# Top **URL:** https://discuss.elastic.co/top.md?page=1129&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1130 --- ## [Failed to parse Timestamp](https://discuss.elastic.co/t/failed-to-parse-timestamp/36920)
**Author:** [@sombilat](https://discuss.elastic.co/u/sombilat)\ **Replies:** 3\ **Last updated:** [December 11, 2015, 3:17pm UTC](https://discuss.elastic.co/t/failed-to-parse-timestamp/36920 "2015-12-11T15:17:38Z")
Hello Guys, need some help. In my logstash I am reading a date pattern from input files. I have defined a format in my mapping with dd/MM/yyyy HH:mm:ss.SSS, so when it reads the input files it would follow the format … --- ## [Es is crashing after installing marvel](https://discuss.elastic.co/t/es-is-crashing-after-installing-marvel/1949)
**Author:** [@Abhishek\_Gupta](https://discuss.elastic.co/u/Abhishek_Gupta)\ **Replies:** 3\ **Last updated:** [July 20, 2015, 3:40pm UTC](https://discuss.elastic.co/t/es-is-crashing-after-installing-marvel/1949 "2015-07-20T15:40:58Z")
The output of the hs\_err file: https://gist.github.com/knoxxs/a84e7cef637cdada047e PS. Unable to find Marvel Issue Tracker --- ## [How to hide columns from data table?](https://discuss.elastic.co/t/how-to-hide-columns-from-data-table/279077)
**Author:** [@creativeguitar](https://discuss.elastic.co/u/creativeguitar)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 2:22pm UTC](https://discuss.elastic.co/t/how-to-hide-columns-from-data-table/279077 "2021-07-19T14:22:08Z")
I applied a date range filter to my table and it created an ugly column that I would like to hide. If it is not possible to hide, I would be ok if i can at least get rid of the time part of the date and display somethin… --- ## [Overwrite @timestamp filed by date and time filed in the CSV file](https://discuss.elastic.co/t/overwrite-timestamp-filed-by-date-and-time-filed-in-the-csv-file/311142)
**Author:** [@Faiz\_Shamri](https://discuss.elastic.co/u/Faiz_Shamri)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 2:42pm UTC](https://discuss.elastic.co/t/overwrite-timestamp-filed-by-date-and-time-filed-in-the-csv-file/311142 "2022-08-02T14:42:43Z")
My logstash conf. file is like the below: input { file { path =\> "/somepath/balance\_20220731.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { csv { separator =\> ";" … --- ## [Chain input Watcher multi result](https://discuss.elastic.co/t/chain-input-watcher-multi-result/213712)
**Author:** [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 10:31am UTC](https://discuss.elastic.co/t/chain-input-watcher-multi-result/213712 "2020-01-08T10:31:01Z")
Hi, I am really struggling to implement the following; I need a watcher which determines if for a username 2 different events occur after each other in a 24h window. Requirements First event: { "@version": "1", … --- ## [Neo4j - logstash-output-neo4j](https://discuss.elastic.co/t/neo4j-logstash-output-neo4j/50648)
**Author:** [@Andrew\_Shved](https://discuss.elastic.co/u/Andrew_Shved)\ **Replies:** 1\ **Last updated:** [May 22, 2016, 2:46pm UTC](https://discuss.elastic.co/t/neo4j-logstash-output-neo4j/50648 "2016-05-22T14:46:42Z")
I found and installed this plugin but can not find the documentation on it. Can anyone point me to how to use it ... Basically I want to store node text data to be searchable in ES but use neo4j as a graph database for … --- ## [Need help configuring repository-s3 (AWS\_WEB\_IDENTITY\_TOKEN\_FILE ignored?)](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607)
**Author:** [@ericsperano](https://discuss.elastic.co/u/ericsperano)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 12:00am UTC](https://discuss.elastic.co/t/need-help-configuring-repository-s3-aws-web-identity-token-file-ignored/306607 "2022-06-10T00:00:24Z")
Hello, I'm having some difficulties setting up the repository-s3 plugin on Kubernetes (EKS) using ECK. I can confirm that my service account is configured correctly, I can launch a pod running ubuntu with this service … --- ## [Timelion count with a condition](https://discuss.elastic.co/t/timelion-count-with-a-condition/154925)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 2:48pm UTC](https://discuss.elastic.co/t/timelion-count-with-a-condition/154925 "2018-11-01T14:48:07Z")
I have a need for doing a timelion count of a certain field (myField)... but only if another field (errorField) is not 0. So I made a scripted field: myFieldIfNoError if (doc\['errorField'\].value != null && doc\['errorFi… --- ## [ELK Exception handling](https://discuss.elastic.co/t/elk-exception-handling/88743)
**Author:** [@sanjeevkt](https://discuss.elastic.co/u/sanjeevkt)\ **Replies:** 2\ **Last updated:** [June 8, 2017, 7:56pm UTC](https://discuss.elastic.co/t/elk-exception-handling/88743 "2017-06-08T19:56:23Z")
Hello, We have done ELK setup in out application and that works fine Issue: When ELK is down due to any reason then our main application is also not getting up, below is the exception Could not create SyslogWriter ja… --- ## [Kibana/nginx configuration - Problem after upgrade](https://discuss.elastic.co/t/kibana-nginx-configuration-problem-after-upgrade/42112)
**Author:** [@Diego\_Corradini](https://discuss.elastic.co/u/Diego_Corradini)\ **Replies:** 2\ **Last updated:** [February 18, 2016, 4:19pm UTC](https://discuss.elastic.co/t/kibana-nginx-configuration-problem-after-upgrade/42112 "2016-02-18T16:19:34Z")
After the last upgrade when I access Kibana I am redirect in app/kibana instead the root. Ex. x.x.x.x:5601/app/kibana I tried different configuration settings without results. Do you have any idea how to deal with th… --- ## [Kibana in a multi DC setup](https://discuss.elastic.co/t/kibana-in-a-multi-dc-setup/28668)
**Author:** [@deltadelta](https://discuss.elastic.co/u/deltadelta)\ **Replies:** 2\ **Last updated:** [September 11, 2015, 2:08am UTC](https://discuss.elastic.co/t/kibana-in-a-multi-dc-setup/28668 "2015-09-11T02:08:07Z")
Hi all, I've tried looking for similar use cases to this, but haven't been able to find anyone doing something along the same lines (or at least, not with Kibana involved). We're currently trying to develop an ELK stac… --- ## [Disabling indexing during bulk publishing using the java api](https://discuss.elastic.co/t/disabling-indexing-during-bulk-publishing-using-the-java-api/9254)
**Author:** [@Russell\_Snyder](https://discuss.elastic.co/u/Russell_Snyder)\ **Replies:** 2\ **Last updated:** [October 5, 2012, 5:12pm UTC](https://discuss.elastic.co/t/disabling-indexing-during-bulk-publishing-using-the-java-api/9254 "2012-10-05T17:12:17Z")
Hi, We're trying to load 400k documents using the java bulk api (Client and BulkRequestBuilder) and are running into some timeout issues that we think could be remedied by disabling indexing during the publish, th… --- ## [How to set script parameter type](https://discuss.elastic.co/t/how-to-set-script-parameter-type/4798)
**Author:** [@George\_3](https://discuss.elastic.co/u/George_3)\ **Replies:** 2\ **Last updated:** [July 7, 2011, 2:34pm UTC](https://discuss.elastic.co/t/how-to-set-script-parameter-type/4798 "2011-07-07T14:34:13Z")
Hi all, I hope someone would be able to shed light into the problem I am experiencing. I am having trouble with trying to set the "type" of "params" in a script, so that they match the type in the mapping. For… --- ## [ILM delete all indices in X days](https://discuss.elastic.co/t/ilm-delete-all-indices-in-x-days/267127)
**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\ **Replies:** 4\ **Last updated:** [March 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/ilm-delete-all-indices-in-x-days/267127 "2021-03-18T13:35:25Z")
Hello, I need some help with understanding ILM configuration. Here is my configuration for ILM PUT \_ilm/policy/example { "policy": { "phases": { "hot": { "min\_age": "0ms", "actions": { … --- ## [Scripted field Avg](https://discuss.elastic.co/t/scripted-field-avg/244904)
**Author:** [@Shyrine](https://discuss.elastic.co/u/Shyrine)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 3:47pm UTC](https://discuss.elastic.co/t/scripted-field-avg/244904 "2020-08-13T15:47:11Z")
Hi, I'd like to calculate a scripted field that makes me do this : Count(nb\_request)/UniqueCount(nb\_request) But i have no idea of how the language paineless works. Thanks --- ## [\[ES 5.0.0-alpha3\] top level inner hits replacement?](https://discuss.elastic.co/t/es-5-0-0-alpha3-top-level-inner-hits-replacement/51693)
**Author:** [@drallax](https://discuss.elastic.co/u/drallax)\ **Replies:** 4\ **Last updated:** [June 2, 2016, 4:49pm UTC](https://discuss.elastic.co/t/es-5-0-0-alpha3-top-level-inner-hits-replacement/51693 "2016-06-02T16:49:25Z")
in ES-5.0.0-alpha3, top-level inner hits have been removed (https://github.com/elastic/elasticsearch/pull/17816) Suppose I have an index with a parent type and a child type and i'd wish to search parents, returning par… --- ## [Benchmark API endpoint](https://discuss.elastic.co/t/benchmark-api-endpoint/41374)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [February 12, 2016, 11:05am UTC](https://discuss.elastic.co/t/benchmark-api-endpoint/41374 "2016-02-12T11:05:16Z")
Just wondering what the status of the \_bench API endpoint? it seems totally missing from official documentation, but lof of books/blog is refering it. --- ## [Update elasticsearch index mapping through script or curl command](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905)
**Author:** [@prataprajasekhar](https://discuss.elastic.co/u/prataprajasekhar)\ **Replies:** 8\ **Last updated:** [October 18, 2021, 4:30am UTC](https://discuss.elastic.co/t/update-elasticsearch-index-mapping-through-script-or-curl-command/286905 "2021-10-18T04:30:40Z")
Dear Team, We are trying to update an index using below method in kibana dev console. Can you please let me know the method to be followed either using curl method or wget method or via a python or shell script to upda… --- ## [CPU usage of Logstash too high when used with S3 Input plugin](https://discuss.elastic.co/t/cpu-usage-of-logstash-too-high-when-used-with-s3-input-plugin/191143)
**Author:** [@Pista](https://discuss.elastic.co/u/Pista)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 1:40pm UTC](https://discuss.elastic.co/t/cpu-usage-of-logstash-too-high-when-used-with-s3-input-plugin/191143 "2019-07-18T13:40:29Z")
Working on infrastructure built over AWS, since there are some special cases that logs are stored only in S3 buckets, if we want to use ELK to analyse these logs, we need to use 'S3 Input plugin' \[1\]. Unfortunately, the… --- ## [How to solve Timelion Error: in cell #1: Unable to pairwise reduce seriesLists, number of series are not the same](https://discuss.elastic.co/t/how-to-solve-timelion-error-in-cell-1-unable-to-pairwise-reduce-serieslists-number-of-series-are-not-the-same/170334)
**Author:** [@Ido\_PX](https://discuss.elastic.co/u/Ido_PX)\ **Replies:** 3\ **Last updated:** [March 6, 2019, 9:47am UTC](https://discuss.elastic.co/t/how-to-solve-timelion-error-in-cell-1-unable-to-pairwise-reduce-serieslists-number-of-series-are-not-the-same/170334 "2019-03-06T09:47:05Z")
Hi, I'm trying to divide two split series. Splitting by the same exact term with the same number of splits in both, however the query is a bit different, which if I understand correctly, yields different splits which t… --- ## [Netscaler grok pattern](https://discuss.elastic.co/t/netscaler-grok-pattern/84254)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 0\ **Last updated:** [May 2, 2017, 11:55am UTC](https://discuss.elastic.co/t/netscaler-grok-pattern/84254 "2017-05-02T11:55:30Z")
Hi i've googled the following grok pattern for this as follows if \[type\] == "Netscaler" { grok { match =\> \[ "message", "\<%{POSINT:syslog\_pri}\> %{DATE}:%{TIME} %{SYSLOGHOST:syslog\_ho… --- ## [Strange observation in ELK](https://discuss.elastic.co/t/strange-observation-in-elk/83655)
**Author:** [@Raja1](https://discuss.elastic.co/u/Raja1)\ **Replies:** 3\ **Last updated:** [April 27, 2017, 3:24am UTC](https://discuss.elastic.co/t/strange-observation-in-elk/83655 "2017-04-27T03:24:36Z")
Hi All, I have created configuration in logstash and able to saw the logs in kibana with huge content like 7 lakh lines. Then i have separated the same data into parts with 1 lakh lines in each file and made 7 log f… --- ## [Can logstash merge several similar lines into one line?](https://discuss.elastic.co/t/can-logstash-merge-several-similar-lines-into-one-line/56884)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 3\ **Last updated:** [August 23, 2016, 9:26am UTC](https://discuss.elastic.co/t/can-logstash-merge-several-similar-lines-into-one-line/56884 "2016-08-23T09:26:40Z")
Hi Folks, Here is what I have in my json input from my kafka server: {"deviceName":"device1", "counter":125} {"deviceName":"device1", "counter":125} {"deviceName":"device2", "counter":88} {"deviceName":"device1", "coun… --- ## [Solr vs Elasticsearch](https://discuss.elastic.co/t/solr-vs-elasticsearch/5598)
**Author:** [@findbestopensource](https://discuss.elastic.co/u/findbestopensource)\ **Replies:** 8\ **Last updated:** [October 18, 2011, 1:42am UTC](https://discuss.elastic.co/t/solr-vs-elasticsearch/5598 "2011-10-18T01:42:33Z")
I have written an article Solr vs Elasticsearch http://www.findbestopensource.com/article-detail/solr-vs-elasticsearch Please post your feedback. Regards Aditya --- ## [Is there a way to see the script's console log on observability uptime monitor](https://discuss.elastic.co/t/is-there-a-way-to-see-the-scripts-console-log-on-observability-uptime-monitor/320496)
**Author:** [@ZaidMomin1](https://discuss.elastic.co/u/ZaidMomin1)\ **Replies:** 6\ **Last updated:** [December 8, 2022, 1:19pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-see-the-scripts-console-log-on-observability-uptime-monitor/320496 "2022-12-08T13:19:37Z")
Hi, Hope you're doing well! We have written the journey for monitoring the web app using playwright and Typescript. We are facing a difficulty to view the script's console.log written with the step, on the uptime monit… --- ## [Elasticsearch async search very slow](https://discuss.elastic.co/t/elasticsearch-async-search-very-slow/314016)
**Author:** [@bonyolult](https://discuss.elastic.co/u/bonyolult)\ **Replies:** 6\ **Last updated:** [September 9, 2022, 7:54am UTC](https://discuss.elastic.co/t/elasticsearch-async-search-very-slow/314016 "2022-09-09T07:54:52Z")
I'm running queries on a 3 node cluster. Simple query\_string query with some wildcards. When i use \_search, it takes about 10-15 ms to execute the query but when using \_async\_search query time goes up to around 300 000 m… --- ## [How to model schema in Elasticsearch when a particular entity contains both metadata and content](https://discuss.elastic.co/t/how-to-model-schema-in-elasticsearch-when-a-particular-entity-contains-both-metadata-and-content/108082)
**Author:** [@aniketkk](https://discuss.elastic.co/u/aniketkk)\ **Replies:** 6\ **Last updated:** [November 18, 2017, 7:53am UTC](https://discuss.elastic.co/t/how-to-model-schema-in-elasticsearch-when-a-particular-entity-contains-both-metadata-and-content/108082 "2017-11-18T07:53:58Z")
Hi, I am indexing articles information into Elasticsearch. The article information has metadata(article title, authors, viewCount ) and the article content itself. Metadata is of smaller size around 20KB. And article c… --- ## [How to find only requests for /robots.txt?](https://discuss.elastic.co/t/how-to-find-only-requests-for-robots-txt/53343)
**Author:** [@fikse](https://discuss.elastic.co/u/fikse)\ **Replies:** 6\ **Last updated:** [June 20, 2016, 5:40pm UTC](https://discuss.elastic.co/t/how-to-find-only-requests-for-robots-txt/53343 "2016-06-20T17:40:36Z")
I've tried everything I can to find this single index: { "\_index": "logstash-2015.12.15", "\_type": "logs", "\_id": "AVVVW\_wekW28kZ0eUiUh", "\_version": 1, "\_score": 1, "\_source": { "message": "127.0.0.1 … --- ## [Fleet managed Lifecycle Policies](https://discuss.elastic.co/t/fleet-managed-lifecycle-policies/310505)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 5\ **Last updated:** [August 12, 2022, 5:30pm UTC](https://discuss.elastic.co/t/fleet-managed-lifecycle-policies/310505 "2022-08-12T17:30:26Z")
Hi, Lifecycle policies for logs (name: Logs) are managed by Fleet. It is recommended not too edit this policy. But data in the logs will stay forever (see screenshot) and not deleted after x days, as usual. So eventual… --- ## [High availability of system indices: how-to mitigate system index failures](https://discuss.elastic.co/t/high-availability-of-system-indices-how-to-mitigate-system-index-failures/265082)
**Author:** [@bertr](https://discuss.elastic.co/u/bertr)\ **Replies:** 5\ **Last updated:** [February 23, 2021, 10:23am UTC](https://discuss.elastic.co/t/high-availability-of-system-indices-how-to-mitigate-system-index-failures/265082 "2021-02-23T10:23:10Z")
I notice that system indices in Elasticsearch have "index.number\_of\_replicas": "0" and this cannot be updated. Is there a reason why this cannot be set to 1 (or more) and how safe is it to have no replicas for system ind… --- ## [Http://localhost:9200/packetbeat-\*/ empty](https://discuss.elastic.co/t/http-localhost-9200-packetbeat-empty/86640)
**Author:** [@commonman.net](https://discuss.elastic.co/u/commonman.net)\ **Replies:** 5\ **Last updated:** [June 8, 2017, 4:49am UTC](https://discuss.elastic.co/t/http-localhost-9200-packetbeat-empty/86640 "2017-06-08T04:49:52Z")
Dears, I have setup ELK windows 10 and trying to retrieve IIS logs through packetbeat =\> ES =\> Kibana. However stuck up by this http://localhost:9200/packetbeat-\*/ {} Thanks in advance --- ## [Elasticsearch scoring Issue for same data](https://discuss.elastic.co/t/elasticsearch-scoring-issue-for-same-data/299690)
**Author:** [@painless\_elastic](https://discuss.elastic.co/u/painless_elastic)\ **Replies:** 2\ **Last updated:** [March 15, 2022, 9:01am UTC](https://discuss.elastic.co/t/elasticsearch-scoring-issue-for-same-data/299690 "2022-03-15T09:01:56Z")
I have an Elastic Index with the below 4 documents. PUT test/\_doc/1 { "tag" : "prove" } PUT test/\_doc/2 { "tag" : "prove" } PUT test/\_doc/3 { "tag" : "freckle" } PUT test/\_doc/4 { "tag" : "freckle" } On this i am runni… --- ## [Show an Scripted Value in a Visualization](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630)
**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630 "2021-02-09T14:32:52Z")
Hi, I'm creating a dashboard and now I need to show the unitary value of the products, this value must be dynamical along the time, the unitary value must be calculated adding all the prices and adding all the units to … --- ## [Help understanding "order by" metric](https://discuss.elastic.co/t/help-understanding-order-by-metric/97143)
**Author:** [@rmorris](https://discuss.elastic.co/u/rmorris)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 6:17pm UTC](https://discuss.elastic.co/t/help-understanding-order-by-metric/97143 "2017-08-16T18:17:13Z")
Hi there, I've been tearing my hair out in an attempt to get a heatmap to behave exactly as I'd like. My goal is to display the max timestamp for documents, grouped by a specific term. This appears to work well when I o… --- ## [Post LDAP setting in elasticsearch.yml file, error seen in elasticsearch launch](https://discuss.elastic.co/t/post-ldap-setting-in-elasticsearch-yml-file-error-seen-in-elasticsearch-launch/232125)
**Author:** [@lisha7](https://discuss.elastic.co/u/lisha7)\ **Replies:** 2\ **Last updated:** [May 13, 2020, 12:20am UTC](https://discuss.elastic.co/t/post-ldap-setting-in-elasticsearch-yml-file-error-seen-in-elasticsearch-launch/232125 "2020-05-13T00:20:43Z")
Hi Team I have added LDAP setting in elasticsearch.yml file and post which if i launch elasticsearch I get below error. ---------------------------------- Various ----------------------------------- Require explicit n… --- ## [Filebeat for kubernetes containers. How include / exclude logs by kubernetes labes?](https://discuss.elastic.co/t/filebeat-for-kubernetes-containers-how-include-exclude-logs-by-kubernetes-labes/195946)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 6:22am UTC](https://discuss.elastic.co/t/filebeat-for-kubernetes-containers-how-include-exclude-logs-by-kubernetes-labes/195946 "2019-08-23T06:22:43Z")
Hi, I have a kubernetes cluster (currently in dev status) where following is running: elastic stack different project specific apps. I want to use the same elastic stack for monitoring my kubernetes instance and my p… --- ## [Kibana Sum Aggregation showing wrong result](https://discuss.elastic.co/t/kibana-sum-aggregation-showing-wrong-result/180598)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 2\ **Last updated:** [May 16, 2019, 3:53am UTC](https://discuss.elastic.co/t/kibana-sum-aggregation-showing-wrong-result/180598 "2019-05-16T03:53:58Z")
Hello Team, I am trying to use kibana data-table with sum aggregation, however the sum aggregation is showing wrong result Please find below details. Data : Kibana data table with Sum aggregation Actual Result : … --- ## [Packetbeat Exiting: Sniffer main loop failed: Unsupported link type: UnknownLinkType(12)](https://discuss.elastic.co/t/packetbeat-exiting-sniffer-main-loop-failed-unsupported-link-type-unknownlinktype-12/155370)
**Author:** [@beat2beat](https://discuss.elastic.co/u/beat2beat)\ **Replies:** 2\ **Last updated:** [November 8, 2018, 11:43am UTC](https://discuss.elastic.co/t/packetbeat-exiting-sniffer-main-loop-failed-unsupported-link-type-unknownlinktype-12/155370 "2018-11-08T11:43:50Z")
Hello, I came into this exception when trying to read a valid pcap file. I can read the file with tcpdump -r . I verified that this is a valid pcap file (d4 c3 b2 a1 header), but still getting this exception. I noticed… --- ## [Converting ISO8601 to date](https://discuss.elastic.co/t/converting-iso8601-to-date/133165)
**Author:** [@Boukhdhira](https://discuss.elastic.co/u/Boukhdhira)\ **Replies:** 2\ **Last updated:** [May 25, 2018, 8:47am UTC](https://discuss.elastic.co/t/converting-iso8601-to-date/133165 "2018-05-25T08:47:37Z")
Hi, i have a date converting problem. I have logs in this format: 2018-04-12T18:20:13+02:00 And I parse logs timestamp by grok as TIMESTAMP\_ISO8601. And it works perfectly: log parses and fields adds. But i'm tring to… --- ## [Alerting: Access @timestamp in transform throws Exception](https://discuss.elastic.co/t/alerting-access-timestamp-in-transform-throws-exception/69677)
**Author:** [@nick.e](https://discuss.elastic.co/u/nick.e)\ **Replies:** 2\ **Last updated:** [December 21, 2016, 3:09pm UTC](https://discuss.elastic.co/t/alerting-access-timestamp-in-transform-throws-exception/69677 "2016-12-21T15:09:20Z")
I am going to transform the @timestamp value of every hit in my watch and write it to another field. When trying to access the @timestamp value with painless, I am receiving an error: "type": "general\_script\_exception… --- ## [Forecasting using Kibana](https://discuss.elastic.co/t/forecasting-using-kibana/48741)
**Author:** [@anil\_varghese](https://discuss.elastic.co/u/anil_varghese)\ **Replies:** 2\ **Last updated:** [April 29, 2016, 7:04pm UTC](https://discuss.elastic.co/t/forecasting-using-kibana/48741 "2016-04-29T19:04:07Z")
Hi Everyone, I am a beginner in elasticsearch. Can i do timeseries forecast with Kibana? Or this feature will only come in future? I saw an app named Sight in one webinar but i think its still not available .. Thanks… --- ## [Elasticsearch Marvel Retention Period?](https://discuss.elastic.co/t/elasticsearch-marvel-retention-period/48449)
**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\ **Replies:** 2\ **Last updated:** [April 26, 2016, 5:08pm UTC](https://discuss.elastic.co/t/elasticsearch-marvel-retention-period/48449 "2016-04-26T17:08:44Z")
One of the top requests in Marvel came from the community asking for better management of daily indexes. “Marvel is too heavy,” we heard a number of times. In the current release, Marvel now has a default retention dura… --- ## [Filebeat and logstash, merging logs and separating them](https://discuss.elastic.co/t/filebeat-and-logstash-merging-logs-and-separating-them/42582)
**Author:** [@dan.henning](https://discuss.elastic.co/u/dan.henning)\ **Replies:** 2\ **Last updated:** [February 24, 2016, 7:10pm UTC](https://discuss.elastic.co/t/filebeat-and-logstash-merging-logs-and-separating-them/42582 "2016-02-24T19:10:02Z")
Hello, I have multiple log txt files that have two separate logs inside that span multiple lines each. Here is an example: 13:43:58 Message loaded: D:\\mail\\heMail\\Drop\\ \\003.eml 13:43:58 Attempting to process message … --- ## [How to connect Neo4j from logstash using JDBC](https://discuss.elastic.co/t/how-to-connect-neo4j-from-logstash-using-jdbc/280524)
**Author:** [@vivek\_Jagadeesan](https://discuss.elastic.co/u/vivek_Jagadeesan)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 11:11am UTC](https://discuss.elastic.co/t/how-to-connect-neo4j-from-logstash-using-jdbc/280524 "2021-08-05T11:11:53Z")
Hi All, Could anyone help me on how to connect the neo4j from logstash using JDBC? My sample config: input { jdbc { jdbc\_driver\_library =\> "/usr/share/java/neo4j-jdbc-driver-4.0.2.jar" jdbc\_driver\_class =\> "org.neo4… --- ## [Reduce Elastic search Default Shards](https://discuss.elastic.co/t/reduce-elastic-search-default-shards/77994)
**Author:** [@elk12](https://discuss.elastic.co/u/elk12)\ **Replies:** 0\ **Last updated:** [March 9, 2017, 2:38pm UTC](https://discuss.elastic.co/t/reduce-elastic-search-default-shards/77994 "2017-03-09T14:38:49Z")
Hello Folks, I am looking to reduce the default shard count of 5 to 2 for all the indexes in our elasticsearch search cluster. I am looking for the below. Where and how to change this default value, so that going f… --- ## [Primary shards not balanced after recovery](https://discuss.elastic.co/t/primary-shards-not-balanced-after-recovery/22014)
**Author:** [@oreno](https://discuss.elastic.co/u/oreno)\ **Replies:** 0\ **Last updated:** [February 6, 2015, 3:01pm UTC](https://discuss.elastic.co/t/primary-shards-not-balanced-after-recovery/22014 "2015-02-06T15:01:26Z")
Hello, I'm using version 1.4.1, 2 nodes,total of 90 indexes ,2 shards for each, loading with 0 replicas and then updating to 1 replica after loading completes as documentation suggests. It appears that after a nod… --- ## [Please support App Search Api Client (C#)](https://discuss.elastic.co/t/please-support-app-search-api-client-c/203946)
**Author:** [@tuyndv](https://discuss.elastic.co/u/tuyndv)\ **Replies:** 2\ **Last updated:** [November 3, 2019, 12:43pm UTC](https://discuss.elastic.co/t/please-support-app-search-api-client-c/203946 "2019-11-03T12:43:32Z")
Dear Team, Please support App Search Api Client for C# (dotnet FW or .Net Core). Thanks --- ## [Delete\_by\_query performance optimization](https://discuss.elastic.co/t/delete-by-query-performance-optimization/244437)
**Author:** [@nickgregz](https://discuss.elastic.co/u/nickgregz)\ **Replies:** 4\ **Last updated:** [August 11, 2020, 7:48am UTC](https://discuss.elastic.co/t/delete-by-query-performance-optimization/244437 "2020-08-11T07:48:03Z")
Hello, Multiple topics mention time-based indices as a go to method for clearing old (index) data but in cases where that is not possible the alternative is delete\_by\_query which poses a performance impact if we are wor… --- ## [Hive read es data slow](https://discuss.elastic.co/t/hive-read-es-data-slow/208670)
**Author:** [@yousanghz](https://discuss.elastic.co/u/yousanghz)\ **Replies:** 4\ **Last updated:** [November 22, 2019, 7:51am UTC](https://discuss.elastic.co/t/hive-read-es-data-slow/208670 "2019-11-22T07:51:17Z")
hive version 1.2.1 es version 5.5.0 hadoop-elasticsearch-5.5.0.jar es.index: data\_monthly 10 shard this is hsql CREATE EXTERNAL TABLE es\_test5( id string, uid string, wb\_name string, platform string, comment\_… --- ## [Winlogbeat Redis Logstash Elasticsearch](https://discuss.elastic.co/t/winlogbeat-redis-logstash-elasticsearch/61511)
**Author:** [@NachoPerez](https://discuss.elastic.co/u/NachoPerez)\ **Replies:** 4\ **Last updated:** [September 27, 2016, 6:15am UTC](https://discuss.elastic.co/t/winlogbeat-redis-logstash-elasticsearch/61511 "2016-09-27T06:15:40Z")
Hi everybody, I have a cluster LS/ES of 6 Nodes (5 Data + 1 Kibana) LS-Version = 2.3.4 ES-Version = 2.4.0.1 I Send events from server linux with logstash-forwarder and send events with winlogbeat from windows serve… [Previous page](https://discuss.elastic.co/top.md?page=1128&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1130&per_page=50&period=all)