# Top **URL:** https://discuss.elastic.co/top.md?page=1118&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1119 --- ## [Sql "case" in elasticsearch](https://discuss.elastic.co/t/sql-case-in-elasticsearch/166348)
**Author:** [@examin](https://discuss.elastic.co/u/examin)\ **Replies:** 2\ **Last updated:** [January 30, 2019, 12:22pm UTC](https://discuss.elastic.co/t/sql-case-in-elasticsearch/166348 "2019-01-30T12:22:58Z")
I want to do query elastic search with bands(example .. age band {10-20,20-30,etc}). How can i do this . i have tried painless scripting: by which i am able to create a new field. But i want to do group by , count , su… --- ## [Elasticsearch doesn't work after installing xpack](https://discuss.elastic.co/t/elasticsearch-doesnt-work-after-installing-xpack/90606)
**Author:** [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\ **Replies:** 2\ **Last updated:** [June 23, 2017, 12:16pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-work-after-installing-xpack/90606 "2017-06-23T12:16:26Z")
hello everyone, i have installed xpack with root permission as shown here : https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html and after this i cannot access to elasticsearch or kibana, i get the foll… --- ## [Help on mapping for "catch-all" fields](https://discuss.elastic.co/t/help-on-mapping-for-catch-all-fields/44182)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [March 12, 2016, 7:15am UTC](https://discuss.elastic.co/t/help-on-mapping-for-catch-all-fields/44182 "2016-03-12T07:15:32Z")
In a medium company, with 12 developers, I setup a super logger with logstash + elasticsearch where anyone can log anything. Log documents are like this: {"date" : "....", "data" : {"myfield1":"hello", "myfield2": 3, … --- ## [Is there any api like ElasticSearch nest api for Logstash](https://discuss.elastic.co/t/is-there-any-api-like-elasticsearch-nest-api-for-logstash/54321)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 5\ **Last updated:** [July 1, 2016, 6:43am UTC](https://discuss.elastic.co/t/is-there-any-api-like-elasticsearch-nest-api-for-logstash/54321 "2016-07-01T06:43:32Z")
Hi, Is there any api like ElasticSearch nest api for Logstash so that I can automate the loading of data programmatic. As of now I am using process and the triggering the bin and passing the command "logstash -f " Th… --- ## [Grok Debugger not shown in Dev Tools](https://discuss.elastic.co/t/grok-debugger-not-shown-in-dev-tools/249853)
**Author:** [@willis](https://discuss.elastic.co/u/willis)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 1:36pm UTC](https://discuss.elastic.co/t/grok-debugger-not-shown-in-dev-tools/249853 "2020-09-28T13:36:08Z")
We are using Kibana 7.6.2. X-Pack Security is enabled, confirmed by making a request to GET \_xpack?pretty. Currently logged into Kibana with the elastic user. However, I don't see the Grok Debugger in Dev Tools. What am… --- ## [Show my user details in a table](https://discuss.elastic.co/t/show-my-user-details-in-a-table/172037)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 4\ **Last updated:** [March 18, 2019, 5:53am UTC](https://discuss.elastic.co/t/show-my-user-details-in-a-table/172037 "2019-03-18T05:53:08Z")
I am new to kibana. Elastic stack version 6.6.1 Currently I have a setup Filebeats --\> Logstash --\> Elastic Search --\> Kibana. I am using this to parse the IIS access logs. Since I tried to load the default dashboard… --- ## [Where is the template that elasticsearch uses for syslog indexes? I am using logstash for ingestion](https://discuss.elastic.co/t/where-is-the-template-that-elasticsearch-uses-for-syslog-indexes-i-am-using-logstash-for-ingestion/138248)
**Author:** [@erikjsmith](https://discuss.elastic.co/u/erikjsmith)\ **Replies:** 4\ **Last updated:** [July 12, 2018, 1:44pm UTC](https://discuss.elastic.co/t/where-is-the-template-that-elasticsearch-uses-for-syslog-indexes-i-am-using-logstash-for-ingestion/138248 "2018-07-12T13:44:39Z")
I am getting the following error: \[2018-07-02T13:53:58,975\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[syslog-2018.07.02\]\[3\] failed to execute bulk item (index) BulkShardRequest \[\[syslog-2018.07.02\]\[3\]\] containing \[7\] re… --- ## [Is Logstash going to die?](https://discuss.elastic.co/t/is-logstash-going-to-die/65505)
**Author:** [@Patrick\_Salomon](https://discuss.elastic.co/u/Patrick_Salomon)\ **Replies:** 4\ **Last updated:** [November 14, 2016, 10:32am UTC](https://discuss.elastic.co/t/is-logstash-going-to-die/65505 "2016-11-14T10:32:52Z")
Hi there Since Elasticsearch is now able to replace Logstash (with the ingest nodes), and with the fact that Logstash is not running as the same kind of service that all other products in the stack, and finally that Lo… --- ## [Sequential keyword searching?](https://discuss.elastic.co/t/sequential-keyword-searching/48479)
**Author:** [@tgeorge](https://discuss.elastic.co/u/tgeorge)\ **Replies:** 4\ **Last updated:** [April 27, 2016, 12:44pm UTC](https://discuss.elastic.co/t/sequential-keyword-searching/48479 "2016-04-27T12:44:12Z")
Is it possible with ElasticSearch to search for a keyword or phrase AFTER a different keyword has been found? for example, document with field "text" has value of "this is a test document". I need to be able to find … --- ## [Taking string as separate token while Visualizing on KIbana](https://discuss.elastic.co/t/taking-string-as-separate-token-while-visualizing-on-kibana/48117)
**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\ **Replies:** 4\ **Last updated:** [April 25, 2016, 8:38am UTC](https://discuss.elastic.co/t/taking-string-as-separate-token-while-visualizing-on-kibana/48117 "2016-04-25T08:38:41Z")
Hi I have country field in my elastic search index with value : san francisco,mountain view But when i visualize pie chart on kibana using country field then it give me chart for both 'san' and 'francisco' rather than … --- ## [Access to UNC paths from ElasticSearch service on Azure for snapshots](https://discuss.elastic.co/t/access-to-unc-paths-from-elasticsearch-service-on-azure-for-snapshots/31387)
**Author:** [@saurabhsuppal](https://discuss.elastic.co/u/saurabhsuppal)\ **Replies:** 4\ **Last updated:** [October 1, 2015, 2:58pm UTC](https://discuss.elastic.co/t/access-to-unc-paths-from-elasticsearch-service-on-azure-for-snapshots/31387 "2015-10-01T14:58:10Z")
I have mounted Azure File services as a UNC path on all the nodes in the ES cluster and trying to use this location as Elasticsearch repository path(location where ES stores its snapshots). But ES is unable to create any… --- ## [Logstash dash "-" (hyphen) problem with aggregation](https://discuss.elastic.co/t/logstash-dash-hyphen-problem-with-aggregation/251947)
**Author:** [@bnmtl](https://discuss.elastic.co/u/bnmtl)\ **Replies:** 8\ **Last updated:** [October 14, 2020, 2:39pm UTC](https://discuss.elastic.co/t/logstash-dash-hyphen-problem-with-aggregation/251947 "2020-10-14T14:39:44Z")
Hello, With my logstash configuration, I am reading JSON log, but in my JSON log I have fields like below; "host-name":"comp-1.example.com", "name-surname":"john-doe" My configuration in logstash; input { file {… --- ## [Issue in building visualization using date fields](https://discuss.elastic.co/t/issue-in-building-visualization-using-date-fields/232469)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 8\ **Last updated:** [May 19, 2020, 7:51pm UTC](https://discuss.elastic.co/t/issue-in-building-visualization-using-date-fields/232469 "2020-05-19T19:51:25Z")
Hi All, I have ingested few data into elasticsearch and it contains few date fields as well like sys\_created\_on sys\_start\_time sys\_end\_time sys\_closed\_time While indexing i have indexed the data using @timestamp. N… --- ## [Exclude lines not working with multiline](https://discuss.elastic.co/t/exclude-lines-not-working-with-multiline/228411)
**Author:** [@EliWallic](https://discuss.elastic.co/u/EliWallic)\ **Replies:** 3\ **Last updated:** [April 17, 2020, 9:03pm UTC](https://discuss.elastic.co/t/exclude-lines-not-working-with-multiline/228411 "2020-04-17T21:03:00Z")
Hello, I am trying to import some logs and configured it with an exclusion line and multiline. If I configure just the exclusion its working for this but if I also configure multiline in addition it seems to be ignored… --- ## [Failed to parse field \[location\] of type \[geo\_shape\]](https://discuss.elastic.co/t/failed-to-parse-field-location-of-type-geo-shape/187773)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [June 28, 2019, 9:24am UTC](https://discuss.elastic.co/t/failed-to-parse-field-location-of-type-geo-shape/187773 "2019-06-28T09:24:06Z")
Hi, I have a single geojson file that Elastic refuses to ingest. The file opens fine in QGIS and online viewers and also is accepted by Geoserver when exported as a shapefile. If I convert the polygons to lines then I… --- ## [How to know the total number of aggregation result buckets](https://discuss.elastic.co/t/how-to-know-the-total-number-of-aggregation-result-buckets/176434)
**Author:** [@Anindya\_Roy](https://discuss.elastic.co/u/Anindya_Roy)\ **Replies:** 8\ **Last updated:** [April 11, 2019, 5:05pm UTC](https://discuss.elastic.co/t/how-to-know-the-total-number-of-aggregation-result-buckets/176434 "2019-04-11T17:05:13Z")
I have a multi-level aggregation query - that results nested buckets. In order to retrieve all the results I am currently using the the total doc hits number and then divide that by partition\_size = 1000, to get the resu… --- ## [Filebeat throws ERR failed to initialize console plugin as output error](https://discuss.elastic.co/t/filebeat-throws-err-failed-to-initialize-console-plugin-as-output-error/60481)
**Author:** [@sruthib](https://discuss.elastic.co/u/sruthib)\ **Replies:** 3\ **Last updated:** [September 16, 2016, 10:52am UTC](https://discuss.elastic.co/t/filebeat-throws-err-failed-to-initialize-console-plugin-as-output-error/60481 "2016-09-16T10:52:25Z")
c:\\Program Files\\Filebeat\>filebeat -c filebeat\_user.yml -e -v -d "\*" 2016/09/14 09:13:53.783830 beat.go:156: DBG Initializing output plugins 2016/09/14 09:13:53.785331 geolite.go:24: INFO GeoIP disabled: No paths were s… --- ## [Attachment Search](https://discuss.elastic.co/t/attachment-search/38690)
**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\ **Replies:** 8\ **Last updated:** [January 8, 2016, 10:56am UTC](https://discuss.elastic.co/t/attachment-search/38690 "2016-01-08T10:56:50Z")
Hi Im following this link to implement my first attachment script After indexing if I run http://localhost:9400/mytestatachment/person/1 I get {"\_index":"mytestatachment","\_type":"person","\_id":"1","\_version":1,"… --- ## [Pie for value of field in top terms](https://discuss.elastic.co/t/pie-for-value-of-field-in-top-terms/23951)
**Author:** [@Shannon\_Wynter](https://discuss.elastic.co/u/Shannon_Wynter)\ **Replies:** 3\ **Last updated:** [June 22, 2015, 4:04am UTC](https://discuss.elastic.co/t/pie-for-value-of-field-in-top-terms/23951 "2015-06-22T04:04:37Z")
So, I want to create a pie graph that shows the distribution of keys in our redis cluster as of the most recent data point - each document has "keys" Kibana doesn't seem to have this built in. I've managed to extract… --- ## [Multi value field count in Kibana 4](https://discuss.elastic.co/t/multi-value-field-count-in-kibana-4/2409)
**Author:** [@Darpan205](https://discuss.elastic.co/u/Darpan205)\ **Replies:** 3\ **Last updated:** [June 15, 2015, 10:10pm UTC](https://discuss.elastic.co/t/multi-value-field-count-in-kibana-4/2409 "2015-06-15T22:10:50Z")
Hi Guys, Can Kibana tokenize multi value fields and give us the count for those fields? Is it even possible with ElasticSearch? For example I have the following fields in my ES doc, { "\_index" : "twitter", "\_… --- ## [Getting “master not discovered exception” even running only one node](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-running-only-one-node/223699)
**Author:** [@Jane\_C](https://discuss.elastic.co/u/Jane_C)\ **Replies:** 1\ **Last updated:** [March 16, 2020, 7:31am UTC](https://discuss.elastic.co/t/getting-master-not-discovered-exception-even-running-only-one-node/223699 "2020-03-16T07:31:09Z")
Hi there, I am using Elasticsearch 7.6.0 and I only have one node. But I still getting the exception, master\_not\_discovered\_exception when running curl -H "Content-Type: application/json" -XPUT 127.0.0.1:9200/movies… --- ## [Ingest node: Invalid format...date and time is malformed](https://discuss.elastic.co/t/ingest-node-invalid-format-date-and-time-is-malformed/97156)
**Author:** [@hungl99](https://discuss.elastic.co/u/hungl99)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 11:05pm UTC](https://discuss.elastic.co/t/ingest-node-invalid-format-date-and-time-is-malformed/97156 "2017-08-15T23:05:36Z")
I try to parse a csv file using a pipeline but got into problem with the date format. Appreciate any help! Here is my pipiline: { "pipeline": { "description" : "parse stat logs", "processors": \[ { "gr… --- ## [Increase pipeline.batch.size](https://discuss.elastic.co/t/increase-pipeline-batch-size/94756)
**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\ **Replies:** 1\ **Last updated:** [July 28, 2017, 11:21am UTC](https://discuss.elastic.co/t/increase-pipeline-batch-size/94756 "2017-07-28T11:21:46Z")
Hi all, Currently I have default settings in logstash.yml: pipeline.workers: 4 pipeline.batch.size: 125 I tried to increase the batch size to 200 and 500, but the logstash service wouldn't start. Even when I decrease… --- ## [Logstash to read log files from remote Windows network drives](https://discuss.elastic.co/t/logstash-to-read-log-files-from-remote-windows-network-drives/37652)
**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\ **Replies:** 1\ **Last updated:** [December 21, 2015, 3:31am UTC](https://discuss.elastic.co/t/logstash-to-read-log-files-from-remote-windows-network-drives/37652 "2015-12-21T03:31:31Z")
Hello, I'm new to ELK, and I would like to set up a solution to index Microsoft IIS and applicative .NET logs with ES. I'm aware about different approaches: 1) \[app servers: log files ➔ Logstash\] ➔ \[collecting ser… --- ## [How to handle logstash failures](https://discuss.elastic.co/t/how-to-handle-logstash-failures/36044)
**Author:** [@sampath\_methuku](https://discuss.elastic.co/u/sampath_methuku)\ **Replies:** 1\ **Last updated:** [December 1, 2015, 2:43pm UTC](https://discuss.elastic.co/t/how-to-handle-logstash-failures/36044 "2015-12-01T14:43:16Z")
I am using following logstash configuration to push log file content in to elastic search. input { file { path =\> "/home/testuser/apps/logs/sample-collector-app.log" start\_position =\> "beginning" … --- ## [URLのコンテキスト毎に集計するクエリを知りたいです](https://discuss.elastic.co/t/url/167962)
**Author:** [@nidcode](https://discuss.elastic.co/u/nidcode)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 6:22am UTC](https://discuss.elastic.co/t/url/167962 "2019-02-15T06:22:35Z")
現在、Elasticsearchにウェブサーバーのアクセスログがあり、"path"というフィールドにURLのパスが保存されています。 一度のクエリでpathのコンテキスト毎にドキュメント数を集計可能かどうか、良い方法があれば知りたいです。 データ /aaaa/index.html /aaaa/api/v1/user /bbbb/index.html 結果のイメージ { "aaaa": 2, "bbbb": 1 … --- ## ["Couldn't find any filter plugin named 'multiline'. Are you sure this is correct](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-multiline-are-you-sure-this-is-correct/90207)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 2\ **Last updated:** [June 21, 2017, 9:39am UTC](https://discuss.elastic.co/t/couldnt-find-any-filter-plugin-named-multiline-are-you-sure-this-is-correct/90207 "2017-06-21T09:39:29Z")
I am migrated to Logstash 5.4 and running the conf with multiline plugin. its not working. filter { if \[message\] =~ "^\<\\?xml .\*" { drop {} } multiline { pattern =\> "^\<\\/response\>" negate =\> true w… --- ## [PHP Agent + Laravel](https://discuss.elastic.co/t/php-agent-laravel/294721)
**Author:** [@willianmaria](https://discuss.elastic.co/u/willianmaria)\ **Replies:** 1\ **Last updated:** [January 26, 2022, 10:14am UTC](https://discuss.elastic.co/t/php-agent-laravel/294721 "2022-01-26T10:14:10Z")
Hi, the Elastic APM for PHP is working with Laravel? I'm trying with Laravel 8.x but only capture transactions. The errors aren't not being sent to the Kibana. --- ## [Можно ли использовать Elastic Stack в production, если он является модулем мониторинга в коммерческом ПО ПО?](https://discuss.elastic.co/t/elastic-stack-production/206571)
**Author:** [@111209](https://discuss.elastic.co/u/111209)\ **Replies:** 7\ **Last updated:** [November 11, 2019, 8:17am UTC](https://discuss.elastic.co/t/elastic-stack-production/206571 "2019-11-11T08:17:45Z")
Добрый день ! Собственно имеется некое разрабатываемое ПО в котором присутствует модуль мониторинга - стэк ELK. Можно ли использовать ELK Basic или надо покупать лицензии. вот сама лицензия Elastic : https://github.co… --- ## [Freezing the Column headers in kibana discover(Search)](https://discuss.elastic.co/t/freezing-the-column-headers-in-kibana-discover-search/150855)
**Author:** [@kishore\_narni](https://discuss.elastic.co/u/kishore_narni)\ **Replies:** 1\ **Last updated:** [October 3, 2018, 8:04pm UTC](https://discuss.elastic.co/t/freezing-the-column-headers-in-kibana-discover-search/150855 "2018-10-03T20:04:13Z")
When we are seeing the data using kibana search , the columns header is getting vanished as soon as we scrolled down to see few rows. Is there any to fix this, so that column headers can be freeze and there wont be conf… --- ## [Data Mining or R equivalents for Elasticsearch](https://discuss.elastic.co/t/data-mining-or-r-equivalents-for-elasticsearch/45419)
**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\ **Replies:** 1\ **Last updated:** [March 25, 2016, 12:31pm UTC](https://discuss.elastic.co/t/data-mining-or-r-equivalents-for-elasticsearch/45419 "2016-03-25T12:31:51Z")
Hello! Does anybody know if there is R can be used for analytics over Elasticsearch data? Alternatively, is there any other tool like R that can be used to perform data mining operations over data stored on the Elastic… --- ## [Elasticsearch run error](https://discuss.elastic.co/t/elasticsearch-run-error/302370)
**Author:** [@dawiddudek](https://discuss.elastic.co/u/dawiddudek)\ **Replies:** 6\ **Last updated:** [April 14, 2022, 7:54pm UTC](https://discuss.elastic.co/t/elasticsearch-run-error/302370 "2022-04-14T19:54:58Z")
Hi, i tried install and run Elasticsearch but service is still failed. I try to run this on Ubuntu 20.04 LTS from apk, dpkg and archive. i found Elasticsearch: Job for elasticsearch.service failed - Stack Overflow but… --- ## [Split source-file into many indicies](https://discuss.elastic.co/t/split-source-file-into-many-indicies/176175)
**Author:** [@vmasarik](https://discuss.elastic.co/u/vmasarik)\ **Replies:** 6\ **Last updated:** [April 18, 2019, 12:34pm UTC](https://discuss.elastic.co/t/split-source-file-into-many-indicies/176175 "2019-04-18T12:34:10Z")
Hi, I have a case where I would like to split one huge source-file document into many (hundreds) indices. Could Rally help me? I might know why Rally would not support this, but I would be happy to be wrong. My dream s… --- ## [How to achieve not\_analyzed field mapping in AWS solution](https://discuss.elastic.co/t/how-to-achieve-not-analyzed-field-mapping-in-aws-solution/33083)
**Author:** [@Mark\_Watkins](https://discuss.elastic.co/u/Mark_Watkins)\ **Replies:** 6\ **Last updated:** [October 27, 2015, 4:49pm UTC](https://discuss.elastic.co/t/how-to-achieve-not-analyzed-field-mapping-in-aws-solution/33083 "2015-10-27T16:49:28Z")
My first post was the below: Hi, I am trying to count unique log streams, and the format of the value is "i-123abc456". When I do the unique count, it counts the "i" as one value, so it is adding 1 to my unique coun… --- ## [How to update synonyms for an indexing index](https://discuss.elastic.co/t/how-to-update-synonyms-for-an-indexing-index/237221)
**Author:** [@ravinder](https://discuss.elastic.co/u/ravinder)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 8:43am UTC](https://discuss.elastic.co/t/how-to-update-synonyms-for-an-indexing-index/237221 "2020-06-23T08:43:58Z")
we have an index "testsynonyms" mapped to a synonym file "synonyms.txt", we want to provision user with a utility of updating synonyms from the User Interface of our application. is there any way that we can update t… --- ## [Prefix match phrase filter query on the keys returned from terms aggregation](https://discuss.elastic.co/t/prefix-match-phrase-filter-query-on-the-keys-returned-from-terms-aggregation/177705)
**Author:** [@Vamshi\_Sai](https://discuss.elastic.co/u/Vamshi_Sai)\ **Replies:** 3\ **Last updated:** [April 23, 2019, 6:24am UTC](https://discuss.elastic.co/t/prefix-match-phrase-filter-query-on-the-keys-returned-from-terms-aggregation/177705 "2019-04-23T06:24:28Z")
I have terms query and the result looks something like below "buckets": \[ { "key": "KEY", "count": 20 }, { "key": "LOCK", "count": 30 } \] Now the requirement is to filter those buckets whose key starts with a … --- ## [How could I use in ingest pipeline the Logstash translate filter?](https://discuss.elastic.co/t/how-could-i-use-in-ingest-pipeline-the-logstash-translate-filter/259697)
**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\ **Replies:** 4\ **Last updated:** [January 10, 2021, 2:36pm UTC](https://discuss.elastic.co/t/how-could-i-use-in-ingest-pipeline-the-logstash-translate-filter/259697 "2021-01-10T14:36:32Z")
I have a field with some error codes mapped as keyword values that I make some plots. It's not friendly to some people to look at these codes, so I want to change these error codes to a description that I will map as key… --- ## [Syslog from network devices to Filebeat](https://discuss.elastic.co/t/syslog-from-network-devices-to-filebeat/240928)
**Author:** [@sera](https://discuss.elastic.co/u/sera)\ **Replies:** 4\ **Last updated:** [July 14, 2020, 7:56am UTC](https://discuss.elastic.co/t/syslog-from-network-devices-to-filebeat/240928 "2020-07-14T07:56:21Z")
Hi - I can't seem to get Filebeat to collect syslog from ONLY my network devices. It seems to collect everything from /var/log/messages (Filebeat installed on Centos 7) and from my network devices. Here are the input/ou… --- ## [Is it possible to fetch original query's score in rescore query?](https://discuss.elastic.co/t/is-it-possible-to-fetch-original-querys-score-in-rescore-query/84228)
**Author:** [@yinqiwen](https://discuss.elastic.co/u/yinqiwen)\ **Replies:** 4\ **Last updated:** [May 2, 2017, 10:00am UTC](https://discuss.elastic.co/t/is-it-possible-to-fetch-original-querys-score-in-rescore-query/84228 "2017-05-02T10:00:21Z")
Hi, I'm implementing a plugin to solve a rank problem which need original score as the base value. I already tried using script but it's slow than expected. Rescore query is faster but seems there is no direct way to fe… --- ## [Logstash to elastic search TCP connection error](https://discuss.elastic.co/t/logstash-to-elastic-search-tcp-connection-error/303624)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 5\ **Last updated:** [April 29, 2022, 7:33pm UTC](https://discuss.elastic.co/t/logstash-to-elastic-search-tcp-connection-error/303624 "2022-04-29T19:33:52Z")
Hi, I'm trying to connect to Elasticsearch using logstash and running into an TCP connection error. Below is my input plugin for logstash input { elasticsearch { hosts =\> \["https://esipAddress:9200"\] index =\> "tes… --- ## [Logstash has fetched the data but not shipped into Elasticsearch](https://discuss.elastic.co/t/logstash-has-fetched-the-data-but-not-shipped-into-elasticsearch/134154)
**Author:** [@Lee\_Jack](https://discuss.elastic.co/u/Lee_Jack)\ **Replies:** 5\ **Last updated:** [June 1, 2018, 8:45am UTC](https://discuss.elastic.co/t/logstash-has-fetched-the-data-but-not-shipped-into-elasticsearch/134154 "2018-06-01T08:45:31Z")
I am using Logstash to fetch data from another host's mysql database and want to ship the data into Elastic database.After starting the Logstash ,I can observe the Logstash has already fetch the new data which I insert … --- ## [Recomendations while installing ELK+ X-Pack](https://discuss.elastic.co/t/recomendations-while-installing-elk-x-pack/131058)
**Author:** [@avboivin](https://discuss.elastic.co/u/avboivin)\ **Replies:** 5\ **Last updated:** [May 11, 2018, 2:46am UTC](https://discuss.elastic.co/t/recomendations-while-installing-elk-x-pack/131058 "2018-05-11T02:46:12Z")
Hello, I've setup an ElasticSearch instance with 1 node + an app once already but now I'm about to setup a cluster. What I'm thinking about is installing the entire ELK stack + x-pack using a basic Elastic license on u… --- ## [Undefined method \`items' for nil:NilClass\>](https://discuss.elastic.co/t/undefined-method-items-for-nil-nilclass/74792)
**Author:** [@jamal](https://discuss.elastic.co/u/jamal)\ **Replies:** 5\ **Last updated:** [February 21, 2017, 7:11am UTC](https://discuss.elastic.co/t/undefined-method-items-for-nil-nilclass/74792 "2017-02-21T07:11:35Z")
here is the configuration of logstash input { rss { interval =\> 60000 url =\> "http://internews.org/rss.xml" type =\> "tribune" } } filter { if \[type\] == "tribune" { ruby … --- ## [Logstash Kafka Input Plugin Data has Type Already](https://discuss.elastic.co/t/logstash-kafka-input-plugin-data-has-type-already/57161)
**Author:** [@kingston](https://discuss.elastic.co/u/kingston)\ **Replies:** 5\ **Last updated:** [February 14, 2017, 6:01am UTC](https://discuss.elastic.co/t/logstash-kafka-input-plugin-data-has-type-already/57161 "2017-02-14T06:01:34Z")
I'm using the Kafka Input plugin and noticed that my elasticsearch indices were being named incorrectly. After debugging, I realized that the kafka topic had documents that already included a type field. Input.conf i… --- ## [Application wise dashboard in kibana](https://discuss.elastic.co/t/application-wise-dashboard-in-kibana/15755)
**Author:** [@pankaj\_ghadge](https://discuss.elastic.co/u/pankaj_ghadge)\ **Replies:** 5\ **Last updated:** [April 10, 2014, 4:11am UTC](https://discuss.elastic.co/t/application-wise-dashboard-in-kibana/15755 "2014-04-10T04:11:48Z")
Hello All, I want to create a application wise dashboard in kibana like as \*1) Dashboard for domain example1.com:\* It should show php, css, js, and jpg/png hit count for domain example1.com \*2) Dashboard for do… --- ## [Autosize Kibana pages](https://discuss.elastic.co/t/autosize-kibana-pages/223325)
**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 10:03am UTC](https://discuss.elastic.co/t/autosize-kibana-pages/223325 "2020-03-13T10:03:32Z")
Is there any way to auto resize the kibana pages based on the user monitor size... Thank you! --- ## [Add a field from one grok match to another](https://discuss.elastic.co/t/add-a-field-from-one-grok-match-to-another/288246)
**Author:** [@mwas](https://discuss.elastic.co/u/mwas)\ **Replies:** 2\ **Last updated:** [November 3, 2021, 11:38pm UTC](https://discuss.elastic.co/t/add-a-field-from-one-grok-match-to-another/288246 "2021-11-03T23:38:14Z")
I've got log that starts with a jobid on our build cluster live following: "Job \<7073381\> is submitted to queue " I'd like to extract the job id from that line and add it to all other matched lines that look like this: … --- ## [Search All fields in an Index](https://discuss.elastic.co/t/search-all-fields-in-an-index/204965)
**Author:** [@keerthn](https://discuss.elastic.co/u/keerthn)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 9:52pm UTC](https://discuss.elastic.co/t/search-all-fields-in-an-index/204965 "2019-11-07T21:52:24Z")
Hey There ! I want to do a search where i can access all the documents within the given index to find the word i'm looking for. I see that "\_all" has been taken off which brings it down to use only the wildcard search w… --- ## [Use Env variable causing Elasticsearch not to start](https://discuss.elastic.co/t/use-env-variable-causing-elasticsearch-not-to-start/167053)
**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\ **Replies:** 2\ **Last updated:** [February 5, 2019, 9:06am UTC](https://discuss.elastic.co/t/use-env-variable-causing-elasticsearch-not-to-start/167053 "2019-02-05T09:06:46Z")
I have added an env variable in elasticsearch.yml file as follows http.port: ${PORT} I am able to retrieve the value of this variable when I echo the value of the variable echo $PORT 9200 But the Elasticsearch do not… --- ## [Delete duplicate docs in ES 1.7](https://discuss.elastic.co/t/delete-duplicate-docs-in-es-1-7/60808)
**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\ **Replies:** 2\ **Last updated:** [September 22, 2016, 8:15am UTC](https://discuss.elastic.co/t/delete-duplicate-docs-in-es-1-7/60808 "2016-09-22T08:15:45Z")
Hello, I'm having a problem finding the right query for searching and deleting duplicated documents in my index. I'm using ES 1.7. Thank you for your help :slight\_smile: [Previous page](https://discuss.elastic.co/top.md?page=1117&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1119&per_page=50&period=all)