# Top **URL:** https://discuss.elastic.co/top.md?page=1117&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1118 --- ## [CSP in Kibana](https://discuss.elastic.co/t/csp-in-kibana/248149)
**Author:** [@Alder](https://discuss.elastic.co/u/Alder)\ **Replies:** 3\ **Last updated:** [September 10, 2020, 2:07pm UTC](https://discuss.elastic.co/t/csp-in-kibana/248149 "2020-09-10T14:07:42Z")
Hello to all of the elastic team. I'm trying create a space with the C# code below. The http response suggests that CSP rules are blocking my request private void testCreateSpace() { string spaceJson = … --- ## [Description for each field in Elasticsearch Index](https://discuss.elastic.co/t/description-for-each-field-in-elasticsearch-index/229659)
**Author:** [@dspatil90](https://discuss.elastic.co/u/dspatil90)\ **Replies:** 3\ **Last updated:** [April 28, 2020, 7:09am UTC](https://discuss.elastic.co/t/description-for-each-field-in-elasticsearch-index/229659 "2020-04-28T07:09:13Z")
Hello All, I am new to Elasticsearch. I wanted to create a description sub-field for each field in the index. For ex. {'properties': { 'location': { 'type': … --- ## [Export forecast data](https://discuss.elastic.co/t/export-forecast-data/124875)
**Author:** [@Oscarlf](https://discuss.elastic.co/u/Oscarlf)\ **Replies:** 3\ **Last updated:** [April 4, 2018, 8:07pm UTC](https://discuss.elastic.co/t/export-forecast-data/124875 "2018-04-04T20:07:24Z")
Hi everyone! Is there any possibility of exporting the data reflected in a forecast scenario? I can see it and the comparison in the Single Metric Viewer, but I would like to use it or manage it to do some other calcula… --- ## [Logstash re-read input file everytime there is modification](https://discuss.elastic.co/t/logstash-re-read-input-file-everytime-there-is-modification/53022)
**Author:** [@shiva](https://discuss.elastic.co/u/shiva)\ **Replies:** 3\ **Last updated:** [June 17, 2016, 12:40pm UTC](https://discuss.elastic.co/t/logstash-re-read-input-file-everytime-there-is-modification/53022 "2016-06-17T12:40:17Z")
I have an input file named test.csv and I use it as some kind of configuration. How do i force logstash to re read the file from beginning, everytime there is modification in the test.csv file --- ## [GC - Node Freezes and all operations fails from client](https://discuss.elastic.co/t/gc-node-freezes-and-all-operations-fails-from-client/49382)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 3\ **Last updated:** [May 6, 2016, 1:16pm UTC](https://discuss.elastic.co/t/gc-node-freezes-and-all-operations-fails-from-client/49382 "2016-05-06T13:16:49Z")
Hey All, Currently, I am running ES 1.7.1 with 8GB heap on a 16 CPU core machine. I am doing filter/Aggregation operation on demand. Node was good for few days but suddenly I started seeing GC logs \[monitor.jvm … --- ## [Update\_by\_query - empty failures list in response when conflicts=proceed](https://discuss.elastic.co/t/update-by-query-empty-failures-list-in-response-when-conflicts-proceed/325100)
**Author:** [@Przemyslaw\_Mantaj](https://discuss.elastic.co/u/Przemyslaw_Mantaj)\ **Replies:** 1\ **Last updated:** [February 15, 2023, 5:51am UTC](https://discuss.elastic.co/t/update-by-query-empty-failures-list-in-response-when-conflicts-proceed/325100 "2023-02-15T05:51:30Z")
Continuing the discussion from Update\_by\_query with proceed does not return failure: I repeat @Paul\_Le\_Tilly question. Is it possible to return the failures list when the conflicts option has been set to proceed? Than… --- ## [Master Node toggles permanently](https://discuss.elastic.co/t/master-node-toggles-permanently/242284)
**Author:** [@michael\_0815](https://discuss.elastic.co/u/michael_0815)\ **Replies:** 6\ **Last updated:** [July 24, 2020, 8:08am UTC](https://discuss.elastic.co/t/master-node-toggles-permanently/242284 "2020-07-24T08:08:20Z")
Hi there, we have an issue that we have constantly toggling of the master node - it leaves and joins permanently. We deleted all nodes including pvc and started all over. Same issue in AKS again. It´s a 3 node setup. L… --- ## [Logstash change default @timestamp value by field from mongo](https://discuss.elastic.co/t/logstash-change-default-timestamp-value-by-field-from-mongo/225911)
**Author:** [@7cinquante](https://discuss.elastic.co/u/7cinquante)\ **Replies:** 6\ **Last updated:** [March 31, 2020, 11:07pm UTC](https://discuss.elastic.co/t/logstash-change-default-timestamp-value-by-field-from-mongo/225911 "2020-03-31T23:07:51Z")
Hello, I would like get @timestamp to be my mongo field "created\_at", i do input { jdbc { jdbc\_driver\_library =\> "/usr/share/logstash/logstash-core/lib/jars/mongojdbc1.8.jar" jdbc\_driver\_class =\> "com.dbschem… --- ## [Delete\_snapshot action fails, get() takes at least 2 arguments (2 given)](https://discuss.elastic.co/t/delete-snapshot-action-fails-get-takes-at-least-2-arguments-2-given/219934)
**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\ **Replies:** 6\ **Last updated:** [February 25, 2020, 3:39pm UTC](https://discuss.elastic.co/t/delete-snapshot-action-fails-get-takes-at-least-2-arguments-2-given/219934 "2020-02-25T15:39:19Z")
Hi, We have the following action file for curator: --- actions: 1: action: delete\_snapshots description: \>- Delete snapshots older than 6 months for all logstash snapshots options: repository:… --- ## [Logstash monitoring problem](https://discuss.elastic.co/t/logstash-monitoring-problem/215468)
**Author:** [@dennys\_84](https://discuss.elastic.co/u/dennys_84)\ **Replies:** 6\ **Last updated:** [January 30, 2020, 8:02am UTC](https://discuss.elastic.co/t/logstash-monitoring-problem/215468 "2020-01-30T08:02:33Z")
Hi all. We are trying to use stack monitoring feature. But after we enabled internal monitoring we see only Elasticsearch and Kibana instances. Entering SETUP mode show Logstash and Beats with empty values and drops err… --- ## [How many open files/handles should ES have?](https://discuss.elastic.co/t/how-many-open-files-handles-should-es-have/110245)
**Author:** [@Jose\_Ramierez](https://discuss.elastic.co/u/Jose_Ramierez)\ **Replies:** 6\ **Last updated:** [December 22, 2017, 3:57pm UTC](https://discuss.elastic.co/t/how-many-open-files-handles-should-es-have/110245 "2017-12-22T15:57:32Z")
5.6.4 on CentOS 7 \[root@localhost ~\]# lsof |grep elasticsearch|wc -l 6780 is that a normal number? This ES instance is behind logstash, fwiw. The same command against logstash shows 170-200 open files. --- ## [Translate filter](https://discuss.elastic.co/t/translate-filter/56359)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 6\ **Last updated:** [July 28, 2016, 4:59am UTC](https://discuss.elastic.co/t/translate-filter/56359 "2016-07-28T04:59:59Z")
how to match multiple fields using translate filter? --- ## [Path "/usr/share/logstash/data" must be a writable directory -- Most secure way to make it so?](https://discuss.elastic.co/t/path-usr-share-logstash-data-must-be-a-writable-directory-most-secure-way-to-make-it-so/259338)
**Author:** [@danibe](https://discuss.elastic.co/u/danibe)\ **Replies:** 0\ **Last updated:** [December 22, 2020, 7:38am UTC](https://discuss.elastic.co/t/path-usr-share-logstash-data-must-be-a-writable-directory-most-secure-way-to-make-it-so/259338 "2020-12-22T07:38:56Z")
Running '/usr/share/logstash/bin/logstash' as root works perfectly but obviously is not the recommended long term mode of use. So, I did: chown -R logstash:logstash conf.d chmod -R 775 /usr/share/logstash/data sudo use… --- ## ["message" is empty or non-existent](https://discuss.elastic.co/t/message-is-empty-or-non-existent/211535)
**Author:** [@grimshad](https://discuss.elastic.co/u/grimshad)\ **Replies:** 5\ **Last updated:** [December 11, 2019, 11:19pm UTC](https://discuss.elastic.co/t/message-is-empty-or-non-existent/211535 "2019-12-11T23:19:02Z")
using this input: input { udp { port =\> 2055 codec =\> netflow } } and stdout: "@timestamp" =\> 2019-12-10T11:48:02.921Z, "netflow" =\> { "input\_snmp" =\> 0, "ipv4\_dst\_addr" =\> "77.12.190.94", "output\_… --- ## [Changing X-Axis Labels in a Bar Graph](https://discuss.elastic.co/t/changing-x-axis-labels-in-a-bar-graph/202178)
**Author:** [@planetracer](https://discuss.elastic.co/u/planetracer)\ **Replies:** 5\ **Last updated:** [October 3, 2019, 1:55pm UTC](https://discuss.elastic.co/t/changing-x-axis-labels-in-a-bar-graph/202178 "2019-10-03T13:55:46Z")
if I have the following: How can I change it so that the x-axis labels say "hit" and "full"? --- ## [Filebeat consuming disk space](https://discuss.elastic.co/t/filebeat-consuming-disk-space/158145)
**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\ **Replies:** 5\ **Last updated:** [November 26, 2018, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-consuming-disk-space/158145 "2018-11-26T12:46:24Z")
Filebeat process is utilizing disk space. No clue why and where? Whenever disk utilization reaches high, I restarted filebeat service and disk utilization reduced. How can I fix this? ''' \[ec2-user@tomcat ~\] df -H Fi… --- ## [Get queries / sec metric](https://discuss.elastic.co/t/get-queries-sec-metric/72236)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 5\ **Last updated:** [January 24, 2017, 2:38am UTC](https://discuss.elastic.co/t/get-queries-sec-metric/72236 "2017-01-24T02:38:40Z")
We want to monitor live traffic (incoming and outgoing) to cluster. I can't seem to find a way to fetch queries / sec. What is the metric I should be looking at? Some metrics I looked at but they don't seem to get what… --- ## [Configuring APM server with env variables in docker-compose](https://discuss.elastic.co/t/configuring-apm-server-with-env-variables-in-docker-compose/235558)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [June 4, 2020, 7:39am UTC](https://discuss.elastic.co/t/configuring-apm-server-with-env-variables-in-docker-compose/235558 "2020-06-04T07:39:42Z")
Hello. I'm trying to configure an APM server as a service in a docker-compose file. I'm doing this by setting some environment variables. This works for Elasticsearch and Kibana (although very differently, for Elasticse… --- ## [logstashでOutputを複数指定し、順番に実行したい](https://discuss.elastic.co/t/logstash-output/189922)
**Author:** [@harad](https://discuss.elastic.co/u/harad)\ **Replies:** 1\ **Last updated:** [August 6, 2019, 5:35am UTC](https://discuss.elastic.co/t/logstash-output/189922 "2019-08-06T05:35:52Z")
logstashのoutputのcsv-pluginでcsv出力が終わったことを確認して、次のoutputを開始するようなことは可能でしょうか。 具体的には、下記のようなソースで、 input { file { path =\> "/etc/logstash/csv/\*" ～ } } filter { csv{ ～ } } output { csv { … --- ## [Delete Child Documents using parent Id in Parent Child](https://discuss.elastic.co/t/delete-child-documents-using-parent-id-in-parent-child/62265)
**Author:** [@Abhijit\_Shivathare](https://discuss.elastic.co/u/Abhijit_Shivathare)\ **Replies:** 1\ **Last updated:** [October 6, 2016, 12:01pm UTC](https://discuss.elastic.co/t/delete-child-documents-using-parent-id-in-parent-child/62265 "2016-10-06T12:01:31Z")
I have created the parent child mapping for vpost and vplike Added data as follows POST /ab/vpost/\_bulk {"index":{"\_id": 1}} {"title":"Olympic post 1","uId":"101","uName":"suyog"\]} {"index":{"\_id": 2}} … --- ## [English Please! "Field data loading is forbidden on \[city\]"}](https://discuss.elastic.co/t/english-please-field-data-loading-is-forbidden-on-city/53245)
**Author:** [@David\_Montgomery](https://discuss.elastic.co/u/David_Montgomery)\ **Replies:** 1\ **Last updated:** [June 19, 2016, 10:16pm UTC](https://discuss.elastic.co/t/english-please-field-data-loading-is-forbidden-on-city/53245 "2016-06-19T22:16:50Z")
Hey Wow....elasticsearch..what is the below error in English. Does kibana work? Given the lack of documentation seems seems very unstable. I have data in ES, see it in kibana, should be able to chart...done! But … --- ## [How to display full error messege in Visualize?](https://discuss.elastic.co/t/how-to-display-full-error-messege-in-visualize/40319)
**Author:** [@Sadik\_s](https://discuss.elastic.co/u/Sadik_s)\ **Replies:** 1\ **Last updated:** [January 29, 2016, 2:59pm UTC](https://discuss.elastic.co/t/how-to-display-full-error-messege-in-visualize/40319 "2016-01-29T14:59:53Z")
Hi All, I want to display the full log messege in Visualize module as soon as i click on any bars in the vertical bar chart just below the chart. How can we do that in kibana?. --- ## [Updating role privileges is not effective](https://discuss.elastic.co/t/updating-role-privileges-is-not-effective/278799)
**Author:** [@kpe](https://discuss.elastic.co/u/kpe)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 8:52am UTC](https://discuss.elastic.co/t/updating-role-privileges-is-not-effective/278799 "2021-07-16T08:52:30Z")
Hello, I've set an api\_key to manage an index but I'm getting this error : Error: \[403\] {"error":{"root\_cause":\[{"type":"security\_exception","reason":"action \[indices:data/read/search\] is unauthorized for API key id \[\*… --- ## [How to rename some fields by using regex statement](https://discuss.elastic.co/t/how-to-rename-some-fields-by-using-regex-statement/257031)
**Author:** [@xrubick](https://discuss.elastic.co/u/xrubick)\ **Replies:** 2\ **Last updated:** [December 1, 2020, 2:45am UTC](https://discuss.elastic.co/t/how-to-rename-some-fields-by-using-regex-statement/257031 "2020-12-01T02:45:04Z")
this's my logstash output: "prometheus" =\> { "metrics" =\> { "container\_cpu\_load\_average\_10s" =\> 0, "container\_cpu\_user\_seconds\_total" =\> 18.15, "container\_cpu\_syst… --- ## [I/O Scheduler type](https://discuss.elastic.co/t/i-o-scheduler-type/173168)
**Author:** [@y3046308](https://discuss.elastic.co/u/y3046308)\ **Replies:** 2\ **Last updated:** [April 17, 2019, 2:45pm UTC](https://discuss.elastic.co/t/i-o-scheduler-type/173168 "2019-04-17T14:45:09Z")
Hi I read from the documentation about how changing I/O Scheduler may significantly boost the performance of my cluster. When I checked /sys/block/nvme0n1/queue/scheduler , it was set to along with other options mq-de… --- ## [Change log output of Filebeat](https://discuss.elastic.co/t/change-log-output-of-filebeat/138184)
**Author:** [@solo](https://discuss.elastic.co/u/solo)\ **Replies:** 2\ **Last updated:** [July 2, 2018, 11:47am UTC](https://discuss.elastic.co/t/change-log-output-of-filebeat/138184 "2018-07-02T11:47:44Z")
My logs path is: /var/log/filebeat How can i change it to /opt/filebeat/log/filebeat.log ? I cant see any options for changing this in my filebeat.yml file. I only have this: #================================ Logging … --- ## [Stuck with unassigned shards](https://discuss.elastic.co/t/stuck-with-unassigned-shards/60189)
**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\ **Replies:** 2\ **Last updated:** [September 9, 2016, 6:38pm UTC](https://discuss.elastic.co/t/stuck-with-unassigned-shards/60189 "2016-09-09T18:38:28Z")
Hello, Following a forced reboot we're stuck with 117 unassigned shards, and it doesn't move from 2 hours now. What can we do? Cluster Health: { "cluster\_name" : "ELASTIC", "status" : "yellow", "timed\_out"… --- ## [Conditional colouring of values in a column in a data table](https://discuss.elastic.co/t/conditional-colouring-of-values-in-a-column-in-a-data-table/244693)
**Author:** [@silasr](https://discuss.elastic.co/u/silasr)\ **Replies:** 4\ **Last updated:** [August 12, 2020, 10:10am UTC](https://discuss.elastic.co/t/conditional-colouring-of-values-in-a-column-in-a-data-table/244693 "2020-08-12T10:10:30Z")
Hi everyone. I'm trying to do some possibly advanced conditional statement for columns in a data table. Ideally, I would like to change the color of a string, based on the value of another field in the same document. I'… --- ## [java.io.IOException: An established connection was aborted by the software in your host machine](https://discuss.elastic.co/t/java-io-ioexception-an-established-connection-was-aborted-by-the-software-in-your-host-machine/242658)
**Author:** [@chelawatankit](https://discuss.elastic.co/u/chelawatankit)\ **Replies:** 4\ **Last updated:** [August 3, 2020, 10:35am UTC](https://discuss.elastic.co/t/java-io-ioexception-an-established-connection-was-aborted-by-the-software-in-your-host-machine/242658 "2020-08-03T10:35:10Z")
Hi Team, We are using single node cluster of elasticsearch 7.1.1 version on one of our machine. System details as follow OS : windows server 2012 R2 Xmx : 6GB System RAM : 64 GB We are getting following error freque… --- ## [Elasticsearch version 6.8.6 oss unable to start](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918)
**Author:** [@mrnguuyen](https://discuss.elastic.co/u/mrnguuyen)\ **Replies:** 4\ **Last updated:** [January 15, 2020, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-version-6-8-6-oss-unable-to-start/214918 "2020-01-15T23:12:24Z")
Hi all, I am trying to do a fresh install of elasticsearch-oss-6.8.6 with OpenJDK version 1.8.0\_181. An elasticsearch-oss-6.5 was able to successfully install before but I am receiving errors related to the keystore and… --- ## [ElasticCloud APM](https://discuss.elastic.co/t/elasticcloud-apm/123678)
**Author:** [@dicarlo2](https://discuss.elastic.co/u/dicarlo2)\ **Replies:** 1\ **Last updated:** [March 13, 2018, 5:40am UTC](https://discuss.elastic.co/t/elasticcloud-apm/123678 "2018-03-13T05:40:18Z")
Is it possible to load the dedicated APM UI on ElasticCloud? --- ## [The date filter's timezone offset match not working?](https://discuss.elastic.co/t/the-date-filters-timezone-offset-match-not-working/109303)
**Author:** [@helloEson](https://discuss.elastic.co/u/helloEson)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 6:37am UTC](https://discuss.elastic.co/t/the-date-filters-timezone-offset-match-not-working/109303 "2017-11-28T06:37:33Z")
Hello, I have a time field like this: "time\_local" =\> "23/Nov/2017:18:54:31 +0800" And i want to use date filter to extract it to field @timestamp, so i have the filter pattern like this: date { match =\> \[ "time\_lo… --- ## [Wildcard search for exact phrase](https://discuss.elastic.co/t/wildcard-search-for-exact-phrase/258022)
**Author:** [@vadim-permakoff](https://discuss.elastic.co/u/vadim-permakoff)\ **Replies:** 3\ **Last updated:** [December 10, 2020, 7:48pm UTC](https://discuss.elastic.co/t/wildcard-search-for-exact-phrase/258022 "2020-12-10T19:48:41Z")
We want to migrate from Solr to Elasticsearch and everything looks fine, but there is one task we are doing in Solr for which I cannot find a solution using Elasticsearch. I need to find exactly matching text in a conten… --- ## [Forwarding logs to external network ELK cluster](https://discuss.elastic.co/t/forwarding-logs-to-external-network-elk-cluster/224432)
**Author:** [@huntingthreats](https://discuss.elastic.co/u/huntingthreats)\ **Replies:** 3\ **Last updated:** [March 20, 2020, 4:11pm UTC](https://discuss.elastic.co/t/forwarding-logs-to-external-network-elk-cluster/224432 "2020-03-20T16:11:14Z")
Hi everyone, I have a question about forwarding Beat data from a Customer's network to an offsite network. The idea is to get insight in the hosts data, retrieve those data with agents(Beats) and process them on a separ… --- ## [Limiting results by field](https://discuss.elastic.co/t/limiting-results-by-field/188541)
**Author:** [@Daz762](https://discuss.elastic.co/u/Daz762)\ **Replies:** 3\ **Last updated:** [July 2, 2019, 4:36pm UTC](https://discuss.elastic.co/t/limiting-results-by-field/188541 "2019-07-02T16:36:18Z")
Hi, I have a query that searches for a specific field value within the last hour. the problem is that this query will find roughly 4 documents each time as that is how often the data is generated. I'm trying to limit th… --- ## [XML et logstash : index non rempli](https://discuss.elastic.co/t/xml-et-logstash-index-non-rempli/159023)
**Author:** [@Pixelicus](https://discuss.elastic.co/u/Pixelicus)\ **Replies:** 3\ **Last updated:** [December 18, 2018, 10:46am UTC](https://discuss.elastic.co/t/xml-et-logstash-index-non-rempli/159023 "2018-12-18T10:46:18Z")
Bonjour à tous, je débute sur ELK et j'ai déjà fait quelques progrès (plusieurs indexes et quelques dashboard sur Kibana). Jusqu'à présent j'utilisais des parsers "homemade" pour générer mes fichiers json pour l'indexat… --- ## [ElasticSearch Hadoop Repository issue](https://discuss.elastic.co/t/elasticsearch-hadoop-repository-issue/98505)
**Author:** [@karthiga\_sivaraman](https://discuss.elastic.co/u/karthiga_sivaraman)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 3:40am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-repository-issue/98505 "2017-10-04T03:40:15Z")
In out production environment we are having Cloudera distributed Hadoop version 2.6.0-cdh5.11.0 and our Elastic search version is 2.4.1. If I install repository-hdfs plugin , I’m getting hadoop-2.7.1 And it ends in h… --- ## [Csv output is not working](https://discuss.elastic.co/t/csv-output-is-not-working/71554)
**Author:** [@ctangirala](https://discuss.elastic.co/u/ctangirala)\ **Replies:** 3\ **Last updated:** [February 9, 2017, 5:18am UTC](https://discuss.elastic.co/t/csv-output-is-not-working/71554 "2017-02-09T05:18:11Z")
I am trying to use elasticsearch input and CSV output to query my index and output a CSV file with data. However, the CSV file does't have the any data after logstash finishes processing. All I see is timestamp and %{mes… --- ## [System.fsstat filtering / processors](https://discuss.elastic.co/t/system-fsstat-filtering-processors/69029)
**Author:** [@slalomnut](https://discuss.elastic.co/u/slalomnut)\ **Replies:** 3\ **Last updated:** [December 20, 2016, 5:11pm UTC](https://discuss.elastic.co/t/system-fsstat-filtering-processors/69029 "2016-12-20T17:11:29Z")
More questions surrounding https://discuss.elastic.co/t/all-numbers-reported-by-metricbeat-too-high-bug/56094/6 and https://github.com/elastic/beats/issues/2079 Is there a way to use filters or processors to limit metr… --- ## [Dynamique mapping dans les river JDBC (pg)](https://discuss.elastic.co/t/dynamique-mapping-dans-les-river-jdbc-pg/24771)
**Author:** [@samber](https://discuss.elastic.co/u/samber)\ **Replies:** 3\ **Last updated:** [July 2, 2015, 1:36pm UTC](https://discuss.elastic.co/t/dynamique-mapping-dans-les-river-jdbc-pg/24771 "2015-07-02T13:36:51Z")
Bonjour, Je rencontre un problème avec le mapping de la JDBC river. Le contenu aspiré par Elasticsearch est une string, et contient parfois du JSON (plain text). J'ai besoin de faire des recherches fulltext sur ce co… --- ## [Should I close the older PIT id once it has been replaced by a new PIT id?](https://discuss.elastic.co/t/should-i-close-the-older-pit-id-once-it-has-been-replaced-by-a-new-pit-id/293420)
**Author:** [@pranay\_jain](https://discuss.elastic.co/u/pranay_jain)\ **Replies:** 0\ **Last updated:** [January 4, 2022, 8:51am UTC](https://discuss.elastic.co/t/should-i-close-the-older-pit-id-once-it-has-been-replaced-by-a-new-pit-id/293420 "2022-01-04T08:51:24Z")
I am working on a task in which I have to search a large number of documents in Elasticsearch. I use SearchAPI with SearchAfter and PointInTime as recommended. While fetching the results, I am using the PIT ID returned b… --- ## [Elasticsearch\[7.7\] Does not update data or takes time to update the data](https://discuss.elastic.co/t/elasticsearch-7-7-does-not-update-data-or-takes-time-to-update-the-data/353085)
**Author:** [@Akki\_Kulkarni](https://discuss.elastic.co/u/Akki_Kulkarni)\ **Replies:** 7\ **Last updated:** [February 14, 2024, 8:30am UTC](https://discuss.elastic.co/t/elasticsearch-7-7-does-not-update-data-or-takes-time-to-update-the-data/353085 "2024-02-14T08:30:27Z")
In my application, we are updating more than one document at a time for a index\_x. When queried for updated documents, it does not return updated data for few document, immediately. e.g. If I am updating 10 documents, 1 … --- ## [Replacing @timestamp with logs having custom timestamp](https://discuss.elastic.co/t/replacing-timestamp-with-logs-having-custom-timestamp/323656)
**Author:** [@sahoo35](https://discuss.elastic.co/u/sahoo35)\ **Replies:** 7\ **Last updated:** [January 22, 2023, 10:22am UTC](https://discuss.elastic.co/t/replacing-timestamp-with-logs-having-custom-timestamp/323656 "2023-01-22T10:22:39Z")
Hello Everyone, I am newbie in ELK stack and i am still learning the logstash, kibana and its further uses . Currently i am stuck at a point where i want to extract the time stamp from my logs and replace it with @times… --- ## ["Group by" in Line Charts?](https://discuss.elastic.co/t/group-by-in-line-charts/207412)
**Author:** [@PerA](https://discuss.elastic.co/u/PerA)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 9:41pm UTC](https://discuss.elastic.co/t/group-by-in-line-charts/207412 "2019-11-15T21:41:34Z")
Hi! I'm new to both Elasticsearch and Kibana, so this might be really simple so solve. I'm trying to summarize some data and display it in a simple Line Chart in Kibana, but having a hard time getting the result i want. … --- ## [Bandwidth by accumulated data?](https://discuss.elastic.co/t/bandwidth-by-accumulated-data/119811)
**Author:** [@skydiablo](https://discuss.elastic.co/u/skydiablo)\ **Replies:** 7\ **Last updated:** [February 20, 2018, 1:50pm UTC](https://discuss.elastic.co/t/bandwidth-by-accumulated-data/119811 "2018-02-20T13:50:30Z")
Hello, I would like to create a line chart of the used bandwidth. I have the data accumulated so far for every minute. How can I create a chart from it? --- ## [Elasticsearch geo search strange behavior](https://discuss.elastic.co/t/elasticsearch-geo-search-strange-behavior/111059)
**Author:** [@iandthen](https://discuss.elastic.co/u/iandthen)\ **Replies:** 7\ **Last updated:** [December 15, 2017, 2:01pm UTC](https://discuss.elastic.co/t/elasticsearch-geo-search-strange-behavior/111059 "2017-12-15T14:01:59Z")
A few days ago I faced with the strange behavior of geo search in Elasticsearch. I use AWS managed ES 5.5, obviously over REST interface. Assume we have 200k objects with location info represented as the point only. I … --- ## [Can't seem to search for a period in the message field](https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200)
**Author:** [@dpcrown](https://discuss.elastic.co/u/dpcrown)\ **Replies:** 1\ **Last updated:** [December 30, 2015, 11:50pm UTC](https://discuss.elastic.co/t/cant-seem-to-search-for-a-period-in-the-message-field/38200 "2015-12-30T23:50:00Z")
Hi everyone, I'm trying to do a really basic search in Kibana 4.0.1 but I'm having a lot of difficulty for some reason. Basically we want to search for ".prod" in the message field. The period is important, but Kibana se… --- ## [Deprecation in Kibana 7.13.4](https://discuss.elastic.co/t/deprecation-in-kibana-7-13-4/284819)
**Author:** [@CatalinBinzari](https://discuss.elastic.co/u/CatalinBinzari)\ **Replies:** 3\ **Last updated:** [November 5, 2021, 10:26am UTC](https://discuss.elastic.co/t/deprecation-in-kibana-7-13-4/284819 "2021-11-05T10:26:28Z")
in kibana 7.13.4 i can not get rid of next deprecations: plugins.scanDirs is deprecated and is no longer used has been deprecated and will be removed in 8.0. To set the destination moving forward, you can use the "… --- ## [Filebeat doesn't accept logs with container name](https://discuss.elastic.co/t/filebeat-doesnt-accept-logs-with-container-name/243723)
**Author:** [@mohanr](https://discuss.elastic.co/u/mohanr)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 5:44pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-accept-logs-with-container-name/243723 "2020-08-05T17:44:07Z")
Hi, We are using Docker to deploy microservice. Every time when we run a new container. Its id will be changed. Default logs path looks like /var/lib/docker/containers/\/\-json.log. We are usin… --- ## [How to split array or string with "Ingest Node Pipeline"](https://discuss.elastic.co/t/how-to-split-array-or-string-with-ingest-node-pipeline/277052)
**Author:** [@HaKuNa](https://discuss.elastic.co/u/HaKuNa)\ **Replies:** 2\ **Last updated:** [June 29, 2021, 12:23pm UTC](https://discuss.elastic.co/t/how-to-split-array-or-string-with-ingest-node-pipeline/277052 "2021-06-29T12:23:33Z")
Hi I'm new to ECE and have a filebeat pipeline which sends data to ECE. This is the format of the message field which I have in ECE (separator would be -\> \\t): 2021-06-25T13:08:39.559+0200 INFO 12409 com.l7tech.tra… [Previous page](https://discuss.elastic.co/top.md?page=1116&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1118&per_page=50&period=all)