no results found - different columns](https://discuss.elastic.co/t/precreated-dashboards-no-results-found-different-columns/87518)
**Author:** [@Dacesilian](https://discuss.elastic.co/u/Dacesilian)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 8:47am UTC](https://discuss.elastic.co/t/precreated-dashboards-no-results-found-different-columns/87518 "2017-06-13T08:47:33Z")
Hello, I'm using Kibana 5.4.0 and I've imported dashboards with (filebeat util) /usr/share/filebeat/scripts/import\_dashboards (it downloaded beats-dashboards-5.4.0.zip). Problem is that fields in Elasticsearch (added wi… --- ## [Bulk EsRejectedExecutionException question - What's the real bottleneck?](https://discuss.elastic.co/t/bulk-esrejectedexecutionexception-question-whats-the-real-bottleneck/65896)
**Author:** [@Chris\_Fraschetti](https://discuss.elastic.co/u/Chris_Fraschetti)\ **Replies:** 3\ **Last updated:** [November 13, 2016, 8:12am UTC](https://discuss.elastic.co/t/bulk-esrejectedexecutionexception-question-whats-the-real-bottleneck/65896 "2016-11-13T08:12:41Z")
I get the general concept as to why this exception happens and handle catching the exception on the client so I can resubmit the rejected documents.. but ... In a multi-node cluster, what specifically does this excepti… --- ## [Disabling dynamic date time formatting in python api or globally](https://discuss.elastic.co/t/disabling-dynamic-date-time-formatting-in-python-api-or-globally/22175)
**Author:** [@Shahid\_Qadri](https://discuss.elastic.co/u/Shahid_Qadri)\ **Replies:** 3\ **Last updated:** [February 15, 2015, 11:32pm UTC](https://discuss.elastic.co/t/disabling-dynamic-date-time-formatting-in-python-api-or-globally/22175 "2015-02-15T23:32:15Z")
guys getting this error raise HTTP\_EXCEPTIONS.get(status\_code, TransportError)(status\_code, error\_message, additional\_info) RequestError: TransportError(400, u'MapperParsingException\[failed to parse \[SOURCES.… --- ## [Query routing inside of a cluster](https://discuss.elastic.co/t/query-routing-inside-of-a-cluster/17517)
**Author:** [@Savva](https://discuss.elastic.co/u/Savva)\ **Replies:** 3\ **Last updated:** [May 14, 2014, 9:21pm UTC](https://discuss.elastic.co/t/query-routing-inside-of-a-cluster/17517 "2014-05-14T21:21:50Z")
Hi, I have a question regarding the query routing inside of a cluster. Let say, node holds full data replication and can satisfy every search request it receives. Will it redirect/reroute queries to other nodes in the… --- ## [Java High Level Rest Client - Mutli Search API Not working with Elasticsearch 8.3.2](https://discuss.elastic.co/t/java-high-level-rest-client-mutli-search-api-not-working-with-elasticsearch-8-3-2/310515)
**Author:** [@sheiks2m](https://discuss.elastic.co/u/sheiks2m)\ **Replies:** 4\ **Last updated:** [August 26, 2022, 9:15am UTC](https://discuss.elastic.co/t/java-high-level-rest-client-mutli-search-api-not-working-with-elasticsearch-8-3-2/310515 "2022-08-26T09:15:34Z")
HI, Im using Java High level rest client version 7.17.5. Multi Search API not working as expected. Please find the below code. SearchSourceBuilder metaDataSearch = new SearchSourceBuilder(); org.elasticsearch.a… --- ## [Filter Visualizations on a Dashboard using the default time range (dashboard upper right corner) on filter conditions using fields other than index pattern primary time field](https://discuss.elastic.co/t/filter-visualizations-on-a-dashboard-using-the-default-time-range-dashboard-upper-right-corner-on-filter-conditions-using-fields-other-than-index-pattern-primary-time-field/278209)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 4\ **Last updated:** [July 14, 2021, 7:48pm UTC](https://discuss.elastic.co/t/filter-visualizations-on-a-dashboard-using-the-default-time-range-dashboard-upper-right-corner-on-filter-conditions-using-fields-other-than-index-pattern-primary-time-field/278209 "2021-07-14T19:48:24Z")
Hi, is it possible to have a multiple "Time Field" index pattern ?. I would like to use the default time filter in a dashboard to filter dynamically 3 visualizations this way: Index pattern time field = field1\* Dashbo… --- ## [Setting up elastics watch on Linux on system z error](https://discuss.elastic.co/t/setting-up-elastics-watch-on-linux-on-system-z-error/140452)
**Author:** [@Harish\_Malu](https://discuss.elastic.co/u/Harish_Malu)\ **Replies:** 4\ **Last updated:** [July 18, 2018, 7:44am UTC](https://discuss.elastic.co/t/setting-up-elastics-watch-on-linux-on-system-z-error/140452 "2018-07-18T07:44:08Z")
Hi Team, I have done my setup of using Logstash, elasticsearch and kibana for my systems performance data on rhel using latest 6.x version. It all works fine. Now I need to move this setup on Linux(rhel) on system z (m… --- ## [Looking for a little assistance regarding ELK Stack and BRO logs](https://discuss.elastic.co/t/looking-for-a-little-assistance-regarding-elk-stack-and-bro-logs/97124)
**Author:** [@BIitzkrieg](https://discuss.elastic.co/u/BIitzkrieg)\ **Replies:** 4\ **Last updated:** [August 21, 2017, 5:11pm UTC](https://discuss.elastic.co/t/looking-for-a-little-assistance-regarding-elk-stack-and-bro-logs/97124 "2017-08-21T17:11:57Z")
I think this fits more with Logstash (maybe Filebeat as well) so I’ll place it here for now. I am currently collecting logs with BRO IDS, and sending from filebeat on the IDS system, to another system running logstash an… --- ## [Problems when indexing csv files](https://discuss.elastic.co/t/problems-when-indexing-csv-files/182753)
**Author:** [@Ayumalex](https://discuss.elastic.co/u/Ayumalex)\ **Replies:** 2\ **Last updated:** [May 25, 2019, 10:45am UTC](https://discuss.elastic.co/t/problems-when-indexing-csv-files/182753 "2019-05-25T10:45:34Z")
Hello, I use ELK (for the first time) to process CSV files. However, I have a problem when I run logstash with my configuration file: input { file { path =\> "/home/user/network\_capt/csv/\*.csv" start\_position =\> "… --- ## [How to use the input kafka topic in the output elasticsearch with logstash?](https://discuss.elastic.co/t/how-to-use-the-input-kafka-topic-in-the-output-elasticsearch-with-logstash/176186)
**Author:** [@evahsiao](https://discuss.elastic.co/u/evahsiao)\ **Replies:** 2\ **Last updated:** [April 10, 2019, 11:17am UTC](https://discuss.elastic.co/t/how-to-use-the-input-kafka-topic-in-the-output-elasticsearch-with-logstash/176186 "2019-04-10T11:17:25Z")
Here is my use case: I use kafka messages is the input data and then output to the elasticsearch database. I consume multi topics as below setting: input { kafka { bootstrap\_servers =\> "127.0.0.1:9092" g… --- ## [Jar hell when running integration test](https://discuss.elastic.co/t/jar-hell-when-running-integration-test/141819)
**Author:** [@svangeti](https://discuss.elastic.co/u/svangeti)\ **Replies:** 2\ **Last updated:** [July 26, 2018, 6:07pm UTC](https://discuss.elastic.co/t/jar-hell-when-running-integration-test/141819 "2018-07-26T18:07:37Z")
getting this error when running integration test. using ES 6.3.2 \[INFO\] --- junit4-maven-plugin:2.3.3:junit4 (unit-tests) @ ingest-bano --- \[INFO\] says ciao! Master seed: 417785527A133182 Executing 1 suite with 1 JV… --- ## [Es5.4.3 timed out when collecting data](https://discuss.elastic.co/t/es5-4-3-timed-out-when-collecting-data/104155)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 2\ **Last updated:** [October 17, 2017, 2:59am UTC](https://discuss.elastic.co/t/es5-4-3-timed-out-when-collecting-data/104155 "2017-10-17T02:59:53Z")
\[2017-10-17T08:47:28,635\]\[ERROR\]\[o.e.x.m.c.i.IndexStatsCollector\] \[hostname\] collector \[index-stats\] timed out when collecting data \[2017-10-17T08:50:19,008\]\[ERROR\]\[o.e.x.m.c.c.ClusterStatsCollector\] \[hostname\] collector… --- ## [ES cannot load JNI on arm](https://discuss.elastic.co/t/es-cannot-load-jni-on-arm/103057)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [October 11, 2017, 6:55pm UTC](https://discuss.elastic.co/t/es-cannot-load-jni-on-arm/103057 "2017-10-11T18:55:46Z")
Hi, I got following warnings, when running elasticsearch on arm platform: \[2017-10-06T18:10:08,825\]\[WARN \]\[o.e.b.Natives \] unable to load JNA native support library, native methods will be disabled. java.lan… --- ## [Search for any error exceptions or any specific string in a log file which is pushed from client machine using filebeat agent to Elastic stack server](https://discuss.elastic.co/t/search-for-any-error-exceptions-or-any-specific-string-in-a-log-file-which-is-pushed-from-client-machine-using-filebeat-agent-to-elastic-stack-server/346534)
**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\ **Replies:** 7\ **Last updated:** [November 9, 2023, 6:09pm UTC](https://discuss.elastic.co/t/search-for-any-error-exceptions-or-any-specific-string-in-a-log-file-which-is-pushed-from-client-machine-using-filebeat-agent-to-elastic-stack-server/346534 "2023-11-09T18:09:12Z")
Hi, I have this log file /opt/apigee/var/log/edge-message-processor/messagelogging/apigee-dac-training/test/sf-response-parameters/6/log-api/elk.log which is seen in the kibana dashboard. I am searching for a specific s… --- ## [What are the system limits to check when Auditbeat stops sending messages](https://discuss.elastic.co/t/what-are-the-system-limits-to-check-when-auditbeat-stops-sending-messages/128815)
**Author:** [@nlh](https://discuss.elastic.co/u/nlh)\ **Replies:** 7\ **Last updated:** [April 20, 2018, 1:58pm UTC](https://discuss.elastic.co/t/what-are-the-system-limits-to-check-when-auditbeat-stops-sending-messages/128815 "2018-04-20T13:58:26Z")
Thought I'd better start this as a separate topic. At 1am yesterday morning, the messages from Auditbeat stopped appearing in ELK. No changes were made to either Auditbeat or Logstash filtering. Just stopped dead. I was … --- ## [Not able to start the elasticsearch service in windows after uninstalled the X-pack](https://discuss.elastic.co/t/not-able-to-start-the-elasticsearch-service-in-windows-after-uninstalled-the-x-pack/120454)
**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\ **Replies:** 1\ **Last updated:** [February 19, 2018, 1:04pm UTC](https://discuss.elastic.co/t/not-able-to-start-the-elasticsearch-service-in-windows-after-uninstalled-the-x-pack/120454 "2018-02-19T13:04:15Z")
I'm getting some errors while starting the elasticsearch service, after uninstalled the xpack. \[2018-02-19T18:13:39,056\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[HARIBASKAR\] uncaught exception in thread \[mai… --- ## [\`accept\_data\_loss\` where does it go?](https://discuss.elastic.co/t/accept-data-loss-where-does-it-go/110192)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [December 8, 2017, 2:11pm UTC](https://discuss.elastic.co/t/accept-data-loss-where-does-it-go/110192 "2017-12-08T14:11:04Z")
As per ES6 docs at Cluster reroute API | Elasticsearch Guide \[8.11\] | Elastic this command requires the special field accept\_data\_loss to be explicitly set to true for it to work May I get an example of this? Is thi… --- ## [Grok fields not indexed in elasticsearch](https://discuss.elastic.co/t/grok-fields-not-indexed-in-elasticsearch/101611)
**Author:** [@Midiman](https://discuss.elastic.co/u/Midiman)\ **Replies:** 1\ **Last updated:** [September 24, 2017, 8:59pm UTC](https://discuss.elastic.co/t/grok-fields-not-indexed-in-elasticsearch/101611 "2017-09-24T20:59:56Z")
Hi, I am trying to get grok field values into elasticsearch, but they are just not showing up. Here's the scenario: ### First, an example syslog message: \<30\>Sep 24 19:25:12 win-poc-05t.soca.local MSWinEventLog\\t6\\tMicr… --- ## [Changing Dynamic Mapping](https://discuss.elastic.co/t/changing-dynamic-mapping/79189)
**Author:** [@dashwood](https://discuss.elastic.co/u/dashwood)\ **Replies:** 7\ **Last updated:** [March 21, 2017, 8:23am UTC](https://discuss.elastic.co/t/changing-dynamic-mapping/79189 "2017-03-21T08:23:29Z")
Hi, I currently have 2 fields that need to be changed in my Elasticsearch. They are the DOB (Date of Birth) and Phone number field. Currently the phone field has the type "Long" and the DOB field has the type "Date… --- ## [Delete treated files](https://discuss.elastic.co/t/delete-treated-files/41854)
**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\ **Replies:** 1\ **Last updated:** [February 16, 2016, 8:41am UTC](https://discuss.elastic.co/t/delete-treated-files/41854 "2016-02-16T08:41:17Z")
Hello, I would like to know if filebeat can delete treated files ... Thank you, --- ## [Kibana Visualization takes time to load in 6.7.2](https://discuss.elastic.co/t/kibana-visualization-takes-time-to-load-in-6-7-2/256437)
**Author:** [@AnoopKN](https://discuss.elastic.co/u/AnoopKN)\ **Replies:** 8\ **Last updated:** [November 27, 2020, 3:20pm UTC](https://discuss.elastic.co/t/kibana-visualization-takes-time-to-load-in-6-7-2/256437 "2020-11-27T15:20:58Z")
Hi all, I was using Kibana 5.5.2 to create a data table visualization. I am using @timestamp in a terms aggregation. The bucket size was set to 100000. On this version of Kibana the Visualization was rendered in less th… --- ## [Running metricbeat service on dedicated non standard port](https://discuss.elastic.co/t/running-metricbeat-service-on-dedicated-non-standard-port/149412)
**Author:** [@tushar\_raut](https://discuss.elastic.co/u/tushar_raut)\ **Replies:** 8\ **Last updated:** [September 24, 2018, 9:56am UTC](https://discuss.elastic.co/t/running-metricbeat-service-on-dedicated-non-standard-port/149412 "2018-09-24T09:56:04Z")
Hi, I just want to confirm Is it possible to run metricbeat on some specific port which is non standard port and open on my setup? Metricbeat service uses dynamic port and there is nothing I found for configuration cha… --- ## [Template indexing issue](https://discuss.elastic.co/t/template-indexing-issue/115456)
**Author:** [@kanthimathi](https://discuss.elastic.co/u/kanthimathi)\ **Replies:** 8\ **Last updated:** [January 15, 2018, 11:37pm UTC](https://discuss.elastic.co/t/template-indexing-issue/115456 "2018-01-15T23:37:18Z")
Hi all, We are using elastic search to collect logs and analyze. For this purpose, we are using filebeat and metricbeat. Initially, when we had an issue in indexing the template, support people helped in resolving it. I… --- ## [Java.lang.illegalstateexception: unexpected byte \[0x02\] elasticsearch](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02-elasticsearch/239571)
**Author:** [@vikrammazakindia](https://discuss.elastic.co/u/vikrammazakindia)\ **Replies:** 5\ **Last updated:** [July 2, 2020, 12:57pm UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-unexpected-byte-0x02-elasticsearch/239571 "2020-07-02T12:57:54Z")
I am facing above error in spring data elastic search . how to parse simple query string in query builder? my code is final QueryBuilder searchquery = QueryBuilders.boolQuery() .should(QueryBuilders.simpleQueryStringQ… --- ## [Error to integrate elastic high rest client on Weblogic](https://discuss.elastic.co/t/error-to-integrate-elastic-high-rest-client-on-weblogic/233323)
**Author:** [@famele3](https://discuss.elastic.co/u/famele3)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 2:30pm UTC](https://discuss.elastic.co/t/error-to-integrate-elastic-high-rest-client-on-weblogic/233323 "2020-05-19T14:30:15Z")
Hello all, I should integrate the elastic search high rest client on my java web app. I put this dependecies on pom : \ \org.elasticsearch.client\ \elasticsearch-rest-c… --- ## [ElasticSearch doesn't start after installing 5.6.4](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-installing-5-6-4/107444)
**Author:** [@tomsk](https://discuss.elastic.co/u/tomsk)\ **Replies:** 5\ **Last updated:** [November 13, 2017, 11:24pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-start-after-installing-5-6-4/107444 "2017-11-13T23:24:10Z")
Hello, I just installed Elasticsearch 5.6.4 from Download Elasticsearch | Elastic via DEB (I use Debian 9) package using these commands: wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-5.6.4.de… --- ## [Grabbing objects from Kibana Saved Object Meta](https://discuss.elastic.co/t/grabbing-objects-from-kibana-saved-object-meta/94398)
**Author:** [@JoeyMarinello](https://discuss.elastic.co/u/JoeyMarinello)\ **Replies:** 1\ **Last updated:** [July 24, 2017, 10:15pm UTC](https://discuss.elastic.co/t/grabbing-objects-from-kibana-saved-object-meta/94398 "2017-07-24T22:15:42Z")
Hello everyone! I am working on a project that uses saved search objects in Kibana to construct queries to Elasticsearch queries. I have successfully been able to extract titles, columns, and sort details from saved se… --- ## [Snapshot Failure](https://discuss.elastic.co/t/snapshot-failure/66895)
**Author:** [@Gnosis](https://discuss.elastic.co/u/Gnosis)\ **Replies:** 1\ **Last updated:** [November 22, 2016, 8:28pm UTC](https://discuss.elastic.co/t/snapshot-failure/66895 "2016-11-22T20:28:02Z")
Hi all, I'd like to make a snapshot of one index from my three node cluster. Each node is on a different computer. Each node has the same conf and the same path.repo. Each path to the repo is 777 (i know it's bad, o… --- ## [Move old indices on hhd](https://discuss.elastic.co/t/move-old-indices-on-hhd/2565)
**Author:** [@andimak](https://discuss.elastic.co/u/andimak)\ **Replies:** 1\ **Last updated:** [June 12, 2015, 12:12pm UTC](https://discuss.elastic.co/t/move-old-indices-on-hhd/2565 "2015-06-12T12:12:02Z")
Hi, We have some nodes with ssd storages and store indices per month. The plan is to add some data nodes and move old indices (e.g. 2 years old) to this new nodes with hdd storage. How to perform this movement (in det… --- ## [Elastic Stack setup with multiple instances of different Beats](https://discuss.elastic.co/t/elastic-stack-setup-with-multiple-instances-of-different-beats/296109)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 3\ **Last updated:** [February 6, 2022, 9:57pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-with-multiple-instances-of-different-beats/296109 "2022-02-06T21:57:34Z")
Hello, we want to use multiple instances of the different Beats. (File, Metric, Winlog, Packet and Heart) Metricbeat on multiple servers for monitoring, Filebeat on multiple servers for logs and so on. They should col… --- ## [Can't login in kibana on ECK with ldap](https://discuss.elastic.co/t/cant-login-in-kibana-on-eck-with-ldap/281345)
**Author:** [@kbi753](https://discuss.elastic.co/u/kbi753)\ **Replies:** 3\ **Last updated:** [August 17, 2021, 1:10am UTC](https://discuss.elastic.co/t/cant-login-in-kibana-on-eck-with-ldap/281345 "2021-08-17T01:10:41Z")
Hello, We are trying to setup ldap authentication on our elasticsearch infra. Are are using ECK (elastic on kubernetes) I think I did a valid configuration, I don't find any error in the logs.. I even found this in t… --- ## [How does input tcp plugin handle queue being full](https://discuss.elastic.co/t/how-does-input-tcp-plugin-handle-queue-being-full/106222)
**Author:** [@eprothro](https://discuss.elastic.co/u/eprothro)\ **Replies:** 3\ **Last updated:** [November 5, 2017, 7:37pm UTC](https://discuss.elastic.co/t/how-does-input-tcp-plugin-handle-queue-being-full/106222 "2017-11-05T19:37:04Z")
Input plugins handle back pressure from logstash independently, however I cannot find how, specifically, the tcp input plugin handles this. When the logstash queue is full and no longer accepting events from the tcp inp… --- ## [Logstash is not filtering snort](https://discuss.elastic.co/t/logstash-is-not-filtering-snort/99159)
**Author:** [@kanan930](https://discuss.elastic.co/u/kanan930)\ **Replies:** 3\ **Last updated:** [September 5, 2017, 7:21pm UTC](https://discuss.elastic.co/t/logstash-is-not-filtering-snort/99159 "2017-09-05T19:21:35Z")
Hi all, I am trying to filter snort alerts. I need to display the output on kibana dashboard. I have created the filtering script “logstash\_snort.conf” in /opt/bitnami/logstash/conf directory. logstash is running fine, … --- ## [String Replace in Painless](https://discuss.elastic.co/t/string-replace-in-painless/326231)
**Author:** [@John\_Warner](https://discuss.elastic.co/u/John_Warner)\ **Replies:** 0\ **Last updated:** [February 22, 2023, 9:53pm UTC](https://discuss.elastic.co/t/string-replace-in-painless/326231 "2023-02-22T21:53:46Z")
I tried the following replace, and it did not work. Seems to be returning the empty string. Is this the correct way to do a string replace? Note that what I found on this thread does not seem to work for me. Replace stri… --- ## [Dense vector field space requirements](https://discuss.elastic.co/t/dense-vector-field-space-requirements/316304)
**Author:** [@ruslaniv](https://discuss.elastic.co/u/ruslaniv)\ **Replies:** 2\ **Last updated:** [November 25, 2022, 6:49am UTC](https://discuss.elastic.co/t/dense-vector-field-space-requirements/316304 "2022-11-25T06:49:25Z")
Hi! We are experimenting with dense vector field type for the purpose of similarity search. So we have a test index with approx 5\_000\_000 documents, each document has about 30 fields and 25 of these fields are mapped t… --- ## [Deployment stuck on "Waiting until master instances are elected"](https://discuss.elastic.co/t/deployment-stuck-on-waiting-until-master-instances-are-elected/266445)
**Author:** [@dmitryyankowski](https://discuss.elastic.co/u/dmitryyankowski)\ **Replies:** 2\ **Last updated:** [March 8, 2021, 8:54am UTC](https://discuss.elastic.co/t/deployment-stuck-on-waiting-until-master-instances-are-elected/266445 "2021-03-08T08:54:15Z")
Hi guys, i'm trying to deploy another "allocator" instance to my deployment.. and it's currently stuck on "Waiting until master instances are elected". What am I doing wrong here. Is deploying 2 instances not allowed bec… --- ## [KIbana - pie chart splitting by value of fields](https://discuss.elastic.co/t/kibana-pie-chart-splitting-by-value-of-fields/236081)
**Author:** [@stg7](https://discuss.elastic.co/u/stg7)\ **Replies:** 2\ **Last updated:** [June 11, 2020, 4:12pm UTC](https://discuss.elastic.co/t/kibana-pie-chart-splitting-by-value-of-fields/236081 "2020-06-11T16:12:19Z")
This sounds quite stupid. I usually got data from json like { "name":"john","category":"A"} { "name":"paul","category":"B"} { "name":"henry","category":"A"} {"name:"jane","category":"C"} I easily manage to get the… --- ## [No suitable mariadb driver found](https://discuss.elastic.co/t/no-suitable-mariadb-driver-found/127380)
**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\ **Replies:** 2\ **Last updated:** [April 10, 2018, 7:03pm UTC](https://discuss.elastic.co/t/no-suitable-mariadb-driver-found/127380 "2018-04-10T19:03:06Z")
Hi there, I've been trying to get logstash to connect to a mariadb instance without any luck. My config is pretty basic with: input { jdbc { jdbc\_connection\_string =\> "jdbc:mariadb://192.168.40.202:3306/munkirepo… --- ## [Turn off term frequency](https://discuss.elastic.co/t/turn-off-term-frequency/43558)
**Author:** [@lecheik](https://discuss.elastic.co/u/lecheik)\ **Replies:** 2\ **Last updated:** [March 5, 2016, 6:36pm UTC](https://discuss.elastic.co/t/turn-off-term-frequency/43558 "2016-03-05T18:36:15Z")
Hi Team, Please i'm facing an issue with some configuration in my index. i want to disable term frequency. As i saw in my documentation "index\_option"="docs" should be added to the field configuration, so i don't underst… --- ## [Endpoint Security Data (Rollup?)](https://discuss.elastic.co/t/endpoint-security-data-rollup/306217)
**Author:** [@forbiddenera](https://discuss.elastic.co/u/forbiddenera)\ **Replies:** 4\ **Last updated:** [June 2, 2022, 8:57pm UTC](https://discuss.elastic.co/t/endpoint-security-data-rollup/306217 "2022-06-02T20:57:26Z")
Hi, Hopefully this is the right place to post; if not, please move/direct me accordingly, :slight\_smile: I've enabled endpoint security on some of our systems, running under a fleet controlled elastic agent. Initially… --- ## [Tag Cloud not working with nested input](https://discuss.elastic.co/t/tag-cloud-not-working-with-nested-input/195482)
**Author:** [@bferrolartyco](https://discuss.elastic.co/u/bferrolartyco)\ **Replies:** 4\ **Last updated:** [August 22, 2019, 2:14pm UTC](https://discuss.elastic.co/t/tag-cloud-not-working-with-nested-input/195482 "2019-08-22T14:14:19Z")
Kibana version: 7.2.0 Hi there! I'm trying to create a word-cloud visualization (Tag Cloud) in Kibana, using as input a document which has text fields on it. The documents are nested jsons, using one json for each sent… --- ## [Can't login to kibana using x-pack](https://discuss.elastic.co/t/cant-login-to-kibana-using-x-pack/115773)
**Author:** [@Karan\_Sharma](https://discuss.elastic.co/u/Karan_Sharma)\ **Replies:** 4\ **Last updated:** [January 18, 2018, 6:49pm UTC](https://discuss.elastic.co/t/cant-login-to-kibana-using-x-pack/115773 "2018-01-18T18:49:00Z")
I have ES 5.6, kibana 5.6 and x-pack 5.6. I was just trying out x-pack. i changed the password of 'elastic' user. i can login using curl, so username and password is correct. However in kibana when i click 'login' the p… --- ## [Secure communication with Elasticsearch (SSL)](https://discuss.elastic.co/t/secure-communication-with-elasticsearch-ssl/59569)
**Author:** [@Tsury](https://discuss.elastic.co/u/Tsury)\ **Replies:** 4\ **Last updated:** [December 5, 2017, 9:14am UTC](https://discuss.elastic.co/t/secure-communication-with-elasticsearch-ssl/59569 "2017-12-05T09:14:51Z")
What are the best practices to secure the communication between Logstash and Elasticsearch? I'm looking for a non-commercial solution. It is possible to direct Logstash to NGINX with SSL? If so, how would you go about… --- ## [Error Netflow Plugin on Logstash](https://discuss.elastic.co/t/error-netflow-plugin-on-logstash/97158)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 9:06am UTC](https://discuss.elastic.co/t/error-netflow-plugin-on-logstash/97158 "2017-08-18T09:06:26Z")
Can help on the error ? Neflow Plugin in Logstash \[root@XXXX logstash\]# bin/logstash-plugin list | grep netflow logstash-codec-netflow \[root@XXXX logstash\]# Netflow Config input { udp { port =\> "2055" host =\> "X.X… --- ## [Kibana login](https://discuss.elastic.co/t/kibana-login/49000)
**Author:** [@Andre\_de\_Martini](https://discuss.elastic.co/u/Andre_de_Martini)\ **Replies:** 4\ **Last updated:** [May 3, 2016, 8:59pm UTC](https://discuss.elastic.co/t/kibana-login/49000 "2016-05-03T20:59:30Z")
Hey guys. I installed shield to my elk server, but now i cannot access my kibana anymore. I did all that this (https://www.elastic.co/guide/en/shield/current/kibana.html) tutorial ask for, but the kibana page always sa… --- ## [Convert values from string to int](https://discuss.elastic.co/t/convert-values-from-string-to-int/325164)
**Author:** [@Law\_Rence](https://discuss.elastic.co/u/Law_Rence)\ **Replies:** 6\ **Last updated:** [February 16, 2023, 2:31pm UTC](https://discuss.elastic.co/t/convert-values-from-string-to-int/325164 "2023-02-16T14:31:23Z")
How can I convert all the keys that have numbers from strings to int using ruby? example: "x": "hello", "a": "1", "b": "2", "c": "3", "d": "bye" to: "x": "hello", "a": 1, "b": 2, "c": 3, e.t.c here's my ruby… [Previous page](https://discuss.elastic.co/top.md?page=1084&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1086&per_page=50&period=all)