# Top **URL:** https://discuss.elastic.co/top.md?page=1165&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1166 --- ## [How to correlate two log files based on a UNIQUE key:value pair?](https://discuss.elastic.co/t/how-to-correlate-two-log-files-based-on-a-unique-key-value-pair/234966)
**Author:** [@marco2005](https://discuss.elastic.co/u/marco2005)\ **Replies:** 3\ **Last updated:** [June 4, 2020, 11:24am UTC](https://discuss.elastic.co/t/how-to-correlate-two-log-files-based-on-a-unique-key-value-pair/234966 "2020-06-04T11:24:48Z")
I have two log files. In one log file there are 3 fields after it is split over and it gets showed up in Kibana. LogA mobile eid access\_time And this is another file with 10 fields: LogB mobile card token vehicle … --- ## [Search.query\_time\_in\_millis and search.query\_total metrics](https://discuss.elastic.co/t/search-query-time-in-millis-and-search-query-total-metrics/201186)
**Author:** [@tetiana](https://discuss.elastic.co/u/tetiana)\ **Replies:** 0\ **Last updated:** [September 26, 2019, 8:38am UTC](https://discuss.elastic.co/t/search-query-time-in-millis-and-search-query-total-metrics/201186 "2019-09-26T08:38:37Z")
Hi, The same metrics search.query\_time\_in\_millis, search.query\_total are provided by Node API and Index API, how they are calculated? is it just a sum of shards metrics search.query\_time\_in\_millis, search.query\_total, l… --- ## [How can we reindex with existing documents to a new type along with already existing types using painless](https://discuss.elastic.co/t/how-can-we-reindex-with-existing-documents-to-a-new-type-along-with-already-existing-types-using-painless/154085)
**Author:** [@Shivaprasad](https://discuss.elastic.co/u/Shivaprasad)\ **Replies:** 3\ **Last updated:** [October 26, 2018, 3:32pm UTC](https://discuss.elastic.co/t/how-can-we-reindex-with-existing-documents-to-a-new-type-along-with-already-existing-types-using-painless/154085 "2018-10-26T15:32:19Z")
In an index I have 3 types type A, type B, type C along with their properties, I have to reindex with a new type D using painless. I am using Elasticsearch version 5.6.9 --- ## [Filter DNS queries by domains list](https://discuss.elastic.co/t/filter-dns-queries-by-domains-list/136285)
**Author:** [@alex\_h](https://discuss.elastic.co/u/alex_h)\ **Replies:** 3\ **Last updated:** [June 19, 2018, 4:15am UTC](https://discuss.elastic.co/t/filter-dns-queries-by-domains-list/136285 "2018-06-19T04:15:56Z")
Hello, the setup I'm working with consists of: machine A - where I'd like to install packetbeat machine B - where elastsearch is listening I have DNS queries forwarded to machine A. I would like to filter the DNS tr… --- ## [Attempted to send a bulk request to elasticsearch' but Elasticsearch appears to be unreachable or down](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/89918)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 0\ **Last updated:** [June 19, 2017, 11:09am UTC](https://discuss.elastic.co/t/attempted-to-send-a-bulk-request-to-elasticsearch-but-elasticsearch-appears-to-be-unreachable-or-down/89918 "2017-06-19T11:09:32Z")
I am using Elasticsearch and Logstash 5.2.0, I am getting these constant error and warnings in my logstash logs even though my elastcisearch is always up. \[2017-06-19T07:00:37,497\]\[ERROR\]\[logstash.outputs.elasticsearch… --- ## [Windows xp filebeat crash](https://discuss.elastic.co/t/windows-xp-filebeat-crash/66641)
**Author:** [@superzbo](https://discuss.elastic.co/u/superzbo)\ **Replies:** 3\ **Last updated:** [November 21, 2016, 1:31pm UTC](https://discuss.elastic.co/t/windows-xp-filebeat-crash/66641 "2016-11-21T13:31:24Z")
hi I try to install filebeats on windows xp, many servers some of them working fine, some crash when start the service. I got two types of error from different servers, appreciate any guide point me some direction to f… --- ## [Different hardware capacity](https://discuss.elastic.co/t/different-hardware-capacity/20684)
**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\ **Replies:** 3\ **Last updated:** [November 11, 2014, 5:56pm UTC](https://discuss.elastic.co/t/different-hardware-capacity/20684 "2014-11-11T17:56:18Z")
Hello, On one of my ELS cluster, i have node with different hardware capacity. 1 node : 8 GB RAM and 200GB disk 1 node : 4 GB RAM and 20GB disk 2 node : 64GB RAM with 4To Disk I find that ELS tries to balance the … --- ## [Multiple terms in filter in filtered query](https://discuss.elastic.co/t/multiple-terms-in-filter-in-filtered-query/19614)
**Author:** [@Pontus\_Lundin](https://discuss.elastic.co/u/Pontus_Lundin)\ **Replies:** 3\ **Last updated:** [September 4, 2014, 12:55pm UTC](https://discuss.elastic.co/t/multiple-terms-in-filter-in-filtered-query/19614 "2014-09-04T12:55:32Z")
Hi, Can anyone suggest how i can add multiple terms to my filter in the query below? Tried one term: "med" and it works, adding yet another as array only takes the last element and the first one shows up in the hi… --- ## [Index-append into data-stream](https://discuss.elastic.co/t/index-append-into-data-stream/320930)
**Author:** [@Safty](https://discuss.elastic.co/u/Safty)\ **Replies:** 5\ **Last updated:** [December 20, 2022, 4:39pm UTC](https://discuss.elastic.co/t/index-append-into-data-stream/320930 "2022-12-20T16:39:37Z")
Hello, Does Rally 2.7.0 support index-append (bulk) into a data-stream? I am able to generate a data-stream using component templates and a composable index template without issue, but the index-append is not writing d… --- ## [Cant get grok working with nginx log](https://discuss.elastic.co/t/cant-get-grok-working-with-nginx-log/293061)
**Author:** [@Constantine](https://discuss.elastic.co/u/Constantine)\ **Replies:** 5\ **Last updated:** [December 29, 2021, 12:59pm UTC](https://discuss.elastic.co/t/cant-get-grok-working-with-nginx-log/293061 "2021-12-29T12:59:55Z")
Hi, Can someone help me with nginx logs please. I have full nginx log: 2021-12-28T17:00:34+00:00 site="demo" server="demotest" dest\_port="443" dest\_ip="172.19.0.3" src="172.31.27.65" src\_ip="172.31.27.65" user="-" tim… --- ## [Kibana 5.6 state red](https://discuss.elastic.co/t/kibana-5-6-state-red/170425)
**Author:** [@Quokka](https://discuss.elastic.co/u/Quokka)\ **Replies:** 5\ **Last updated:** [March 1, 2019, 11:22am UTC](https://discuss.elastic.co/t/kibana-5-6-state-red/170425 "2019-03-01T11:22:39Z")
\*\* {"type":"log","@timestamp":"2019-03-01T02:46:37Z","tags":\["status","plugin:kibana@5.6.15","info"\],"pid":9,"state":"green","message":"Status changed from uninitialized to green - Ready","prevState":"uninitialized","pre… --- ## [Parent-Child query for 6.3.2](https://discuss.elastic.co/t/parent-child-query-for-6-3-2/142999)
**Author:** [@Larry\_Schrader](https://discuss.elastic.co/u/Larry_Schrader)\ **Replies:** 5\ **Last updated:** [August 5, 2018, 2:04pm UTC](https://discuss.elastic.co/t/parent-child-query-for-6-3-2/142999 "2018-08-05T14:04:17Z")
I have created a template file with mapping for a parent-child relationship: ### Template file { "index\_patterns" : \[ "test-\*" \], "settings" : { "index" : { "number\_of\_shards" : "1", "number\_of\_repli… --- ## [Es.default.config is no longer supported. when upgrading from 1.6 to 2.4.4, ubuntu 14.04](https://discuss.elastic.co/t/es-default-config-is-no-longer-supported-when-upgrading-from-1-6-to-2-4-4-ubuntu-14-04/74471)
**Author:** [@shams](https://discuss.elastic.co/u/shams)\ **Replies:** 5\ **Last updated:** [February 14, 2017, 7:28am UTC](https://discuss.elastic.co/t/es-default-config-is-no-longer-supported-when-upgrading-from-1-6-to-2-4-4-ubuntu-14-04/74471 "2017-02-14T07:28:42Z")
Hi, I was trying to upgrade my elasticsearch version 1.6 to 2.4.4 on my Ubuntu 14.04. What i did is i downloaded elasticsearch-2.4.4.deb from your site and installed it. At the time of installation it asked me to chang… --- ## ["Incompatible encoding" when using Logstash to ship JSON files to Elasticsearch](https://discuss.elastic.co/t/incompatible-encoding-when-using-logstash-to-ship-json-files-to-elasticsearch/21190)
**Author:** [@Vagif\_Abilov](https://discuss.elastic.co/u/Vagif_Abilov)\ **Replies:** 5\ **Last updated:** [December 11, 2014, 12:22am UTC](https://discuss.elastic.co/t/incompatible-encoding-when-using-logstash-to-ship-json-files-to-elasticsearch/21190 "2014-12-11T00:22:33Z")
Hello, We have been successfully using Logstash to parse our JSON logs data and import them to Elasticsearch database, but recently had failures on some machines. Here's the error Logstash displays: ←\[32mRegist… --- ## [Helm chart for Elastic Agent](https://discuss.elastic.co/t/helm-chart-for-elastic-agent/307012)
**Author:** [@slogger](https://discuss.elastic.co/u/slogger)\ **Replies:** 0\ **Last updated:** [June 13, 2022, 9:58am UTC](https://discuss.elastic.co/t/helm-chart-for-elastic-agent/307012 "2022-06-13T09:58:03Z")
Hello Im working on integrating elastic as our infrastructure monitoring and logging. We are using elastic cloud. is there a helm chart to deploy the elastic agent into our clusters? --- ## [Static mapping looks like dynamic in Kibana](https://discuss.elastic.co/t/static-mapping-looks-like-dynamic-in-kibana/125977)
**Author:** [@Doritos250](https://discuss.elastic.co/u/Doritos250)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 5:32pm UTC](https://discuss.elastic.co/t/static-mapping-looks-like-dynamic-in-kibana/125977 "2018-03-28T17:32:08Z")
Hi everyone, I'm currently changing my template mapping from Dynamic to Static. I've done the following actions on Kibana regardless old data: Delete Index in Kibana Delete template delete related indice Then: Upl… --- ## [How to add new node into existing cluster as multicast?](https://discuss.elastic.co/t/how-to-add-new-node-into-existing-cluster-as-multicast/15999)
**Author:** [@nadi1706](https://discuss.elastic.co/u/nadi1706)\ **Replies:** 0\ **Last updated:** [February 25, 2014, 3:28am UTC](https://discuss.elastic.co/t/how-to-add-new-node-into-existing-cluster-as-multicast/15999 "2014-02-25T03:28:47Z")
Hi all, I have four virtual servers Sec01,Sec02,Sec03 and Sec04 setup in a cluster as multicast mode. This works just fine where cluster name is CBCluster. I am trying to add a new server (Sec05) into existing … --- ## [Using constant\_score combined with multi\_match cross\_field](https://discuss.elastic.co/t/using-constant-score-combined-with-multi-match-cross-field/123487)
**Author:** [@ahmadazimi](https://discuss.elastic.co/u/ahmadazimi)\ **Replies:** 1\ **Last updated:** [March 26, 2018, 4:17pm UTC](https://discuss.elastic.co/t/using-constant-score-combined-with-multi-match-cross-field/123487 "2018-03-26T16:17:07Z")
I've tried to use cross\_field query to search over multiple fields with completely different boosts. But TF/IDF makes the results so bad because I just want to see if a term exist in the fields or not (but if exists, app… --- ## [Logstash grok filter for quoted value OR dash](https://discuss.elastic.co/t/logstash-grok-filter-for-quoted-value-or-dash/99094)
**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Replies:** 1\ **Last updated:** [September 1, 2017, 8:25am UTC](https://discuss.elastic.co/t/logstash-grok-filter-for-quoted-value-or-dash/99094 "2017-09-01T08:25:42Z")
Hello, I have a blue coat Proxy log that have a field that can either be a quouted value like “Microsoft-CryptoAPI/15.2” or a dash (-). I captured this with %{QUOTEDSTRING:useragent} Before i found out that the value c… --- ## [How to make elasticsearch data node to read the config without restarting the data node?](https://discuss.elastic.co/t/how-to-make-elasticsearch-data-node-to-read-the-config-without-restarting-the-data-node/44751)
**Author:** [@dany](https://discuss.elastic.co/u/dany)\ **Replies:** 6\ **Last updated:** [March 17, 2016, 10:42pm UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-data-node-to-read-the-config-without-restarting-the-data-node/44751 "2016-03-17T22:42:26Z")
In my use case I would like to change the no of shards in data node config. I want the data node to read the updated config without rebouncing. Is there a way to do that\[ an API call may be?\] --- ## [Logstash CEF codec and ECS cannot parse 'rt' field throws an error](https://discuss.elastic.co/t/logstash-cef-codec-and-ecs-cannot-parse-rt-field-throws-an-error/310705)
**Author:** [@wii](https://discuss.elastic.co/u/wii)\ **Replies:** 2\ **Last updated:** [July 28, 2022, 8:54am UTC](https://discuss.elastic.co/t/logstash-cef-codec-and-ecs-cannot-parse-rt-field-throws-an-error/310705 "2022-07-28T08:54:29Z")
Without ECS, the 'rt' field could be parsed fine and mapped into 'deviceReceiptTime' field. But after enabling ECS in Logstash configuration it throws me an error in log ingesting. Could somebody guide me through this as… --- ## [Enable APM Service Map](https://discuss.elastic.co/t/enable-apm-service-map/219926)
**Author:** [@Martin\_BR](https://discuss.elastic.co/u/Martin_BR)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 4:33pm UTC](https://discuss.elastic.co/t/enable-apm-service-map/219926 "2020-02-19T16:33:24Z")
Hello, I recently installed elastic, kibana and apm in 7.6.0 and I wanted to test the APM service map feature. I struggle to enable it within kibana. I was not able to make visible the link "Service Map" even using xpac… --- ## [ES 6.4.2 clients Out of Memory Java Heap Space](https://discuss.elastic.co/t/es-6-4-2-clients-out-of-memory-java-heap-space/206226)
**Author:** [@nishantagarwal1990](https://discuss.elastic.co/u/nishantagarwal1990)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 5:22pm UTC](https://discuss.elastic.co/t/es-6-4-2-clients-out-of-memory-java-heap-space/206226 "2019-11-04T17:22:14Z")
\[2019-11-02T01:09:15,188\]\[WARN \]\[i.n.c.AbstractChannelHandlerContext\] An exception 'java.lang.OutOfMemoryError: Java heap space' \[enable DEBUG level for full stacktrace\] was thrown by a user handler's exceptionCaught() m… --- ## [Local Setup Elasticsearch 7.2 and Kibana with Security](https://discuss.elastic.co/t/local-setup-elasticsearch-7-2-and-kibana-with-security/199526)
**Author:** [@dinesh.gupta](https://discuss.elastic.co/u/dinesh.gupta)\ **Replies:** 2\ **Last updated:** [September 16, 2019, 1:50am UTC](https://discuss.elastic.co/t/local-setup-elasticsearch-7-2-and-kibana-with-security/199526 "2019-09-16T01:50:47Z")
I installed few days back Elastic & Kibana version 7.2 on my local laptop virtual machine( vmware with Centos 7.6). I want to enable the security for elastic & kibana but unable to do. In Elasticsearch '/etc/elasticsea… --- ## [Logstash Error registering plugin](https://discuss.elastic.co/t/logstash-error-registering-plugin/178307)
**Author:** [@cbeprem](https://discuss.elastic.co/u/cbeprem)\ **Replies:** 2\ **Last updated:** [April 24, 2019, 7:09pm UTC](https://discuss.elastic.co/t/logstash-error-registering-plugin/178307 "2019-04-24T19:09:54Z")
I am getting the following error. while trying to run S3 input \[2019-04-24T17:46:30,448\]\[INFO \]\[logstash.pipeline \] Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>2, "pipeline.batch.size"=\>125, "pip… --- ## [How to increase visualization size in version 6.1.2](https://discuss.elastic.co/t/how-to-increase-visualization-size-in-version-6-1-2/128085)
**Author:** [@rajeshb44](https://discuss.elastic.co/u/rajeshb44)\ **Replies:** 2\ **Last updated:** [April 20, 2018, 6:40pm UTC](https://discuss.elastic.co/t/how-to-increase-visualization-size-in-version-6-1-2/128085 "2018-04-20T18:40:55Z")
Hi, Compared to v5.5 and v6.2.1 pie chart display size is small and it is small after adding to Dashboard. As per my usecase i need to have the visualizations to be bigger in size (to fit 4 visualizations in one screen … --- ## [Is there a way to change opacity or color in area chart?](https://discuss.elastic.co/t/is-there-a-way-to-change-opacity-or-color-in-area-chart/127020)
**Author:** [@shreyash\_hisariya](https://discuss.elastic.co/u/shreyash_hisariya)\ **Replies:** 2\ **Last updated:** [April 10, 2018, 3:07pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-change-opacity-or-color-in-area-chart/127020 "2018-04-10T15:07:45Z")
I started building visualisation with kibana 6.2. But I can see that even basic functionality of picking colors is restricted and only few colors are provided. Is this an issue or I am missing something? I can also see … --- ## [Several groupings using visual Builder](https://discuss.elastic.co/t/several-groupings-using-visual-builder/100519)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 2:03pm UTC](https://discuss.elastic.co/t/several-groupings-using-visual-builder/100519 "2017-09-15T14:03:52Z")
Hi, I have started to use visual builder making my visualizations. I am trying to create several grouping. My first grouping is a filter but then I would like to have one resulting serie per another field. My first G… --- ## [File-input , how to add file offset as a new field](https://discuss.elastic.co/t/file-input-how-to-add-file-offset-as-a-new-field/93323)
**Author:** [@Ryan\_Qian](https://discuss.elastic.co/u/Ryan_Qian)\ **Replies:** 2\ **Last updated:** [July 17, 2017, 5:41am UTC](https://discuss.elastic.co/t/file-input-how-to-add-file-offset-as-a-new-field/93323 "2017-07-17T05:41:22Z")
I have smillar question as this one, need the offset to maintain the log order (which logs happen at same timestamp) Thanks --- ## [Kibana Monitoring 400 Bad request](https://discuss.elastic.co/t/kibana-monitoring-400-bad-request/88975)
**Author:** [@elk\_user1](https://discuss.elastic.co/u/elk_user1)\ **Replies:** 2\ **Last updated:** [June 13, 2017, 9:53am UTC](https://discuss.elastic.co/t/kibana-monitoring-400-bad-request/88975 "2017-06-13T09:53:01Z")
Hi, I was able to view monitoring dashboard without any issues, but started getting this error and unable to view dashbard. Thanks. --- ## [Elasticsearch stable version](https://discuss.elastic.co/t/elasticsearch-stable-version/76020)
**Author:** [@Shweta](https://discuss.elastic.co/u/Shweta)\ **Replies:** 2\ **Last updated:** [February 24, 2017, 10:40am UTC](https://discuss.elastic.co/t/elasticsearch-stable-version/76020 "2017-02-24T10:40:43Z")
Hi, Currently we are using Elasticsearch Version 2.4.3 , logstash 2.4 and Kibana 4.5. We are facing problem in maximum string field size limitation of 32KB. We want to upgrade the ELK stack to stable version. ple… --- ## [Importing dashboards via CLI 5.1.1](https://discuss.elastic.co/t/importing-dashboards-via-cli-5-1-1/70236)
**Author:** [@Mormaii](https://discuss.elastic.co/u/Mormaii)\ **Replies:** 2\ **Last updated:** [January 18, 2017, 10:20am UTC](https://discuss.elastic.co/t/importing-dashboards-via-cli-5-1-1/70236 "2017-01-18T10:20:21Z")
What I want to do is import the .json dashboards that Kibana generates with: Management -\> Saved Objects -\> Export And then import them via command line or something that can be automated and doesn't require me to us… --- ## [Kibana 4.4 with reverse proxy behind nginx](https://discuss.elastic.co/t/kibana-4-4-with-reverse-proxy-behind-nginx/42383)
**Author:** [@abhijitdeka11](https://discuss.elastic.co/u/abhijitdeka11)\ **Replies:** 0\ **Last updated:** [February 22, 2016, 12:41pm UTC](https://discuss.elastic.co/t/kibana-4-4-with-reverse-proxy-behind-nginx/42383 "2016-02-22T12:41:36Z")
Hi, I was updating our application stack to ES2.2 and Kibana 4.4 from Kibana4.1 .But there is a blocking problem here. Reverse proxy under nginx doesn't work anymore.I went through the issue https://github.com/elastic/… --- ## [Mixed kinds of rename option in single mutate filter won't work](https://discuss.elastic.co/t/mixed-kinds-of-rename-option-in-single-mutate-filter-wont-work/283278)
**Author:** [@tasneem-hyder](https://discuss.elastic.co/u/tasneem-hyder)\ **Replies:** 4\ **Last updated:** [September 4, 2021, 6:23pm UTC](https://discuss.elastic.co/t/mixed-kinds-of-rename-option-in-single-mutate-filter-wont-work/283278 "2021-09-04T18:23:11Z")
In a single mutate filter, we can't use the mixed kinds of rename option. This is not configuration issue but a runtime issue so it is hard to debug. As this kind of config setup doesn't compile to an expected config so … --- ## [Format stack trace in console for elastic search](https://discuss.elastic.co/t/format-stack-trace-in-console-for-elastic-search/260711)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 4\ **Last updated:** [January 13, 2021, 3:13pm UTC](https://discuss.elastic.co/t/format-stack-trace-in-console-for-elastic-search/260711 "2021-01-13T15:13:19Z")
Hi expers. Below is sample stack trace in log 2021-01011 04:23:23,455 ERROR \[beat-logstash-some-name-832-2015.11.28\] IndexNotFoundException\[no such index\] at org.elasticsearch.cluster.metadata.IndexNameExpressionRe… --- ## [Mapping for Elasticsearch \[easy\]](https://discuss.elastic.co/t/mapping-for-elasticsearch-easy/212036)
**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 12:25pm UTC](https://discuss.elastic.co/t/mapping-for-elasticsearch-easy/212036 "2019-12-20T12:25:03Z")
I've got an easy question. I've got this file: # epoch, metric1, metric2, metric3 1576425930,0.0718,0.0127,1 How can I tell Filebeat to send it to Elasticsearch and use the correct mapping. My config file currently l… --- ## [Visualization of multi-value field with aggregation](https://discuss.elastic.co/t/visualization-of-multi-value-field-with-aggregation/202021)
**Author:** [@elastic25](https://discuss.elastic.co/u/elastic25)\ **Replies:** 4\ **Last updated:** [October 2, 2019, 6:22pm UTC](https://discuss.elastic.co/t/visualization-of-multi-value-field-with-aggregation/202021 "2019-10-02T18:22:19Z")
Newbie to the ELK stack and semi-technical. Our use case is to use the stack to run some analytics for pricing and product data broken down by different multi-value fields. I will start with source data structure and wh… --- ## [TSVB Metric shows different value than Metric](https://discuss.elastic.co/t/tsvb-metric-shows-different-value-than-metric/192289)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [July 25, 2019, 8:08pm UTC](https://discuss.elastic.co/t/tsvb-metric-shows-different-value-than-metric/192289 "2019-07-25T20:08:20Z")
I have two visualizations that are setup to count the unique number of IPs in a given field. TSVB shows one number that is significantly higher than Metric does. Below is an example followed by my settings for each vis… --- ## [Logstash Error Notification System](https://discuss.elastic.co/t/logstash-error-notification-system/176178)
**Author:** [@muratcelebiler](https://discuss.elastic.co/u/muratcelebiler)\ **Replies:** 4\ **Last updated:** [April 10, 2019, 3:22pm UTC](https://discuss.elastic.co/t/logstash-error-notification-system/176178 "2019-04-10T15:22:34Z")
Hello Guys; I have to sending data with RabbitMQ-Logstash-Elasticsearch tree. I would like watch to the logstash's errors and if logstash has a error then I want send notification to me (slack or etc.). What do I config… --- ## [Add date field from IIS-log](https://discuss.elastic.co/t/add-date-field-from-iis-log/88596)
**Author:** [@Robert\_Andersson](https://discuss.elastic.co/u/Robert_Andersson)\ **Replies:** 4\ **Last updated:** [June 12, 2017, 9:16am UTC](https://discuss.elastic.co/t/add-date-field-from-iis-log/88596 "2017-06-12T09:16:37Z")
Hi, i'm currently trying to add an additional date field for when the log was created called log\_timestamp. But the Date filter does not seem to convert log\_timestamp into a date type. My config is below. filter { … --- ## [REST API spec available for x-pack?](https://discuss.elastic.co/t/rest-api-spec-available-for-x-pack/80037)
**Author:** [@oliver](https://discuss.elastic.co/u/oliver)\ **Replies:** 4\ **Last updated:** [March 31, 2017, 3:13pm UTC](https://discuss.elastic.co/t/rest-api-spec-available-for-x-pack/80037 "2017-03-31T15:13:38Z")
Elasticsearch has published the REST API specifications to the public. This is really helpful for e.g. non-official clients, as some are relying on tooling around the JSON files. Are you planning to publish the REST AP… --- ## [Running elasticsearch 6.x with arm64 architecture](https://discuss.elastic.co/t/running-elasticsearch-6-x-with-arm64-architecture/272287)
**Author:** [@Yugansh\_Marwah](https://discuss.elastic.co/u/Yugansh_Marwah)\ **Replies:** 1\ **Last updated:** [May 10, 2021, 12:46am UTC](https://discuss.elastic.co/t/running-elasticsearch-6-x-with-arm64-architecture/272287 "2021-05-10T00:46:13Z")
We have our application built on elastic 6.x (to be precise 6.8.15), for local development how can we support Elastic 6.x in docker for arm64 architecture, as migration to 7.x and respective library currently is not a fe… --- ## [Client request error: self signed certificate](https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343)
**Author:** [@dreadlocked1](https://discuss.elastic.co/u/dreadlocked1)\ **Replies:** 1\ **Last updated:** [September 18, 2017, 4:30pm UTC](https://discuss.elastic.co/t/client-request-error-self-signed-certificate/100343 "2017-09-18T16:30:59Z")
Hi, I've got the following configuration Nginx as reverse proxy for Elasticsearch with basic authentication and a self-signed certificate. I point my Kibana to the reverse proxy: https://192.168.X.X and indicating the e… --- ## [Bpf\_filter not working?](https://discuss.elastic.co/t/bpf-filter-not-working/84999)
**Author:** [@billzy](https://discuss.elastic.co/u/billzy)\ **Replies:** 7\ **Last updated:** [May 17, 2017, 12:35pm UTC](https://discuss.elastic.co/t/bpf-filter-not-working/84999 "2017-05-17T12:35:31Z")
hello , Lately I upgrade to use packetbeat version 5.x, I found bpf\_filter option not working as previously in packetbeat version 2.x, basically if I set this option in configuration file, I can still see packetbeat wh… --- ## [SCROLL internals](https://discuss.elastic.co/t/scroll-internals/72173)
**Author:** [@kasia](https://discuss.elastic.co/u/kasia)\ **Replies:** 1\ **Last updated:** [January 19, 2017, 2:35pm UTC](https://discuss.elastic.co/t/scroll-internals/72173 "2017-01-19T14:35:29Z")
Hi, The question is about scrolling in ES v.5.1 cluster architecture. In the docs, there's a nice explanation of the deep pagination problem with from/size: you know from that what the coordinating node and each shard… --- ## [MIssing transactions in APM UI](https://discuss.elastic.co/t/missing-transactions-in-apm-ui/155403)
**Author:** [@Majsvaffla](https://discuss.elastic.co/u/Majsvaffla)\ **Replies:** 3\ **Last updated:** [November 20, 2018, 3:48pm UTC](https://discuss.elastic.co/t/missing-transactions-in-apm-ui/155403 "2018-11-20T15:48:54Z")
I'm using the APM Python agent with a Django application. After migrating from Opbeat to Elastic APM I've been missing transactions from many Django views in the views table (in the APM UI in Kibana). They are, however, … --- ## [Customize color gradient in Coordinate Map](https://discuss.elastic.co/t/customize-color-gradient-in-coordinate-map/95194)
**Author:** [@ximenling20](https://discuss.elastic.co/u/ximenling20)\ **Replies:** 3\ **Last updated:** [July 31, 2017, 3:24pm UTC](https://discuss.elastic.co/t/customize-color-gradient-in-coordinate-map/95194 "2017-07-31T15:24:41Z")
I want to know if it is possible to customize the gradient in Coordinate Map? For example in this graph , there is only one class range from 5.52 to 6.466, is that possible to specifiy into several smaller classes for b… --- ## [How to specify top\_terms\_N rewrite using Nest SDK?](https://discuss.elastic.co/t/how-to-specify-top-terms-n-rewrite-using-nest-sdk/77743)
**Author:** [@sunil\_purushothaman](https://discuss.elastic.co/u/sunil_purushothaman)\ **Replies:** 3\ **Last updated:** [March 30, 2017, 7:19am UTC](https://discuss.elastic.co/t/how-to-specify-top-terms-n-rewrite-using-nest-sdk/77743 "2017-03-30T07:19:43Z")
I have this query in elastic DSL. POST my-index/\_search { "query": { "wildcard": { "Author": { "value": "\*joe\*", "rewrite": "top\_terms\_15" } } } } I want to write the same query… --- ## [Logstash restart error?](https://discuss.elastic.co/t/logstash-restart-error/42349)
**Author:** [@clifford](https://discuss.elastic.co/u/clifford)\ **Replies:** 3\ **Last updated:** [February 22, 2016, 7:30am UTC](https://discuss.elastic.co/t/logstash-restart-error/42349 "2016-02-22T07:30:14Z")
My environment is logstash and elasticsearch with a single server. Last week I try to modify the logstash config file,configtest result is ok, and then restart the logstash service.But an error restart service results:{:… --- ## [How to write remote hostname to output file with logstash](https://discuss.elastic.co/t/how-to-write-remote-hostname-to-output-file-with-logstash/308161)
**Author:** [@Yunus\_Dal](https://discuss.elastic.co/u/Yunus_Dal)\ **Replies:** 2\ **Last updated:** [June 25, 2022, 2:03pm UTC](https://discuss.elastic.co/t/how-to-write-remote-hostname-to-output-file-with-logstash/308161 "2022-06-25T14:03:32Z")
Hi, I have java application which is running at 2 instance and collect logs from these instances. I want to create output log file so far as remote hostname. my logstash config; input { tcp { codec =\> json … [Previous page](https://discuss.elastic.co/top.md?page=1164&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1166&per_page=50&period=all)