# Top **URL:** https://discuss.elastic.co/top.md?page=1160&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1161 --- ## [Shard failure. Fielddata disabled on text fields by default](https://discuss.elastic.co/t/shard-failure-fielddata-disabled-on-text-fields-by-default/89864)
**Author:** [@medelastic](https://discuss.elastic.co/u/medelastic)\ **Replies:** 3\ **Last updated:** [June 19, 2017, 11:31am UTC](https://discuss.elastic.co/t/shard-failure-fielddata-disabled-on-text-fields-by-default/89864 "2017-06-19T11:31:58Z")
I am new to elastic stack. Aim is to visualize access logs data in kibana. I have taken a sample apache log from elastic stack documentation and used the following logstash configuration file: input { file { path… --- ## [Bug when reading if a field has no mapping (empty array by ex.)](https://discuss.elastic.co/t/bug-when-reading-if-a-field-has-no-mapping-empty-array-by-ex/76393)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [March 12, 2017, 9:18pm UTC](https://discuss.elastic.co/t/bug-when-reading-if-a-field-has-no-mapping-empty-array-by-ex/76393 "2017-03-12T21:18:27Z")
A tricky bug (or I miss a setting maybe ..), with ES 2.4.4 and ES4Hadoop 2.4.4, let's create an index: PUT /toto/events/1 { "toto": 1, "data": \[\], "name": "webapp\_loaded" } This will generate the mapping: {… --- ## [A workaround to use the current date in Kibana](https://discuss.elastic.co/t/a-workaround-to-use-the-current-date-in-kibana/46569)
**Author:** [@javieredo](https://discuss.elastic.co/u/javieredo)\ **Replies:** 3\ **Last updated:** [April 6, 2016, 11:26pm UTC](https://discuss.elastic.co/t/a-workaround-to-use-the-current-date-in-kibana/46569 "2016-04-06T23:26:44Z")
Hi all, is there a way to get the current date in Kibana? We need to calculate the days between a date inside an index and the current date. We haven't been able to find a proper Lucene expression to get the current da… --- ## [Logstash pipeline StackOverflowError when using large conf file](https://discuss.elastic.co/t/logstash-pipeline-stackoverflowerror-when-using-large-conf-file/348471)
**Author:** [@blardy](https://discuss.elastic.co/u/blardy)\ **Replies:** 5\ **Last updated:** [December 2, 2023, 5:08pm UTC](https://discuss.elastic.co/t/logstash-pipeline-stackoverflowerror-when-using-large-conf-file/348471 "2023-12-02T17:08:10Z")
Hey there, Is there a limitation for logstash regarding the size of the configuration file ? I am having StackOverflowError error when logstash starts when using a large conf file (like 400kb) . Below an excerpt of th… --- ## [Help me: Unable to parse response body for Bulk Request posted](https://discuss.elastic.co/t/help-me-unable-to-parse-response-body-for-bulk-request-posted/342793)
**Author:** [@adibas](https://discuss.elastic.co/u/adibas)\ **Replies:** 1\ **Last updated:** [September 12, 2023, 1:09pm UTC](https://discuss.elastic.co/t/help-me-unable-to-parse-response-body-for-bulk-request-posted/342793 "2023-09-12T13:09:33Z")
Error Details: java.io.IOException: Unable to parse response body for Response{requestLine=POST /\_bulk?timeout=1m HTTP/1.1, host=eu-west-1.es.amazonaws.com, response=HTTP/1.1 200 OK} Tried to investigate and I see the … --- ## [Watcher vs Detection Rule](https://discuss.elastic.co/t/watcher-vs-detection-rule/271564)
**Author:** [@cjumper](https://discuss.elastic.co/u/cjumper)\ **Replies:** 1\ **Last updated:** [April 29, 2021, 4:58am UTC](https://discuss.elastic.co/t/watcher-vs-detection-rule/271564 "2021-04-29T04:58:17Z")
Try to get a better understanding of the 2. Can someone explain to me the difference between a watcher and a detection rule? --- ## [Logstash pipeline에 복수개의 conf가 있는 경우 여러 인덱스에 모두 쌓이는 현상](https://discuss.elastic.co/t/logstash-pipeline-conf/225550)
**Author:** [@deep2eye](https://discuss.elastic.co/u/deep2eye)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 1:18am UTC](https://discuss.elastic.co/t/logstash-pipeline-conf/225550 "2020-04-07T01:18:38Z")
안녕하세요. logstash에 아래와 같이 복수개의 설정을 등록하고 AAAA.json에 데이터를 넣으면 AAAA 인덱스와 BBBB 인덱스 모두에게 AAAA.json 데이터가 쌓입니다. 왜 이런걸까요? \[pipelines.yml\] - pipeline.id: AAAA path.config: "/etc/logstash/conf.d/AAAA.conf" queue.type: persis… --- ## [Automating dashboard in kibana](https://discuss.elastic.co/t/automating-dashboard-in-kibana/129139)
**Author:** [@data\_scientist](https://discuss.elastic.co/u/data_scientist)\ **Replies:** 1\ **Last updated:** [April 23, 2018, 5:15pm UTC](https://discuss.elastic.co/t/automating-dashboard-in-kibana/129139 "2018-04-23T17:15:07Z")
Hello everybody, I created a dashboard in kibana for a customer (with visualize and Timelion), please, how can I automate this dashboard for other customers? all customers have the same files as the first customer. T… --- ## [Trying to index text file into ES, but getting below error](https://discuss.elastic.co/t/trying-to-index-text-file-into-es-but-getting-below-error/114677)
**Author:** [@Pradeep1](https://discuss.elastic.co/u/Pradeep1)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 3:15pm UTC](https://discuss.elastic.co/t/trying-to-index-text-file-into-es-but-getting-below-error/114677 "2018-01-09T15:15:33Z")
{ "error" : { "root\_cause" : \[ { "type" : "json\_parse\_exception", "reason" : "Unexpected character ('-' (code 45)): Expected space separating root-level values\\n at \[Source: org.elasticsearch.transport.netty4.ByteBu… --- ## [Alias \[test-schema-active-logs\] has more than one indices associated with it \[\[......\]\], can't execute a single index op](https://discuss.elastic.co/t/alias-test-schema-active-logs-has-more-than-one-indices-associated-with-it-cant-execute-a-single-index-op/103614)
**Author:** [@ankitachow](https://discuss.elastic.co/u/ankitachow)\ **Replies:** 1\ **Last updated:** [October 11, 2017, 8:59pm UTC](https://discuss.elastic.co/t/alias-test-schema-active-logs-has-more-than-one-indices-associated-with-it-cant-execute-a-single-index-op/103614 "2017-10-11T20:59:39Z")
Elasticsearch 5.4.1 Rollover API problem We are using Rollover to create new index upon a document count condition is reached. But while ingestion is happening, if we run the rollover API, getting below error: "Alias… --- ## [Webservice call from Kibana dashboard](https://discuss.elastic.co/t/webservice-call-from-kibana-dashboard/96138)
**Author:** [@Prachi\_Mishra](https://discuss.elastic.co/u/Prachi_Mishra)\ **Replies:** 1\ **Last updated:** [August 8, 2017, 2:08pm UTC](https://discuss.elastic.co/t/webservice-call-from-kibana-dashboard/96138 "2017-08-08T14:08:59Z")
I want to modify the kibana dashboard by adding buttons to my visualization and onclick of the button I want to call a Rest API and the response I want to show as a pop up . Is it possible to do so by developing a plugi… --- ## [Format Sum aggregation results in Kibana](https://discuss.elastic.co/t/format-sum-aggregation-results-in-kibana/207413)
**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\ **Replies:** 2\ **Last updated:** [November 22, 2019, 12:07pm UTC](https://discuss.elastic.co/t/format-sum-aggregation-results-in-kibana/207413 "2019-11-22T12:07:21Z")
Hello! I'm getting huge numbers as result in SUM aggregations in Kibana, for example, in a SUM aggregation that the result wold be 0, in kibana visualization (data table visualization) i'm getting the number 2.328306436… --- ## [\[Error\] pipeline/output.go:74 Failed to connect: dial tcp](https://discuss.elastic.co/t/error-pipeline-output-go-74-failed-to-connect-dial-tcp/162222)
**Author:** [@Waranon](https://discuss.elastic.co/u/Waranon)\ **Replies:** 2\ **Last updated:** [January 5, 2019, 1:38pm UTC](https://discuss.elastic.co/t/error-pipeline-output-go-74-failed-to-connect-dial-tcp/162222 "2019-01-05T13:38:23Z")
I got Failed to connect: dial tcp x.x.x.x:5044: getsockopt: connection refused /etc/filebeat/filebeat.yml filebeat.prospectors: input\_type: log paths: /var/log/cms/\*.log output.logstash: hosts: \["x.x.x.x:5044"\] … --- ## [Scripted field to count occurence in string does not work](https://discuss.elastic.co/t/scripted-field-to-count-occurence-in-string-does-not-work/131826)
**Author:** [@Hendo\_Lim](https://discuss.elastic.co/u/Hendo_Lim)\ **Replies:** 2\ **Last updated:** [June 12, 2018, 9:01pm UTC](https://discuss.elastic.co/t/scripted-field-to-count-occurence-in-string-does-not-work/131826 "2018-06-12T21:01:29Z")
Hi, I am trying to create a scripted field on Kibana for counting the number occurrences of slash ('/') character inside a string field like so: doc\['my\_field.keyword'\]?.value?.count('/') But 'discover' page throws me … --- ## [ElasticSearch include parent source in child search](https://discuss.elastic.co/t/elasticsearch-include-parent-source-in-child-search/99966)
**Author:** [@Marco\_Count](https://discuss.elastic.co/u/Marco_Count)\ **Replies:** 2\ **Last updated:** [September 12, 2017, 9:11am UTC](https://discuss.elastic.co/t/elasticsearch-include-parent-source-in-child-search/99966 "2017-09-12T09:11:30Z")
I have a parent/child relationship between an user and many posts. I know that elasticsearch is not a relational db and there are no joins but I would like to find the best way to achieve this goal. When I search for a… --- ## [Mutate and empty values](https://discuss.elastic.co/t/mutate-and-empty-values/32498)
**Author:** [@maisyweb](https://discuss.elastic.co/u/maisyweb)\ **Replies:** 2\ **Last updated:** [October 19, 2015, 3:18pm UTC](https://discuss.elastic.co/t/mutate-and-empty-values/32498 "2015-10-19T15:18:43Z")
Hi, I'm using the mutate plugin to remove square brackets i'm getting while trying to transform an XML file into a json file mutate { replace =\> \["checkInFrom", "%{\[checkInFrom\]\[0\]}"\] } This is working well. The on… --- ## [How does Elasticsearch treat punctuation marks on index?](https://discuss.elastic.co/t/how-does-elasticsearch-treat-punctuation-marks-on-index/89)
**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\ **Replies:** 0\ **Last updated:** [May 1, 2015, 10:14am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-treat-punctuation-marks-on-index/89 "2015-05-01T10:14:19Z")
QUESTION To my understanding elasticsearch will treat all punctuation marks as word breaker. We are looking for recommended strategy on how to deal with the scenarios where 'BOO' should be not found when end-user s… --- ## [Span-level Custom Context/Metadata](https://discuss.elastic.co/t/span-level-custom-context-metadata/323868)
**Author:** [@LightSky](https://discuss.elastic.co/u/LightSky)\ **Replies:** 6\ **Last updated:** [February 6, 2023, 7:16pm UTC](https://discuss.elastic.co/t/span-level-custom-context-metadata/323868 "2023-02-06T19:16:08Z")
Setup: Elastic Cloud - Running version 8.6 I am looking for a way to add non-indexed metadata to an individual span instead of just on the transaction itself. (See Metadata | APM User Guide \[8.6\] | Elastic) In certai… --- ## [SearchBox view causing autosuggestions not appearing](https://discuss.elastic.co/t/searchbox-view-causing-autosuggestions-not-appearing/295893)
**Author:** [@Mecadamia.nut](https://discuss.elastic.co/u/Mecadamia.nut)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 2:51pm UTC](https://discuss.elastic.co/t/searchbox-view-causing-autosuggestions-not-appearing/295893 "2022-02-07T14:51:00Z")
I have the below SearchBox view, but this is causing my autocomplete suggestion does not show any suggestions even though i'm getting the suggestions from the elastic. Any suggestions please. … --- ## [Inconsistent results for the same query on an index with 0 replicas](https://discuss.elastic.co/t/inconsistent-results-for-the-same-query-on-an-index-with-0-replicas/258715)
**Author:** [@Marten](https://discuss.elastic.co/u/Marten)\ **Replies:** 6\ **Last updated:** [January 11, 2021, 4:28pm UTC](https://discuss.elastic.co/t/inconsistent-results-for-the-same-query-on-an-index-with-0-replicas/258715 "2021-01-11T16:28:00Z")
Hi there, I have a problem with inconsistent ranking of the results when submitting the same query multiple times. I'm using ES 5.6.8 on an index with 5 primary shards. I have set the number of replicas from 1 to 0 to… --- ## [Filebeat 7.2 wont start - Ubuntu 16.04](https://discuss.elastic.co/t/filebeat-7-2-wont-start-ubuntu-16-04/189068)
**Author:** [@u3432](https://discuss.elastic.co/u/u3432)\ **Replies:** 6\ **Last updated:** [July 10, 2019, 7:59am UTC](https://discuss.elastic.co/t/filebeat-7-2-wont-start-ubuntu-16-04/189068 "2019-07-10T07:59:50Z")
Hi all, Filebeat wont start on one server running file on the other 5+. Even import config files from working machine but it still wont start. Thank You. --- ## [\[BUG?\] Escaping periods in vega-lite calculate transform](https://discuss.elastic.co/t/bug-escaping-periods-in-vega-lite-calculate-transform/139424)
**Author:** [@tadgh](https://discuss.elastic.co/u/tadgh)\ **Replies:** 6\ **Last updated:** [July 11, 2018, 3:07am UTC](https://discuss.elastic.co/t/bug-escaping-periods-in-vega-lite-calculate-transform/139424 "2018-07-11T03:07:11Z")
Using the percentile aggregate, elasticsearch returns results wherein the key contains a period. Like so: "score\_outlier": { "values": { "1.0": 1, "5.0": 1, "25.0":… --- ## [Unable to establish connection between Logstash and Elasticsearch to parse iis log files](https://discuss.elastic.co/t/unable-to-establish-connection-between-logstash-and-elasticsearch-to-parse-iis-log-files/118587)
**Author:** [@SRIpandu1729](https://discuss.elastic.co/u/SRIpandu1729)\ **Replies:** 6\ **Last updated:** [February 9, 2018, 7:24am UTC](https://discuss.elastic.co/t/unable-to-establish-connection-between-logstash-and-elasticsearch-to-parse-iis-log-files/118587 "2018-02-09T07:24:47Z")
OS : Ubuntu 16.04 Installed : Elasticsearch, Kibana, Logstash (All 3 are of version 6.1) Log type : iis This is my config file for Logstash input { file { type =\> "iis-w3c" path =\> "/home/harsha/t… --- ## [Getting info from website with docker's logstash image](https://discuss.elastic.co/t/getting-info-from-website-with-dockers-logstash-image/236991)
**Author:** [@brandon1](https://discuss.elastic.co/u/brandon1)\ **Replies:** 4\ **Last updated:** [June 15, 2020, 4:13pm UTC](https://discuss.elastic.co/t/getting-info-from-website-with-dockers-logstash-image/236991 "2020-06-15T16:13:35Z")
I'm new to logstash, and I've been trying to get a docker container working with logstash in order to get data from the stock market for a project. Unfortunately, primarily due to the fact that I have no experience with … --- ## [Can we change the label name in Vertical Bar legend](https://discuss.elastic.co/t/can-we-change-the-label-name-in-vertical-bar-legend/141302)
**Author:** [@Paari\_R](https://discuss.elastic.co/u/Paari_R)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 7:30pm UTC](https://discuss.elastic.co/t/can-we-change-the-label-name-in-vertical-bar-legend/141302 "2018-07-24T19:30:49Z")
In this Visualization , instead of Date i want to show some other name.Is it possible to change the label (Top Right side corner)? --- ## [Duplicate record exatly twice](https://discuss.elastic.co/t/duplicate-record-exatly-twice/125235)
**Author:** [@david.derosa](https://discuss.elastic.co/u/david.derosa)\ **Replies:** 7\ **Last updated:** [March 23, 2018, 7:06pm UTC](https://discuss.elastic.co/t/duplicate-record-exatly-twice/125235 "2018-03-23T19:06:00Z")
Hi all, i use elastisearch 6.2.2 in a really basic test environment (no cluster, single node). I've just realized that all records are duplicated exactly twice. The two records have different \_id but all other fields … --- ## [Ruby filter help](https://discuss.elastic.co/t/ruby-filter-help/122464)
**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\ **Replies:** 7\ **Last updated:** [March 6, 2018, 8:36am UTC](https://discuss.elastic.co/t/ruby-filter-help/122464 "2018-03-06T08:36:57Z")
Hello guys, I've been struggling a lot with trying to put script in a logstash's pipeline. This script works on windows but not in CentOs 6.9. When I start logstash I have this error: An unexpected error occurred! {:er… --- ## [Scripts in elastic search gives error](https://discuss.elastic.co/t/scripts-in-elastic-search-gives-error/109526)
**Author:** [@anilagrawal6991](https://discuss.elastic.co/u/anilagrawal6991)\ **Replies:** 1\ **Last updated:** [November 29, 2017, 4:47pm UTC](https://discuss.elastic.co/t/scripts-in-elastic-search-gives-error/109526 "2017-11-29T16:47:04Z")
hello, I am using ES 2.3 on my system and create index on ES using sense PUT my\_index/my\_type/1 { "my\_field": 5 } and now i using script to search data GET my\_index/\_search { "script\_fields": { "my\_field": { "… --- ## [X-pack Machine Learning not available for download](https://discuss.elastic.co/t/x-pack-machine-learning-not-available-for-download/108962)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 7\ **Last updated:** [November 24, 2017, 10:27am UTC](https://discuss.elastic.co/t/x-pack-machine-learning-not-available-for-download/108962 "2017-11-24T10:27:23Z")
Hi All, I have an ELK (5.3) Stack Server and it is working well. It is dealing with OSSEC alerts. I would like to use machine learning in it. When I am going to X-Pack download page ( https://www.elastic.co/downloads… --- ## [Logstash date filter converting TIMESTAMP field to my local zone?](https://discuss.elastic.co/t/logstash-date-filter-converting-timestamp-field-to-my-local-zone/88260)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 1\ **Last updated:** [June 7, 2017, 6:14am UTC](https://discuss.elastic.co/t/logstash-date-filter-converting-timestamp-field-to-my-local-zone/88260 "2017-06-07T06:14:30Z")
HI, I have logs in with following TIMESTAMP field in it and i am sending them to ES using logstash. \[2017-05-18 00:00:05,871\] \[2017-05-18 00:00:06,161\] \[2017-05-18 00:00:06,249\] \[2017-05-18 15:30:06,339\] Normally if… --- ## [Logstash Kafka Avro Codec Error with Doubles](https://discuss.elastic.co/t/logstash-kafka-avro-codec-error-with-doubles/79483)
**Author:** [@sjzzzzz](https://discuss.elastic.co/u/sjzzzzz)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 2:43pm UTC](https://discuss.elastic.co/t/logstash-kafka-avro-codec-error-with-doubles/79483 "2017-05-03T14:43:55Z")
Hi, we hit a snag with the logstash kafka avro codec. We are unable to transmit/receive doubles across a topic with this codec. Included is a test case along with data to reproduce the problem. We're using Logstash 5.… --- ## [Performance metrics reporting tools for ES](https://discuss.elastic.co/t/performance-metrics-reporting-tools-for-es/8319)
**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\ **Replies:** 7\ **Last updated:** [July 10, 2012, 7:57am UTC](https://discuss.elastic.co/t/performance-metrics-reporting-tools-for-es/8319 "2012-07-10T07:57:10Z")
i want to be able to measure the health of my ES deployment by looking at various key counters/metrics like throughput, latency, load, disk IOs, etc. that way i have visibility on how things are progressing.. are th… --- ## [Inconsistency with queries on unknown fields](https://discuss.elastic.co/t/inconsistency-with-queries-on-unknown-fields/335841)
**Author:** [@yfful](https://discuss.elastic.co/u/yfful)\ **Replies:** 4\ **Last updated:** [June 22, 2023, 6:56pm UTC](https://discuss.elastic.co/t/inconsistency-with-queries-on-unknown-fields/335841 "2023-06-22T18:56:35Z")
Hello, If you make a search request with a geo\_bounding\_box query, it will fail with a QueryShardException with message failed to find geo field \[my-field\] in the case where the index doesn't have a mapping for my-field.… --- ## [Failed to verify all nodes have repository access](https://discuss.elastic.co/t/failed-to-verify-all-nodes-have-repository-access/299467)
**Author:** [@Caio\_Cesar](https://discuss.elastic.co/u/Caio_Cesar)\ **Replies:** 4\ **Last updated:** [March 21, 2022, 2:03pm UTC](https://discuss.elastic.co/t/failed-to-verify-all-nodes-have-repository-access/299467 "2022-03-21T14:03:48Z")
hello, I have a problem regarding backup using curator, I use version 6.3.2 of Elasticsearch and curator in version 5.7.6 , backups are stored in a google gsc bucket with all permissions but this error always appears Fa… --- ## [How to convert KQL to curl command in bash](https://discuss.elastic.co/t/how-to-convert-kql-to-curl-command-in-bash/299207)
**Author:** [@leyleynewt](https://discuss.elastic.co/u/leyleynewt)\ **Replies:** 4\ **Last updated:** [March 14, 2022, 2:26am UTC](https://discuss.elastic.co/t/how-to-convert-kql-to-curl-command-in-bash/299207 "2022-03-14T02:26:18Z")
How can I run this KQL in the bash command POST \_all/\_delete\_by\_query { "query": { "range": { "@timestamp": { "lte": "now-5d" } } } } Thank you in advance! --- ## [License for SSO option alone](https://discuss.elastic.co/t/license-for-sso-option-alone/267049)
**Author:** [@raja.parameswaran](https://discuss.elastic.co/u/raja.parameswaran)\ **Replies:** 4\ **Last updated:** [March 15, 2021, 3:39am UTC](https://discuss.elastic.co/t/license-for-sso-option-alone/267049 "2021-03-15T03:39:31Z")
Hi, I am new to Elastic Stack. We are looking at embedding Kibana dashboard inside our application. We are planning to go with the Basic version of Elastic stack(free version) to begin with. However, we want to have the… --- ## [How to create node certificate for Elasticsearch](https://discuss.elastic.co/t/how-to-create-node-certificate-for-elasticsearch/173658)
**Author:** [@aladine](https://discuss.elastic.co/u/aladine)\ **Replies:** 4\ **Last updated:** [March 25, 2019, 2:11am UTC](https://discuss.elastic.co/t/how-to-create-node-certificate-for-elasticsearch/173658 "2019-03-25T02:11:56Z")
I am using elastic cloud. I have a microservice which connect with elasticsearch cloud with rest api. I want to add SSL to enhance security. From the documentation, one of the first step is to generate Certificate Autho… --- ## [Can I create Folders to save seraches in Kibana?](https://discuss.elastic.co/t/can-i-create-folders-to-save-seraches-in-kibana/101749)
**Author:** [@vijay.sangha](https://discuss.elastic.co/u/vijay.sangha)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 5:04pm UTC](https://discuss.elastic.co/t/can-i-create-folders-to-save-seraches-in-kibana/101749 "2017-09-26T17:04:10Z")
I need to save searches for different components in Kibana. Is there a way to create folders/sub-folders in Kibana console to better segregate my search? I am using Filebeat\[5.3\]--\>logstahs\[5.3\]--\>ElasticSearch\[5.3\]--\>K… --- ## [Setting a field as non analyzed before sending it to elasticsearch](https://discuss.elastic.co/t/setting-a-field-as-non-analyzed-before-sending-it-to-elasticsearch/51336)
**Author:** [@pecwich](https://discuss.elastic.co/u/pecwich)\ **Replies:** 4\ **Last updated:** [June 1, 2016, 5:51am UTC](https://discuss.elastic.co/t/setting-a-field-as-non-analyzed-before-sending-it-to-elasticsearch/51336 "2016-06-01T05:51:51Z")
How can I Set a field as non-analyzed in Logstash before sending it to elasticsearch. --- ## [Ann: Elasticsearch Combo Analyzer Plugin](https://discuss.elastic.co/t/ann-elasticsearch-combo-analyzer-plugin/7112)
**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\ **Replies:** 4\ **Last updated:** [July 9, 2012, 11:08am UTC](https://discuss.elastic.co/t/ann-elasticsearch-combo-analyzer-plugin/7112 "2012-07-09T11:08:29Z")
Hi, I'm slowly continuing to work on my abilities to write plugins. In the hope it might be useful, here is an Elasticsearch Analysis plugin, a "combo" analyzer that combines multiple analyzers into one. It is bas… --- ## [3 node cluster failure](https://discuss.elastic.co/t/3-node-cluster-failure/244533)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 5\ **Last updated:** [August 12, 2020, 7:54am UTC](https://discuss.elastic.co/t/3-node-cluster-failure/244533 "2020-08-12T07:54:48Z")
Hi, I am new to elasticsearch. I have created a 3 node elasticsearch cluster. All master and data set to true. All 3 nodes are running: Centos 8, ES version 7.8.1 Java - openjdk 11.0.8 2020-07-14 LTS. Firewall - in … --- ## [How to figure out at which line Logstash is in a file?](https://discuss.elastic.co/t/how-to-figure-out-at-which-line-logstash-is-in-a-file/116759)
**Author:** [@Precision](https://discuss.elastic.co/u/Precision)\ **Replies:** 5\ **Last updated:** [January 26, 2018, 11:52am UTC](https://discuss.elastic.co/t/how-to-figure-out-at-which-line-logstash-is-in-a-file/116759 "2018-01-26T11:52:13Z")
How can I figure out which file is currently processed by Logstash, and at which position Logstash actually is. I have configured 5 files for input, and usually its working fine. But since hours no one writes to those f… --- ## [Enterprise search installation gives API key error](https://discuss.elastic.co/t/enterprise-search-installation-gives-api-key-error/283645)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [September 8, 2021, 11:11pm UTC](https://discuss.elastic.co/t/enterprise-search-installation-gives-api-key-error/283645 "2021-09-08T23:11:01Z")
Hi, I'm trying to install Elastic Enterprise Search on my system. My kibana version is 7.14. Enterprise search didn't have a version and downloaded tar.gz package . I downloaded the file from Download Elastic Enterpri… --- ## [I need help! Auditbeat \`file.path\` field does not contain the absolute path](https://discuss.elastic.co/t/i-need-help-auditbeat-file-path-field-does-not-contain-the-absolute-path/243045)
**Author:** [@Simon\_Moller](https://discuss.elastic.co/u/Simon_Moller)\ **Replies:** 8\ **Last updated:** [August 5, 2020, 1:34pm UTC](https://discuss.elastic.co/t/i-need-help-auditbeat-file-path-field-does-not-contain-the-absolute-path/243045 "2020-08-05T13:34:44Z")
Hi, I am having problems with how auditbeat pushes documents to elasticsearch. I want auditbeat to monitor openat system calls on a directory (or, alternatively on the files within that directory). To that end I have the… --- ## [Bug: KV filter does not handle quoted strings with spaces at the end of a line, when using windows line endings](https://discuss.elastic.co/t/bug-kv-filter-does-not-handle-quoted-strings-with-spaces-at-the-end-of-a-line-when-using-windows-line-endings/211916)
**Author:** [@ridago](https://discuss.elastic.co/u/ridago)\ **Replies:** 3\ **Last updated:** [December 16, 2019, 11:55am UTC](https://discuss.elastic.co/t/bug-kv-filter-does-not-handle-quoted-strings-with-spaces-at-the-end-of-a-line-when-using-windows-line-endings/211916 "2019-12-16T11:55:34Z")
I've come accross an issue with the kv-filter plugin where if I input a file with windows line endings and the last key value pair on the line is a string with spaces, the string is not read correctly, but is instead rea… --- ## [Incorrect field type](https://discuss.elastic.co/t/incorrect-field-type/141585)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 8\ **Last updated:** [August 7, 2018, 7:34am UTC](https://discuss.elastic.co/t/incorrect-field-type/141585 "2018-08-07T07:34:16Z")
Hi Team, I am working something with (semi apache access log), copied below and i have also published my logstash conf file, i could see bytes,IP,date and respsonse code usually considerd as strings in kibana. I am able… --- ## [Error when using multi pipeline config](https://discuss.elastic.co/t/error-when-using-multi-pipeline-config/124207)
**Author:** [@br14nb0](https://discuss.elastic.co/u/br14nb0)\ **Replies:** 8\ **Last updated:** [March 19, 2018, 3:40am UTC](https://discuss.elastic.co/t/error-when-using-multi-pipeline-config/124207 "2018-03-19T03:40:00Z")
I have this error when I try to run multi pipeline config "ERROR: Failed to read pipelines yaml file. Location: C:/elk/logstash/config/pipelines.yml" And this is the content of my pipelines.yml pipeline.id: sharepoin… --- ## [Logstash date filter not replacing @timestamp field](https://discuss.elastic.co/t/logstash-date-filter-not-replacing-timestamp-field/75549)
**Author:** [@Shirel\_Vaiman](https://discuss.elastic.co/u/Shirel_Vaiman)\ **Replies:** 3\ **Last updated:** [March 4, 2017, 9:26pm UTC](https://discuss.elastic.co/t/logstash-date-filter-not-replacing-timestamp-field/75549 "2017-03-04T21:26:39Z")
Hi all, Please assist, as I'm already becoming desperate. I'm unable to replace the @timestamp field with the actual log time. I've tried all kinds of help from the internet but no luck. This is my logstash filter date c… --- ## [How to parse all post params](https://discuss.elastic.co/t/how-to-parse-all-post-params/64335)
**Author:** [@shell.b2t](https://discuss.elastic.co/u/shell.b2t)\ **Replies:** 3\ **Last updated:** [November 6, 2016, 1:38am UTC](https://discuss.elastic.co/t/how-to-parse-all-post-params/64335 "2016-11-06T01:38:49Z")
I use packetbeat to capure http packet, but found some POST parameters can not be captured packetbeat info : \*\*\[root@localhost packetbeat\]# /usr/share/packetbeat/bin/packetbeat --version\*\* \*\*packetbeat version 5.0.… --- ## [Upgraded Logstash from 1.5.5 to 2.2.0 \> SSL heck](https://discuss.elastic.co/t/upgraded-logstash-from-1-5-5-to-2-2-0-ssl-heck/42069)
**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\ **Replies:** 3\ **Last updated:** [February 19, 2016, 4:23pm UTC](https://discuss.elastic.co/t/upgraded-logstash-from-1-5-5-to-2-2-0-ssl-heck/42069 "2016-02-19T16:23:53Z")
I have successfully upgraded my ES cluster to the latest/greatest and that worked great. My linux systems are rocking using the exact same SSL settings. However, my nxlog windows boxes are not being my friend. I keep… [Previous page](https://discuss.elastic.co/top.md?page=1159&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1161&per_page=50&period=all)