# Top **URL:** https://discuss.elastic.co/top.md?page=1135&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1136 --- ## [Logstash grep and grok](https://discuss.elastic.co/t/logstash-grep-and-grok/252441)
**Author:** [@tarunmendon](https://discuss.elastic.co/u/tarunmendon)\ **Replies:** 3\ **Last updated:** [October 18, 2020, 3:16pm UTC](https://discuss.elastic.co/t/logstash-grep-and-grok/252441 "2020-10-18T15:16:24Z")
I am new to Elasticstack. I am trying to implement a logstash pipeline in which the a file would be processed and it would filter(grep) and output if the line of file contains following keyword - java.lang.Exception - … --- ## [Filebeat timestamp processsor doesn't parse microseconds part](https://discuss.elastic.co/t/filebeat-timestamp-processsor-doesnt-parse-microseconds-part/248591)
**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\ **Replies:** 3\ **Last updated:** [October 2, 2020, 7:58am UTC](https://discuss.elastic.co/t/filebeat-timestamp-processsor-doesnt-parse-microseconds-part/248591 "2020-10-02T07:58:21Z")
Hi, this is the first part of my filebeat.xml filebeat.inputs: - type: tcp enabled: true host: "localhost:9000" processors: - decode\_json\_fields: fields: \["message"\] process\_array: true t… --- ## [QUESTION ABOUT "LOGSTASH GROK MATCH" WITH ARRAY](https://discuss.elastic.co/t/question-about-logstash-grok-match-with-array/178827)
**Author:** [@GGUERRA](https://discuss.elastic.co/u/GGUERRA)\ **Replies:** 3\ **Last updated:** [April 29, 2019, 12:35pm UTC](https://discuss.elastic.co/t/question-about-logstash-grok-match-with-array/178827 "2019-04-29T12:35:38Z")
Hello everyone, I have the following question regarding the logstash filters. I have logs that have fields that sometimes appear and sometimes do not, for example "ip" = "1.1.1.1", "mac" = "a1: a1: a1: a1: a1: a1", "by… --- ## [Need Help in Logstash Performance Issue](https://discuss.elastic.co/t/need-help-in-logstash-performance-issue/107888)
**Author:** [@Arun\_Raj](https://discuss.elastic.co/u/Arun_Raj)\ **Replies:** 8\ **Last updated:** [November 20, 2017, 1:06pm UTC](https://discuss.elastic.co/t/need-help-in-logstash-performance-issue/107888 "2017-11-20T13:06:16Z")
Hi All, I am having a requirement to filter some 50 GB data thru logstash to view the real time data in kibana currently there is a slight lag in logstash processing could you pl let know what all the possible ways to … --- ## [Parsing json from http\_poller and CiscoAMP API](https://discuss.elastic.co/t/parsing-json-from-http-poller-and-ciscoamp-api/78390)
**Author:** [@Karn\_Griffen](https://discuss.elastic.co/u/Karn_Griffen)\ **Replies:** 3\ **Last updated:** [March 17, 2017, 11:14pm UTC](https://discuss.elastic.co/t/parsing-json-from-http-poller-and-ciscoamp-api/78390 "2017-03-17T23:14:07Z")
I am attempting to pull data from CiscoAMP, I am able to connect and grab the data with http\_poller, but I am having a hard time understanding how to break out the subfields. Products: Logstash (5.2.0) Elastic Cloud … --- ## [Nice touch on the built in dev tools and Timelion for Beta](https://discuss.elastic.co/t/nice-touch-on-the-built-in-dev-tools-and-timelion-for-beta/62954)
**Author:** [@DigiAngel](https://discuss.elastic.co/u/DigiAngel)\ **Replies:** 0\ **Last updated:** [October 13, 2016, 2:09pm UTC](https://discuss.elastic.co/t/nice-touch-on-the-built-in-dev-tools-and-timelion-for-beta/62954 "2016-10-13T14:09:55Z")
Subject says it...even though Timelion mystifies me :slight\_smile: --- ## [Déployer un kibana qui se connecte à elastic cloud](https://discuss.elastic.co/t/deployer-un-kibana-qui-se-connecte-a-elastic-cloud/157301)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 6\ **Last updated:** [November 20, 2018, 9:36am UTC](https://discuss.elastic.co/t/deployer-un-kibana-qui-se-connecte-a-elastic-cloud/157301 "2018-11-20T09:36:45Z")
Bonjour, j'ai une instance de déploiement elastic cloud. Je voudrais faire tourner sur mon serveur (avec mon nom de domaine) une instance kibana qui se connecte à ce cluster (cloud). Je n'ai pas trouvé de best practice … --- ## [Default values for @metadata?](https://discuss.elastic.co/t/default-values-for-metadata/136303)
**Author:** [@A\_B](https://discuss.elastic.co/u/A_B)\ **Replies:** 6\ **Last updated:** [June 22, 2018, 2:23pm UTC](https://discuss.elastic.co/t/default-values-for-metadata/136303 "2018-06-22T14:23:59Z")
Hi, is there a recommended way to set some default @metadata fields in Logstash for all documents? I'm using this logstash output config to "shard" different types of logs to their own indices as ESv6 no longer supports… --- ## [Wildcard search in field doesn't work as expected](https://discuss.elastic.co/t/wildcard-search-in-field-doesnt-work-as-expected/289365)
**Author:** [@lchan](https://discuss.elastic.co/u/lchan)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 9:14pm UTC](https://discuss.elastic.co/t/wildcard-search-in-field-doesnt-work-as-expected/289365 "2021-11-23T21:14:42Z")
Hi all, I am on 7.13.1 on ElasticCloud. I mapped hostname via Logstash with syslog but for some reason the KQL search doesn't come out right. What am I doing wrong? search: hostname: cr1-ams1 Result: cr1-ams1 cr2-… --- ## [Kibana Visualization with string filter](https://discuss.elastic.co/t/kibana-visualization-with-string-filter/235964)
**Author:** [@Santosh\_Boorlagadda](https://discuss.elastic.co/u/Santosh_Boorlagadda)\ **Replies:** 2\ **Last updated:** [June 16, 2020, 12:28pm UTC](https://discuss.elastic.co/t/kibana-visualization-with-string-filter/235964 "2020-06-16T12:28:08Z")
Hi, I am trying to create a pie chart filtering two strings. I have to get a pie diagram on operation(my field) contains string with Add or subtract. Suppose If I have 10 documents with operation field string contains… --- ## [Create machine learning job for trend analysis](https://discuss.elastic.co/t/create-machine-learning-job-for-trend-analysis/223824)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 2\ **Last updated:** [March 17, 2020, 10:07am UTC](https://discuss.elastic.co/t/create-machine-learning-job-for-trend-analysis/223824 "2020-03-17T10:07:02Z")
I have a lot of data into elasticsearch with the tickets solded for men, women and children every day like the following: { "\_index": "logstash-people-2020.01.22", "\_type": "\_doc", "\_id": "I7xKznAB6obTCirlmSMC", … --- ## [Adding new field in multifields of a existing field in elasticsearch index](https://discuss.elastic.co/t/adding-new-field-in-multifields-of-a-existing-field-in-elasticsearch-index/191312)
**Author:** [@ivar](https://discuss.elastic.co/u/ivar)\ **Replies:** 2\ **Last updated:** [July 21, 2019, 1:44pm UTC](https://discuss.elastic.co/t/adding-new-field-in-multifields-of-a-existing-field-in-elasticsearch-index/191312 "2019-07-21T13:44:25Z")
Hello, I am using elasticsearch 6.5.4 version I have an index ex: testindex ,which has a field title my index has some data, I need to add a new analyzer to the index ,and a new field in fields of title I closed the… --- ## [How to run multiple instances on one machine using the jdbc input plugin](https://discuss.elastic.co/t/how-to-run-multiple-instances-on-one-machine-using-the-jdbc-input-plugin/97704)
**Author:** [@JCereal](https://discuss.elastic.co/u/JCereal)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 2:21am UTC](https://discuss.elastic.co/t/how-to-run-multiple-instances-on-one-machine-using-the-jdbc-input-plugin/97704 "2017-08-22T02:21:05Z")
Hi all, I have got 6 configuration files. All of them are using jbdc plugin to read data from MySQL every minute as input and elastic search as output. Each instance write into different index, so I have got six config … --- ## [This is the error im getting ,When i tried to import\_dashboard for filebeat](https://discuss.elastic.co/t/this-is-the-error-im-getting-when-i-tried-to-import-dashboard-for-filebeat/79844)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 2\ **Last updated:** [March 24, 2017, 11:31am UTC](https://discuss.elastic.co/t/this-is-the-error-im-getting-when-i-tried-to-import-dashboard-for-filebeat/79844 "2017-03-24T11:31:11Z")
import\_dashboards -only-index import\_dashboards -only-index fail to set the mapping. Error: Put http://127.0.0.1:9200/.kibana/\_mapping/search: dial tcp 127.0.0.1:9200: connectex: No connection could be made because the … --- ## [Logstash JSON syslog\_message parsing](https://discuss.elastic.co/t/logstash-json-syslog-message-parsing/75526)
**Author:** [@blakefallow](https://discuss.elastic.co/u/blakefallow)\ **Replies:** 2\ **Last updated:** [February 23, 2017, 12:08am UTC](https://discuss.elastic.co/t/logstash-json-syslog-message-parsing/75526 "2017-02-23T00:08:40Z")
OS: Ubuntu 16.04 Logstash: 5.2.1 Elasticsearch: 5.1 I've configured our Deis platform to send logs to our Logstack node with no issues. However, I'm still new to Ruby and Logstash is not yet my strong suit. I can't see… --- ## [Kibana 5 - Stacked bar plot with a different filter for each color](https://discuss.elastic.co/t/kibana-5-stacked-bar-plot-with-a-different-filter-for-each-color/67270)
**Author:** [@Uri\_Elias](https://discuss.elastic.co/u/Uri_Elias)\ **Replies:** 2\ **Last updated:** [December 13, 2016, 8:21pm UTC](https://discuss.elastic.co/t/kibana-5-stacked-bar-plot-with-a-different-filter-for-each-color/67270 "2016-12-13T20:21:35Z")
Hi all, I'm having a bit of truble trying to get Kibana do a certain bar chart. In a ridiculous reduction, it looks like this: My data consists of documents of the following structure: FULL NAME: "Michael Jordan" P… --- ## [How can I get a Java readable JSON String result from python client?](https://discuss.elastic.co/t/how-can-i-get-a-java-readable-json-string-result-from-python-client/38840)
**Author:** [@dinushan\_m](https://discuss.elastic.co/u/dinushan_m)\ **Replies:** 2\ **Last updated:** [January 11, 2016, 7:59am UTC](https://discuss.elastic.co/t/how-can-i-get-a-java-readable-json-string-result-from-python-client/38840 "2016-01-11T07:59:59Z")
I use python elasticsearch client , but the search results are passed to a Java code to be used. The problem is ES python client returns a JSON String in python format ( keys are surrounded by single quotes , therefore d… --- ## [Shield against ES KOPF](https://discuss.elastic.co/t/shield-against-es-kopf/34521)
**Author:** [@vikvan](https://discuss.elastic.co/u/vikvan)\ **Replies:** 2\ **Last updated:** [November 16, 2015, 2:37pm UTC](https://discuss.elastic.co/t/shield-against-es-kopf/34521 "2015-11-16T14:37:08Z")
We wanted to protect elastic cluster from any third party plugins usage, like KOPF, HEAD etc. Is there anything in Shield that we can implement to disable access from those plugins. --- ## [EOFException](https://discuss.elastic.co/t/eofexception/10033)
**Author:** [@Marcin\_Dojwa](https://discuss.elastic.co/u/Marcin_Dojwa)\ **Replies:** 2\ **Last updated:** [December 11, 2012, 12:47pm UTC](https://discuss.elastic.co/t/eofexception/10033 "2012-12-11T12:47:35Z")
Hi, I am getting this error: \[2012-12-11 05:20:26,143\]\[WARN \]\[index.merge.scheduler \] \[db-es1-sl\] \[users\]\[1\] failed to merge java.io.EOFException: read past EOF: NIOFSIndexInput(path="/home/es/data/production/n… --- ## [Multi\_field with collection value using Java api](https://discuss.elastic.co/t/multi-field-with-collection-value-using-java-api/9309)
**Author:** [@fletch](https://discuss.elastic.co/u/fletch)\ **Replies:** 2\ **Last updated:** [October 11, 2012, 6:10pm UTC](https://discuss.elastic.co/t/multi-field-with-collection-value-using-java-api/9309 "2012-10-11T18:10:53Z")
Hi all, I'm coming across some odd behavior and wondering if I'm missing something or if it's a bug. I created an index (see script below), and added some documents. There is a mapping for a multi\_field type, … --- ## [Unable to start APM Java Agent in WAS K8s pods](https://discuss.elastic.co/t/unable-to-start-apm-java-agent-in-was-k8s-pods/323203)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 7\ **Last updated:** [February 9, 2023, 2:52pm UTC](https://discuss.elastic.co/t/unable-to-start-apm-java-agent-in-was-k8s-pods/323203 "2023-02-09T14:52:56Z")
Kibana version: 8.5.2 Elasticsearch version: 8.5.2 APM Server version: 7.13.0 APM Agent language and version: apm-agent-java:1.12.0 Browser version: Original install method (e.g. download page, yum, deb, from source… --- ## [Logstash with ILM configuration](https://discuss.elastic.co/t/logstash-with-ilm-configuration/323363)
**Author:** [@Erates](https://discuss.elastic.co/u/Erates)\ **Replies:** 1\ **Last updated:** [January 17, 2023, 9:39pm UTC](https://discuss.elastic.co/t/logstash-with-ilm-configuration/323363 "2023-01-17T21:39:27Z")
Hi, we have an ELK stack running (I have no say in which version, which is currently 7.x) to get the logs of our applications running in a Kubernetes cluster all combined in 1 place. The applications are pushing their lo… --- ## [Users in kibana to lockout for 3 incorrect attempts](https://discuss.elastic.co/t/users-in-kibana-to-lockout-for-3-incorrect-attempts/216614)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 3:23pm UTC](https://discuss.elastic.co/t/users-in-kibana-to-lockout-for-3-incorrect-attempts/216614 "2020-01-28T15:23:31Z")
Hi All, There is a requirement for us from security perspective stating whenever user trying to login to kibana should get locked out for 3 incorrect passwords Users password should expire in 30 days. I dont find any… --- ## [Elasticsearch version values](https://discuss.elastic.co/t/elasticsearch-version-values/201899)
**Author:** [@tomas321](https://discuss.elastic.co/u/tomas321)\ **Replies:** 1\ **Last updated:** [October 2, 2019, 9:06am UTC](https://discuss.elastic.co/t/elasticsearch-version-values/201899 "2019-10-02T09:06:59Z")
Hi, I'm familiar with minimum\_index\_compatibility\_version and hope it indicates the minimum version required for index compatibility (e.g. reindex). But I'm not sure what minimum\_wire\_compatibility\_version means. --- ## [Logstash two different log types](https://discuss.elastic.co/t/logstash-two-different-log-types/130002)
**Author:** [@JensVanDeynse](https://discuss.elastic.co/u/JensVanDeynse)\ **Replies:** 7\ **Last updated:** [May 29, 2018, 11:56am UTC](https://discuss.elastic.co/t/logstash-two-different-log-types/130002 "2018-05-29T11:56:02Z")
Hello there I've been experimenting with logstash but ran into a problem when trying to parse haproxy logs. The issue is as follows, I've been able to implement a grok parser function for the most common logs but somet… --- ## [Ranking (league) table](https://discuss.elastic.co/t/ranking-league-table/68996)
**Author:** [@anton-da](https://discuss.elastic.co/u/anton-da)\ **Replies:** 1\ **Last updated:** [December 14, 2016, 11:16am UTC](https://discuss.elastic.co/t/ranking-league-table/68996 "2016-12-14T11:16:23Z")
Hello, could somebody suggest how I would approach to visualise a table like this: \[image\] With position change? My data would be daily visits for urls, so that I could see the delta in rankings. I think it is not pos… --- ## [Aggregation of different time ranges, and then compare the results](https://discuss.elastic.co/t/aggregation-of-different-time-ranges-and-then-compare-the-results/61518)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 1\ **Last updated:** [September 27, 2016, 4:57am UTC](https://discuss.elastic.co/t/aggregation-of-different-time-ranges-and-then-compare-the-results/61518 "2016-09-27T04:57:19Z")
I have an aggregation task which requires elasticsearch to aggregate the document count form different countries during most recent hour(round to current hour), and then compare the result to the same time range of yeste… --- ## [Logstash pipeline check for index](https://discuss.elastic.co/t/logstash-pipeline-check-for-index/224179)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 4\ **Last updated:** [March 19, 2020, 4:44pm UTC](https://discuss.elastic.co/t/logstash-pipeline-check-for-index/224179 "2020-03-19T16:44:12Z")
Hello, Is there a way to check in logstash pipeline if the exists. I am trying to use elasticsearch filter but I am getting an error on the first document because the index is not yet created. Regards, Peter --- ## [Multiple lines for representing different values in one field with TSVB](https://discuss.elastic.co/t/multiple-lines-for-representing-different-values-in-one-field-with-tsvb/217198)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 4\ **Last updated:** [February 3, 2020, 1:13pm UTC](https://discuss.elastic.co/t/multiple-lines-for-representing-different-values-in-one-field-with-tsvb/217198 "2020-02-03T13:13:40Z")
Hi everyone! I am new in Kibana and ELK and I am trying to show multiple lines for different values of one field using the TSVB Visualization tool. Below you can see the graph. Although I have chosen the Line Chart typ… --- ## [Dropping Events in between Start Event & End Event](https://discuss.elastic.co/t/dropping-events-in-between-start-event-end-event/176168)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 4\ **Last updated:** [April 17, 2019, 4:35am UTC](https://discuss.elastic.co/t/dropping-events-in-between-start-event-end-event/176168 "2019-04-17T04:35:23Z")
Hi, My setup : Logstash/Elasticsearch/Kibana 6.4.3 These are the sample logs that are recorded from a source. Where alarmstate: 0 means Alarm open & alarmstate:1 means Alarm closed alarm: id1 alarmstate: 0 deviceID… --- ## [Curator API returns None](https://discuss.elastic.co/t/curator-api-returns-none/161039)
**Author:** [@tomerl](https://discuss.elastic.co/u/tomerl)\ **Replies:** 4\ **Last updated:** [December 16, 2018, 6:59pm UTC](https://discuss.elastic.co/t/curator-api-returns-none/161039 "2018-12-16T18:59:32Z")
Hi there, I'm attempting to write a python code that will perform the actions that I'm currently doing in the curator-cli. The goal is to have Lambda that will perform several actions that are related but not restricted… --- ## [Fail to run rest api test](https://discuss.elastic.co/t/fail-to-run-rest-api-test/93495)
**Author:** [@lucianspec](https://discuss.elastic.co/u/lucianspec)\ **Replies:** 4\ **Last updated:** [July 18, 2017, 4:56pm UTC](https://discuss.elastic.co/t/fail-to-run-rest-api-test/93495 "2017-07-18T16:56:59Z")
$ gradle :distribution:integ-test-zip:integTest \\ -Dtests.class="org.elasticsearch.test.rest.\*Yaml\*IT" -Dtests.method="test {p0=cat.shards/10\_basic/Help}" FAILURE: Build failed with an exception. What went wrong: … --- ## [Non-standard calculation of field length for norms](https://discuss.elastic.co/t/non-standard-calculation-of-field-length-for-norms/29842)
**Author:** [@beowulfenator](https://discuss.elastic.co/u/beowulfenator)\ **Replies:** 4\ **Last updated:** [September 24, 2015, 7:20pm UTC](https://discuss.elastic.co/t/non-standard-calculation-of-field-length-for-norms/29842 "2015-09-24T19:20:48Z")
I am searching for locations and their synonyms. For example, "San Francisco" is really \["San Francisco", "Frisco", "SF"\]. My problem is that for this array field length is 4 tokens. So matching "San Francisco" to the … --- ## [Clickable Metric Visualization (Or alternatives)](https://discuss.elastic.co/t/clickable-metric-visualization-or-alternatives/221797)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 3\ **Last updated:** [March 4, 2020, 7:23am UTC](https://discuss.elastic.co/t/clickable-metric-visualization-or-alternatives/221797 "2020-03-04T07:23:42Z")
Hey All, I know it is impossible to have a metric visualization that can be clickable for drill-down purposes. I thought as a workaround to create a Vega visualisation. Is this possible? i.e. create with vega a clickab… --- ## [Latency buffer for Rollup jobs - recommended delay and/or what it depends on](https://discuss.elastic.co/t/latency-buffer-for-rollup-jobs-recommended-delay-and-or-what-it-depends-on/214819)
**Author:** [@alter](https://discuss.elastic.co/u/alter)\ **Replies:** 3\ **Last updated:** [January 14, 2020, 4:26pm UTC](https://discuss.elastic.co/t/latency-buffer-for-rollup-jobs-recommended-delay-and-or-what-it-depends-on/214819 "2020-01-14T16:26:54Z")
Hi! We are using real-time rollup job to aggregare events into metrics. The scenario: events are coming from logstash, peak ingestion flow is around 100k-120k events per minute rollup job is scheduled to run every min… --- ## [Watcher State Firing Constantly | Elasticsearch](https://discuss.elastic.co/t/watcher-state-firing-constantly-elasticsearch/198252)
**Author:** [@ntran](https://discuss.elastic.co/u/ntran)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 1:44pm UTC](https://discuss.elastic.co/t/watcher-state-firing-constantly-elasticsearch/198252 "2019-09-16T13:44:02Z")
Hi all, My watcher is constantly firing, with either "Partially Throttled" or "Throttled" for my comment. Is this an issue? or is there something wrong with my server? // Screenshot is below Thanks, Nhung --- ## [Sorting not working properly](https://discuss.elastic.co/t/sorting-not-working-properly/199174)
**Author:** [@lucabes](https://discuss.elastic.co/u/lucabes)\ **Replies:** 3\ **Last updated:** [September 12, 2019, 6:01am UTC](https://discuss.elastic.co/t/sorting-not-working-properly/199174 "2019-09-12T06:01:06Z")
Hi I have problem with sorting imn ELK 7.3. My query: https://pastebin.com/uK4Ywrec for mapping: https://pastebin.com/fZ4eyhtm and index settings https://pastebin.com/X4SiecP8 For this query and mapping uI'm getting… --- ## [Instance Correlation ID](https://discuss.elastic.co/t/instance-correlation-id/196328)
**Author:** [@digitalron](https://discuss.elastic.co/u/digitalron)\ **Replies:** 3\ **Last updated:** [August 26, 2019, 2:24pm UTC](https://discuss.elastic.co/t/instance-correlation-id/196328 "2019-08-26T14:24:24Z")
While going about testing our RUM implementation, we have come across a scenario where we are interested in correlating all transactions that belong to the same instance (or browser tab) so that we can discern if there w… --- ## [ElasticSearch for the Log Search in Zipped Archives Usecase](https://discuss.elastic.co/t/elasticsearch-for-the-log-search-in-zipped-archives-usecase/191395)
**Author:** [@Manug](https://discuss.elastic.co/u/Manug)\ **Replies:** 3\ **Last updated:** [August 23, 2019, 10:53am UTC](https://discuss.elastic.co/t/elasticsearch-for-the-log-search-in-zipped-archives-usecase/191395 "2019-08-23T10:53:11Z")
Hi, I have the following usecase and I want to find out if I can use elasticsearch for it. If yes, then how can I implement it. Usecase: I want to search log archives for any kind of string. I have log archives from … --- ## [Scale to Y-Axis Data Bounds not working in Kibana 6.6.1](https://discuss.elastic.co/t/scale-to-y-axis-data-bounds-not-working-in-kibana-6-6-1/171163)
**Author:** [@pmunoz](https://discuss.elastic.co/u/pmunoz)\ **Replies:** 3\ **Last updated:** [March 11, 2019, 11:58am UTC](https://discuss.elastic.co/t/scale-to-y-axis-data-bounds-not-working-in-kibana-6-6-1/171163 "2019-03-11T11:58:03Z")
Hello, I'm trying to create a split bar chart and, where Y-axis have different ranges... I selected the "Scale to Data Bounds" under Y-Axis settings, but I'm still seen the same interval for each graph?? How to fix thi… --- ## [How to disable analysis of beat.name and other starting issues](https://discuss.elastic.co/t/how-to-disable-analysis-of-beat-name-and-other-starting-issues/62822)
**Author:** [@knowncolor](https://discuss.elastic.co/u/knowncolor)\ **Replies:** 3\ **Last updated:** [October 14, 2016, 10:49am UTC](https://discuss.elastic.co/t/how-to-disable-analysis-of-beat-name-and-other-starting-issues/62822 "2016-10-14T10:49:32Z")
Hello TopBeat Community, I have configured topbeats to send metrics from my local Ubuntu machine to my Elastic Cloud cluster and installed the beats dashboards. However I see various "problems" with the beats dashboard… --- ## [Logstash 2.3.2 redis input crash](https://discuss.elastic.co/t/logstash-2-3-2-redis-input-crash/51379)
**Author:** [@Ronald\_Moesbergen](https://discuss.elastic.co/u/Ronald_Moesbergen)\ **Replies:** 3\ **Last updated:** [May 31, 2016, 6:59am UTC](https://discuss.elastic.co/t/logstash-2-3-2-redis-input-crash/51379 "2016-05-31T06:59:09Z")
Hi, I've recently upgraded logstash to version 2.3.2 and notice that since this upgrade, whenever a redis error occurs, logstash crashes wit the following exception: :exception=\># 'maxmemory'.\>, :backtrace=\>\["/usr/lo… --- ## [Geoip - Apache logs](https://discuss.elastic.co/t/geoip-apache-logs/269166)
**Author:** [@gloupe](https://discuss.elastic.co/u/gloupe)\ **Replies:** 5\ **Last updated:** [April 4, 2021, 7:07pm UTC](https://discuss.elastic.co/t/geoip-apache-logs/269166 "2021-04-04T19:07:12Z")
Hi, I'm trying to get geoip info from ipclient from my access logs generated by a apache2 server. I tried this filter in logstash: filter { if \[tags\]\[path\] =~ "/var/log/apache2/xxx-access.log" { … --- ## [Display custom message when no data in visualization](https://discuss.elastic.co/t/display-custom-message-when-no-data-in-visualization/220622)
**Author:** [@philippeE](https://discuss.elastic.co/u/philippeE)\ **Replies:** 5\ **Last updated:** [March 3, 2020, 3:22pm UTC](https://discuss.elastic.co/t/display-custom-message-when-no-data-in-visualization/220622 "2020-03-03T15:22:33Z")
Hello, I work on a project where I don't have data for a specific visualization during half the month. I would like my visualization to show a custom message that I put in more than "no data". Is it possible? --- ## [Grok pattern Syslog auth](https://discuss.elastic.co/t/grok-pattern-syslog-auth/304911)
**Author:** [@CemG](https://discuss.elastic.co/u/CemG)\ **Replies:** 2\ **Last updated:** [May 17, 2022, 11:47am UTC](https://discuss.elastic.co/t/grok-pattern-syslog-auth/304911 "2022-05-17T11:47:51Z")
Hello, I have to grok my syslog auth logs from Linux, I have a pattern, but it still nonmatch with the logs, can someone help me to see if there is an error in my gros pattern ? My filter filter { json { … --- ## [Elasticsearch sorting issue](https://discuss.elastic.co/t/elasticsearch-sorting-issue/157319)
**Author:** [@Jacques\_du\_Plessis](https://discuss.elastic.co/u/Jacques_du_Plessis)\ **Replies:** 2\ **Last updated:** [November 20, 2018, 6:37am UTC](https://discuss.elastic.co/t/elasticsearch-sorting-issue/157319 "2018-11-20T06:37:38Z")
Can someone please explain to me why I am getting such a random result when I sort my data. I am just doing a simple query, trying to return all the documents filtered my a companyId sorting my lastName in desc order. /… --- ## [Configure output Index name with kubernetes metadata field](https://discuss.elastic.co/t/configure-output-index-name-with-kubernetes-metadata-field/136622)
**Author:** [@orgoz](https://discuss.elastic.co/u/orgoz)\ **Replies:** 2\ **Last updated:** [June 21, 2018, 7:32am UTC](https://discuss.elastic.co/t/configure-output-index-name-with-kubernetes-metadata-field/136622 "2018-06-21T07:32:55Z")
Hi, I would like to have the kubernetes namespace in the index name, so I tried like this : output.elasticsearch: hosts: \['${ELASTICSEARCH\_HOST:elasticsearch}:${ELASTICSEARCH\_PORT:9200}'\] index: "%{\[kubernetes.na… --- ## [Cross cluster search comprehension](https://discuss.elastic.co/t/cross-cluster-search-comprehension/115959)
**Author:** [@Arnaud\_Gaillard](https://discuss.elastic.co/u/Arnaud_Gaillard)\ **Replies:** 2\ **Last updated:** [January 18, 2018, 3:55pm UTC](https://discuss.elastic.co/t/cross-cluster-search-comprehension/115959 "2018-01-18T15:55:24Z")
Hello everyone, I have been using Elasticsearch for a few months now, but I am only now embracing more and more of its features. One feature in particular, "Cross Cluster Search", is causing me some troubles. I am tryi… --- ## [\[SOLVED\] Request against hot and cold node](https://discuss.elastic.co/t/solved-request-against-hot-and-cold-node/53912)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 2\ **Last updated:** [June 29, 2016, 2:13pm UTC](https://discuss.elastic.co/t/solved-request-against-hot-and-cold-node/53912 "2016-06-29T14:13:27Z")
Hi all, I have a question regarding the behavior of elasticsearch when you have hot and cold nodes. My hot node hosts indices during 7 days, after this time indices are routed to the cold node with routing allocation… --- ## [Kibana getting Error: Unauthorized](https://discuss.elastic.co/t/kibana-getting-error-unauthorized/142735)
**Author:** [@UserSam](https://discuss.elastic.co/u/UserSam)\ **Replies:** 1\ **Last updated:** [August 6, 2018, 3:54pm UTC](https://discuss.elastic.co/t/kibana-getting-error-unauthorized/142735 "2018-08-06T15:54:50Z")
I'm on Kibana v6.3.2 and ElasticSearch v6.3.2. I'm getting this error on kibana consooooooooooooool Given below is a snippet of the logs: ops \[09:38:54.820\] memory: 115.2MB uptime: 0:13:24 load: \[0.00 0.00 0.00\] del… [Previous page](https://discuss.elastic.co/top.md?page=1134&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1136&per_page=50&period=all)