# Top **URL:** https://discuss.elastic.co/top.md?page=1128&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1129 --- ## [Multi match query does not work for nested types](https://discuss.elastic.co/t/multi-match-query-does-not-work-for-nested-types/339936)
**Author:** [@Teqqan](https://discuss.elastic.co/u/Teqqan)\ **Replies:** 4\ **Last updated:** [August 3, 2023, 12:26pm UTC](https://discuss.elastic.co/t/multi-match-query-does-not-work-for-nested-types/339936 "2023-08-03T12:26:30Z")
Hi, I'm trying to perform a multi match query on some data I have structured as nested types. When I search for something like "gadget plushy" I get no matches for a document with two nested fields "gadget" and "plushy"… --- ## [Is it possible to move a one time snapshot to Glacier?](https://discuss.elastic.co/t/is-it-possible-to-move-a-one-time-snapshot-to-glacier/327455)
**Author:** [@John\_Newman1](https://discuss.elastic.co/u/John_Newman1)\ **Replies:** 4\ **Last updated:** [March 10, 2023, 2:41pm UTC](https://discuss.elastic.co/t/is-it-possible-to-move-a-one-time-snapshot-to-glacier/327455 "2023-03-10T14:41:09Z")
Hi, In the docs, it states that after snapshotting an index to S3 you shouldn't transition it to Glacier. I have a use case where I would like to snapshot an index as a one off event and store it as cheaply as possible,… --- ## [Issue with KV Filter when value ends with escape character](https://discuss.elastic.co/t/issue-with-kv-filter-when-value-ends-with-escape-character/190618)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 9:39pm UTC](https://discuss.elastic.co/t/issue-with-kv-filter-when-value-ends-with-escape-character/190618 "2019-08-12T21:39:18Z")
I am having an issue parsing some logs, and I would appreciate if someone could assist. I have logs coming in that are primarily handled with a KV Filter. This works fine on about 99% of the messages, but one message ty… --- ## [Assigning a certain field value to the user using elasticsearch queries](https://discuss.elastic.co/t/assigning-a-certain-field-value-to-the-user-using-elasticsearch-queries/188937)
**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\ **Replies:** 4\ **Last updated:** [July 5, 2019, 4:15pm UTC](https://discuss.elastic.co/t/assigning-a-certain-field-value-to-the-user-using-elasticsearch-queries/188937 "2019-07-05T16:15:46Z")
Given an index, and its field. Is it possible to restrict a user to a specific value in a field using Elasticsearch queries in the Kiabana dev tools? For example, I have the following field called cloudwatch\_logs.log\_g… --- ## [Warm nodes consistently using ~10% of CPU even though the node is basically idle](https://discuss.elastic.co/t/warm-nodes-consistently-using-10-of-cpu-even-though-the-node-is-basically-idle/130724)
**Author:** [@cactus](https://discuss.elastic.co/u/cactus)\ **Replies:** 4\ **Last updated:** [May 15, 2018, 3:36pm UTC](https://discuss.elastic.co/t/warm-nodes-consistently-using-10-of-cpu-even-though-the-node-is-basically-idle/130724 "2018-05-15T15:36:27Z")
On a 6 warm nodes which contain 53 indices each of them with 10 shards and 10 segments per index on a quad-core CPU and 26GB of ram(13GB heap size) CPU usage even at deep night isn't low. \[34\] We are using hdd for warm… --- ## [Elasticsearch or Lucene synonyms (wordnet) Bug](https://discuss.elastic.co/t/elasticsearch-or-lucene-synonyms-wordnet-bug/112114)
**Author:** [@svarup](https://discuss.elastic.co/u/svarup)\ **Replies:** 4\ **Last updated:** [December 25, 2017, 11:16pm UTC](https://discuss.elastic.co/t/elasticsearch-or-lucene-synonyms-wordnet-bug/112114 "2017-12-25T23:16:36Z")
when i was using synonym filter in elasticsearch 5.0 it was run perfect but i just upgrade to elasticsearch 6.0.1 and it gives me error i use php elasticsearch client and wordnet synonyms. Fatal error: Uncaught Elastics… --- ## [Logstash Input file is not reading file](https://discuss.elastic.co/t/logstash-input-file-is-not-reading-file/92441)
**Author:** [@igbayilola](https://discuss.elastic.co/u/igbayilola)\ **Replies:** 4\ **Last updated:** [July 20, 2017, 2:43pm UTC](https://discuss.elastic.co/t/logstash-input-file-is-not-reading-file/92441 "2017-07-20T14:43:37Z")
Hello, I want first to apologize for my english level. I'm using Logstash 5.5.0 and I'm facing an issue with my configuration. It works just fine with the stdin plugin but not with the file pugin. I have the following co… --- ## [Filebeat not sending logs to E.L.K server’s logstash](https://discuss.elastic.co/t/filebeat-not-sending-logs-to-e-l-k-server-s-logstash/61697)
**Author:** [@napoleon182](https://discuss.elastic.co/u/napoleon182)\ **Replies:** 4\ **Last updated:** [September 28, 2016, 5:44pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-logs-to-e-l-k-server-s-logstash/61697 "2016-09-28T17:44:18Z")
Hi All, I recently installed filebeat to forward logs from ubuntu 14.04 server into my ELK's logstash, however i cannot see anything in kibana4's dashboards, I'm able to ping and telnet into logstash, Any help is much … --- ## [Elasticsearch with LDAP Authentication XPack Security](https://discuss.elastic.co/t/elasticsearch-with-ldap-authentication-xpack-security/215072)
**Author:** [@anjalo](https://discuss.elastic.co/u/anjalo)\ **Replies:** 5\ **Last updated:** [January 16, 2020, 5:14am UTC](https://discuss.elastic.co/t/elasticsearch-with-ldap-authentication-xpack-security/215072 "2020-01-16T05:14:22Z")
Hi, My name is Halim. I am trying to connect the elasticsearch using LDAP user authentication. I follow the documentation here \[https://www.elastic.co/guide/en/elasticsearch/reference/current/ldap-realm.html\] I am alr… --- ## [Error while connecting to Elastic Cloud using RestClient or Transport Client](https://discuss.elastic.co/t/error-while-connecting-to-elastic-cloud-using-restclient-or-transport-client/100483)
**Author:** [@chiranjeevi](https://discuss.elastic.co/u/chiranjeevi)\ **Replies:** 5\ **Last updated:** [September 14, 2017, 12:30pm UTC](https://discuss.elastic.co/t/error-while-connecting-to-elastic-cloud-using-restclient-or-transport-client/100483 "2017-09-14T12:30:21Z")
If i Connect with Transport Client returned error is: Exception in thread "main" java.lang.VerifyError: class org.elasticsearch.shield.ShieldPlugin overrides final method onModule.(Lorg/elasticsearch/action/ActionModule… --- ## [SystemDate or time to elasticsearch fields](https://discuss.elastic.co/t/systemdate-or-time-to-elasticsearch-fields/86872)
**Author:** [@Samatha](https://discuss.elastic.co/u/Samatha)\ **Replies:** 5\ **Last updated:** [June 7, 2017, 5:53am UTC](https://discuss.elastic.co/t/systemdate-or-time-to-elasticsearch-fields/86872 "2017-06-07T05:53:51Z")
We are trying to set current system date to one of the elastic field while inserting records using logstash script. mutate { add\_field =\> {"logdate" =\> "%{\[+YYYY-MM-dd\]}"} } output { elasticsearch{ hosts =\> \["… --- ## [Canceling submitted request](https://discuss.elastic.co/t/canceling-submitted-request/5021)
**Author:** [@mfeingold](https://discuss.elastic.co/u/mfeingold)\ **Replies:** 5\ **Last updated:** [August 1, 2011, 11:13pm UTC](https://discuss.elastic.co/t/canceling-submitted-request/5021 "2011-08-01T23:13:44Z")
Is there a way to cancel a previously submitted search request? Here is why: I want to give a list of suggestions as they type the search parameters. But I do not really want to show/update it until the user pauses … --- ## [Show dynamic trend values in Dashboard](https://discuss.elastic.co/t/show-dynamic-trend-values-in-dashboard/325182)
**Author:** [@beijo](https://discuss.elastic.co/u/beijo)\ **Replies:** 0\ **Last updated:** [February 9, 2023, 5:28pm UTC](https://discuss.elastic.co/t/show-dynamic-trend-values-in-dashboard/325182 "2023-02-09T17:28:18Z")
Hi all, I have documents which include a count field (numbers). I want to implement a dashboard, in which based on the selected timerange, the difference of the first document's count value and the last documents count … --- ## [Need to disable insecure SSL cyphers/TLS 1.1 on Elastic Agent](https://discuss.elastic.co/t/need-to-disable-insecure-ssl-cyphers-tls-1-1-on-elastic-agent/352051)
**Author:** [@salemone](https://discuss.elastic.co/u/salemone)\ **Replies:** 3\ **Last updated:** [January 31, 2024, 3:45pm UTC](https://discuss.elastic.co/t/need-to-disable-insecure-ssl-cyphers-tls-1-1-on-elastic-agent/352051 "2024-01-31T15:45:55Z")
On a recent vulnerability scan we had findings for the Elastic Agent Fleet Server for having TLS 1.1 enabled along with insecure ciphers on port 8220. I have a client asking that we fix this... I added the below to ela… --- ## [What is the default source of the @timestamp field in Filebeat?](https://discuss.elastic.co/t/what-is-the-default-source-of-the-timestamp-field-in-filebeat/343640)
**Author:** [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Replies:** 3\ **Last updated:** [September 27, 2023, 8:59pm UTC](https://discuss.elastic.co/t/what-is-the-default-source-of-the-timestamp-field-in-filebeat/343640 "2023-09-27T20:59:01Z")
I'm ingesting Syslog input with Filebeat, and I'd like to use the timestamp processor to adjust the timezone of the logs (my source is sending them in local time and Kibana is expecting UTC). According to the documentati… --- ## [Stacked chart with Kibana](https://discuss.elastic.co/t/stacked-chart-with-kibana/132605)
**Author:** [@SarojELK](https://discuss.elastic.co/u/SarojELK)\ **Replies:** 3\ **Last updated:** [May 21, 2018, 2:09pm UTC](https://discuss.elastic.co/t/stacked-chart-with-kibana/132605 "2018-05-21T14:09:20Z")
Hello again Experts, my Kibana skills are just starting with visualization. i have successfully ingested the data to ES and now i need to create a stacked chart as per attached picture, i needed to plot a stacked char… --- ## [Trouble with AuthenticationService between es nodes](https://discuss.elastic.co/t/trouble-with-authenticationservice-between-es-nodes/102685)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 3\ **Last updated:** [October 4, 2017, 11:24pm UTC](https://discuss.elastic.co/t/trouble-with-authenticationservice-between-es-nodes/102685 "2017-10-04T23:24:48Z")
I have two server. First server: I fresh install es 5.6.2. with next config: cluster.name: rsl-es-clucter node.name: es-vm01.siem-node1-master path.data: /opt/elasticsearch/es-vm01.siem-node1-master n… --- ## [Finding most frequently accessed URI-paths / Transactions using Logstash](https://discuss.elastic.co/t/finding-most-frequently-accessed-uri-paths-transactions-using-logstash/92644)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 6:41am UTC](https://discuss.elastic.co/t/finding-most-frequently-accessed-uri-paths-transactions-using-logstash/92644 "2017-07-14T06:41:31Z")
Hi, My log file looks like this: 2015-06-12:00:08:54 100.220.144.1 GET /site/path1.aspx 200 2015-06-12:00:08:55 100.220.144.1 GET /site/path2.aspx 200 2015-06-12:00:08:56 100.220.144.1 GET /site/path3.aspx 200 2015… --- ## [Read images in pdf ater indexed in elasticsearch](https://discuss.elastic.co/t/read-images-in-pdf-ater-indexed-in-elasticsearch/79891)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 3\ **Last updated:** [March 25, 2017, 7:26am UTC](https://discuss.elastic.co/t/read-images-in-pdf-ater-indexed-in-elasticsearch/79891 "2017-03-25T07:26:29Z")
I am able to index pdf in elaticsearch using fscrawler. But not able to Read images in that pdf. Can I read these images?is there any way to read images ? please help --- ## [Creating client location data for packetbeat](https://discuss.elastic.co/t/creating-client-location-data-for-packetbeat/52551)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 10:11pm UTC](https://discuss.elastic.co/t/creating-client-location-data-for-packetbeat/52551 "2016-06-13T22:11:32Z")
I have been using packetbeat to collect network transfer packets data, however, I discover that there is a client location field, however, seems that there isn't any data coming out from that. Is there anyway that I can … --- ## [Performing several count queries using polling. is there a better way?](https://discuss.elastic.co/t/performing-several-count-queries-using-polling-is-there-a-better-way/7252)
**Author:** [@Shane\_Witbeck](https://discuss.elastic.co/u/Shane_Witbeck)\ **Replies:** 3\ **Last updated:** [April 7, 2012, 5:47pm UTC](https://discuss.elastic.co/t/performing-several-count-queries-using-polling-is-there-a-better-way/7252 "2012-04-07T17:47:21Z")
I'm in the process of putting together a web-based dashboard which polls and does several count queries based on searches using several fields. Is there a more efficient way to do this? Specifically, is there a wa… --- ## [SNMP data to visualisations not easy possible like metricbeats](https://discuss.elastic.co/t/snmp-data-to-visualisations-not-easy-possible-like-metricbeats/167432)
**Author:** [@pw64](https://discuss.elastic.co/u/pw64)\ **Replies:** 2\ **Last updated:** [March 7, 2019, 8:54am UTC](https://discuss.elastic.co/t/snmp-data-to-visualisations-not-easy-possible-like-metricbeats/167432 "2019-03-07T08:54:13Z")
Hi All, With ES 6.6 it is great to see SNMP input. Typically something we would like to see is trending information of dataflow of routers, switches etc. And the trap host functionality looks great. But... All the gath… --- ## [Filebeat is running, but can't detect filelogs is changed](https://discuss.elastic.co/t/filebeat-is-running-but-cant-detect-filelogs-is-changed/143253)
**Author:** [@Quang\_Tho](https://discuss.elastic.co/u/Quang_Tho)\ **Replies:** 2\ **Last updated:** [August 9, 2018, 4:24am UTC](https://discuss.elastic.co/t/filebeat-is-running-but-cant-detect-filelogs-is-changed/143253 "2018-08-09T04:24:21Z")
I am deploy filebeat for shipping docker logs to elk. Filebeat is running but cannot ship log to logstash. is any missing here, please check for me. --- docker-compose.yml ----- version: "3.6" services: #############… --- ## [Why I am not seeing data after upgrade to 6.1 from 5.6](https://discuss.elastic.co/t/why-i-am-not-seeing-data-after-upgrade-to-6-1-from-5-6/117297)
**Author:** [@sachin8778](https://discuss.elastic.co/u/sachin8778)\ **Replies:** 2\ **Last updated:** [January 27, 2018, 11:25am UTC](https://discuss.elastic.co/t/why-i-am-not-seeing-data-after-upgrade-to-6-1-from-5-6/117297 "2018-01-27T11:25:38Z")
I am not finding any data after upgrade is completed. Could you please help me find out what did I miss while upgrading 5.6 to 6.1? I followed the steps as per this link-- https://www.elastic.co/guide/en/elasticsearch/… --- ## [How to remove spacial character \\ added by logstash?](https://discuss.elastic.co/t/how-to-remove-spacial-character-added-by-logstash/98743)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 2\ **Last updated:** [August 30, 2017, 7:26pm UTC](https://discuss.elastic.co/t/how-to-remove-spacial-character-added-by-logstash/98743 "2017-08-30T19:26:32Z")
Hi, I have a field which contains several double quotes. Problem here is, Logstash is adding \\ where ever there is double quote. How to remove that special character? I tried mutate with gsub but it’s not working. Pleas… --- ## [How to call custom Kibana API on behalf of the user in plugin?](https://discuss.elastic.co/t/how-to-call-custom-kibana-api-on-behalf-of-the-user-in-plugin/81720)
**Author:** [@tim\_wong](https://discuss.elastic.co/u/tim_wong)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 4:39pm UTC](https://discuss.elastic.co/t/how-to-call-custom-kibana-api-on-behalf-of-the-user-in-plugin/81720 "2017-04-10T16:39:39Z")
I am developing a Kibana plugin which is an "app". The application allows users to create notes to be stored on Elasticsearch, which has X-Pack installed. The whole flow is like this: User logins to Kibana. User cre… --- ## [ODBC Driver Wildcard](https://discuss.elastic.co/t/odbc-driver-wildcard/206183)
**Author:** [@beerygaz](https://discuss.elastic.co/u/beerygaz)\ **Replies:** 7\ **Last updated:** [November 12, 2019, 9:13am UTC](https://discuss.elastic.co/t/odbc-driver-wildcard/206183 "2019-11-12T09:13:52Z")
I'm trying to access elasticsearch data in PwoerBi using the ODBC driver. It seems I can't use a wild-card to consolidate my indexes. For example I have filebeats-yyy.mm.dd indexes and I want to visualise data across f… --- ## [Elastic Search hangs after start on Linux VM](https://discuss.elastic.co/t/elastic-search-hangs-after-start-on-linux-vm/164810)
**Author:** [@Vishal\_Goel](https://discuss.elastic.co/u/Vishal_Goel)\ **Replies:** 7\ **Last updated:** [January 19, 2019, 7:11pm UTC](https://discuss.elastic.co/t/elastic-search-hangs-after-start-on-linux-vm/164810 "2019-01-19T19:11:32Z")
Hi, I am running Elastic Search 6.5.4 on small Linux VM in dev mode. It is started successfully, I can access http://localhost:9200 in browser perfectly. But when Kibana is run and it start using ES, ES gets hanged. N… --- ## [REGEX-Painless returns null](https://discuss.elastic.co/t/regex-painless-returns-null/128367)
**Author:** [@PolterFox](https://discuss.elastic.co/u/PolterFox)\ **Replies:** 7\ **Last updated:** [April 20, 2018, 6:44am UTC](https://discuss.elastic.co/t/regex-painless-returns-null/128367 "2018-04-20T06:44:31Z")
Hey guys, I have the following problem. In the JSON Messages for ES I got multiple data in a field and I want to match this data with an regex. So I´ve tested it in the Kibana Developer Console (Webinterface) and I\`ve t… --- ## [Unable to search with child object](https://discuss.elastic.co/t/unable-to-search-with-child-object/62642)
**Author:** [@Vinayak\_Fulari](https://discuss.elastic.co/u/Vinayak_Fulari)\ **Replies:** 7\ **Last updated:** [October 13, 2016, 6:04am UTC](https://discuss.elastic.co/t/unable-to-search-with-child-object/62642 "2016-10-13T06:04:41Z")
Hi, In my scenario I am storing whole dynamoDB event into elastic search, now I want to get whole event by querying it. Sharing below my index-document structure as well as my json query. What should be my json quer… --- ## [5.1: "must" or "filter" query with aggregation?](https://discuss.elastic.co/t/5-1-must-or-filter-query-with-aggregation/71780)
**Author:** [@Bertrand](https://discuss.elastic.co/u/Bertrand)\ **Replies:** 0\ **Last updated:** [January 16, 2017, 7:56pm UTC](https://discuss.elastic.co/t/5-1-must-or-filter-query-with-aggregation/71780 "2017-01-16T19:56:21Z")
From what I understand from the doc, a filter clause should be used in a Bool Query when document scoring doesn't matter (cfr. https://www.elastic.co/guide/en/elasticsearch/reference/5.1/query-dsl-bool-query.html). So … --- ## [Why do messages and Error stack trace do not recognize new line charecters](https://discuss.elastic.co/t/why-do-messages-and-error-stack-trace-do-not-recognize-new-line-charecters/117346)
**Author:** [@SawyerFord](https://discuss.elastic.co/u/SawyerFord)\ **Replies:** 4\ **Last updated:** [January 30, 2018, 7:14am UTC](https://discuss.elastic.co/t/why-do-messages-and-error-stack-trace-do-not-recognize-new-line-charecters/117346 "2018-01-30T07:14:30Z")
I would like to know why new lines (\\n) are available in the strack trace and why are not getting displayed in a new line. What settings I have to make such that the error stack trace appear with new line as traditional … --- ## [Getting geoip to work](https://discuss.elastic.co/t/getting-geoip-to-work/39781)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 4\ **Last updated:** [January 21, 2016, 7:57pm UTC](https://discuss.elastic.co/t/getting-geoip-to-work/39781 "2016-01-21T19:57:39Z")
Hello, all. I want to geoip e.g. apache access log. My logstash-forwarder config looks like this: { "network": { "servers": \[ "192.168.0.213:5044" \], "ssl key": "/etc/ssl/private/logstash-forwarder.key", … --- ## [Getting GC overhead on Elasticsearch](https://discuss.elastic.co/t/getting-gc-overhead-on-elasticsearch/245526)
**Author:** [@AshokBachchan](https://discuss.elastic.co/u/AshokBachchan)\ **Replies:** 6\ **Last updated:** [August 19, 2020, 9:15am UTC](https://discuss.elastic.co/t/getting-gc-overhead-on-elasticsearch/245526 "2020-08-19T09:15:40Z")
Hi, We were getting more GC on elasticsearch. Please help me, due to this issue, ES node crashing suddenly { "\_nodes": { "total": 9, "successful": 9, "failed": 0 }, "cluster\_name": "AWS-Pre-Productio… --- ## [Randomly performance issue](https://discuss.elastic.co/t/randomly-performance-issue/214009)
**Author:** [@nmathur](https://discuss.elastic.co/u/nmathur)\ **Replies:** 6\ **Last updated:** [January 24, 2020, 6:44pm UTC](https://discuss.elastic.co/t/randomly-performance-issue/214009 "2020-01-24T18:44:35Z")
Hello All, We are randomly facing performance issue in elasticsearch read/write operations. The elasticsearch in installed on Azure VM (Linux). This is not constant. Generally a common method to insert/update in elastic… --- ## [Lostash grok parse failure](https://discuss.elastic.co/t/lostash-grok-parse-failure/87902)
**Author:** [@Rajat\_Singh](https://discuss.elastic.co/u/Rajat_Singh)\ **Replies:** 6\ **Last updated:** [June 2, 2017, 12:04pm UTC](https://discuss.elastic.co/t/lostash-grok-parse-failure/87902 "2017-06-02T12:04:37Z")
Hi folks, I had created a logstash pattern to parse the file, when i validating it grok debugger in first it is not working but when i am removing space and then again creating space, then it is working 10.150.86.92 - … --- ## [Why doesn't the Reindex API parallelize by shard automatically?](https://discuss.elastic.co/t/why-doesnt-the-reindex-api-parallelize-by-shard-automatically/60532)
**Author:** [@aaron\_ximm](https://discuss.elastic.co/u/aaron_ximm)\ **Replies:** 6\ **Last updated:** [October 5, 2016, 6:42pm UTC](https://discuss.elastic.co/t/why-doesnt-the-reindex-api-parallelize-by-shard-automatically/60532 "2016-10-05T18:42:38Z")
As has been reported elsewhere here, we too were very surprised at how slow the Reindex API is if you simply follow the documentation, and issue a straight reindex. For reference we have a 9M doc/4 TB index, simple cl… --- ## [Scala integration](https://discuss.elastic.co/t/scala-integration/219214)
**Author:** [@milanvdm](https://discuss.elastic.co/u/milanvdm)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 6:18pm UTC](https://discuss.elastic.co/t/scala-integration/219214 "2020-02-21T18:18:16Z")
Hi all, I would like to start with adding some scala support to the java-apm-agent. Since the current repo is completely focussed on Java, I would like to discuss how this should be organized. For example, this is how … --- ## [Should I run filebeat from bin or etc?](https://discuss.elastic.co/t/should-i-run-filebeat-from-bin-or-etc/53702)
**Author:** [@dal](https://discuss.elastic.co/u/dal)\ **Replies:** 2\ **Last updated:** [June 22, 2016, 7:36pm UTC](https://discuss.elastic.co/t/should-i-run-filebeat-from-bin-or-etc/53702 "2016-06-22T19:36:43Z")
I did an rpm install of filebeat. When I run filebeat from /usr/bin/filebeat with /usr/bin/filebeat start or /usr/bin/filebeat -c /path/to/filebeat.yml, the shell just hangs. When I run etc/init.d/filebeat start, i get a… --- ## [Is there a way to add cookie field to logstash http output plugin?‏](https://discuss.elastic.co/t/is-there-a-way-to-add-cookie-field-to-logstash-http-output-plugin/49600)
**Author:** [@prince6635](https://discuss.elastic.co/u/prince6635)\ **Replies:** 2\ **Last updated:** [May 10, 2016, 9:54pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-add-cookie-field-to-logstash-http-output-plugin/49600 "2016-05-10T21:54:24Z")
With the following configuration, I just want to forward logs from a file to an http endpoint with cookie being set, but I always got the error "Unknown setting 'cookie' for http {:level=\>:error}", looks like http output… --- ## [Filters aggregation - query malformed, no field after start\_object](https://discuss.elastic.co/t/filters-aggregation-query-malformed-no-field-after-start-object/47601)
**Author:** [@elssar](https://discuss.elastic.co/u/elssar)\ **Replies:** 2\ **Last updated:** [April 18, 2016, 1:31pm UTC](https://discuss.elastic.co/t/filters-aggregation-query-malformed-no-field-after-start-object/47601 "2016-04-18T13:31:59Z")
I am trying to use the filters aggregation to get the count of certain items in my index. But it fails with the error - query malformed, no field after start\_object { "aggs": { "actions": { "filters": { … --- ## [Kibana 4 Iframe Index.js size](https://discuss.elastic.co/t/kibana-4-iframe-index-js-size/24282)
**Author:** [@KibanaLover](https://discuss.elastic.co/u/KibanaLover)\ **Replies:** 2\ **Last updated:** [June 25, 2015, 9:47am UTC](https://discuss.elastic.co/t/kibana-4-iframe-index-js-size/24282 "2015-06-25T09:47:01Z")
Hi, When I use the share a link function for my dashboard in Kibana 4.0.2 I see that the downloaded index.js is 1mb in size. When I embed that same dashboard via iframe (using the Embed this dashboard link) the index.j… --- ## [Possible problem in yml config file](https://discuss.elastic.co/t/possible-problem-in-yml-config-file/19173)
**Author:** [@Sitkawoof](https://discuss.elastic.co/u/Sitkawoof)\ **Replies:** 2\ **Last updated:** [August 11, 2014, 6:11pm UTC](https://discuss.elastic.co/t/possible-problem-in-yml-config-file/19173 "2014-08-11T18:11:59Z")
I was doing a PUT to ES and got this error: org.elasticsearch.common.netty.handler.codec.frame.TooLongFrameException: An HTTP line is larger than 4096 bytes. I checked the message and it was indeed larger than 40… --- ## [Logstach is broken when using syslog pipeline](https://discuss.elastic.co/t/logstach-is-broken-when-using-syslog-pipeline/304584)
**Author:** [@sbocquet](https://discuss.elastic.co/u/sbocquet)\ **Replies:** 5\ **Last updated:** [May 12, 2022, 4:39pm UTC](https://discuss.elastic.co/t/logstach-is-broken-when-using-syslog-pipeline/304584 "2022-05-12T16:39:13Z")
Hi, I've just installed a brand new ElacticSearch v8.2 with Logstach. Both a talking well together. Kibana is installed too. Background server are Debian 11 up to date. I try to send all the logs I collect with a syslo… --- ## [7.5 \[reporting\] fails randomly](https://discuss.elastic.co/t/7-5-reporting-fails-randomly/215160)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 5\ **Last updated:** [February 4, 2020, 4:45pm UTC](https://discuss.elastic.co/t/7-5-reporting-fails-randomly/215160 "2020-02-04T16:45:03Z")
Hello, my users want to create some reports but the completion/fail is erratic. I am running on a debian 9 Could not find more hint to solve that. Can you help, please? best the message in the frontend: Unable to gen… --- ## [My filebeat registry file has no data "is empty"](https://discuss.elastic.co/t/my-filebeat-registry-file-has-no-data-is-empty/138389)
**Author:** [@m\_5amy](https://discuss.elastic.co/u/m_5amy)\ **Replies:** 5\ **Last updated:** [July 9, 2018, 8:42am UTC](https://discuss.elastic.co/t/my-filebeat-registry-file-has-no-data-is-empty/138389 "2018-07-09T08:42:28Z")
Hi all, i have a problem with my filebeat , the registry file is empty and still empty so nothing to monitor what should i have to do to fix this issue ? Thanks, --- ## [Read and filter 1million xml files](https://discuss.elastic.co/t/read-and-filter-1million-xml-files/99658)
**Author:** [@AntonQUT](https://discuss.elastic.co/u/AntonQUT)\ **Replies:** 5\ **Last updated:** [September 8, 2017, 6:04am UTC](https://discuss.elastic.co/t/read-and-filter-1million-xml-files/99658 "2017-09-08T06:04:53Z")
I have never used Logstash, but want to. I need to read approximately 1 million xml files, extract 2 specific fields (title and abstract) and load them into a named elasticsearch index with corresponding fields. I look… --- ## [Plugin - Pin a filter](https://discuss.elastic.co/t/plugin-pin-a-filter/85942)
**Author:** [@arieltk](https://discuss.elastic.co/u/arieltk)\ **Replies:** 5\ **Last updated:** [May 17, 2017, 12:48pm UTC](https://discuss.elastic.co/t/plugin-pin-a-filter/85942 "2017-05-17T12:48:42Z")
Hello, In a Kibana plugin, I would like to pin a filter after I added to the filter bar. Till now with no success. Can someone point me to such an example? Thanks --- ## [Cluster stopped ingesting, with "failed to obtain in-memory shard lock"](https://discuss.elastic.co/t/cluster-stopped-ingesting-with-failed-to-obtain-in-memory-shard-lock/155016)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 12:59pm UTC](https://discuss.elastic.co/t/cluster-stopped-ingesting-with-failed-to-obtain-in-memory-shard-lock/155016 "2018-11-01T12:59:50Z")
My cluster logged some "failed to obtain in-memory shard lock" messages over a period of the night, finishing at around 04:33 this morning, and there is no data in most of the indexes after 04:33, ie it has stopped index… --- ## [Graph: user defined edges](https://discuss.elastic.co/t/graph-user-defined-edges/90672)
**Author:** [@jdpark](https://discuss.elastic.co/u/jdpark)\ **Replies:** 3\ **Last updated:** [July 13, 2017, 2:48pm UTC](https://discuss.elastic.co/t/graph-user-defined-edges/90672 "2017-07-13T14:48:28Z")
Hello, The Graph (https://www.elastic.co/products/x-pack/graph) looks like a great tool. Is there a way to specify the edges instead of having Elastic figure it out? It looks like Elastic figures out the edges based … [Previous page](https://discuss.elastic.co/top.md?page=1127&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1129&per_page=50&period=all)