# Top **URL:** https://discuss.elastic.co/top.md?page=1159&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1160 --- ## [How to use keystore for basic auth password for the input watch](https://discuss.elastic.co/t/how-to-use-keystore-for-basic-auth-password-for-the-input-watch/132227)
**Author:** [@Doug\_Nelson1](https://discuss.elastic.co/u/Doug_Nelson1)\ **Replies:** 5\ **Last updated:** [May 17, 2018, 12:40pm UTC](https://discuss.elastic.co/t/how-to-use-keystore-for-basic-auth-password-for-the-input-watch/132227 "2018-05-17T12:40:26Z")
Looking for an example of showing how to set the basic auth password using a keystore when using an http input for the watcher. Looking for an example watch http input that uses a keystore to avoid having the user passw… --- ## [ES7 Multiply scores from boolean queries](https://discuss.elastic.co/t/es7-multiply-scores-from-boolean-queries/266130)
**Author:** [@JF2018](https://discuss.elastic.co/u/JF2018)\ **Replies:** 4\ **Last updated:** [March 10, 2021, 10:31pm UTC](https://discuss.elastic.co/t/es7-multiply-scores-from-boolean-queries/266130 "2021-03-10T22:31:11Z")
Hey Is it possible in some way to multiply the scores of two boolean queries? I now BoolQuery.Should can add the scores together, but not multiply. Another possibility is function scores, but here I can only provide a… --- ## [Instantaneaously failing to publish events](https://discuss.elastic.co/t/instantaneaously-failing-to-publish-events/157037)
**Author:** [@kgl](https://discuss.elastic.co/u/kgl)\ **Replies:** 4\ **Last updated:** [November 20, 2018, 9:50am UTC](https://discuss.elastic.co/t/instantaneaously-failing-to-publish-events/157037 "2018-11-20T09:50:53Z")
Hi there, while adding a fifth path into my Filebeat service I came across some problems by not receiving the data in question. Going through the log file I encountered the following lines: Timestamp Loglevel File M… --- ## [When processing stdin, any equivalents to awk's BEGIN and END?](https://discuss.elastic.co/t/when-processing-stdin-any-equivalents-to-awks-begin-and-end/93623)
**Author:** [@UnitedMarsupials](https://discuss.elastic.co/u/UnitedMarsupials)\ **Replies:** 4\ **Last updated:** [July 24, 2017, 3:03pm UTC](https://discuss.elastic.co/t/when-processing-stdin-any-equivalents-to-awks-begin-and-end/93623 "2017-07-24T15:03:50Z")
awk has the special actions triggered by the BEGINning and ENDing the processing of stdin (or each individual input file). (There are also variables automatically maintained by the tool (like NR).) Is there any equiv… --- ## [Does Kibana reporting support multitenancy?](https://discuss.elastic.co/t/does-kibana-reporting-support-multitenancy/63551)
**Author:** [@lekshmi](https://discuss.elastic.co/u/lekshmi)\ **Replies:** 4\ **Last updated:** [April 18, 2017, 5:44pm UTC](https://discuss.elastic.co/t/does-kibana-reporting-support-multitenancy/63551 "2017-04-18T17:44:51Z")
Does Kibana reporting plugin support Multitenancy? Kibana kind of supports it, we were able to get around it with Shield, different ES indices per tenant and multiple instances of kibana. Now the question is does… --- ## [Connection refused after installing new version of elasticsearch](https://discuss.elastic.co/t/connection-refused-after-installing-new-version-of-elasticsearch/61141)
**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\ **Replies:** 4\ **Last updated:** [September 21, 2016, 3:15pm UTC](https://discuss.elastic.co/t/connection-refused-after-installing-new-version-of-elasticsearch/61141 "2016-09-21T15:15:54Z")
Hello, I have a cluster consisting of twelve nodes (CentOS 7). It had ES 2.3.0 and I wanted to upgrade it to 2.4.0. I followed the rolling upgrades instructions for each node and thought it all went well. But if I did … --- ## [Controlling position offset gap between individual fields of \_all field](https://discuss.elastic.co/t/controlling-position-offset-gap-between-individual-fields-of--all-field/10111)
**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\ **Replies:** 4\ **Last updated:** [December 24, 2012, 4:23pm UTC](https://discuss.elastic.co/t/controlling-position-offset-gap-between-individual-fields-of--all-field/10111 "2012-12-24T16:23:21Z")
Is there way to influence position offsets gap between individual fields in \_all field similar to how array's position\_offset\_gap flag functions? I would like to score of a hit on multiple terms of \_all originating … --- ## [Setting Environment for Traces Collected by OpenTelemetry Collector](https://discuss.elastic.co/t/setting-environment-for-traces-collected-by-opentelemetry-collector/304160)
**Author:** [@Hans\_Knecht](https://discuss.elastic.co/u/Hans_Knecht)\ **Replies:** 2\ **Last updated:** [May 25, 2022, 2:12pm UTC](https://discuss.elastic.co/t/setting-environment-for-traces-collected-by-opentelemetry-collector/304160 "2022-05-25T14:12:51Z")
Kibana version: 7.17.2 Elasticsearch version: 7.17.2 APM Server version: 7.17.2 APM Agent language and version: Open Telemetry Collector Browser version: N/A Original install method (e.g. download page, yum, deb, fr… --- ## [Snapshotの格納場所について](https://discuss.elastic.co/t/snapshot/121164)
**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\ **Replies:** 2\ **Last updated:** [February 23, 2018, 6:10am UTC](https://discuss.elastic.co/t/snapshot/121164 "2018-02-23T06:10:43Z")
AWSでelasticsearchを使用しているのですが、 ESのsnapshotをS3に置きたいと思っています。 pythonのelasticsearchモジュールを用いて、 S3のバケット直下にsnapshotを置くことは成功しているのですが、 S3のバケットのあるディレクトリを指定して、ディレクトリの直下にsnapshotを置くことができません。 どのようにすれば、ディレクトリ指定ができるのでしょうか? elastic… --- ## [Kibana 4.1 change the Primary\_Field from \_all to something else](https://discuss.elastic.co/t/kibana-4-1-change-the-primary-field-from--all-to-something-else/26587)
**Author:** [@netoben](https://discuss.elastic.co/u/netoben)\ **Replies:** 2\ **Last updated:** [August 12, 2015, 6:47pm UTC](https://discuss.elastic.co/t/kibana-4-1-change-the-primary-field-from--all-to-something-else/26587 "2015-08-12T18:47:22Z")
Hi Guys I want to disable the "\_all" field because it consumes too much space and I really don't have a use for it. However Kibana 4.1 seems to default to that field for Visualization queries. I found an old topic t… --- ## [Is bulk index sending to data nodes better or non-data nodes?](https://discuss.elastic.co/t/is-bulk-index-sending-to-data-nodes-better-or-non-data-nodes/22690)
**Author:** [@chenryn](https://discuss.elastic.co/u/chenryn)\ **Replies:** 2\ **Last updated:** [March 16, 2015, 4:27pm UTC](https://discuss.elastic.co/t/is-bulk-index-sending-to-data-nodes-better-or-non-data-nodes/22690 "2015-03-16T16:27:03Z")
Hello, anyone. I used to setup some non-data nodes to accept bulk indexing from my logstash/outputs/elasticsearch(http protocol). But some day I found one article suggested use client node for searching but data n… --- ## [Local Logstash 7.9.3 error: (EACCES) Permission denied - NUL](https://discuss.elastic.co/t/local-logstash-7-9-3-error-eacces-permission-denied-nul/304153)
**Author:** [@JonathanHai](https://discuss.elastic.co/u/JonathanHai)\ **Replies:** 1\ **Last updated:** [May 6, 2022, 8:23pm UTC](https://discuss.elastic.co/t/local-logstash-7-9-3-error-eacces-permission-denied-nul/304153 "2022-05-06T20:23:17Z")
Hi everyone, I'm attempting to run a local instance of Logstash 7.9.3 on my windows machine. Specifically, C:\\logstash-7.9.3\\bin\>logstash.bat \[ERROR\] 2022-05-06 15:04:57.066 \[main\] Logstash - java.lang.IllegalStateExce… --- ## [Vulnerability - HTTP DELETE Method Enabled](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057)
**Author:** [@sujivisva](https://discuss.elastic.co/u/sujivisva)\ **Replies:** 1\ **Last updated:** [August 11, 2021, 1:21pm UTC](https://discuss.elastic.co/t/vulnerability-http-delete-method-enabled/281057 "2021-08-11T13:21:41Z")
We are using ElasticSearch software for our application in our Project. But we are getting the following vulnerabilities from the security team HTTP DELETE Method Enabled The Web server contains a flaw that may allow a… --- ## [Restore not working on rollover Indices](https://discuss.elastic.co/t/restore-not-working-on-rollover-indices/232251)
**Author:** [@Konathala\_Naveen](https://discuss.elastic.co/u/Konathala_Naveen)\ **Replies:** 1\ **Last updated:** [May 19, 2020, 1:05pm UTC](https://discuss.elastic.co/t/restore-not-working-on-rollover-indices/232251 "2020-05-19T13:05:38Z")
I have two indices in my setup.(below indices are rolledover indices using ILM) 1."test\_syslogs\_1-000002" : { "aliases" : { "test\_syslogs\_1" : { "is\_write\_index" : false } } } 2. "test\_syslogs\_1-0… --- ## [Cannot connect to the elasticsearch cluster - 7.4.2](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-7-4-2/208059)
**Author:** [@hiddensquid](https://discuss.elastic.co/u/hiddensquid)\ **Replies:** 1\ **Last updated:** [November 16, 2019, 1:21am UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-7-4-2/208059 "2019-11-16T01:21:41Z")
I've had Kibana/Elasticstack/Metricbeat working for a while in a different location. I've tried to install it again with the most recent version copying the config i used the first time. However it would seem whenever i … --- ## [Elastic search Cluster health due to disk space](https://discuss.elastic.co/t/elastic-search-cluster-health-due-to-disk-space/188278)
**Author:** [@mark.penner](https://discuss.elastic.co/u/mark.penner)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 10:45am UTC](https://discuss.elastic.co/t/elastic-search-cluster-health-due-to-disk-space/188278 "2019-07-01T10:45:26Z")
Hi, I am currently experiencing an issue on my elastic cluster due to low disk space. "explanation" : "the node is above the low watermark cluster setting \[cluster.routing.allocation.disk.watermark.low=85%\], using more… --- ## [Elasticsearch client defaulting to http](https://discuss.elastic.co/t/elasticsearch-client-defaulting-to-http/122732)
**Author:** [@wandermonk](https://discuss.elastic.co/u/wandermonk)\ **Replies:** 1\ **Last updated:** [March 6, 2018, 3:29pm UTC](https://discuss.elastic.co/t/elasticsearch-client-defaulting-to-http/122732 "2018-03-06T15:29:48Z")
We hosted our elasticsearch cluster in AWS. We do not have port number exposed to the clients using elastic datastore. Whenever we instantiate the RestClient using the hostname, the client is defaulting to 'HTTP' rather … --- ## [Zen Discovery issues in an AWS VPC](https://discuss.elastic.co/t/zen-discovery-issues-in-an-aws-vpc/35112)
**Author:** [@Chris\_Lock](https://discuss.elastic.co/u/Chris_Lock)\ **Replies:** 1\ **Last updated:** [November 20, 2015, 11:10pm UTC](https://discuss.elastic.co/t/zen-discovery-issues-in-an-aws-vpc/35112 "2015-11-20T23:10:30Z")
Hi guys, My VP, Inder, came to your meetup. We are having an issue deploying ES and suggested I bring the question to this forum. We successfully create a test environment with a master node in EC2, and Node Clients… --- ## [Are there other ways of importing data from one elasticsearch into another?](https://discuss.elastic.co/t/are-there-other-ways-of-importing-data-from-one-elasticsearch-into-another/2604)
**Author:** [@gdeconto](https://discuss.elastic.co/u/gdeconto)\ **Replies:** 1\ **Last updated:** [June 13, 2015, 4:34am UTC](https://discuss.elastic.co/t/are-there-other-ways-of-importing-data-from-one-elasticsearch-into-another/2604 "2015-06-13T04:34:54Z")
If I want to copy/move data from one elasticsearch to another, I can of course setup logstash to read from one elasticsearch and forward the data to another elasticsearch with little/no filtering. this requires setting … --- ## [Metricbeat Timeout Errors while scraping state metricset from kube-state-mertics](https://discuss.elastic.co/t/metricbeat-timeout-errors-while-scraping-state-metricset-from-kube-state-mertics/281931)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 9:37am UTC](https://discuss.elastic.co/t/metricbeat-timeout-errors-while-scraping-state-metricset-from-kube-state-mertics/281931 "2021-08-25T09:37:13Z")
I am running metricbeat deployment and daemonset using elasticsearch helm chart. In my metricbeat deployment I am collecting state metrics from the kube-state-metrics API from an openshift cluster and experience followin… --- ## [Find documents that might have unindexed fields](https://discuss.elastic.co/t/find-documents-that-might-have-unindexed-fields/239709)
**Author:** [@ddreier](https://discuss.elastic.co/u/ddreier)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 4:14pm UTC](https://discuss.elastic.co/t/find-documents-that-might-have-unindexed-fields/239709 "2020-07-08T16:14:03Z")
We recently disabled dynamic field mapping on one of our logging index templates after a field explosion basically took down our cluster. Most documents (log lines) coming into the indices should only have fields that a… --- ## [Heartbeat 7 configuration issues: monitors & index name](https://discuss.elastic.co/t/heartbeat-7-configuration-issues-monitors-index-name/178938)
**Author:** [@Marc-Antoine\_J](https://discuss.elastic.co/u/Marc-Antoine_J)\ **Replies:** 3\ **Last updated:** [April 29, 2019, 7:05pm UTC](https://discuss.elastic.co/t/heartbeat-7-configuration-issues-monitors-index-name/178938 "2019-04-29T19:05:24Z")
Hi all, I upgraded my full stack to 7.0 lately. This morning I noticed no heartbeat docs were coming in my elasticsearch. I started heartbeat with debug logs then I noticed it was not loading any monitors config files e… --- ## [Authorization Exception - Kibana connecting to Ngnix](https://discuss.elastic.co/t/authorization-exception-kibana-connecting-to-ngnix/144298)
**Author:** [@srini155](https://discuss.elastic.co/u/srini155)\ **Replies:** 3\ **Last updated:** [August 15, 2018, 1:31pm UTC](https://discuss.elastic.co/t/authorization-exception-kibana-connecting-to-ngnix/144298 "2018-08-15T13:31:49Z")
Authorization Exception - Kibana connecting to Ngnix \[error\]\[status\]\[plugin:elasticsearch@6.2.4\] Status changed from yellow to red - Authorization Exception Nginx is configured to proxy the requests to elasticsearch wi… --- ## [Codec multiline with redis](https://discuss.elastic.co/t/codec-multiline-with-redis/66827)
**Author:** [@nick76](https://discuss.elastic.co/u/nick76)\ **Replies:** 3\ **Last updated:** [November 27, 2016, 8:09pm UTC](https://discuss.elastic.co/t/codec-multiline-with-redis/66827 "2016-11-27T20:09:17Z")
Hello all, in my setup I had to use the redis aggregator: varnish+apache+tomcat (filebeat) --\> redis \<-- |fw|-- logstash 5.0 in this setup I got different log types from different sources that need to be parsed correctly… --- ## [Getting an exception in ES 2.3.1](https://discuss.elastic.co/t/getting-an-exception-in-es-2-3-1/48199)
**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\ **Replies:** 3\ **Last updated:** [May 27, 2016, 7:53pm UTC](https://discuss.elastic.co/t/getting-an-exception-in-es-2-3-1/48199 "2016-05-27T19:53:41Z")
I've read quite a bit about this error(IllegalIndexShardsStateException) on the Internet, but still not able to do anything about it. How can I ensure this error doesn't come up? \[logstash-2016.04.22\]\[\[logstash-2016.… --- ## [Configuration of Filebeat pushing logs](https://discuss.elastic.co/t/configuration-of-filebeat-pushing-logs/47002)
**Author:** [@Atul\_Patel](https://discuss.elastic.co/u/Atul_Patel)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 4:28pm UTC](https://discuss.elastic.co/t/configuration-of-filebeat-pushing-logs/47002 "2016-04-12T16:28:54Z")
We are using ELK stack with Filebeat pushing the logs to the Centeralized elastic search. Is anyone suggest how to inform filebeat to push the logs file based on the timestamp .How should i configure in the yml file so… --- ## [(Realtime) GET request and multiple aliases](https://discuss.elastic.co/t/realtime-get-request-and-multiple-aliases/9675)
**Author:** [@Karussell\_2](https://discuss.elastic.co/u/Karussell_2)\ **Replies:** 3\ **Last updated:** [November 13, 2012, 2:03pm UTC](https://discuss.elastic.co/t/realtime-get-request-and-multiple-aliases/9675 "2012-11-13T14:03:40Z")
Hi, when I try to GET an object via localhost:9200/myindex/mytype/1 but there are multiple indices associated with the alias 'myindex' I get {"error":"ElasticSearchIllegalArgumentException\[Alias \[myindex\] has more… --- ## [ES2.1 date field ,about store](https://discuss.elastic.co/t/es2-1-date-field-about-store/66047)
**Author:** [@sshling](https://discuss.elastic.co/u/sshling)\ **Replies:** 7\ **Last updated:** [November 15, 2016, 11:46am UTC](https://discuss.elastic.co/t/es2-1-date-field-about-store/66047 "2016-11-15T11:46:29Z")
field mapping : "time": { "format": "epoch\_millis", "store": true, "type": "date" } search query : { "fields": \[ "\*", "\_source" \], "fielddata\_fields": \[ "time" \] } it'… --- ## [I have no connection to elastisearch logstash](https://discuss.elastic.co/t/i-have-no-connection-to-elastisearch-logstash/50459)
**Author:** [@Diego\_Gomez](https://discuss.elastic.co/u/Diego_Gomez)\ **Replies:** 7\ **Last updated:** [May 24, 2016, 8:24pm UTC](https://discuss.elastic.co/t/i-have-no-connection-to-elastisearch-logstash/50459 "2016-05-24T20:24:30Z")
Hello everyone I have a problem I can not connect the logstash to elastisearch even tell me the logstash that the configuration is ok and starts perfect, but I do not see myself or elasticsearch or Kibana , here I leave … --- ## [Fleet without internet access](https://discuss.elastic.co/t/fleet-without-internet-access/268042)
**Author:** [@PD98](https://discuss.elastic.co/u/PD98)\ **Replies:** 1\ **Last updated:** [April 5, 2021, 12:55pm UTC](https://discuss.elastic.co/t/fleet-without-internet-access/268042 "2021-04-05T12:55:08Z")
Hi, I am currently trying out elastic-agent and fleet. I enabled internet access on the server so that kibana could download packages from EPR for fleet. However upon stopping internet access, I get the "unable to conne… --- ## [Percentage symbol](https://discuss.elastic.co/t/percentage-symbol/208022)
**Author:** [@KrisKarrots](https://discuss.elastic.co/u/KrisKarrots)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 3:09pm UTC](https://discuss.elastic.co/t/percentage-symbol/208022 "2019-11-15T15:09:43Z")
Hi, I could not find information on what is the purpose of % symbol when using a field? For example "%{\[Temp1\]\[Temp2\]\[Temp3\]}" Thanks, --- ## [No connections between logstash and filebeats](https://discuss.elastic.co/t/no-connections-between-logstash-and-filebeats/173895)
**Author:** [@dragan979](https://discuss.elastic.co/u/dragan979)\ **Replies:** 1\ **Last updated:** [March 26, 2019, 10:09am UTC](https://discuss.elastic.co/t/no-connections-between-logstash-and-filebeats/173895 "2019-03-26T10:09:25Z")
Today is second day i'm spending on ELK stack and have no any experience with this. My goal: Create "parent" index (client01) and for all machines related to client01 collect logs so i can filter data based on that "pa… --- ## [Dissect Processor not working correctly in elastic search](https://discuss.elastic.co/t/dissect-processor-not-working-correctly-in-elastic-search/233738)
**Author:** [@saket\_gupta](https://discuss.elastic.co/u/saket_gupta)\ **Replies:** 8\ **Last updated:** [May 26, 2020, 7:20am UTC](https://discuss.elastic.co/t/dissect-processor-not-working-correctly-in-elastic-search/233738 "2020-05-26T07:20:29Z")
Hi Team, I am trying to parse logs using dissect processor in elastic search . However I dont get the appropriate output. When I run the log through logstash using dissect filter, it works fine. \` PUT \_ingest/pipeline… --- ## [Is it possible to restore snapshot from newer version to older version?](https://discuss.elastic.co/t/is-it-possible-to-restore-snapshot-from-newer-version-to-older-version/101703)
**Author:** [@rinu](https://discuss.elastic.co/u/rinu)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 12:53pm UTC](https://discuss.elastic.co/t/is-it-possible-to-restore-snapshot-from-newer-version-to-older-version/101703 "2017-09-25T12:53:42Z")
Is it possible to restore snapshot created on 5.6.0 to 5.1.1 ? --- ## [Bulk Delete operation on Elastic Search](https://discuss.elastic.co/t/bulk-delete-operation-on-elastic-search/60677)
**Author:** [@srinath\_mkce](https://discuss.elastic.co/u/srinath_mkce)\ **Replies:** 2\ **Last updated:** [September 19, 2016, 7:10am UTC](https://discuss.elastic.co/t/bulk-delete-operation-on-elastic-search/60677 "2016-09-19T07:10:29Z")
i am using elastic search 2.2. here is the count of documents curl 'xxxxxxxxx:9200/\_cat/indices?v' yellow open app 5 1 28019178 5073 11.4gb 11.4gb In the "app" index we ha… --- ## [How to hide data from being counted/visualized?](https://discuss.elastic.co/t/how-to-hide-data-from-being-counted-visualized/52120)
**Author:** [@rfc1925](https://discuss.elastic.co/u/rfc1925)\ **Replies:** 2\ **Last updated:** [June 10, 2016, 12:18pm UTC](https://discuss.elastic.co/t/how-to-hide-data-from-being-counted-visualized/52120 "2016-06-10T12:18:19Z")
Yes, i've searched here, the docs & google. Elasticsearch 2.3.3 Logstash 2.3.2 Kibana 4.5.1 I want to hide content, specifically IP addresses from being analyzed in certain visualizations. I see the logs hidden … --- ## [Query with multiple terms](https://discuss.elastic.co/t/query-with-multiple-terms/51752)
**Author:** [@ThomasD3](https://discuss.elastic.co/u/ThomasD3)\ **Replies:** 2\ **Last updated:** [June 4, 2016, 12:47am UTC](https://discuss.elastic.co/t/query-with-multiple-terms/51752 "2016-06-04T00:47:37Z")
Let's assume I am looking for the following terms: A, B and C. How can I structure a query so I get: - First all documents containing (A AND B AND C) - Then, all documents containing (A AND B) OR (A AND C) OR (B AND C) … --- ## [How to pass raw query?](https://discuss.elastic.co/t/how-to-pass-raw-query/31632)
**Author:** [@shekhar\_chauhan](https://discuss.elastic.co/u/shekhar_chauhan)\ **Replies:** 2\ **Last updated:** [October 6, 2015, 6:51am UTC](https://discuss.elastic.co/t/how-to-pass-raw-query/31632 "2015-10-06T06:51:43Z")
I was using nest dll of version 0.11.4.0. But I updated it with version of 1.7.1. Problem statement is - I am sending raw query string with code given below - var connectionstatus = elasticClient.Raw.SearchPost(index, in… --- ## [Traces for some transactions not being sampled despite 100% Sampling Rate](https://discuss.elastic.co/t/traces-for-some-transactions-not-being-sampled-despite-100-sampling-rate/308935)
**Author:** [@yagyanshskumar](https://discuss.elastic.co/u/yagyanshskumar)\ **Replies:** 5\ **Last updated:** [July 19, 2022, 4:34pm UTC](https://discuss.elastic.co/t/traces-for-some-transactions-not-being-sampled-despite-100-sampling-rate/308935 "2022-07-19T16:34:47Z")
Kibana version: 7.17 Elasticsearch version: 7.17 APM Server version: 7.17 APM Agent language and version: Java | 1.32.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Everythin… --- ## [ELK 7.12 - ILM Rollover - After rollover data keeps being writing old index 000001](https://discuss.elastic.co/t/elk-7-12-ilm-rollover-after-rollover-data-keeps-being-writing-old-index-000001/271417)
**Author:** [@albertosoares](https://discuss.elastic.co/u/albertosoares)\ **Replies:** 5\ **Last updated:** [April 29, 2021, 3:27am UTC](https://discuss.elastic.co/t/elk-7-12-ilm-rollover-after-rollover-data-keeps-being-writing-old-index-000001/271417 "2021-04-29T03:27:49Z")
I am using logstash to centralize all logs from beats then send them to Elastisearch. I create all ILM policies, index templates, bootstrap each index, and everything goes perfect until rollover, the second index packetb… --- ## [Need help in configuring the logstash on windows box](https://discuss.elastic.co/t/need-help-in-configuring-the-logstash-on-windows-box/37690)
**Author:** [@Lokesh\_Kumar](https://discuss.elastic.co/u/Lokesh_Kumar)\ **Replies:** 5\ **Last updated:** [December 22, 2015, 8:07pm UTC](https://discuss.elastic.co/t/need-help-in-configuring-the-logstash-on-windows-box/37690 "2015-12-22T20:07:26Z")
I am new to this can you guide me how to capture the data from /var/log/messages based on some keywords and want to see the messages on dashboard/send an email. steps: 1) need to read the /var/log/messages for keywords… --- ## [Date Histogram Display like "1 hour ago", "2 days ago", etc](https://discuss.elastic.co/t/date-histogram-display-like-1-hour-ago-2-days-ago-etc/4861)
**Author:** [@Raul\_Jr\_Martinez](https://discuss.elastic.co/u/Raul_Jr_Martinez)\ **Replies:** 5\ **Last updated:** [July 14, 2011, 6:25pm UTC](https://discuss.elastic.co/t/date-histogram-display-like-1-hour-ago-2-days-ago-etc/4861 "2011-07-14T18:25:58Z")
Hello, I've got no experience writing "script" in ElasticSearch. I have a datehistogram facets and it's giving me the facet values as long int. Using "script", is there a way to return the following facet values? … --- ## [Ingesting Mainframe logs](https://discuss.elastic.co/t/ingesting-mainframe-logs/115087)
**Author:** [@Sajeew.Ganesh](https://discuss.elastic.co/u/Sajeew.Ganesh)\ **Replies:** 4\ **Last updated:** [February 6, 2018, 9:31am UTC](https://discuss.elastic.co/t/ingesting-mainframe-logs/115087 "2018-02-06T09:31:35Z")
Hi, Im looking to work on mainframe logs. i am looking for help. can anyone assist how to ingest mainframe logs to logstash. The sample logs are as below. N 0000000 T158 2017208 23:59:00.24 00000281 IEF1… --- ## [Protecting Against Attacks that Hold Your Data for Ransom](https://discuss.elastic.co/t/protecting-against-attacks-that-hold-your-data-for-ransom/71493)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 10:16pm UTC](https://discuss.elastic.co/t/protecting-against-attacks-that-hold-your-data-for-ransom/71493 "2017-02-21T22:16:21Z")
Protecting Against Attacks that Hold Your Data for Ransom Late last week, a malicious attack was initiated, in which data from thousands of open source databases was copied, deleted and held for ransom. Although no ma… --- ## [Beats Central Management Questions](https://discuss.elastic.co/t/beats-central-management-questions/204123)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 9:38am UTC](https://discuss.elastic.co/t/beats-central-management-questions/204123 "2020-02-24T09:38:47Z")
Easy questions that I have not been able to determine the answer to yet. Does Beats Central Management support other beats besides FileBeat and MetricBeat because those are my only two options when I click Enroll Beats… --- ## [Cannot specify index name on elastic cloud](https://discuss.elastic.co/t/cannot-specify-index-name-on-elastic-cloud/184674)
**Author:** [@bitcoin](https://discuss.elastic.co/u/bitcoin)\ **Replies:** 2\ **Last updated:** [June 7, 2019, 6:24pm UTC](https://discuss.elastic.co/t/cannot-specify-index-name-on-elastic-cloud/184674 "2019-06-07T18:24:54Z")
Hello wonderful people! I would like to create different indexes for each environment that I have (test / staging / production) I am using elastic cloud setup with filebeat 7.1.x but I cannot specify custom index name … --- ## [Filebeat normal start but no update log to elasticsearch](https://discuss.elastic.co/t/filebeat-normal-start-but-no-update-log-to-elasticsearch/270733)
**Author:** [@WhyStart](https://discuss.elastic.co/u/WhyStart)\ **Replies:** 3\ **Last updated:** [April 25, 2021, 6:32am UTC](https://discuss.elastic.co/t/filebeat-normal-start-but-no-update-log-to-elasticsearch/270733 "2021-04-25T06:32:17Z")
I installed filebeta on macos localhost，elk installed on docker desktop for mac,start filebeat log normal output,doesn't seem to have any problems,but it is not transmitted to elasticsearch. filebeat.yml # ============… --- ## [Is there any NEST tool to convert sql query to DSL](https://discuss.elastic.co/t/is-there-any-nest-tool-to-convert-sql-query-to-dsl/180297)
**Author:** [@emir](https://discuss.elastic.co/u/emir)\ **Replies:** 3\ **Last updated:** [May 9, 2019, 8:39am UTC](https://discuss.elastic.co/t/is-there-any-nest-tool-to-convert-sql-query-to-dsl/180297 "2019-05-09T08:39:35Z")
Hi, I'm quite new for document databases and DSL queries. I would like to achieve to create a dynamic filter queries with AND and OR conditions. I've used the NEST library to achieve that but it does not work as well … --- ## [Filebeat Process not clearing after STDIN input stops](https://discuss.elastic.co/t/filebeat-process-not-clearing-after-stdin-input-stops/115740)
**Author:** [@Vignesh\_Kumar\_A](https://discuss.elastic.co/u/Vignesh_Kumar_A)\ **Replies:** 3\ **Last updated:** [January 21, 2018, 11:54pm UTC](https://discuss.elastic.co/t/filebeat-process-not-clearing-after-stdin-input-stops/115740 "2018-01-21T23:54:50Z")
I am running mesos external logger. In that I am creating dynamic filebeat processes per container. This process will forward logs to Graylog. The container when it is terminated, the STDIN content will stop flowing. The… --- ## [Logstash ignore the port defined in pipeline](https://discuss.elastic.co/t/logstash-ignore-the-port-defined-in-pipeline/94505)
**Author:** [@camarar](https://discuss.elastic.co/u/camarar)\ **Replies:** 3\ **Last updated:** [July 26, 2017, 8:37pm UTC](https://discuss.elastic.co/t/logstash-ignore-the-port-defined-in-pipeline/94505 "2017-07-26T20:37:26Z")
Dear, I would like receive help to understand a behavior... My infrastructure is Filebeat -\> Logstash -\> Elasticsearch -\> Kibana Filebeat: We have many server send documents to Logstash using differents pipelines a… [Previous page](https://discuss.elastic.co/top.md?page=1158&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1160&per_page=50&period=all)