# Top **URL:** https://discuss.elastic.co/top.md?page=1167&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1168 --- ## [Kibana (x-pack)missing authentication token for REST request](https://discuss.elastic.co/t/kibana-x-pack-missing-authentication-token-for-rest-request/108050)
**Author:** [@xiaoxinba](https://discuss.elastic.co/u/xiaoxinba)\ **Replies:** 2\ **Last updated:** [November 17, 2017, 3:25am UTC](https://discuss.elastic.co/t/kibana-x-pack-missing-authentication-token-for-rest-request/108050 "2017-11-17T03:25:22Z")
I add a proxy in between Kibana and Elasticsearch,then {"type":"log","@timestamp":"2017-09-20T21:27:06Z","tags": \["license","warning","xpack"\],"pid":38255,"message":"License information could not be obtained from Elas… --- ## [Elasticsearch-2.3.5 with Maven -Build Failure](https://discuss.elastic.co/t/elasticsearch-2-3-5-with-maven-build-failure/59318)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 2\ **Last updated:** [September 7, 2016, 6:34am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-5-with-maven-build-failure/59318 "2016-09-07T06:34:44Z")
i have downloaded elasticsearch 2.3.5.tar.gz and extracted it -\>done mvn package for ES-2.3.5 -\>when i execute run.sh with ./run.sh I get this error...please help me out Scanning for projects... \[INFO\] Storing b… --- ## [How to configure filebeat to use a particular cipher suite](https://discuss.elastic.co/t/how-to-configure-filebeat-to-use-a-particular-cipher-suite/51790)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 2\ **Last updated:** [June 6, 2016, 2:26pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-to-use-a-particular-cipher-suite/51790 "2016-06-06T14:26:35Z")
I want filebeat to send logs over tls using AES256-SHA cipher, I found cipher\_suites option in tls options page of filebeat configuration. But when i used it, I am getting the following error Exiting: error loading conf… --- ## [Elasticsearch problem!](https://discuss.elastic.co/t/elasticsearch-problem/7129)
**Author:** [@Thibault\_Desaules](https://discuss.elastic.co/u/Thibault_Desaules)\ **Replies:** 2\ **Last updated:** [March 27, 2012, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-problem/7129 "2012-03-27T16:13:16Z")
Hi mailling list ! How are you today :slight\_smile: I have an issue (I think with elasticsearch) after that, graylog2 crash -\_- the elasticsearch logs: \[2012-03-26 16:36:43,875\]\[DEBUG\]\[action.bulk \] \[el… --- ## [Threat hunting/cifv4 and logstash http filter](https://discuss.elastic.co/t/threat-hunting-cifv4-and-logstash-http-filter/183429)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 0\ **Last updated:** [May 29, 2019, 11:08pm UTC](https://discuss.elastic.co/t/threat-hunting-cifv4-and-logstash-http-filter/183429 "2019-05-29T23:08:03Z")
hi, i have no idea if this is a good plan or not.. but i'm giving it a good try. There is a nice open source threat intelligence platform called cifv4 (https://csirtgadgets.com/collective-intelligence-framework/) , it h… --- ## [How to calculate Date difference using scripted fields](https://discuss.elastic.co/t/how-to-calculate-date-difference-using-scripted-fields/170763)
**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\ **Replies:** 0\ **Last updated:** [March 4, 2019, 4:23pm UTC](https://discuss.elastic.co/t/how-to-calculate-date-difference-using-scripted-fields/170763 "2019-03-04T16:23:01Z")
Hello Team, I have a use case to take the difference between two dates in the form of year,month,day,hour,minute,second format. for example 10-mar-2019 10:00:00 - 09-mar-2019 10:00:00 would be = 0 years,0 month,1 day… --- ## [How to cope with huge nested fields?](https://discuss.elastic.co/t/how-to-cope-with-huge-nested-fields/152093)
**Author:** [@Milkana\_Stateva](https://discuss.elastic.co/u/Milkana_Stateva)\ **Replies:** 0\ **Last updated:** [October 11, 2018, 4:08pm UTC](https://discuss.elastic.co/t/how-to-cope-with-huge-nested-fields/152093 "2018-10-11T16:08:32Z")
Hi all, We have es 6.x with mapping of nested fields with various values and sizes. Some of the fields contain up to 1M short string values. The user should be able to filter and perform aggregations on them in reasonab… --- ## [The templates won't take effect when I configure 3 file inputs](https://discuss.elastic.co/t/the-templates-wont-take-effect-when-i-configure-3-file-inputs/61292)
**Author:** [@Angelina](https://discuss.elastic.co/u/Angelina)\ **Replies:** 0\ **Last updated:** [September 22, 2016, 4:40pm UTC](https://discuss.elastic.co/t/the-templates-wont-take-effect-when-i-configure-3-file-inputs/61292 "2016-09-22T16:40:23Z")
Hi, I have a config file with three file inputs (all of them are log files) and three filters (each of them with a different pattern) and three elasticsearch outputs (each of them goes to a different index). Each index… --- ## [Can bulk-index speed be faster in cluster-env than in single machine?](https://discuss.elastic.co/t/can-bulk-index-speed-be-faster-in-cluster-env-than-in-single-machine/9128)
**Author:** [@guanyum](https://discuss.elastic.co/u/guanyum)\ **Replies:** 0\ **Last updated:** [September 25, 2012, 7:44am UTC](https://discuss.elastic.co/t/can-bulk-index-speed-be-faster-in-cluster-env-than-in-single-machine/9128 "2012-09-25T07:44:51Z")
hi guys, i'm doing a test on bulk-index. --- first, i indexed 1million docs into a single machine, with the bulk size equals to 5000. the process finished in less than 6min, which is quite good! second, i m… --- ## [Lens Table - "wrong" selection of top N elements](https://discuss.elastic.co/t/lens-table-wrong-selection-of-top-n-elements/321784)
**Author:** [@tinrik](https://discuss.elastic.co/u/tinrik)\ **Replies:** 8\ **Last updated:** [January 9, 2023, 11:12am UTC](https://discuss.elastic.co/t/lens-table-wrong-selection-of-top-n-elements/321784 "2023-01-09T11:12:53Z")
Hi! I want to display a table like this: | File Name | Number of warnings | | path/to/foo.cpp | 123 | | path/to/bar.cpp | 30 … --- ## [Precision issue with Elasticsearch 6.8](https://discuss.elastic.co/t/precision-issue-with-elasticsearch-6-8/186407)
**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\ **Replies:** 8\ **Last updated:** [June 24, 2019, 2:41pm UTC](https://discuss.elastic.co/t/precision-issue-with-elasticsearch-6-8/186407 "2019-06-24T14:41:13Z")
Per the solution provided in this comment, we have upgraded our elasticsearch version to 6.8. However, the precision issue still exists. We also tried deleting the index and ingested the data in a new index . It didn't w… --- ## [Generting heatmap in Kibana 5.6.5 and higher](https://discuss.elastic.co/t/generting-heatmap-in-kibana-5-6-5-and-higher/123045)
**Author:** [@ojhaaakash](https://discuss.elastic.co/u/ojhaaakash)\ **Replies:** 3\ **Last updated:** [March 9, 2018, 4:03pm UTC](https://discuss.elastic.co/t/generting-heatmap-in-kibana-5-6-5-and-higher/123045 "2018-03-09T16:03:24Z")
Can anyone share about generating heatmap in Kibana 5.6.5 and later? --- ## [Configuring roles.yml for Kibana Dashboard only?](https://discuss.elastic.co/t/configuring-roles-yml-for-kibana-dashboard-only/40392)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 3\ **Last updated:** [January 29, 2016, 9:01pm UTC](https://discuss.elastic.co/t/configuring-roles-yml-for-kibana-dashboard-only/40392 "2016-01-29T21:01:20Z")
Hi, Is it possible to configure the roles permissions set in roles.yml so that I can show my Dashboard but not show the corresponding index in the Discovery view ? I don't think it is but thought I'd ask - my reading… --- ## [How to use reserved escape and wildcard at same time](https://discuss.elastic.co/t/how-to-use-reserved-escape-and-wildcard-at-same-time/121150)
**Author:** [@jmao](https://discuss.elastic.co/u/jmao)\ **Replies:** 1\ **Last updated:** [February 23, 2018, 1:53pm UTC](https://discuss.elastic.co/t/how-to-use-reserved-escape-and-wildcard-at-same-time/121150 "2018-02-23T13:53:28Z")
I am new to this, and need help to generate a filter in Kibaba my message field has format like below, time="2018-02-22 11:47:39" level=error msg=error TxID=JMAOAPI-PRD-DP01-323945624 elapsedTime=13.448852ms position=… --- ## [Can Two Kibana Instances point to Single Big Elasticsearch Cluster](https://discuss.elastic.co/t/can-two-kibana-instances-point-to-single-big-elasticsearch-cluster/68778)
**Author:** [@NITIN-BHAISARE](https://discuss.elastic.co/u/NITIN-BHAISARE)\ **Replies:** 1\ **Last updated:** [December 12, 2016, 9:43pm UTC](https://discuss.elastic.co/t/can-two-kibana-instances-point-to-single-big-elasticsearch-cluster/68778 "2016-12-12T21:43:46Z")
Hello, I want to use two kibana instances for single elasticsearch cluster. I have three nodes under the elasticsearch cluster. Thanks Nitin Bhaisare --- ## [Snapshot for closed indexes](https://discuss.elastic.co/t/snapshot-for-closed-indexes/65401)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 1\ **Last updated:** [November 9, 2016, 4:34am UTC](https://discuss.elastic.co/t/snapshot-for-closed-indexes/65401 "2016-11-09T04:34:47Z")
Hi Team, Till now i was closing two weeks old indexes to free memory and it was Ok. But now we are having GBs of logs per day and this approach is obviously not good. Now i setup snapshots for two week old indexes. But… --- ## [Selective fields per output](https://discuss.elastic.co/t/selective-fields-per-output/2046)
**Author:** [@Akumar](https://discuss.elastic.co/u/Akumar)\ **Replies:** 1\ **Last updated:** [December 31, 2015, 5:34pm UTC](https://discuss.elastic.co/t/selective-fields-per-output/2046 "2015-12-31T17:34:27Z")
I would like to drop certain fields from elasticsearch indexing but retain them for output to another destination. I have two use cases 1. Some fields contain detail that I only want for an investigation and do not wan… --- ## [Spans don't form a waterfall in UI (Node.js agent)](https://discuss.elastic.co/t/spans-dont-form-a-waterfall-in-ui-node-js-agent/164649)
**Author:** [@treble.snake](https://discuss.elastic.co/u/treble.snake)\ **Replies:** 4\ **Last updated:** [January 23, 2019, 1:09am UTC](https://discuss.elastic.co/t/spans-dont-form-a-waterfall-in-ui-node-js-agent/164649 "2019-01-23T01:09:55Z")
Hi, I've run into a strange issue regarding the span waterfal in APM Ul. Say, I have a simple code like this: const wait = time =\> () =\> new Promise(resolve =\> setTimeout(resolve, time)); const transaction = agent.st… --- ## [Logstash를 통한 oracle jdbc input 한글깨짐](https://discuss.elastic.co/t/logstash-oracle-jdbc-input/185326)
**Author:** [@adorable\_man](https://discuss.elastic.co/u/adorable_man)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 1:08am UTC](https://discuss.elastic.co/t/logstash-oracle-jdbc-input/185326 "2019-06-13T01:08:36Z")
elasticsearch version : 6.5.4 database : oracle MSG : 000154190612홍길동 input { jdbc { jdbc\_connect\_string =\> "jdbc:oracle:thin:@xx.xx.xxx.xx:xxxxx/TEST" jdbc\_driver\_class =\> "Java::oracle:jdbc.driver.Oracle… --- ## [Cleaning data](https://discuss.elastic.co/t/cleaning-data/125419)
**Author:** [@DC64](https://discuss.elastic.co/u/DC64)\ **Replies:** 1\ **Last updated:** [March 24, 2018, 1:43am UTC](https://discuss.elastic.co/t/cleaning-data/125419 "2018-03-24T01:43:02Z")
After making some changes to my Logstash configuration file, I still see the results of previous inputs of data in Kibana. I'm looking to delete my old data. On windows, where is the data saved? I'm using data that only… --- ## [How to use lambda expression in Painless?](https://discuss.elastic.co/t/how-to-use-lambda-expression-in-painless/103758)
**Author:** [@klahnakoski](https://discuss.elastic.co/u/klahnakoski)\ **Replies:** 1\ **Last updated:** [October 12, 2017, 5:03pm UTC](https://discuss.elastic.co/t/how-to-use-lambda-expression-in-painless/103758 "2017-10-12T17:03:14Z")
I am attempting to define-and-call a lambda function. This technique works in Java, but I have not been able to do this from Painless: { "from": 0, "query": {"bool": {"must": \[{"match\_all": {}}\]}}, "script\_… --- ## [Logstash可以生成全局唯一且自增的id吗？](https://discuss.elastic.co/t/logstash-id/83010)
**Author:** [@elastic\_johnson\_yi](https://discuss.elastic.co/u/elastic_johnson_yi)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 4:12am UTC](https://discuss.elastic.co/t/logstash-id/83010 "2017-05-03T04:12:46Z")
我想要的其实和uuid插件提供的uuid类似，但是uuid太长，而且我不需要universal唯一，只要在我的logstash服务器范围内唯一即可。 请问有没有类似uuid插件的，能返回一个自增的，且服务器内唯一的id的插件？ 或者有什么其他方法能得到这样的id。 我需要在后续的filter中使用这个id。 谢谢。 --- ## [Geo-replication techniques?](https://discuss.elastic.co/t/geo-replication-techniques/39355)
**Author:** [@krzjez](https://discuss.elastic.co/u/krzjez)\ **Replies:** 1\ **Last updated:** [January 16, 2016, 1:14am UTC](https://discuss.elastic.co/t/geo-replication-techniques/39355 "2016-01-16T01:14:53Z")
From what I understand ElasticSearch does not offer any features to do geo-replication. How are people addressing this issue for continuous data feed to ElasticSearch, async, with say 10s delay? I had a 1 year long break… --- ## [Grok Pattern to get response\_time and app\_id from Pivotal CloudFoundry Loggregator](https://discuss.elastic.co/t/grok-pattern-to-get-response-time-and-app-id-from-pivotal-cloudfoundry-loggregator/26964)
**Author:** [@Amit\_Hora](https://discuss.elastic.co/u/Amit_Hora)\ **Replies:** 1\ **Last updated:** [August 7, 2015, 8:24am UTC](https://discuss.elastic.co/t/grok-pattern-to-get-response-time-and-app-id-from-pivotal-cloudfoundry-loggregator/26964 "2015-08-07T08:24:55Z")
Hi All, I am trying to get few fields from Logs of my app on Pivotal Cloud Foundry to analyze them using ELK but not able to get all the fields ,below is log from my APP 2015-08-03T09:51:15.000+00:00 \[RTR\] OUT mm1-s… --- ## [Kibana 4 and JSON queries](https://discuss.elastic.co/t/kibana-4-and-json-queries/23191)
**Author:** [@Marshall\_Dyer](https://discuss.elastic.co/u/Marshall_Dyer)\ **Replies:** 1\ **Last updated:** [April 10, 2015, 5:29pm UTC](https://discuss.elastic.co/t/kibana-4-and-json-queries/23191 "2015-04-10T17:29:00Z")
I’m new to elasticsearch and just trying to get started with kibana. I am trying to use a raw json query to query my data in kibana 4. I read that this is possible after a great deal of searching (https://github.com… --- ## [Drilldown option not showing](https://discuss.elastic.co/t/drilldown-option-not-showing/314442)
**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\ **Replies:** 5\ **Last updated:** [September 14, 2022, 9:01pm UTC](https://discuss.elastic.co/t/drilldown-option-not-showing/314442 "2022-09-14T21:01:35Z")
Hi I still new to elasticsearch. I am trying to fix my dashboard. Every time someone click on one of the visualization it will zoom in but the other visualizations will change to not data. I started reading about drilld… --- ## [Output of where clause to use as filter](https://discuss.elastic.co/t/output-of-where-clause-to-use-as-filter/39949)
**Author:** [@jiteshanand](https://discuss.elastic.co/u/jiteshanand)\ **Replies:** 5\ **Last updated:** [January 24, 2016, 7:55pm UTC](https://discuss.elastic.co/t/output-of-where-clause-to-use-as-filter/39949 "2016-01-24T19:55:28Z")
Hi, I am new to ES and trying to build a query. I have tried 5-6 options but not getting desired result.Just want to make sure whether joins can be achieved in ES.Thanks for help. SQL will be like this select symb… --- ## [Disabling key\_as\_string](https://discuss.elastic.co/t/disabling-key-as-string/19026)
**Author:** [@James\_Griffin](https://discuss.elastic.co/u/James_Griffin)\ **Replies:** 5\ **Last updated:** [August 1, 2014, 2:33pm UTC](https://discuss.elastic.co/t/disabling-key-as-string/19026 "2014-08-01T14:33:25Z")
Hi, We're performing some aggregations with size=0 on a lot of data, and I'm looking to optimise the transfer over the wire. Our responses look like this: "buckets": \[ - { - "key": 15, -… --- ## [How can I create index per hostname per day?](https://discuss.elastic.co/t/how-can-i-create-index-per-hostname-per-day/153992)
**Author:** [@09958a6c84c61fe52414](https://discuss.elastic.co/u/09958a6c84c61fe52414)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 11:39am UTC](https://discuss.elastic.co/t/how-can-i-create-index-per-hostname-per-day/153992 "2018-10-25T11:39:50Z")
Hi all! Now I am using logstash config that makes every day new index for all incoming data (from many hosts) with name like "filebeat-2018.10.25" Config is: input { beats { port =\> 5044 } } filt… --- ## [How to use scripted field for converting string to int based on condition?](https://discuss.elastic.co/t/how-to-use-scripted-field-for-converting-string-to-int-based-on-condition/144203)
**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\ **Replies:** 2\ **Last updated:** [August 14, 2018, 3:24pm UTC](https://discuss.elastic.co/t/how-to-use-scripted-field-for-converting-string-to-int-based-on-condition/144203 "2018-08-14T15:24:26Z")
Can someone help me out? I am trying to convert a field I have from a string to an int when a condition is met. This is what I have so far: if (doc\['burn.keyword'\].value == "Yes") { return 1 }elseif (doc\['burn.keywor… --- ## [How to schedule jdbc to run on every sunday?](https://discuss.elastic.co/t/how-to-schedule-jdbc-to-run-on-every-sunday/67338)
**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\ **Replies:** 2\ **Last updated:** [December 2, 2016, 6:24am UTC](https://discuss.elastic.co/t/how-to-schedule-jdbc-to-run-on-every-sunday/67338 "2016-12-02T06:24:35Z")
i want to update my elastic data source on weekly basis.And i want it to do on every sunday rather than updating in every 7 days.Is there any way to do this? --- ## [Posting @mention to slack channel](https://discuss.elastic.co/t/posting-mention-to-slack-channel/41079)
**Author:** [@bharath\_meka](https://discuss.elastic.co/u/bharath_meka)\ **Replies:** 2\ **Last updated:** [February 7, 2016, 6:37am UTC](https://discuss.elastic.co/t/posting-mention-to-slack-channel/41079 "2016-02-07T06:37:17Z")
Hi, We have a custom output slack plugin which post some alert messages to a slack channel. I would like to prefix the alert message with a "@userid" so that the slack sends an email to the user that he is mentioned in… --- ## [Embedding libbeat in an application](https://discuss.elastic.co/t/embedding-libbeat-in-an-application/132707)
**Author:** [@dustindecker](https://discuss.elastic.co/u/dustindecker)\ **Replies:** 3\ **Last updated:** [June 21, 2018, 4:42pm UTC](https://discuss.elastic.co/t/embedding-libbeat-in-an-application/132707 "2018-06-21T16:42:00Z")
Previously discussed by others here: Embedding a custom beat in my application So far libbeat has been intended to be used to produce standalone data shippers by using the beats framework to generate the project layout.… --- ## [Java APM agent not sending data to Server](https://discuss.elastic.co/t/java-apm-agent-not-sending-data-to-server/142962)
**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\ **Replies:** 4\ **Last updated:** [August 13, 2018, 10:29am UTC](https://discuss.elastic.co/t/java-apm-agent-not-sending-data-to-server/142962 "2018-08-13T10:29:35Z")
We are trying to test out the Beta of java APM agent. We get 200 health checks from the agent when looking at the server logs but no data is being sent. is there a step we are missing. -javaagent:/usr/lib/elastic-apm-ag… --- ## [Json parse](https://discuss.elastic.co/t/json-parse/101701)
**Author:** [@neo\_levi](https://discuss.elastic.co/u/neo_levi)\ **Replies:** 4\ **Last updated:** [September 26, 2017, 1:40pm UTC](https://discuss.elastic.co/t/json-parse/101701 "2017-09-26T13:40:19Z")
hi all, i want to parse my massage , it look like this below so the columnName value will be the field name and ColumnValue will be the value of the new field. my code looks like :slight\_smile: input { jdbc { jdbc… --- ## [Filebeat incorrectly tailing an XML log file](https://discuss.elastic.co/t/filebeat-incorrectly-tailing-an-xml-log-file/77916)
**Author:** [@gtvmark](https://discuss.elastic.co/u/gtvmark)\ **Replies:** 4\ **Last updated:** [March 15, 2017, 10:48pm UTC](https://discuss.elastic.co/t/filebeat-incorrectly-tailing-an-xml-log-file/77916 "2017-03-15T22:48:21Z")
I have the worst logfile to try and parse. It is a complete XML document with a trailing closing tag. Each time the logfile is written to, new entries are being inserted before the closing tag. This is playing havoc… --- ## [\[closed\]не выстраиваются поля](https://discuss.elastic.co/t/closed/61264)
**Author:** [@antonyc](https://discuss.elastic.co/u/antonyc)\ **Replies:** 4\ **Last updated:** [September 27, 2016, 8:09am UTC](https://discuss.elastic.co/t/closed/61264 "2016-09-27T08:09:49Z")
Добрый день. Есть некоторая проблема, корни которой в моем незнании комплекса в целом. Данные отправляются filebeat'ем в ELK, индекс строится, строятся поля, пока что некоторые - еще дописываю регулярку. http://grokconst… --- ## [Restore Shards from Snapshot](https://discuss.elastic.co/t/restore-shards-from-snapshot/28491)
**Author:** [@skumar](https://discuss.elastic.co/u/skumar)\ **Replies:** 4\ **Last updated:** [September 2, 2015, 9:18pm UTC](https://discuss.elastic.co/t/restore-shards-from-snapshot/28491 "2015-09-02T21:18:11Z")
Hi All, Suppose , I created an index and this is assigned to two nodes(assume) node n1 and node n2 in a cluster . Each node has two primary shards and two replica shards.Snapshot of this index is taken at t1 and somehow … --- ## [Multiple Segments logs Collection](https://discuss.elastic.co/t/multiple-segments-logs-collection/27962)
**Author:** [@puneet2607](https://discuss.elastic.co/u/puneet2607)\ **Replies:** 4\ **Last updated:** [August 27, 2015, 11:23am UTC](https://discuss.elastic.co/t/multiple-segments-logs-collection/27962 "2015-08-27T11:23:04Z")
Hi, I am a newbie, I am planning to use Logstash for collecting multiple segments logs listening over TCP. Example log format with 23 segments are below: \<181\>Jun 29 14:41:37 server1 CM\_Passed\_Authentications 000000000… --- ## [Boolean Query](https://discuss.elastic.co/t/boolean-query/25351)
**Author:** [@travagini](https://discuss.elastic.co/u/travagini)\ **Replies:** 4\ **Last updated:** [July 14, 2015, 6:01pm UTC](https://discuss.elastic.co/t/boolean-query/25351 "2015-07-14T18:01:52Z")
I'm trying to query basically three AND's: "fields.name": "Date One" AND "fields.value": "2015-07-10" AND "filds.value\_full": "Jhon Benny" Here's what I tryed before: { "query": { "filtered": { "que… --- ## [No space left on device - Logstash](https://discuss.elastic.co/t/no-space-left-on-device-logstash/301154)
**Author:** [@Victorv18](https://discuss.elastic.co/u/Victorv18)\ **Replies:** 3\ **Last updated:** [March 31, 2022, 11:18pm UTC](https://discuss.elastic.co/t/no-space-left-on-device-logstash/301154 "2022-03-31T23:18:52Z")
I have an ELK stack, hosted on a Linux, an EC2 VM running at AWS and my logstash works in the background on that same environment I used to start logstash as a service using "systemctl start logstash" and it works norma… --- ## [Force\_execute email action for simulated watches not working](https://discuss.elastic.co/t/force-execute-email-action-for-simulated-watches-not-working/152577)
**Author:** [@jcoward](https://discuss.elastic.co/u/jcoward)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 9:31pm UTC](https://discuss.elastic.co/t/force-execute-email-action-for-simulated-watches-not-working/152577 "2018-10-16T21:31:08Z")
Hi, having an issue with simulated watches. We have previously used this feature when developing new ones. In particular, the force\_execute for the email watch action has been useful to verify the format of the message. … --- ## [Sorting parent documents based on the score of a nested child](https://discuss.elastic.co/t/sorting-parent-documents-based-on-the-score-of-a-nested-child/138925)
**Author:** [@Uli](https://discuss.elastic.co/u/Uli)\ **Replies:** 3\ **Last updated:** [July 16, 2018, 12:50pm UTC](https://discuss.elastic.co/t/sorting-parent-documents-based-on-the-score-of-a-nested-child/138925 "2018-07-16T12:50:05Z")
Hello, i have the following mapping: { "indexname": { "mappings": { "object": { "properties": { "languagedata": { "type": "nested", "properties": { "l… --- ## [Logstash stops exporting netflow data to elasticsearch](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604)
**Author:** [@etfeet](https://discuss.elastic.co/u/etfeet)\ **Replies:** 3\ **Last updated:** [July 31, 2015, 9:30pm UTC](https://discuss.elastic.co/t/logstash-stops-exporting-netflow-data-to-elasticsearch/26604 "2015-07-31T21:30:08Z")
We're currently using logstash to collect and filter netflow data from network devices (switches, routers, etc). However, periodically the logstash server that the netflow data is being shipped to will stop exporting to … --- ## [Is adding and removing an index with a single call to the aliases api atomic?](https://discuss.elastic.co/t/is-adding-and-removing-an-index-with-a-single-call-to-the-aliases-api-atomic/7615)
**Author:** [@Frederick\_Cheung](https://discuss.elastic.co/u/Frederick_Cheung)\ **Replies:** 3\ **Last updated:** [May 10, 2012, 3:15pm UTC](https://discuss.elastic.co/t/is-adding-and-removing-an-index-with-a-single-call-to-the-aliases-api-atomic/7615 "2012-05-10T15:15:45Z")
Hi, When we need to rebuild an index from scratch we handle the transition using aliases, for example we'd start off with garments-2012-04-01 having the alias garments, then we'd build garments-2012-05-01 and when … --- ## [Can somebody tell me what is in this log?](https://discuss.elastic.co/t/can-somebody-tell-me-what-is-in-this-log/278547)
**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\ **Replies:** 6\ **Last updated:** [July 13, 2021, 2:58pm UTC](https://discuss.elastic.co/t/can-somebody-tell-me-what-is-in-this-log/278547 "2021-07-13T14:58:51Z")
I can not start Elastic although I can do it few days before. root@vmi503579:~# journalctl -ex Jul 13 15:27:55 vmi503579.contaboserver.net kernel: \[ 884825\] 33 884825 59113 6477 241664 686 0… --- ## [Snmp grok filter failure](https://discuss.elastic.co/t/snmp-grok-filter-failure/190532)
**Author:** [@liqinnetgain](https://discuss.elastic.co/u/liqinnetgain)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 8:36pm UTC](https://discuss.elastic.co/t/snmp-grok-filter-failure/190532 "2019-07-15T20:36:40Z")
Here's my line iso.3.6.1.4.1.2440.1.11.2.4.8.0 = Counter64: 0 And the filter input { stdin {} } input { snmp { get =\> \["1.3.6.1.4.1.2440.1.11.2.4.8.0"\] hosts =\> \[{host =\> "udp:10.0.10.108/… --- ## [Aggregate plugin - problem with micro-batching](https://discuss.elastic.co/t/aggregate-plugin-problem-with-micro-batching/124979)
**Author:** [@rxxg](https://discuss.elastic.co/u/rxxg)\ **Replies:** 6\ **Last updated:** [April 9, 2018, 3:10pm UTC](https://discuss.elastic.co/t/aggregate-plugin-problem-with-micro-batching/124979 "2018-04-09T15:10:56Z")
Hi, I've been wrestling with my Aggregate plugin configuration and it seems like it interacts poorly with the Logstash micro-batching framework in my case. I have log lines similar to this (simplified): 2018-03-21 10:… --- ## [Error using multiple geospan queries as bool should clauses](https://discuss.elastic.co/t/error-using-multiple-geospan-queries-as-bool-should-clauses/113945)
**Author:** [@mecco](https://discuss.elastic.co/u/mecco)\ **Replies:** 6\ **Last updated:** [February 15, 2018, 11:17pm UTC](https://discuss.elastic.co/t/error-using-multiple-geospan-queries-as-bool-should-clauses/113945 "2018-02-15T23:17:23Z")
Hi, I'm trying to return documents that contain a geoshape point which is in any of a given set of pre-indexed areas. To do this, I'm adding 2 geo span queries as should clauses to a bool query. However, I'm receiving a… --- ## [Elasticsearch Java API prepareIndex overwrites existing mapping](https://discuss.elastic.co/t/elasticsearch-java-api-prepareindex-overwrites-existing-mapping/17219)
**Author:** [@Hosang\_Jeon](https://discuss.elastic.co/u/Hosang_Jeon)\ **Replies:** 6\ **Last updated:** [April 28, 2014, 9:09pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-prepareindex-overwrites-existing-mapping/17219 "2014-04-28T21:09:54Z")
I'm in trouble with the overwriting action of prepareIndex method in Elasticsearch Java API. The problem is that my \*mapping definition has changed after new document has indexed.\* First of all, I defined an ma… [Previous page](https://discuss.elastic.co/top.md?page=1166&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1168&per_page=50&period=all)