# Top **URL:** https://discuss.elastic.co/top.md?page=1094&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1095 --- ## [Testers wanted: Lumberjack integration with Hortonworks](https://discuss.elastic.co/t/testers-wanted-lumberjack-integration-with-hortonworks/44880)
**Author:** [@trixpan](https://discuss.elastic.co/u/trixpan)\ **Replies:** 2\ **Last updated:** [March 19, 2016, 5:06am UTC](https://discuss.elastic.co/t/testers-wanted-lumberjack-integration-with-hortonworks/44880 "2016-03-19T05:06:12Z")
Hi there, For those using logstash-forwarder but also using Hortonworks stack (HDP and HDF) I have baked an experimental listener that allows Hortonworks Dataflow (a.k.a. Apache NiFi) to accept connections from logst… --- ## [Unable to find valid certification path to requested target](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target/272692)
**Author:** [@osher.l](https://discuss.elastic.co/u/osher.l)\ **Replies:** 0\ **Last updated:** [May 11, 2021, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-find-valid-certification-path-to-requested-target/272692 "2021-05-11T12:06:38Z")
We have ELK stack on Kubernetes(version 7.0.0), Logstash is failing to interact with elasticsearch with the following warning and errors, all other components like filebeat and kibana are well functioning. \[2021-05-11T1… --- ## [Kibana Dashboard timing out after 30000ms when opened in new tab of browser](https://discuss.elastic.co/t/kibana-dashboard-timing-out-after-30000ms-when-opened-in-new-tab-of-browser/188554)
**Author:** [@Darshan\_v\_Shah](https://discuss.elastic.co/u/Darshan_v_Shah)\ **Replies:** 3\ **Last updated:** [July 20, 2019, 5:08am UTC](https://discuss.elastic.co/t/kibana-dashboard-timing-out-after-30000ms-when-opened-in-new-tab-of-browser/188554 "2019-07-20T05:08:39Z")
Hi team, I am facing as issue where the Kibana dashboard crashes on the browser saying Version: 6.7.2 Build: 20334 SearchError: Request Timeout after 30000ms at http://ec2-3-19-110-7.us-east-2.compute.amazonaws.com… --- ## [NEST suddenly starting to create incorrect requests](https://discuss.elastic.co/t/nest-suddenly-starting-to-create-incorrect-requests/105272)
**Author:** [@hmanner](https://discuss.elastic.co/u/hmanner)\ **Replies:** 3\ **Last updated:** [October 26, 2017, 8:16pm UTC](https://discuss.elastic.co/t/nest-suddenly-starting-to-create-incorrect-requests/105272 "2017-10-26T20:16:15Z")
We have a .NET application using NEST version 2.3.1 against Elasticsearch 2.2.0. The application is a backend server application running on multiple hosts under IIS, all performing the same queries against an Elasticsear… --- ## [Is it possible to embed a single chart from a dashboard?](https://discuss.elastic.co/t/is-it-possible-to-embed-a-single-chart-from-a-dashboard/87471)
**Author:** [@WoJ](https://discuss.elastic.co/u/WoJ)\ **Replies:** 3\ **Last updated:** [May 30, 2017, 9:31am UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-a-single-chart-from-a-dashboard/87471 "2017-05-30T09:31:22Z")
Hello I would like to embed a single chart from a dashboard into an external web page (Kibana 5.3). The share link which I get is for the whole dashboard and I did not find a way to share individual graphs (exactly … --- ## [Agrregation on multiple input in elasticsearch](https://discuss.elastic.co/t/agrregation-on-multiple-input-in-elasticsearch/62825)
**Author:** [@SravanTurbo](https://discuss.elastic.co/u/SravanTurbo)\ **Replies:** 3\ **Last updated:** [October 14, 2016, 7:22am UTC](https://discuss.elastic.co/t/agrregation-on-multiple-input-in-elasticsearch/62825 "2016-10-14T07:22:41Z")
Elasticsearch version: 2.4.1 Plugins installed: watcher Description of the problem: I am monitoring the input sources and trying to output the sources which are active. I have 3 input sources \["192.168.48.8", "1… --- ## [Adding related brand names to a company index to aid searching](https://discuss.elastic.co/t/adding-related-brand-names-to-a-company-index-to-aid-searching/47798)
**Author:** [@evvo](https://discuss.elastic.co/u/evvo)\ **Replies:** 3\ **Last updated:** [April 19, 2016, 4:39pm UTC](https://discuss.elastic.co/t/adding-related-brand-names-to-a-company-index-to-aid-searching/47798 "2016-04-19T16:39:40Z")
i have an elastic search index for certain company details, and these show first in search results for searches on the name.... so for example the parent brand Tata will show up if this word is searched on... the only … --- ## [Kibana on armv7](https://discuss.elastic.co/t/kibana-on-armv7/38968)
**Author:** [@snuff](https://discuss.elastic.co/u/snuff)\ **Replies:** 3\ **Last updated:** [January 14, 2016, 8:41pm UTC](https://discuss.elastic.co/t/kibana-on-armv7/38968 "2016-01-14T20:41:36Z")
Hi, is there some source where to get the kibana from? Or any compiled armv7 kibana version? I would like to setup ELK on my raspberry pi2 but I am pretty surprised that there are no versions for this processor..thank yo… --- ## [Kibana APIs: No handler found for uri](https://discuss.elastic.co/t/kibana-apis-no-handler-found-for-uri/310971)
**Author:** [@aman\_mahajan](https://discuss.elastic.co/u/aman_mahajan)\ **Replies:** 1\ **Last updated:** [August 4, 2022, 8:57am UTC](https://discuss.elastic.co/t/kibana-apis-no-handler-found-for-uri/310971 "2022-08-04T08:57:26Z")
Hi, I am trying to do a curl request to the Kibana APIs but getting error that the handler does not exist. For eg. curl -H 'kbn-xsrf: true' -H "Authorization: Basic \" \:\/api/saved\_objects… --- ## [Data node can't find the master on elasticsearch cluster](https://discuss.elastic.co/t/data-node-cant-find-the-master-on-elasticsearch-cluster/254043)
**Author:** [@Pavle\_Ilic](https://discuss.elastic.co/u/Pavle_Ilic)\ **Replies:** 1\ **Last updated:** [November 2, 2020, 6:08pm UTC](https://discuss.elastic.co/t/data-node-cant-find-the-master-on-elasticsearch-cluster/254043 "2020-11-02T18:08:22Z")
So, I have two elasticsearch servers and wanted to form a cluster with master and data node, but I'm facing some difficulties in connecting them in a same cluster, these are my .yml files and the things I've tried so far… --- ## [How to do a match\_phrase query on all searchable fields instead of on a single field?](https://discuss.elastic.co/t/how-to-do-a-match-phrase-query-on-all-searchable-fields-instead-of-on-a-single-field/243760)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [August 4, 2020, 8:13pm UTC](https://discuss.elastic.co/t/how-to-do-a-match-phrase-query-on-all-searchable-fields-instead-of-on-a-single-field/243760 "2020-08-04T20:13:45Z")
How to do a match\_phrase query on all searchable fields instead of on a single field? I do see in the documentation as mentioned below where search can be done on only specific field. GET /\_search { "query": { "matc… --- ## [How to parse XML using XPATH from SOAP API in Logstash](https://discuss.elastic.co/t/how-to-parse-xml-using-xpath-from-soap-api-in-logstash/223979)
**Author:** [@Enyer\_Quiroz](https://discuss.elastic.co/u/Enyer_Quiroz)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 2:52pm UTC](https://discuss.elastic.co/t/how-to-parse-xml-using-xpath-from-soap-api-in-logstash/223979 "2020-03-20T14:52:25Z")
Hello Everyone, I hope you are good, I have this issue with logstash filter using Xpath, I Don't really know if the xpath I Pass is wrong the error I'm getting from cmd is kinda syntax error.... What I'm seeing is like… --- ## [Cannot retrieve .Id from 'docker inspect docker.elastic.co/kibana/kibana:6.1.1'](https://discuss.elastic.co/t/cannot-retrieve-id-from-docker-inspect-docker-elastic-co-kibana-kibana-6-1-1/114622)
**Author:** [@Fryder](https://discuss.elastic.co/u/Fryder)\ **Replies:** 1\ **Last updated:** [January 12, 2018, 12:58pm UTC](https://discuss.elastic.co/t/cannot-retrieve-id-from-docker-inspect-docker-elastic-co-kibana-kibana-6-1-1/114622 "2018-01-12T12:58:27Z")
I am trying to build kibana docker with jenkins pipeline. and am receiving the below error Cannot retrieve .Id from 'docker inspect docker.elastic.co/kibana/kibana:6.1.1' The same is getting downloaded and processed g… --- ## [Marvel basic still free with X-Pack?](https://discuss.elastic.co/t/marvel-basic-still-free-with-x-pack/42190)
**Author:** [@warp](https://discuss.elastic.co/u/warp)\ **Replies:** 1\ **Last updated:** [February 21, 2016, 7:19pm UTC](https://discuss.elastic.co/t/marvel-basic-still-free-with-x-pack/42190 "2016-02-21T19:19:46Z")
Now that marvel is going to merge with Shield 6 & Co into X-Pack, will there still be a free basic version of Marvel, or will there be a free basic version of X-Pack ? --- ## [Mysql-Slow-Log](https://discuss.elastic.co/t/mysql-slow-log/41480)
**Author:** [@novice](https://discuss.elastic.co/u/novice)\ **Replies:** 1\ **Last updated:** [February 14, 2016, 2:47pm UTC](https://discuss.elastic.co/t/mysql-slow-log/41480 "2016-02-14T14:47:26Z")
Hi everyone, I am using filebeats to forward mysql logs to logstash , and it breaks the query to different lines. I want the complete query as a single entry unlike a single line the way logstash does. What filter shou… --- ## [Problem multiline logs](https://discuss.elastic.co/t/problem-multiline-logs/52412)
**Author:** [@yde](https://discuss.elastic.co/u/yde)\ **Replies:** 5\ **Last updated:** [June 13, 2016, 2:56pm UTC](https://discuss.elastic.co/t/problem-multiline-logs/52412 "2016-06-13T14:56:13Z")
Hello everybody, I am trying to send to logstack some lines from an event generate in my log file, I don't know how to do that. Below is an exemple of the event which is generate in my log, what i am trying to send t… --- ## [Shaky Cross-Cluster Search between 6.5.1 and 5.6.2](https://discuss.elastic.co/t/shaky-cross-cluster-search-between-6-5-1-and-5-6-2/168518)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 8\ **Last updated:** [February 21, 2019, 12:03pm UTC](https://discuss.elastic.co/t/shaky-cross-cluster-search-between-6-5-1-and-5-6-2/168518 "2019-02-21T12:03:36Z")
Hi everyone, I originally intended to post the full content here, but discuss wouldn't allow me as the content was too long. Feeling that it is important to explain the full context, I decided to post it on SO instead a… --- ## [How to stop logstash when ruby filter encountered error](https://discuss.elastic.co/t/how-to-stop-logstash-when-ruby-filter-encountered-error/267899)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 4\ **Last updated:** [March 22, 2021, 2:02am UTC](https://discuss.elastic.co/t/how-to-stop-logstash-when-ruby-filter-encountered-error/267899 "2021-03-22T02:02:57Z")
Hi, May i know how to stop logstash from indexing when error found inside ruby filter? i have following config file which will call external python script to process data and insert the records into elasticsearch. It … --- ## [TSVBとMetricのnull値の取り扱いの差](https://discuss.elastic.co/t/tsvb-metric-null/215248)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 4\ **Last updated:** [February 7, 2020, 4:55am UTC](https://discuss.elastic.co/t/tsvb-metric-null/215248 "2020-02-07T04:55:47Z")
お世話になります。 TSVBとMetricのnull値の取り扱いの差について教えてください。 たとえば以下のようなデータの場合で、testdate を Time field としてソートした場合に、value の Top Hit ( Size=1 , ORDER BY DESC ) をとると、以下のとおり差があります。 TSVB \_id=1のnullが無視され、\_id=2の10が取得(表示)される Metric \_id=… --- ## [\[Resolved\]\[Kibana\]Is it possible to drill down the pie chart view other related information?](https://discuss.elastic.co/t/resolved-kibana-is-it-possible-to-drill-down-the-pie-chart-view-other-related-information/197051)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 4\ **Last updated:** [August 30, 2019, 2:23am UTC](https://discuss.elastic.co/t/resolved-kibana-is-it-possible-to-drill-down-the-pie-chart-view-other-related-information/197051 "2019-08-30T02:23:17Z")
Hi Team, I have data like below in Kibana and created a pie chart based on it. cn,ci,at,ktf2 Siemens, SiemensPS, Search, "Competency\_Criteria,Profile\_Criteria" HSBC, HSBCPROD, Search, "Keyword, Competency\_Criteria, … --- ## [Timezone problem in ElasticSearch and Logstash](https://discuss.elastic.co/t/timezone-problem-in-elasticsearch-and-logstash/180163)
**Author:** [@Ravindra\_Nath](https://discuss.elastic.co/u/Ravindra_Nath)\ **Replies:** 4\ **Last updated:** [May 9, 2019, 3:19pm UTC](https://discuss.elastic.co/t/timezone-problem-in-elasticsearch-and-logstash/180163 "2019-05-09T15:19:51Z")
I have a DATETIME field in MySQL database table. I am dumping that table data to Elastic Search through logstash. When the data is being loaded into elastic search the time field(DATETIME type) of the log is changing. An… --- ## [Curator delete\_indices](https://discuss.elastic.co/t/curator-delete-indices/135311)
**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\ **Replies:** 4\ **Last updated:** [June 13, 2018, 3:20am UTC](https://discuss.elastic.co/t/curator-delete-indices/135311 "2018-06-13T03:20:32Z")
I use curator to delete the index, and then execute the delete command(curator\_cli --host 172.17.91.21 --port 9200 delete\_indices --filter\_list '\[{"filtertype": "pattern", "kind": "timestring", " Value": "2018.06.11"}\]'),… --- ## [Field Data Format not working when using bucket in Visualize](https://discuss.elastic.co/t/field-data-format-not-working-when-using-bucket-in-visualize/98526)
**Author:** [@byakuinss](https://discuss.elastic.co/u/byakuinss)\ **Replies:** 4\ **Last updated:** [August 31, 2017, 9:22am UTC](https://discuss.elastic.co/t/field-data-format-not-working-when-using-bucket-in-visualize/98526 "2017-08-31T09:22:16Z")
The field is using Btyes format, it works fine in Discovery and Average aggregation in Visualize. Indices Pattern Page: \[image\] Average Aggregation: \[image\] But when I changed to average aggregation by Max bucket, i… --- ## [Can't get stop words working](https://discuss.elastic.co/t/cant-get-stop-words-working/9828)
**Author:** [@racedo](https://discuss.elastic.co/u/racedo)\ **Replies:** 4\ **Last updated:** [November 28, 2012, 2:08am UTC](https://discuss.elastic.co/t/cant-get-stop-words-working/9828 "2012-11-28T02:08:38Z")
I'm trying to add some stopwords to the default settings that haystack is using and the settings look like this (added "esto", "que" and "de" just for testing purposes: 'settings': { "analysis… --- ## [Resend logs in filebeat to logstash](https://discuss.elastic.co/t/resend-logs-in-filebeat-to-logstash/172400)
**Author:** [@Arthur19](https://discuss.elastic.co/u/Arthur19)\ **Replies:** 0\ **Last updated:** [March 14, 2019, 5:59pm UTC](https://discuss.elastic.co/t/resend-logs-in-filebeat-to-logstash/172400 "2019-03-14T17:59:30Z")
Hi, Thanks in advance for your help. I would like to reload some logs to customize additional fields. I have noticed that registry file in filebeat configuration keeps track of the files already picked. However, if I re… --- ## [Elasticsearch-certutil http](https://discuss.elastic.co/t/elasticsearch-certutil-http/286230)
**Author:** [@karpaz](https://discuss.elastic.co/u/karpaz)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 5:25am UTC](https://discuss.elastic.co/t/elasticsearch-certutil-http/286230 "2021-10-11T05:25:12Z")
Hello everyone, I figured out that when generating http certificates by tool ./bin/elasticsearch-certutil http than it didn't work when I have password protected \*.pem/\*.key files. It does generate certs only if it's us… --- ## [Decapsulating traffic in a GRE tunnel](https://discuss.elastic.co/t/decapsulating-traffic-in-a-gre-tunnel/137503)
**Author:** [@Sweendog](https://discuss.elastic.co/u/Sweendog)\ **Replies:** 2\ **Last updated:** [June 28, 2018, 12:47pm UTC](https://discuss.elastic.co/t/decapsulating-traffic-in-a-gre-tunnel/137503 "2018-06-28T12:47:52Z")
Hi, I may be missing it, but I can't seem to find how to have packetbeat strip GRE headers from a L2 tunnel I have set up. Basically, when looking at the traffic in tcpdump, tshark, or wireshark, you can see the traffi… --- ## [Watcher - Transform - Painless - Regular Expression / Regex - Documentation Issue?](https://discuss.elastic.co/t/watcher-transform-painless-regular-expression-regex-documentation-issue/90661)
**Author:** [@brommer](https://discuss.elastic.co/u/brommer)\ **Replies:** 2\ **Last updated:** [June 26, 2017, 8:08am UTC](https://discuss.elastic.co/t/watcher-transform-painless-regular-expression-regex-documentation-issue/90661 "2017-06-26T08:08:51Z")
Hi there, at https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-scripting-painless.html you show some examples of how to use regex in a painless script. In those examples you are never using m.matc… --- ## [Module not found error when including TemplateVisType class](https://discuss.elastic.co/t/module-not-found-error-when-including-templatevistype-class/57586)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [August 10, 2016, 2:39am UTC](https://discuss.elastic.co/t/module-not-found-error-when-including-templatevistype-class/57586 "2016-08-10T02:39:55Z")
Hi! I am now building custom visualization plugin on kibana and I would like to ask question about custom visualization. My environment is kibana alpha5.0.0-alpha5. I have used git clone https://github.com/elastic/k… --- ## [Integrating elasticsearch 2.3.4 and Mongodb 3.2.8](https://discuss.elastic.co/t/integrating-elasticsearch-2-3-4-and-mongodb-3-2-8/56753)
**Author:** [@Ziad\_Qadora](https://discuss.elastic.co/u/Ziad_Qadora)\ **Replies:** 2\ **Last updated:** [August 2, 2016, 9:01pm UTC](https://discuss.elastic.co/t/integrating-elasticsearch-2-3-4-and-mongodb-3-2-8/56753 "2016-08-02T21:01:03Z")
Hello, I'm trying to find documentation on integrating elasticsearch 2.3.4 and Mongo db 3.2.8 and so far I'm not able to find any. I understand that in the current versions, the river driver is no longer needed. Thus… --- ## [Kibana 4.5.1 stop](https://discuss.elastic.co/t/kibana-4-5-1-stop/55818)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 2\ **Last updated:** [July 21, 2016, 5:02pm UTC](https://discuss.elastic.co/t/kibana-4-5-1-stop/55818 "2016-07-21T17:02:35Z")
Hi, We setup a fresh new log server for our Apache logs, everything is fine and we love it :heart\_eyes: But each morning I need to start by hand kibana i.e sudo /etc/init.d/kibana start After start it run correctly dur… --- ## [Kibana and the markdown widget](https://discuss.elastic.co/t/kibana-and-the-markdown-widget/35322)
**Author:** [@sylv](https://discuss.elastic.co/u/sylv)\ **Replies:** 2\ **Last updated:** [November 24, 2015, 12:05pm UTC](https://discuss.elastic.co/t/kibana-and-the-markdown-widget/35322 "2015-11-24T12:05:43Z")
Hello I meet a problem ... i create a table with a few links (links to dashboards) using the markdown widget I saved that table with a name... then i copied that saved that table on each of the destination dashboard af… --- ## [Packetbeat8.0 af\_packet report errors](https://discuss.elastic.co/t/packetbeat8-0-af-packet-report-errors/298180)
**Author:** [@chinaxushi](https://discuss.elastic.co/u/chinaxushi)\ **Replies:** 7\ **Last updated:** [March 21, 2022, 5:27pm UTC](https://discuss.elastic.co/t/packetbeat8-0-af-packet-report-errors/298180 "2022-03-21T17:27:29Z")
Packetbeat Version: 8.0 Operating System: Rocky Linux 8.5 After the "af\_packet" mode is enabled in the configuration file, Packetbeat will report an error and prompt "exiting: sniffer loop failed: sniffing error: packe… --- ## [Elasticsearch community edition and enterprise edition documentation](https://discuss.elastic.co/t/elasticsearch-community-edition-and-enterprise-edition-documentation/215428)
**Author:** [@sreenivasulu](https://discuss.elastic.co/u/sreenivasulu)\ **Replies:** 1\ **Last updated:** [January 17, 2020, 9:02am UTC](https://discuss.elastic.co/t/elasticsearch-community-edition-and-enterprise-edition-documentation/215428 "2020-01-17T09:02:35Z")
Hi Team, Could you please provide me URLs are any documentation for "Elasticsearch community edition and enterprise edition documentation" to understand complete environment. Thanks Srinivas --- ## [What are the benefits of certutil over openssl?](https://discuss.elastic.co/t/what-are-the-benefits-of-certutil-over-openssl/161061)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 1\ **Last updated:** [December 17, 2018, 6:18am UTC](https://discuss.elastic.co/t/what-are-the-benefits-of-certutil-over-openssl/161061 "2018-12-17T06:18:19Z")
I'm new to using it but I'm wondering what the major benefits are over using just the standard openssl? --- ## [Office 365 module: data is not showing in dashboard and beat fails after 1 hour](https://discuss.elastic.co/t/office-365-module-data-is-not-showing-in-dashboard-and-beat-fails-after-1-hour/282709)
**Author:** [@jared.smith](https://discuss.elastic.co/u/jared.smith)\ **Replies:** 6\ **Last updated:** [September 10, 2021, 3:47am UTC](https://discuss.elastic.co/t/office-365-module-data-is-not-showing-in-dashboard-and-beat-fails-after-1-hour/282709 "2021-09-10T03:47:56Z")
After installing and configuring the Office 365 Module according to instructions here, I'm seeing a couple of issues. After running successfully for (exactly) 1 hour, the o365beat process on the Windows 10 machine fail… --- ## [Curl Output is not complete](https://discuss.elastic.co/t/curl-output-is-not-complete/255048)
**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\ **Replies:** 6\ **Last updated:** [November 15, 2020, 5:33pm UTC](https://discuss.elastic.co/t/curl-output-is-not-complete/255048 "2020-11-15T17:33:36Z")
Hello Team I am using Elasticsearch Version 7.8.0. I am executing an query on Elasticsearch index. The output of CURL command is not complete, IT shows incomplete records only. I suppose there is some limit / default … --- ## [No mapping found for \[days\] in order to sort on](https://discuss.elastic.co/t/no-mapping-found-for-days-in-order-to-sort-on/238107)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 2:47pm UTC](https://discuss.elastic.co/t/no-mapping-found-for-days-in-order-to-sort-on/238107 "2020-06-23T14:47:24Z")
At the beggining of this month I added a template and a new numeric field for an index, so the field doesnt exists in the previous months, when displaying an horizontal bar visualizations (even if I query the last hour o… --- ## [Ship only a percentage of logs to logstash](https://discuss.elastic.co/t/ship-only-a-percentage-of-logs-to-logstash/77393)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 3\ **Last updated:** [March 11, 2017, 4:55pm UTC](https://discuss.elastic.co/t/ship-only-a-percentage-of-logs-to-logstash/77393 "2017-03-11T16:55:18Z")
How can I configure filebeat to only ship a percentage of logs (a sample if you will) In my application's log folder the logs are chunked to about 20 megs each. I want filebeat to ship only 1/300th of that log volume … --- ## [Feedback loop for results from elastic search](https://discuss.elastic.co/t/feedback-loop-for-results-from-elastic-search/76913)
**Author:** [@vishva\_deepak\_tewari](https://discuss.elastic.co/u/vishva_deepak_tewari)\ **Replies:** 3\ **Last updated:** [March 1, 2017, 7:45am UTC](https://discuss.elastic.co/t/feedback-loop-for-results-from-elastic-search/76913 "2017-03-01T07:45:51Z")
I have a scenario where I need to list a bunch of jobs from elastic search. The searches would mainly be done by keywords eg. (electrical engineering, driver etc.) I want to create a feedback system where corresponding k… --- ## [What's better, multi config or one config(multi input)](https://discuss.elastic.co/t/whats-better-multi-config-or-one-config-multi-input/71925)
**Author:** [@leewig](https://discuss.elastic.co/u/leewig)\ **Replies:** 3\ **Last updated:** [January 19, 2017, 6:26am UTC](https://discuss.elastic.co/t/whats-better-multi-config-or-one-config-multi-input/71925 "2017-01-19T06:26:25Z")
hi, everybody. i have used logstash for collecting the data of mysql. the data of mysql have several tables, and i created config files like below. tb\_a.config input { jdbc { jdbc\_driver\_l… --- ## [What's wrong with this query? (has\_parent + bool)](https://discuss.elastic.co/t/whats-wrong-with-this-query-has-parent-bool/16297)
**Author:** [@Robin\_Boutros](https://discuss.elastic.co/u/Robin_Boutros)\ **Replies:** 3\ **Last updated:** [March 11, 2014, 9:37pm UTC](https://discuss.elastic.co/t/whats-wrong-with-this-query-has-parent-bool/16297 "2014-03-11T21:37:55Z")
I get this error: Parse Failure \[No parser for element \[parent\_type\]\] Here's the query: { :query=\> {:bool=\>{ :must=\> \[{:term=\>{:verified=\>{:term=\>true}}}, {:term=\>{:ar… --- ## [Retrieve multiple documents in elasticsearch filter](https://discuss.elastic.co/t/retrieve-multiple-documents-in-elasticsearch-filter/192751)
**Author:** [@jdcohen220](https://discuss.elastic.co/u/jdcohen220)\ **Replies:** 2\ **Last updated:** [July 29, 2019, 7:31pm UTC](https://discuss.elastic.co/t/retrieve-multiple-documents-in-elasticsearch-filter/192751 "2019-07-29T19:31:50Z")
Hi, Is it possible to retrieve multiple elasticsearch documents from a query using the elasticsearch filter plugin? All the docs show use cases with a single log document. --- ## [Logstash as daemon won't start](https://discuss.elastic.co/t/logstash-as-daemon-wont-start/255716)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [November 17, 2020, 10:05pm UTC](https://discuss.elastic.co/t/logstash-as-daemon-wont-start/255716 "2020-11-17T22:05:25Z")
I just upgraded system to 7.10.0 this is test system. and logstash daemon won't start. here is result of journalctl -xe start-up result is done. Nov 17 08:28:25 elkdev01 logstash\[13918\]: Using bundled JDK: /usr/sha… --- ## [How to make control visualization as not case sensitive](https://discuss.elastic.co/t/how-to-make-control-visualization-as-not-case-sensitive/218769)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 4:49pm UTC](https://discuss.elastic.co/t/how-to-make-control-visualization-as-not-case-sensitive/218769 "2020-02-12T16:49:37Z")
I am using Controls visualization options list in kibana. If we search value in this visualization it is case sensitive... How can I make this as not case sensitive.. I am using below query to get... {"index":"logst… --- ## [ElasticSearch error - org.elasticsearch.action.search.SearchPhaseExecutionException: all shards failed](https://discuss.elastic.co/t/elasticsearch-error-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/177350)
**Author:** [@robp21751](https://discuss.elastic.co/u/robp21751)\ **Replies:** 1\ **Last updated:** [April 17, 2019, 6:03pm UTC](https://discuss.elastic.co/t/elasticsearch-error-org-elasticsearch-action-search-searchphaseexecutionexception-all-shards-failed/177350 "2019-04-17T18:03:32Z")
I am not collecting any logs. The drive became 85% full which is what started this issue I believe. It is now at 60% I ran the following, which did not help curl -X PUT "localhost:9200/.kibana/\_settings" -H 'Content-Ty… --- ## [Install lastest version of logstash on centos 7](https://discuss.elastic.co/t/install-lastest-version-of-logstash-on-centos-7/25640)
**Author:** [@ukanabar](https://discuss.elastic.co/u/ukanabar)\ **Replies:** 1\ **Last updated:** [July 15, 2015, 2:57pm UTC](https://discuss.elastic.co/t/install-lastest-version-of-logstash-on-centos-7/25640 "2015-07-15T14:57:51Z")
Hello Friends, I am looking an article,web page or steps using which i can install logstash latest version and related components. We have IBM HTTP server Kibana 4.1.1 Logstash 1.5.2 Elasticsearch 1.6.0 Redis 3.0.2 Mai… --- ## [Elasticsearch upgrade from 7 to 8](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-to-8/384901)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 5\ **Last updated:** [February 6, 2026, 9:27pm UTC](https://discuss.elastic.co/t/elasticsearch-upgrade-from-7-to-8/384901 "2026-02-06T21:27:27Z")
Hi All, Our current cluster is running on elasticsearch version 7.17.3 and we are planning to upgrade to version 8.15.2 (hopefully an allowed version) We want to adopt a "rolling upgrade" doing one instance at a time. … --- ## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/287245)
**Author:** [@spo](https://discuss.elastic.co/u/spo)\ **Replies:** 5\ **Last updated:** [October 23, 2021, 7:31pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/287245 "2021-10-23T19:31:26Z")
Hello, I tried setting up TLS on the HTTP layer in Elasticsearch and after the process I am getting an error "Kibana server is not ready yet". root@ip-pri.ip:~# systemctl status kibana ● kibana.service - Kibana Loa… --- ## [Is there any method to parse json without quotations, kind of file in logstash](https://discuss.elastic.co/t/is-there-any-method-to-parse-json-without-quotations-kind-of-file-in-logstash/44392)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 5\ **Last updated:** [March 16, 2016, 6:43am UTC](https://discuss.elastic.co/t/is-there-any-method-to-parse-json-without-quotations-kind-of-file-in-logstash/44392 "2016-03-16T06:43:01Z")
I had a file which i want to parse with logstash, but its a json with out quotation marks. Is there any method to parse it? [Previous page](https://discuss.elastic.co/top.md?page=1093&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1095&per_page=50&period=all)