# Top **URL:** https://discuss.elastic.co/top.md?page=1138&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1139 --- ## [XML child nodes with varying number into one ElasticSearch field?](https://discuss.elastic.co/t/xml-child-nodes-with-varying-number-into-one-elasticsearch-field/148644)
**Author:** [@safehouse](https://discuss.elastic.co/u/safehouse)\ **Replies:** 6\ **Last updated:** [September 14, 2018, 6:46pm UTC](https://discuss.elastic.co/t/xml-child-nodes-with-varying-number-into-one-elasticsearch-field/148644 "2018-09-14T18:46:09Z")
I've searched the forum and tried various processes, but I can't get to a solution. Any help would be really appreciated. I have XML like this: \ \ **Author:** [@Royce](https://discuss.elastic.co/u/Royce)\ **Replies:** 6\ **Last updated:** [February 5, 2014, 3:34am UTC](https://discuss.elastic.co/t/problem-facets-tokenize-tags-with-spaces-is-there-a-solution/6351 "2014-02-05T03:34:17Z") Hi, I'm using facets to do filters on search results. One tag, for example, is a city name "Kansas City." The facet interprets "Kansas City" as two separate counts, "Kansas" and "City". How can I configure facets… --- ## [Invert Axis](https://discuss.elastic.co/t/invert-axis/296902)
**Author:** [@NJ.SE](https://discuss.elastic.co/u/NJ.SE)\ **Replies:** 8\ **Last updated:** [February 11, 2022, 1:32am UTC](https://discuss.elastic.co/t/invert-axis/296902 "2022-02-11T01:32:30Z")
Using for RSSI values whereas negative numbers are worse than positive. So I want -80 to be at the top, not the bottom. Any easy way to flip the values? --- ## [Failed to build kibana 6.3.2 from source](https://discuss.elastic.co/t/failed-to-build-kibana-6-3-2-from-source/141325)
**Author:** [@xinlei](https://discuss.elastic.co/u/xinlei)\ **Replies:** 8\ **Last updated:** [August 25, 2018, 2:18am UTC](https://discuss.elastic.co/t/failed-to-build-kibana-6-3-2-from-source/141325 "2018-08-25T02:18:36Z")
Hi, when I run yarn build i got this: Running script \[build\] in \[x-pack\]: $ gulp build \[16:07:27\] Using gulpfile ~/kibana/x-pack/gulpfile.js \[16:07:27\] Starting 'clean-test'... \[16:07:27\] Starting 'report'... \[16:07… --- ## [Question about time addition by Ruby filter](https://discuss.elastic.co/t/question-about-time-addition-by-ruby-filter/203136)
**Author:** [@smash](https://discuss.elastic.co/u/smash)\ **Replies:** 2\ **Last updated:** [October 15, 2019, 1:55am UTC](https://discuss.elastic.co/t/question-about-time-addition-by-ruby-filter/203136 "2019-10-15T01:55:45Z")
The following was correctly output to the "date\_time\_1" field after adding 9 hours to the date and time of "Timestamp".The following is the source ruby { code =\> "event.set('tt',event.get('\[@timestamp\]').time.lo… --- ## [Mapper\_parsing\_exception error on logstash](https://discuss.elastic.co/t/mapper-parsing-exception-error-on-logstash/138012)
**Author:** [@mksavic](https://discuss.elastic.co/u/mksavic)\ **Replies:** 2\ **Last updated:** [July 2, 2018, 3:54pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-error-on-logstash/138012 "2018-07-02T15:54:30Z")
Hello all, I have a machine that is currently running ELK (v6.3), and some other machines that are running Metricbeat (v6.3). Currently, Metricbeat is sending information over to Logstash, which in turn sends logs to El… --- ## [Sorting on dynamic nested object field](https://discuss.elastic.co/t/sorting-on-dynamic-nested-object-field/99570)
**Author:** [@yesu](https://discuss.elastic.co/u/yesu)\ **Replies:** 2\ **Last updated:** [September 6, 2017, 5:07pm UTC](https://discuss.elastic.co/t/sorting-on-dynamic-nested-object-field/99570 "2017-09-06T17:07:56Z")
Can I use sort on dynamic nested object field, indexing data like below. Creating index like below with mappers. PUT dynamic\_index { "mappings": { "dynamic\_type": { "dynamic": true, "properti… --- ## [Query to list Snort alerts indexed by unifiedbeat](https://discuss.elastic.co/t/query-to-list-snort-alerts-indexed-by-unifiedbeat/50058)
**Author:** [@sefai](https://discuss.elastic.co/u/sefai)\ **Replies:** 2\ **Last updated:** [May 16, 2016, 3:36pm UTC](https://discuss.elastic.co/t/query-to-list-snort-alerts-indexed-by-unifiedbeat/50058 "2016-05-16T15:36:45Z")
Hi all, First, I want to thank @cleesmith for the wonderful unifiedbeat plugin, it works out of the box and it is a very robust application. I have only started it once I have installed it, and it is working for several… --- ## [Elastic 8.15.0 missing InlineScript](https://discuss.elastic.co/t/elastic-8-15-0-missing-inlinescript/364824)
**Author:** [@p4paul](https://discuss.elastic.co/u/p4paul)\ **Replies:** 5\ **Last updated:** [August 20, 2024, 10:40am UTC](https://discuss.elastic.co/t/elastic-8-15-0-missing-inlinescript/364824 "2024-08-20T10:40:51Z")
It seems that co.elastic.clients.elasticsearch.\_types.InlineScript has been removed from 8.15.0 (exists in 8.14.3)? Is this intended? If so how do I migrate existing code? InlineScript inlineScript = InlineScript.of… --- ## [How do you search for many IP addresses and output only the source IP and destination IP in Dev Tools \[Kibana\]](https://discuss.elastic.co/t/how-do-you-search-for-many-ip-addresses-and-output-only-the-source-ip-and-destination-ip-in-dev-tools-kibana/276542)
**Author:** [@kanrab](https://discuss.elastic.co/u/kanrab)\ **Replies:** 1\ **Last updated:** [June 22, 2021, 11:29am UTC](https://discuss.elastic.co/t/how-do-you-search-for-many-ip-addresses-and-output-only-the-source-ip-and-destination-ip-in-dev-tools-kibana/276542 "2021-06-22T11:29:38Z")
So the query to search for a single IP is: GET \_search { "query": { "term": { "ip\_addr": "43.225.52.0/23" } } } But this is only able to search for one IP address My original query was: GET \_… --- ## [Cannot launch elasticsearch, Exception in thread "main" java.security.spec.InvalidKeySpecException: Could not generate secret key](https://discuss.elastic.co/t/cannot-launch-elasticsearch-exception-in-thread-main-java-security-spec-invalidkeyspecexception-could-not-generate-secret-key/144952)
**Author:** [@Edw](https://discuss.elastic.co/u/Edw)\ **Replies:** 1\ **Last updated:** [August 17, 2018, 9:00pm UTC](https://discuss.elastic.co/t/cannot-launch-elasticsearch-exception-in-thread-main-java-security-spec-invalidkeyspecexception-could-not-generate-secret-key/144952 "2018-08-17T21:00:34Z")
Prior to executing ./elasticsearch, I attempt to create a keystore, but get the below error /elasticsearch-keystore create Exception in thread "main" java.security.spec.InvalidKeySpecException: Could not generate secre… --- ## [ElastAlert : multiple query against multiple indices in same rule file](https://discuss.elastic.co/t/elastalert-multiple-query-against-multiple-indices-in-same-rule-file/82700)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 1\ **Last updated:** [April 19, 2017, 1:36pm UTC](https://discuss.elastic.co/t/elastalert-multiple-query-against-multiple-indices-in-same-rule-file/82700 "2017-04-19T13:36:14Z")
Hi, I have created 2 separate rule files , which are as follows:- //-------------------------------------------------------- realert: minutes: 5 from\_addr: test@email.com es\_host: xx.xx.xxx.xx index: topbeat-\* smtp\_hos… --- ## [Highlight\_query does treat all clauses and terms as boolean OR](https://discuss.elastic.co/t/highlight-query-does-treat-all-clauses-and-terms-as-boolean-or/76267)
**Author:** [@ps23](https://discuss.elastic.co/u/ps23)\ **Replies:** 1\ **Last updated:** [February 27, 2017, 8:54am UTC](https://discuss.elastic.co/t/highlight-query-does-treat-all-clauses-and-terms-as-boolean-or/76267 "2017-02-27T08:54:58Z")
see https://github.com/elastic/elasticsearch/issues/20676 I have the same issue. The documentation says: "It is also possible to highlight against a query other than the search query by setting highlight\_query. This is… --- ## [Dashboard or Visualization no results found](https://discuss.elastic.co/t/dashboard-or-visualization-no-results-found/45817)
**Author:** [@rvaedex23](https://discuss.elastic.co/u/rvaedex23)\ **Replies:** 1\ **Last updated:** [March 30, 2016, 4:47pm UTC](https://discuss.elastic.co/t/dashboard-or-visualization-no-results-found/45817 "2016-03-30T16:47:29Z")
Dashboard or Visualization no results found. I am selecting a virtualization transaction no results are found. When I go to the dashboards to select a filter or transaction no results found. I am able to see the logs… --- ## [Querying a list to check the size](https://discuss.elastic.co/t/querying-a-list-to-check-the-size/284969)
**Author:** [@eztask.io](https://discuss.elastic.co/u/eztask.io)\ **Replies:** 3\ **Last updated:** [September 27, 2021, 5:32pm UTC](https://discuss.elastic.co/t/querying-a-list-to-check-the-size/284969 "2021-09-27T17:32:35Z")
Hello, I am just new to Kibana query. I am trying to query a field, which is a list of objects "leadStages" : \[ { "leadStage" : 1, "inTime" : 1597832744832, "outTime… --- ## [ES Data Node crash and now have a heap of file errors](https://discuss.elastic.co/t/es-data-node-crash-and-now-have-a-heap-of-file-errors/148891)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 3:05pm UTC](https://discuss.elastic.co/t/es-data-node-crash-and-now-have-a-heap-of-file-errors/148891 "2018-09-21T15:05:25Z")
Hi. One of my data nodes crashed, had to run a fsck. Server is up again but now have a heap of these errors... In the past I only had a few and was able to delete it but this time there are too many... any way to get ar… --- ## [How to set Yaxis/area chart in Timelion](https://discuss.elastic.co/t/how-to-set-yaxis-area-chart-in-timelion/117663)
**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\ **Replies:** 3\ **Last updated:** [February 5, 2018, 5:48pm UTC](https://discuss.elastic.co/t/how-to-set-yaxis-area-chart-in-timelion/117663 "2018-02-05T17:48:33Z")
I have below set of log types |total\_threads=342|GH.CLNTCHL=40|AMN.CLNTCHL=91|UIJ.CLNTCHL=69|BHU.CLNTCHL=24| |total\_threads=332|GH.CLNTCHL=41|AMN.CLNTCHL=19|UIJ.CLNTCHL=69|BHU.CLNTCHL=34| |total\_threads=341|GH.CLNTCHL… --- ## [Prioritize a Master node in ES Cluster](https://discuss.elastic.co/t/prioritize-a-master-node-in-es-cluster/96588)
**Author:** [@sukeshss](https://discuss.elastic.co/u/sukeshss)\ **Replies:** 3\ **Last updated:** [August 10, 2017, 3:56pm UTC](https://discuss.elastic.co/t/prioritize-a-master-node-in-es-cluster/96588 "2017-08-10T15:56:08Z")
Hi, My ES Cluster contains 3 Master nodes (01,02 and 03) and 3 Data nodes (04,05 and 06). When Master 01 goes down, either of the Master nodes 02 or 03 will act as Master. Current Situation : When Master 01 comes onli… --- ## [Running the ELK stack on windows](https://discuss.elastic.co/t/running-the-elk-stack-on-windows/91202)
**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\ **Replies:** 3\ **Last updated:** [June 29, 2017, 10:35pm UTC](https://discuss.elastic.co/t/running-the-elk-stack-on-windows/91202 "2017-06-29T22:35:02Z")
Hello. I am currently running the ELK stack through the batch files on a Windows machine. I noticed when I close the batch files and then reopen the services the data remains in elasticsearch. I figured out that to delet… --- ## [Cross compilation of filebeat for embedded device - Nitrogen iMX6 - ARM-Cortex A9 processor](https://discuss.elastic.co/t/cross-compilation-of-filebeat-for-embedded-device-nitrogen-imx6-arm-cortex-a9-processor/87750)
**Author:** [@abhijeku](https://discuss.elastic.co/u/abhijeku)\ **Replies:** 3\ **Last updated:** [June 6, 2017, 9:40am UTC](https://discuss.elastic.co/t/cross-compilation-of-filebeat-for-embedded-device-nitrogen-imx6-arm-cortex-a9-processor/87750 "2017-06-06T09:40:01Z")
I am trying to cross compile filebeats to be run on nitrogen iMX6 hardware https://boundarydevices.com/product/nit6\_solox-imx6/ Does it support file beat? --- ## [Elasticsearch nodes on same machine unable to find each other](https://discuss.elastic.co/t/elasticsearch-nodes-on-same-machine-unable-to-find-each-other/86846)
**Author:** [@Austin\_E](https://discuss.elastic.co/u/Austin_E)\ **Replies:** 3\ **Last updated:** [May 25, 2017, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-on-same-machine-unable-to-find-each-other/86846 "2017-05-25T18:27:33Z")
I'm working with big machines so I have decided to run multiple nodes on each server. Before uncommenting network.host and discovery.zen.ping.unicast.hosts I could boot the cluster and the two nodes would connect. Howeve… --- ## [Using packetbeat and metricbeats for real time monitoring](https://discuss.elastic.co/t/using-packetbeat-and-metricbeats-for-real-time-monitoring/86051)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [May 19, 2017, 8:10am UTC](https://discuss.elastic.co/t/using-packetbeat-and-metricbeats-for-real-time-monitoring/86051 "2017-05-19T08:10:29Z")
Whether packetbeat and metricbeats can be used for the ELK based Real time monitoring solution where the SLAs are defined? This is in context to replace Sensu/Uchiwa/Grafana etc with ELK for System/infra/network and end-… --- ## [Restore from snapshot fails with no recovery information](https://discuss.elastic.co/t/restore-from-snapshot-fails-with-no-recovery-information/280355)
**Author:** [@bill\_d](https://discuss.elastic.co/u/bill_d)\ **Replies:** 2\ **Last updated:** [August 3, 2021, 7:43pm UTC](https://discuss.elastic.co/t/restore-from-snapshot-fails-with-no-recovery-information/280355 "2021-08-03T19:43:25Z")
I have 2 similarly configured 3 node elasticsearch clusters. Both run 7.10.2, but one is bigger than the other. I'm trying to restore an index from a snapshot. In the small cluster, the restore takes about 3 minutes, … --- ## [Prevent labels from overlapping in Canvas](https://discuss.elastic.co/t/prevent-labels-from-overlapping-in-canvas/216826)
**Author:** [@Fraeco](https://discuss.elastic.co/u/Fraeco)\ **Replies:** 1\ **Last updated:** [January 28, 2020, 1:11pm UTC](https://discuss.elastic.co/t/prevent-labels-from-overlapping-in-canvas/216826 "2020-01-28T13:11:16Z")
Is there any way to prevent labels from overlapping each other in Canvas when using the Donut or the Pie charts? Having the labels stack on top of each other kind of renders the chart useless, as the legend obviously do… --- ## [Get task ids after executing search query](https://discuss.elastic.co/t/get-task-ids-after-executing-search-query/281719)
**Author:** [@NLSVTN](https://discuss.elastic.co/u/NLSVTN)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 4:46pm UTC](https://discuss.elastic.co/t/get-task-ids-after-executing-search-query/281719 "2021-08-17T16:46:37Z")
I need to give a user an ability to terminate a query initiated by Elasticsearch-DSL or Elasticsearch-py. I know how to get a list of tasks running on the server but I can't just terminate all of them since there is a ch… --- ## [What version a node is?](https://discuss.elastic.co/t/what-version-a-node-is/277821)
**Author:** [@Daniel\_Seixas](https://discuss.elastic.co/u/Daniel_Seixas)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 10:01am UTC](https://discuss.elastic.co/t/what-version-a-node-is/277821 "2021-07-06T10:01:55Z")
Hi, Hope you can help me here. I did an upgrade of ES a few months ago to ES7.x . I was creating a new index but wanted to maintain the old one. The problem I have is that I cannot use the older index, not sure what we… --- ## [Unable to receive the log from filebeat to kafka](https://discuss.elastic.co/t/unable-to-receive-the-log-from-filebeat-to-kafka/113224)
**Author:** [@saravana\_ganesh](https://discuss.elastic.co/u/saravana_ganesh)\ **Replies:** 4\ **Last updated:** [January 3, 2018, 10:58pm UTC](https://discuss.elastic.co/t/unable-to-receive-the-log-from-filebeat-to-kafka/113224 "2018-01-03T22:58:49Z")
Hi, We are using kafka 2.12 and configure the output as below in the filebeat. filebeat.prospectors: type: log enabled: false paths: /var/log/\*.log #============================= Filebeat modules ============… --- ## [ES5 cannot find latest ES2 snapshot](https://discuss.elastic.co/t/es5-cannot-find-latest-es2-snapshot/87591)
**Author:** [@Dvine](https://discuss.elastic.co/u/Dvine)\ **Replies:** 4\ **Last updated:** [June 2, 2017, 9:53am UTC](https://discuss.elastic.co/t/es5-cannot-find-latest-es2-snapshot/87591 "2017-06-02T09:53:28Z")
Hi, We are migrating to an ES5.4 cluster from an ES2.4.3 Cluster. Snap shots are in S3 and we want to restore from the ES2.4 repo to our new cluster. We use creator to restore this and take our daily snapshots. T… --- ## [В каких случаях работает/не работает prefix\_length?](https://discuss.elastic.co/t/prefix-length/33855)
**Author:** [@Stan](https://discuss.elastic.co/u/Stan)\ **Replies:** 4\ **Last updated:** [November 5, 2015, 7:10pm UTC](https://discuss.elastic.co/t/prefix-length/33855 "2015-11-05T19:10:15Z")
Префиксный поиск, через запрос match работает весьма странно (анализатор - Edge NGramm). Например, мне нужно найти слово "москва" по введенному пользователем фрагменту "мос". Но в результатах я вижу (условно): "москва" "… --- ## [No es posible borrar un index pattern en Kibana](https://discuss.elastic.co/t/no-es-posible-borrar-un-index-pattern-en-kibana/261296)
**Author:** [@Leo78](https://discuss.elastic.co/u/Leo78)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 3:54pm UTC](https://discuss.elastic.co/t/no-es-posible-borrar-un-index-pattern-en-kibana/261296 "2021-01-19T15:54:07Z")
Hola comunidad, buenas tardes. Admito que soy nuevo en Kibana, por tanto requiero de sus sugerencias. La cuestión es simple, lo que yo quiero es borrar un index-pattern para poder volver a crearlo desde cero. Hago c… --- ## [Data ingestion into ElasticSearch from Spark Structured Streaming](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-from-spark-structured-streaming/196075)
**Author:** [@SandeepReddy](https://discuss.elastic.co/u/SandeepReddy)\ **Replies:** 2\ **Last updated:** [August 24, 2019, 4:36pm UTC](https://discuss.elastic.co/t/data-ingestion-into-elasticsearch-from-spark-structured-streaming/196075 "2019-08-24T16:36:44Z")
Hi, I have created dataset/dataframe using the watermark and window function and writing the output to ElasticSearch is not working. However dataset/dataframe created without watermark and window inserts data into Elas… --- ## [Stacked area chart](https://discuss.elastic.co/t/stacked-area-chart/190761)
**Author:** [@luc1](https://discuss.elastic.co/u/luc1)\ **Replies:** 2\ **Last updated:** [July 26, 2019, 7:20pm UTC](https://discuss.elastic.co/t/stacked-area-chart/190761 "2019-07-26T19:20:19Z")
Hi, I'm trying to do the same stacked area chart as in "Visualization" , but in Canvas It looks like this I don't see how to do the same in Canvas since there is no way to add multiple Y-axis .. if you can help i'll … --- ## [Elastic search index is getting created as BSON instead of JSON](https://discuss.elastic.co/t/elastic-search-index-is-getting-created-as-bson-instead-of-json/185222)
**Author:** [@nagarajanj](https://discuss.elastic.co/u/nagarajanj)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 9:54pm UTC](https://discuss.elastic.co/t/elastic-search-index-is-getting-created-as-bson-instead-of-json/185222 "2019-06-12T21:54:22Z")
We are using logstash to move the data b/w mongo db and elastic.. however the data is getting created as BSON instead of JSON.. I keep getting all the data in a "log\_entry" field as one big string. when we do the same… --- ## [How to use parent child relationships between types residing in different index in ElasticSearch 6.5](https://discuss.elastic.co/t/how-to-use-parent-child-relationships-between-types-residing-in-different-index-in-elasticsearch-6-5/164849)
**Author:** [@akkash.bansal](https://discuss.elastic.co/u/akkash.bansal)\ **Replies:** 2\ **Last updated:** [January 19, 2019, 5:11pm UTC](https://discuss.elastic.co/t/how-to-use-parent-child-relationships-between-types-residing-in-different-index-in-elasticsearch-6-5/164849 "2019-01-19T17:11:47Z")
Hi, I am trying to migrate from ES 5.x to 6.5 and I am stuck at migrating mappings of parent child relationships. Right now in ES 5 I have all the types in one index but the ES6.5 does not support multiple types in same… --- ## [Error in reporting](https://discuss.elastic.co/t/error-in-reporting/147595)
**Author:** [@jgatti1](https://discuss.elastic.co/u/jgatti1)\ **Replies:** 2\ **Last updated:** [September 7, 2018, 12:03pm UTC](https://discuss.elastic.co/t/error-in-reporting/147595 "2018-09-07T12:03:41Z")
Hello, I am trying to do a report and the following error message keeps appearing: Error: Failed to decrypt report job data. Please re-generate this report I don't know the problem; I have tried to do reports of diffe… --- ## [kibanaのDiscoverについて](https://discuss.elastic.co/t/kibana-discover/95461)
**Author:** [@Rhaya](https://discuss.elastic.co/u/Rhaya)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 11:13pm UTC](https://discuss.elastic.co/t/kibana-discover/95461 "2017-08-02T23:13:21Z")
いつもお世話になっております。 ElasticSearchに8784件のデータを挿入し、kibanaでindex作成後、discoverの件数が54,960件になっております。 他のindexを読み込んでしまっているのかと思い、Visualizeにて総件数を可視化してみましたが、8784件のままでした 恐らくカウントが重複していると思われるのですが、原因が分からない為どなたかご教示頂けないでしょうか。 環境 kibana 5… --- ## [Transport.publish\_host and network.publish\_host](https://discuss.elastic.co/t/transport-publish-host-and-network-publish-host/84332)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [May 3, 2017, 12:31am UTC](https://discuss.elastic.co/t/transport-publish-host-and-network-publish-host/84332 "2017-05-03T00:31:30Z")
I appreciate if someone can help me out . I have read two sections in the reference but did not understand in what situations network.publish\_host (9200/tcp) is used between the nodes. transport module is clearly sta… --- ## [Processes filtering](https://discuss.elastic.co/t/processes-filtering/71776)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [January 16, 2017, 11:49pm UTC](https://discuss.elastic.co/t/processes-filtering/71776 "2017-01-16T23:49:26Z")
I am trying to filter processes to just get postgress and httpd process and tried several way but didnt work. I am trying this and it doesnt work and collect everything: - process processes: \['postgres|httpd'\] Wha… --- ## [Mysql to Elastic Search query convert](https://discuss.elastic.co/t/mysql-to-elastic-search-query-convert/29092)
**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\ **Replies:** 2\ **Last updated:** [September 11, 2015, 7:28am UTC](https://discuss.elastic.co/t/mysql-to-elastic-search-query-convert/29092 "2015-09-11T07:28:03Z")
Hello, Please any one will help me out with converting mysql queries to elasticsearch. I have this query : SELECT DISTINCT (email) FROM my\_table Is it possible? @polyfractal Thanks --- ## [F5 log to logstash via Redis](https://discuss.elastic.co/t/f5-log-to-logstash-via-redis/26299)
**Author:** [@bw57899](https://discuss.elastic.co/u/bw57899)\ **Replies:** 2\ **Last updated:** [July 27, 2015, 12:07am UTC](https://discuss.elastic.co/t/f5-log-to-logstash-via-redis/26299 "2015-07-27T00:07:36Z")
The network F5 team export the log via syslog protocol to logstash. I provide the port with below, and get the logs successfully. input { syslog { type =\> syslog port =\> 5514 } } But I want to export the … --- ## [Elastic Integrations fail to install and lead to broken Dashboards when used with multiple Kibana Spaces](https://discuss.elastic.co/t/elastic-integrations-fail-to-install-and-lead-to-broken-dashboards-when-used-with-multiple-kibana-spaces/337246)
**Author:** [@matled](https://discuss.elastic.co/u/matled)\ **Replies:** 6\ **Last updated:** [August 22, 2023, 9:26am UTC](https://discuss.elastic.co/t/elastic-integrations-fail-to-install-and-lead-to-broken-dashboards-when-used-with-multiple-kibana-spaces/337246 "2023-08-22T09:26:07Z")
Production Environment: Elastic-Stack 8.8.2 Debian 12 7 Elasticsearch Nodes 3 Kibana Nodes 2 Fleet Agents 5 Kibana spaces 70 Elastic-Agents Since about Elastic-Stack 8.8.0 we have issues installing or reinstalling Ela… --- ## [How to restore snapshot to a different cluster](https://discuss.elastic.co/t/how-to-restore-snapshot-to-a-different-cluster/296182)
**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\ **Replies:** 6\ **Last updated:** [February 6, 2022, 2:43pm UTC](https://discuss.elastic.co/t/how-to-restore-snapshot-to-a-different-cluster/296182 "2022-02-06T14:43:02Z")
Hello Guys, I have taken a snapshot of Elasticsearch db in one of the cluster(here Elasticsearch is running as kubernetes pods, 3 pods of Elasticsearch are running) and now I want that snapshot to be restored into a com… --- ## [Grok cant match my log](https://discuss.elastic.co/t/grok-cant-match-my-log/149920)
**Author:** [@Haitianisgood](https://discuss.elastic.co/u/Haitianisgood)\ **Replies:** 6\ **Last updated:** [September 29, 2018, 3:49am UTC](https://discuss.elastic.co/t/grok-cant-match-my-log/149920 "2018-09-29T03:49:54Z")
My log: \[23:59:52.743\]2018-08-14 23:59:52 DEBUG \[resin-tcp-connection-\*:8012-59\] /queryup\[sversion=5\]\[model=HUAWEI G7-UL20\]\[from=\_360\]\[lastupdatetime=1532506757000\]\[versioncode=201805140\]\[userId=13994251\]\[mac=8638460274… --- ## [Can't modify the default index name](https://discuss.elastic.co/t/cant-modify-the-default-index-name/190000)
**Author:** [@sjabiulla](https://discuss.elastic.co/u/sjabiulla)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 12:39pm UTC](https://discuss.elastic.co/t/cant-modify-the-default-index-name/190000 "2019-07-11T12:39:45Z")
Hi, I am just trying to setup FileBeat to push logs from file to ElasticSearch Index. Here is my config. I'm expecting the data to be indexed to dummy-2019.07.11, but No matter what I change, Data is always being indexe… --- ## [Fluent Mapping Dictionary\](https://discuss.elastic.co/t/fluent-mapping-dictionary-string-mydto/163434)
**Author:** [@Hossein\_Nassiri](https://discuss.elastic.co/u/Hossein_Nassiri)\ **Replies:** 1\ **Last updated:** [January 9, 2019, 12:41am UTC](https://discuss.elastic.co/t/fluent-mapping-dictionary-string-mydto/163434 "2019-01-09T00:41:32Z")
Hi I have a dictionary which I want to map using fluent mapping, and for some properties of MyDto class, I need to add normalizer. // ... // Dictionary\ SomeCollection {get;set;} // ... // class MyDto … --- ## [Unindexed fields are not filtered in kibana](https://discuss.elastic.co/t/unindexed-fields-are-not-filtered-in-kibana/112631)
**Author:** [@Ajinkya\_Sabale](https://discuss.elastic.co/u/Ajinkya_Sabale)\ **Replies:** 1\ **Last updated:** [December 20, 2017, 8:10pm UTC](https://discuss.elastic.co/t/unindexed-fields-are-not-filtered-in-kibana/112631 "2017-12-20T20:10:21Z")
I have exceptionless running which captures logs from running application. Then it sends logs to elasticsearch. I'm able to see those in kibana on particular index. My problem is - those logs which are custom made and t… --- ## [Filebeat is partially collecting logs](https://discuss.elastic.co/t/filebeat-is-partially-collecting-logs/176256)
**Author:** [@y3046308](https://discuss.elastic.co/u/y3046308)\ **Replies:** 2\ **Last updated:** [April 11, 2019, 1:08pm UTC](https://discuss.elastic.co/t/filebeat-is-partially-collecting-logs/176256 "2019-04-11T13:08:48Z")
Hi I'm having a funny issue with filebeat in kubernetes cluster. Filebeat collects logs for some pods but it doesn't collect logs for all the other pods. I don't see any noticeable error messages from filebeat log. Co… --- ## [How to simulate the failure of elasticsearch？](https://discuss.elastic.co/t/how-to-simulate-the-failure-of-elasticsearch/269149)
**Author:** [@asasas234](https://discuss.elastic.co/u/asasas234)\ **Replies:** 0\ **Last updated:** [April 3, 2021, 12:30pm UTC](https://discuss.elastic.co/t/how-to-simulate-the-failure-of-elasticsearch/269149 "2021-04-03T12:30:44Z")
I found that for some simple failures, I can do it easily with the help of tools, such as network partitioning, nodes being killed, but there are still many abnormal cases that are not good to simulate, for example, ther… --- ## [Nested Field can't access the nested field array using script query](https://discuss.elastic.co/t/nested-field-cant-access-the-nested-field-array-using-script-query/257256)
**Author:** [@khalilw1](https://discuss.elastic.co/u/khalilw1)\ **Replies:** 0\ **Last updated:** [December 1, 2020, 6:12pm UTC](https://discuss.elastic.co/t/nested-field-cant-access-the-nested-field-array-using-script-query/257256 "2020-12-01T18:12:27Z")
Hello Guys, I have the following mapping PUT products/\_mapping { "properties": { "discounts": { "properties": { "KW": { "type": "nested" }, "SA": { "type": "neste… --- ## [Completion suggester - input as mapping](https://discuss.elastic.co/t/completion-suggester-input-as-mapping/103855)
**Author:** [@jacktuck](https://discuss.elastic.co/u/jacktuck)\ **Replies:** 0\ **Last updated:** [October 13, 2017, 8:19am UTC](https://discuss.elastic.co/t/completion-suggester-input-as-mapping/103855 "2017-10-13T08:19:08Z")
In the docs, there is an example: PUT music { "mappings": { "song" : { "properties" : { "suggest" : { "type" : "completion" }, … [Previous page](https://discuss.elastic.co/top.md?page=1137&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1139&per_page=50&period=all)