# Top

**URL:** https://discuss.elastic.co/top.md?page=1149&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1150

---

## [National charset convertation](https://discuss.elastic.co/t/national-charset-convertation/62715)

<div class="topic-metadata">

**Author:** [@Lego](https://discuss.elastic.co/u/Lego)\
**Replies:** 2\
**Last updated:** [October 11, 2016, 2:06pm UTC](https://discuss.elastic.co/t/national-charset-convertation/62715 "2016-10-11T14:06:20Z")

</div>

Hello everyone. Please help me to read correctly file with national charset. The file is Windows-1251 (Russia). I use encoding options in Filebeat. My Filebeat config is posted below: filebeat: prospectors: - paths…

---

## [Filebeat 7.2 on pfsense](https://discuss.elastic.co/t/filebeat-7-2-on-pfsense/188733)

<div class="topic-metadata">

**Author:** [@aztag](https://discuss.elastic.co/u/aztag)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 9:30am UTC](https://discuss.elastic.co/t/filebeat-7-2-on-pfsense/188733 "2019-07-09T09:30:30Z")

</div>

Hi, I am new to ELK, and currently implementing a SIEM using the ELK stack alongside a pfsense firewall with suricata. The ELK stack is set up, pfsense with suricata also. I can send and visualize the firewall logs on …

---

## [Is it possible to turn off field data compression?](https://discuss.elastic.co/t/is-it-possible-to-turn-off-field-data-compression/122816)

<div class="topic-metadata">

**Author:** [@Jun\_He](https://discuss.elastic.co/u/Jun_He)\
**Replies:** 2\
**Last updated:** [March 8, 2018, 8:42am UTC](https://discuss.elastic.co/t/is-it-possible-to-turn-off-field-data-compression/122816 "2018-03-08T08:42:52Z")

</div>

Hi, According to http://lucene.apache.org/core/6\_1\_0/core/index.html?org/apache/lucene/codecs/lucene60/package-summary.html , Lucene compresses field text data by LZ4. Is it possible to turn off the compression? Thanks…

---

## [Unable to create external table in elastic search using es-hadoop](https://discuss.elastic.co/t/unable-to-create-external-table-in-elastic-search-using-es-hadoop/72734)

<div class="topic-metadata">

**Author:** [@Gangadhar\_dantusetty](https://discuss.elastic.co/u/Gangadhar_dantusetty)\
**Replies:** 2\
**Last updated:** [January 30, 2017, 10:43am UTC](https://discuss.elastic.co/t/unable-to-create-external-table-in-elastic-search-using-es-hadoop/72734 "2017-01-30T10:43:50Z")

</div>

i am running a simple spark-submit job, e.g.: spark-submit --class com.x.y.z.logan /home/test/spark/sample.jar table in jar file hiveContext.sql("CREATE EXTERNAL TABLE IF NOT EXISTS databasename.tablename(es\_…

---

## [How to make synchronous call in ES java API](https://discuss.elastic.co/t/how-to-make-synchronous-call-in-es-java-api/52715)

<div class="topic-metadata">

**Author:** [@devender-yadav](https://discuss.elastic.co/u/devender-yadav)\
**Replies:** 2\
**Last updated:** [June 14, 2016, 2:26pm UTC](https://discuss.elastic.co/t/how-to-make-synchronous-call-in-es-java-api/52715 "2016-06-14T14:26:46Z")

</div>

I am using Elasticsearch 2.3 (both server and client). I added some indexes using below mention code: private TransportClient txClient; // client connection code IndexResponse response = txClient.prepare…

---

## [Python update using script\_id](https://discuss.elastic.co/t/python-update-using-script-id/52775)

<div class="topic-metadata">

**Author:** [@Tammo\_Heeren](https://discuss.elastic.co/u/Tammo_Heeren)\
**Replies:** 1\
**Last updated:** [June 16, 2016, 9:37am UTC](https://discuss.elastic.co/t/python-update-using-script-id/52775 "2016-06-16T09:37:37Z")

</div>

Essentially I am trying to update an existing document using python and the update api. When I do the following in Sense it work fine. The script in stored and scripting is enabled. POST /test/logevent/AVVQF8QuKsObI6Cw…

---

## [Getting started with elasticsearch on ambari](https://discuss.elastic.co/t/getting-started-with-elasticsearch-on-ambari/47413)

<div class="topic-metadata">

**Author:** [@Francesco\_Angelini](https://discuss.elastic.co/u/Francesco_Angelini)\
**Replies:** 1\
**Last updated:** [April 21, 2016, 6:17am UTC](https://discuss.elastic.co/t/getting-started-with-elasticsearch-on-ambari/47413 "2016-04-21T06:17:19Z")

</div>

Hello everyone! I'd like to know if there's a method to install and manage elasticsearch as a service on ambari(hortonworks) ! Thanks Francesco

---

## [SQL "WHERE" query in Kibana](https://discuss.elastic.co/t/sql-where-query-in-kibana/46996)

<div class="topic-metadata">

**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\
**Replies:** 1\
**Last updated:** [April 11, 2016, 1:50pm UTC](https://discuss.elastic.co/t/sql-where-query-in-kibana/46996 "2016-04-11T13:50:53Z")

</div>

Hi, I have a sample CSV data of the form below: ID, related ID, Event name, Date 1, 1001;1002, ABC,2016/01/01 1001, 1;1002, DEF,2016/01/02 1002, 1;1001, XYZ,2016/01/03 What I want as Output is: ID, Event Name, Rel…

---

## [Syslog index](https://discuss.elastic.co/t/syslog-index/46654)

<div class="topic-metadata">

**Author:** [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)\
**Replies:** 1\
**Last updated:** [April 7, 2016, 3:43pm UTC](https://discuss.elastic.co/t/syslog-index/46654 "2016-04-07T15:43:59Z")

</div>

Hi, I currently have one index with fields for Syslog and NETFlow at the same time and can visualize them both on the Discover tab on Kibana. Would I be able to create a seperate index for just my incoming Syslogs? I…

---

## [Where to install packetbeat for mongodb](https://discuss.elastic.co/t/where-to-install-packetbeat-for-mongodb/43093)

<div class="topic-metadata">

**Author:** [@palmerabollo](https://discuss.elastic.co/u/palmerabollo)\
**Replies:** 6\
**Last updated:** [March 1, 2016, 3:45pm UTC](https://discuss.elastic.co/t/where-to-install-packetbeat-for-mongodb/43093 "2016-03-01T15:45:08Z")

</div>

In an app with 2 nodejs services that connect to a 3-node mongodb replicaset, where is the best place to install packetbeat? On the nodejs boxes of on the mongodb boxes? Are there any pros/cons? Thank you very much.

---

## [ELK production servers configurations](https://discuss.elastic.co/t/elk-production-servers-configurations/310226)

<div class="topic-metadata">

**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\
**Replies:** 5\
**Last updated:** [July 26, 2022, 6:24am UTC](https://discuss.elastic.co/t/elk-production-servers-configurations/310226 "2022-07-26T06:24:43Z")

</div>

Hi Team, We are new to ELK stack and we are interested to use ELK in production environment. Now we want to start with few application and based on the performance we will move all our application logs to ELK. We did PO…

---

## [Unable to download getting a 403](https://discuss.elastic.co/t/unable-to-download-getting-a-403/307139)

<div class="topic-metadata">

**Author:** [@abas](https://discuss.elastic.co/u/abas)\
**Replies:** 5\
**Last updated:** [June 21, 2022, 10:43pm UTC](https://discuss.elastic.co/t/unable-to-download-getting-a-403/307139 "2022-06-21T22:43:32Z")

</div>

Hello, We are using Chocolatay to install some packages on our Windows Server. I tried to install winlogbeat, which downloads the file from https://artifacts.elastic.co/downloads/beats/winlogbeat/winlogbeat-7.15.1-windo…

---

## [Security /Hosts / User Authentifications empty](https://discuss.elastic.co/t/security-hosts-user-authentifications-empty/253720)

<div class="topic-metadata">

**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\
**Replies:** 5\
**Last updated:** [November 22, 2020, 8:36am UTC](https://discuss.elastic.co/t/security-hosts-user-authentifications-empty/253720 "2020-11-22T08:36:50Z")

</div>

Hi, I installed Elasticsearch 7.9.3 a few days ago on a server and then Winlogbeat on 4 other servers. In the User Authentifications section, it displays 0 from the beginning, regardless of the chosen time frame. Wh…

---

## [Elasticsearch indexing rate from Logstash](https://discuss.elastic.co/t/elasticsearch-indexing-rate-from-logstash/134083)

<div class="topic-metadata">

**Author:** [@SebScoFr](https://discuss.elastic.co/u/SebScoFr)\
**Replies:** 5\
**Last updated:** [June 9, 2018, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-rate-from-logstash/134083 "2018-06-09T13:03:31Z")

</div>

So let me try to provide as much context as possible. We are using ECE. Both ES and Logstash version 6.2.4. We have a cluster of 10 nodes, 16GB memory per node. Everyday we have a process responsible for indexing a bu…

---

## [MapperPrsing Exception in METRICBEANS](https://discuss.elastic.co/t/mapperprsing-exception-in-metricbeans/59049)

<div class="topic-metadata">

**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\
**Replies:** 5\
**Last updated:** [August 29, 2016, 11:16pm UTC](https://discuss.elastic.co/t/mapperprsing-exception-in-metricbeans/59049 "2016-08-29T23:16:31Z")

</div>

Hi We are using elasticsearch 1.5.2 Insalled metricbeat by command : curl -L -O https://download.elastic.co/beats/metricbeat/metricbeat-5.0.0-alpha5-x86\_64.rpm Configuration: in metricbeat.yml file: metricbeat.modu…

---

## [Cutoff\_frequency yields different results using filtered filter query or filtered query](https://discuss.elastic.co/t/cutoff-frequency-yields-different-results-using-filtered-filter-query-or-filtered-query/26482)

<div class="topic-metadata">

**Author:** [@sjtuner](https://discuss.elastic.co/u/sjtuner)\
**Replies:** 5\
**Last updated:** [July 29, 2015, 8:03pm UTC](https://discuss.elastic.co/t/cutoff-frequency-yields-different-results-using-filtered-filter-query-or-filtered-query/26482 "2015-07-29T20:03:30Z")

</div>

Hello everybody I encountered a behavior I haven't expected with my current understanding how elastic search works. Obviously I did not understand as much as I thought \[smile\] Both queries shown below look only sli…

---

## [Translate REST call to Java API](https://discuss.elastic.co/t/translate-rest-call-to-java-api/5765)

<div class="topic-metadata">

**Author:** [@fmpwizard](https://discuss.elastic.co/u/fmpwizard)\
**Replies:** 5\
**Last updated:** [March 11, 2013, 7:58am UTC](https://discuss.elastic.co/t/translate-rest-call-to-java-api/5765 "2013-03-11T07:58:45Z")

</div>

Hi, I'm having a hard time converting a REST call to the JAVA equivalent, the exact REST call is: curl -XGET http://192.168.0.100:9200/inventory/\_search?pretty=true -d ' { "query" : { …

---

## [Logstash custom DATE fields (extracted by regex or custom patterns) how to convert it to DATE field](https://discuss.elastic.co/t/logstash-custom-date-fields-extracted-by-regex-or-custom-patterns-how-to-convert-it-to-date-field/348419)

<div class="topic-metadata">

**Author:** [@elk1985](https://discuss.elastic.co/u/elk1985)\
**Replies:** 7\
**Last updated:** [December 7, 2023, 12:45pm UTC](https://discuss.elastic.co/t/logstash-custom-date-fields-extracted-by-regex-or-custom-patterns-how-to-convert-it-to-date-field/348419 "2023-12-07T12:45:28Z")

</div>

Hello everyone. Currently, I'm in the stage of writing custom Grok filters in Logstash. I have many different logs - some of them have a date format that fits ISO8601 format. But unfortunately when I use this format in m…

---

## [Unresolved dependency: org.pentaho](https://discuss.elastic.co/t/unresolved-dependency-org-pentaho/70616)

<div class="topic-metadata">

**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\
**Replies:** 1\
**Last updated:** [January 5, 2017, 1:16am UTC](https://discuss.elastic.co/t/unresolved-dependency-org-pentaho/70616 "2017-01-05T01:16:32Z")

</div>

I'm running emr-5.2.0 with Spark 2.0.2 and I'm getting an error when trying to use the new 5.1.1 release. Any ideas why? $ spark-shell --packages org.elasticsearch:elasticsearch-hadoop:5.1.1 ... Exception in thread…

---

## [Logstash invalid byte sequence in UTF-8 jdbc input](https://discuss.elastic.co/t/logstash-invalid-byte-sequence-in-utf-8-jdbc-input/194876)

<div class="topic-metadata">

**Author:** [@nick36](https://discuss.elastic.co/u/nick36)\
**Replies:** 2\
**Last updated:** [August 12, 2019, 5:30pm UTC](https://discuss.elastic.co/t/logstash-invalid-byte-sequence-in-utf-8-jdbc-input/194876 "2019-08-12T17:30:50Z")

</div>

Hi, I have a problem with an error invalid byte sequence in UTF-8. Logstash 7.3.0. conf below: input{ jdbc{ jdbc\_driver\_library =\> "C:\\sqljdbc42.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriv…

---

## [Customizing Metrics in kibana](https://discuss.elastic.co/t/customizing-metrics-in-kibana/117224)

<div class="topic-metadata">

**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\
**Replies:** 2\
**Last updated:** [January 29, 2018, 10:40am UTC](https://discuss.elastic.co/t/customizing-metrics-in-kibana/117224 "2018-01-29T10:40:32Z")

</div>

Hi , During the development of my kibana plugin : https://github.com/GregBoero/kbn\_vis\_multiple\_graph something hit me about metric. is it possible to customize a metrics, by example, is it possible to create a condi…

---

## [What is the best way to config multiple sql tables in logstash](https://discuss.elastic.co/t/what-is-the-best-way-to-config-multiple-sql-tables-in-logstash/62529)

<div class="topic-metadata">

**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\
**Replies:** 2\
**Last updated:** [March 7, 2017, 8:17pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-config-multiple-sql-tables-in-logstash/62529 "2017-03-07T20:17:38Z")

</div>

Hi, I've multiple tables in SQL server that needs to be imported to elasticsearch using logstash. So far, I'm doing single conf for single table but it's getting hard to maintain several config files. Is it better to…

---

## [Kibana 4.2 : aggregations pipeline](https://discuss.elastic.co/t/kibana-4-2-aggregations-pipeline/39441)

<div class="topic-metadata">

**Author:** [@Hornov](https://discuss.elastic.co/u/Hornov)\
**Replies:** 2\
**Last updated:** [June 16, 2016, 11:11am UTC](https://discuss.elastic.co/t/kibana-4-2-aggregations-pipeline/39441 "2016-06-16T11:11:16Z")

</div>

Someone did he find a way to use the bucket\_selector in Kibana ? Are there been changes since this message :

---

## [Kibana 5.0A2 URI encoding](https://discuss.elastic.co/t/kibana-5-0a2-uri-encoding/49792)

<div class="topic-metadata">

**Author:** [@gquintana](https://discuss.elastic.co/u/gquintana)\
**Replies:** 2\
**Last updated:** [May 12, 2016, 11:44am UTC](https://discuss.elastic.co/t/kibana-5-0a2-uri-encoding/49792 "2016-05-12T11:44:52Z")

</div>

In the Console/Sense app, I can not use spaces or spécial chars in URI params. For example GET monument/\_search?q=mère GET monument/\_search?q=sainte eglise I get an error child "uri" fails because \["uri" must be a va…

---

## [Template Query on embedded server results in "script\_lang not supported \[mustache\]"](https://discuss.elastic.co/t/template-query-on-embedded-server-results-in-script-lang-not-supported-mustache/38765)

<div class="topic-metadata">

**Author:** [@davidbkemp](https://discuss.elastic.co/u/davidbkemp)\
**Replies:** 2\
**Last updated:** [January 9, 2016, 10:04pm UTC](https://discuss.elastic.co/t/template-query-on-embedded-server-results-in-script-lang-not-supported-mustache/38765 "2016-01-09T22:04:02Z")

</div>

We use an embedded Elasticsearch within our Java integration tests, but upon upgrading to Elasticsearch 2 we are getting the following error on our Template Queries: \[{"type":"illegal\_argument\_exception","reason":"scri…

---

## [Native Java API is slower than the REST one](https://discuss.elastic.co/t/native-java-api-is-slower-than-the-rest-one/26060)

<div class="topic-metadata">

**Author:** [@Asaf\_Elias](https://discuss.elastic.co/u/Asaf_Elias)\
**Replies:** 2\
**Last updated:** [July 22, 2015, 9:39am UTC](https://discuss.elastic.co/t/native-java-api-is-slower-than-the-rest-one/26060 "2015-07-22T09:39:13Z")

</div>

Continuing the discussion from Java Client slower than http: Hey guys I'm having the same issue where a query using the native JAVA client takes much longer than in the REST api (instead of 15 ms, it takes 2500 ms). I…

---

## [Spark on k8s can't authenticate to ECK](https://discuss.elastic.co/t/spark-on-k8s-cant-authenticate-to-eck/222764)

<div class="topic-metadata">

**Author:** [@YaSe](https://discuss.elastic.co/u/YaSe)\
**Replies:** 3\
**Last updated:** [March 10, 2020, 1:18pm UTC](https://discuss.elastic.co/t/spark-on-k8s-cant-authenticate-to-eck/222764 "2020-03-10T13:18:06Z")

</div>

Hello everyone, I am very excited by using Elasticsearch on Kubernetes with Spark but I cant' authenticate my job to it. I successfully installed ECK (without TLS =\> for test) on my GKE cluster with the following templ…

---

## [Logstash pipeline stops working](https://discuss.elastic.co/t/logstash-pipeline-stops-working/209604)

<div class="topic-metadata">

**Author:** [@b725](https://discuss.elastic.co/u/b725)\
**Replies:** 3\
**Last updated:** [November 27, 2019, 5:54am UTC](https://discuss.elastic.co/t/logstash-pipeline-stops-working/209604 "2019-11-27T05:54:33Z")

</div>

I noticed today that a pipeline stopped working Background events get logged into different Amazon S3 buckets paths a logstash pipeline is created for different bucket paths so that they run in parallel plus different…

---

## [Changing logo in Kibana 7.2](https://discuss.elastic.co/t/changing-logo-in-kibana-7-2/190699)

<div class="topic-metadata">

**Author:** [@Jeniffer](https://discuss.elastic.co/u/Jeniffer)\
**Replies:** 3\
**Last updated:** [July 22, 2019, 6:46am UTC](https://discuss.elastic.co/t/changing-logo-in-kibana-7-2/190699 "2019-07-22T06:46:24Z")

</div>

Hi I want to change the logo on the left side bar and the logo when you log in. I couldnt find where the logo is located. I am using kibana 7.2 Can anyone help me? Thank You

---

## [Sub objects vega lite](https://discuss.elastic.co/t/sub-objects-vega-lite/133343)

<div class="topic-metadata">

**Author:** [@sureshboiina](https://discuss.elastic.co/u/sureshboiina)\
**Replies:** 3\
**Last updated:** [June 8, 2018, 5:28pm UTC](https://discuss.elastic.co/t/sub-objects-vega-lite/133343 "2018-06-08T17:28:14Z")

</div>

Actually i am using vega lite plugin in kibana but the problem is when i have the sub objects as result i am not able to get the value. if i want to read the down field value, but i tried '.' operator to reach the path…

---

## [Alphanumeric ranges regexp in kibana](https://discuss.elastic.co/t/alphanumeric-ranges-regexp-in-kibana/61819)

<div class="topic-metadata">

**Author:** [@davidfischman](https://discuss.elastic.co/u/davidfischman)\
**Replies:** 3\
**Last updated:** [October 5, 2016, 9:49pm UTC](https://discuss.elastic.co/t/alphanumeric-ranges-regexp-in-kibana/61819 "2016-10-05T21:49:20Z")

</div>

I am using the elastic page on regexp: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-regexp-query.html I am trying to find all the occurrences of t=#####. According to the page this should…

---

## [Logstash and Twitter Input](https://discuss.elastic.co/t/logstash-and-twitter-input/54078)

<div class="topic-metadata">

**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\
**Replies:** 3\
**Last updated:** [June 28, 2016, 5:37pm UTC](https://discuss.elastic.co/t/logstash-and-twitter-input/54078 "2016-06-28T17:37:36Z")

</div>

Hola a todos. Este es mi codigo en logstash. input { twitter { consumer\_key =\> "dplzZiWV2qP5q2dMZpM8lLb0c" consumer\_secret =\>"wpemcks8EqdgY3ZjV8dMJOViB0p …

---

## [New installation - Unable to connect to kibana 7.9.2](https://discuss.elastic.co/t/new-installation-unable-to-connect-to-kibana-7-9-2/256579)

<div class="topic-metadata">

**Author:** [@drivera](https://discuss.elastic.co/u/drivera)\
**Replies:** 4\
**Last updated:** [November 30, 2020, 8:05pm UTC](https://discuss.elastic.co/t/new-installation-unable-to-connect-to-kibana-7-9-2/256579 "2020-11-30T20:05:27Z")

</div>

Unable to connect to my kibana server. When connecting through my browser I get the message "refused to connect". This is a new installation. No visible errors in the kibana.log file. Not sure where to go from here. I'm …

---

## [Should I expect 2.3 kafka plugins to work with kafka 0.10?](https://discuss.elastic.co/t/should-i-expect-2-3-kafka-plugins-to-work-with-kafka-0-10/56213)

<div class="topic-metadata">

**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\
**Replies:** 4\
**Last updated:** [July 26, 2016, 7:53am UTC](https://discuss.elastic.co/t/should-i-expect-2-3-kafka-plugins-to-work-with-kafka-0-10/56213 "2016-07-26T07:53:31Z")

</div>

All our other kafka 0.9 clients work fine with 0.10 brokers. But whenever I start a kafka-output logstash hangs, and can only be recovered with kill -9. Nothing in the logs. (Have not run with -debug yet.) kafka-input …

---

## [Aggregation across multiple indices missing match using w/wo kibana](https://discuss.elastic.co/t/aggregation-across-multiple-indices-missing-match-using-w-wo-kibana/49225)

<div class="topic-metadata">

**Author:** [@noelyim](https://discuss.elastic.co/u/noelyim)\
**Replies:** 4\
**Last updated:** [May 13, 2016, 1:17pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indices-missing-match-using-w-wo-kibana/49225 "2016-05-13T13:17:10Z")

</div>

Hi I am using kibana on 2 indices each with one shrad. On the x axis, I aggregate counts of a field, say field\_A then subchart by field B. First index has 1 set of unique doc with field\_A, second index has unique fie…

---

## [Can't get a two-node cluster to work](https://discuss.elastic.co/t/cant-get-a-two-node-cluster-to-work/246140)

<div class="topic-metadata">

**Author:** [@Arp](https://discuss.elastic.co/u/Arp)\
**Replies:** 8\
**Last updated:** [August 31, 2020, 8:58am UTC](https://discuss.elastic.co/t/cant-get-a-two-node-cluster-to-work/246140 "2020-08-31T08:58:37Z")

</div>

Hi, So, I installed oss-7.9 on two VMs with RH8. All I want is a cluster with two nodes, of which one acts as a replica. I have the same config on both VMs, though of course with different IPs and node names, differen…

---

## [Where is default Logstash Java classpath?](https://discuss.elastic.co/t/where-is-default-logstash-java-classpath/171890)

<div class="topic-metadata">

**Author:** [@thangld](https://discuss.elastic.co/u/thangld)\
**Replies:** 0\
**Last updated:** [March 12, 2019, 8:34am UTC](https://discuss.elastic.co/t/where-is-default-logstash-java-classpath/171890 "2019-03-12T08:34:47Z")

</div>

Hi, I'm running logstash in Docker Container. When I config input for logstash like this: jdbc { jdbc\_connection\_string =\> "jdbc:mysql://localhost:3306/mysql?user=root" jdbc\_driver\_class =\> "com.mysql.…

---

## [Mapping optimizations for Aggregations](https://discuss.elastic.co/t/mapping-optimizations-for-aggregations/43594)

<div class="topic-metadata">

**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\
**Replies:** 8\
**Last updated:** [March 7, 2016, 9:44pm UTC](https://discuss.elastic.co/t/mapping-optimizations-for-aggregations/43594 "2016-03-07T21:44:43Z")

</div>

Hi, We are using ES + Kibana for aggregations only. Is there anything we can do to optimize the mapping and remove stuff we don't need? Our main concern is memory usage. Maybe specific filteres/terms/norms or thing…

---

## [Elasticsearch Reverse Suggester Problem](https://discuss.elastic.co/t/elasticsearch-reverse-suggester-problem/15986)

<div class="topic-metadata">

**Author:** [@gkwelding](https://discuss.elastic.co/u/gkwelding)\
**Replies:** 8\
**Last updated:** [March 3, 2014, 2:21pm UTC](https://discuss.elastic.co/t/elasticsearch-reverse-suggester-problem/15986 "2014-03-03T14:21:35Z")

</div>

Hi guys, I'm hoping somebody on here can help me, I feel like I'm just missing something really basic but I can't for the life of me figure out what... I have the following index set up (it's very cut down for clarit…

---

## [How to apply filters in elasticsearch NEST functionscore function](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839)

<div class="topic-metadata">

**Author:** [@learning21](https://discuss.elastic.co/u/learning21)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 7:15am UTC](https://discuss.elastic.co/t/how-to-apply-filters-in-elasticsearch-nest-functionscore-function/245839 "2020-08-21T07:15:30Z")

</div>

To control the score of documents based on a field value, I am using filter with function\_score in my DSL query and this gets the results ordered as I expect. However on implementing this in NEST, the results are differ…

---

## [Elasticsearch won't bind to localhost](https://discuss.elastic.co/t/elasticsearch-wont-bind-to-localhost/181484)

<div class="topic-metadata">

**Author:** [@sudoroot](https://discuss.elastic.co/u/sudoroot)\
**Replies:** 1\
**Last updated:** [May 16, 2019, 10:13pm UTC](https://discuss.elastic.co/t/elasticsearch-wont-bind-to-localhost/181484 "2019-05-16T22:13:51Z")

</div>

I am trying to set up Elasticsearch on a VM running CentOS 7. I've followed the configuration guide, but ES will not bind to 127.0.0.1:9200. The configuration is as follows: # NOTE: Elasticsearch comes with reasonable …

---

## [Logstash support for composable templates in elasticsearch output](https://discuss.elastic.co/t/logstash-support-for-composable-templates-in-elasticsearch-output/255137)

<div class="topic-metadata">

**Author:** [@phospodka](https://discuss.elastic.co/u/phospodka)\
**Replies:** 0\
**Last updated:** [November 11, 2020, 10:34pm UTC](https://discuss.elastic.co/t/logstash-support-for-composable-templates-in-elasticsearch-output/255137 "2020-11-11T22:34:57Z")

</div>

I am trying to upgrade versions of ELK and I have noticed that templates have changed. There is a legacy way and a new composable way. I currently have logstash supply custom templates for different indices. However, …

---

## [KV Pair Filter with empty values - Logstash 6.2.3](https://discuss.elastic.co/t/kv-pair-filter-with-empty-values-logstash-6-2-3/128000)

<div class="topic-metadata">

**Author:** [@jdnewhouse](https://discuss.elastic.co/u/jdnewhouse)\
**Replies:** 0\
**Last updated:** [April 13, 2018, 2:50pm UTC](https://discuss.elastic.co/t/kv-pair-filter-with-empty-values-logstash-6-2-3/128000 "2018-04-13T14:50:51Z")

</div>

My data comes as follow with the = as the value split and a tab character (shown here as \\t) as the field split. key1=value1\\tkey2=value2 \\tkey3=\\tkey4=\\tkey5=value5\\ Several of the KV pairs may contain empty values. I…

---

## [Snashot getting stuck on a shard V2.3.1](https://discuss.elastic.co/t/snashot-getting-stuck-on-a-shard-v2-3-1/82191)

<div class="topic-metadata">

**Author:** [@surekhabalaji](https://discuss.elastic.co/u/surekhabalaji)\
**Replies:** 6\
**Last updated:** [April 19, 2017, 2:03pm UTC](https://discuss.elastic.co/t/snashot-getting-stuck-on-a-shard-v2-3-1/82191 "2017-04-19T14:03:44Z")

</div>

Elasticsearch version: 2.3.1 Plugins installed: \[\] lucene version 5.5.0 JVM version: open jdk 1.8.0 OS version: CentOS Description of the problem including expected versus actual behavior: I have setup a cluste…

---

## [Pull data from another elasticsearch cluster using logstash](https://discuss.elastic.co/t/pull-data-from-another-elasticsearch-cluster-using-logstash/293946)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 2\
**Last updated:** [January 13, 2022, 9:16am UTC](https://discuss.elastic.co/t/pull-data-from-another-elasticsearch-cluster-using-logstash/293946 "2022-01-13T09:16:21Z")

</div>

Hi folks, I have a use case where I need to pull data from an external Elasticsearch cluster with the following Limitation: It is not allowed to open a conection to my internal elastic cluster (due to compliance regulat…

---

## [Elasticsearch not starting problem](https://discuss.elastic.co/t/elasticsearch-not-starting-problem/278496)

<div class="topic-metadata">

**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Replies:** 2\
**Last updated:** [July 14, 2021, 9:26am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-problem/278496 "2021-07-14T09:26:56Z")

</div>

Hello experts, I am using elk 7.12.0 in my local machine. I enabled Xpack and generated some certificates for securing purpose. But when I start my Elasticsearch i got an error. the error is: \[2021-07-13T12:48:08,92…

---

## [Logstash hanging while split array (consume too much memory)](https://discuss.elastic.co/t/logstash-hanging-while-split-array-consume-too-much-memory/187726)

<div class="topic-metadata">

**Author:** [@taewoo\_Roh](https://discuss.elastic.co/u/taewoo_Roh)\
**Replies:** 2\
**Last updated:** [June 28, 2019, 4:43am UTC](https://discuss.elastic.co/t/logstash-hanging-while-split-array-consume-too-much-memory/187726 "2019-06-28T04:43:43Z")

</div>

Hello all. I have a problem while using logstash split filter. Logstash extract data from API using http\_polled input plug-in. and returned data contain array (format is json) I split array data using split filter p…

---

## [TCP input plugin and log4j2 socket appender configuration with SSL](https://discuss.elastic.co/t/tcp-input-plugin-and-log4j2-socket-appender-configuration-with-ssl/141891)

<div class="topic-metadata">

**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\
**Replies:** 2\
**Last updated:** [July 29, 2018, 6:58am UTC](https://discuss.elastic.co/t/tcp-input-plugin-and-log4j2-socket-appender-configuration-with-ssl/141891 "2018-07-29T06:58:34Z")

</div>

Hi There, I am trying to set up a secure communication between tcp input plugin and log4j2 socket appender. I have seen multiple posts with same requests but all have been simple closed with literally no replies. Is th…

---

## [Scripted Field in timelion](https://discuss.elastic.co/t/scripted-field-in-timelion/106978)

<div class="topic-metadata">

**Author:** [@Venky\_Guntakindapall](https://discuss.elastic.co/u/Venky_Guntakindapall)\
**Replies:** 2\
**Last updated:** [November 13, 2017, 7:45am UTC](https://discuss.elastic.co/t/scripted-field-in-timelion/106978 "2017-11-13T07:45:45Z")

</div>

Hi, Is it possible to access kibana scripted fields in timelion?

---

## [Rsyslog.conf configured for more then 1 elasticsearch server?](https://discuss.elastic.co/t/rsyslog-conf-configured-for-more-then-1-elasticsearch-server/37835)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 2\
**Last updated:** [April 21, 2016, 3:07pm UTC](https://discuss.elastic.co/t/rsyslog-conf-configured-for-more-then-1-elasticsearch-server/37835 "2016-04-21T15:07:42Z")

</div>

Dear community, I would like to use rsyslod-Daemon to send logs to our elasticsearch cluster. As you konw there is an output module for elasticsearch you can use. Prior to that you have to configure it. My question relat…

[Previous page](https://discuss.elastic.co/top.md?page=1148&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1150&per_page=50&period=all)
