# Top

**URL:** https://discuss.elastic.co/top.md?page=1185&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1186

---

## [Input file section to read from latest folder](https://discuss.elastic.co/t/input-file-section-to-read-from-latest-folder/55131)

<div class="topic-metadata">

**Author:** [@Govind\_Raj](https://discuss.elastic.co/u/Govind_Raj)\
**Replies:** 2\
**Last updated:** [July 10, 2016, 4:52pm UTC](https://discuss.elastic.co/t/input-file-section-to-read-from-latest-folder/55131 "2016-07-10T16:52:22Z")

</div>

Hi we are looking for solution to read the file from the latest folder in the input path . our current configuration is as follows, input { file { path =\> "/var/log/orglogs/\*/G\*.log" start\_position =\> "end" …

---

## [Logstash grok pattern for apache error log](https://discuss.elastic.co/t/logstash-grok-pattern-for-apache-error-log/337676)

<div class="topic-metadata">

**Author:** [@sanjeev1895](https://discuss.elastic.co/u/sanjeev1895)\
**Replies:** 4\
**Last updated:** [July 14, 2023, 4:59am UTC](https://discuss.elastic.co/t/logstash-grok-pattern-for-apache-error-log/337676 "2023-07-14T04:59:24Z")

</div>

Hi experts, Can any one tell me that how to configure the logstash grok custom pattern for apache web server error log. below is my apache web server sample error log, \[Fri Jun 09 08:26:38.311375 2023\] \[proxy\_fcgi:err…

---

## [Fleet Server & ES Agent](https://discuss.elastic.co/t/fleet-server-es-agent/318259)

<div class="topic-metadata">

**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\
**Replies:** 4\
**Last updated:** [November 7, 2022, 11:11am UTC](https://discuss.elastic.co/t/fleet-server-es-agent/318259 "2022-11-07T11:11:51Z")

</div>

Hello, when I try to install the fleet server on the machine I receive this error: sudo ./elastic-agent install \\--fleet-server-es=http://10.211.55.7:9200 \\--fleet-server-service-token=AAEAAWVsYXN0aWMvZmxlZXQtc2VydmVyL…

---

## [Redundancy for syslog](https://discuss.elastic.co/t/redundancy-for-syslog/270943)

<div class="topic-metadata">

**Author:** [@debrt](https://discuss.elastic.co/u/debrt)\
**Replies:** 1\
**Last updated:** [April 22, 2021, 2:56pm UTC](https://discuss.elastic.co/t/redundancy-for-syslog/270943 "2021-04-22T14:56:38Z")

</div>

Hello, I am trying to deploy a redundant solution where I have end devices logging over syslog to my logstash server. I already have a single logstash server running. Is is possible to send the syslog logs to multiple …

---

## [CSV Parsing error - illegal quoting in line 1](https://discuss.elastic.co/t/csv-parsing-error-illegal-quoting-in-line-1/194952)

<div class="topic-metadata">

**Author:** [@jy94](https://discuss.elastic.co/u/jy94)\
**Replies:** 4\
**Last updated:** [August 13, 2019, 12:41pm UTC](https://discuss.elastic.co/t/csv-parsing-error-illegal-quoting-in-line-1/194952 "2019-08-13T12:41:02Z")

</div>

Hello, when I trying to parse a csv file, this error message shows up. input { file { path =\> "/finance/BTC-USD.csv" start\_position =\> "beginning" } } The filter part of this file is commented out to indicate th…

---

## [Minimum privileges for all spaces](https://discuss.elastic.co/t/minimum-privileges-for-all-spaces/192317)

<div class="topic-metadata">

**Author:** [@AQ\_Amra](https://discuss.elastic.co/u/AQ_Amra)\
**Replies:** 4\
**Last updated:** [July 29, 2019, 3:09pm UTC](https://discuss.elastic.co/t/minimum-privileges-for-all-spaces/192317 "2019-07-29T15:09:49Z")

</div>

Hi, I am trying to create a setup with multiple spaces, where a user should be restricted to a single space. I have created a second space, however when i set the role to only have read access for dashboards to this sp…

---

## [Logstash or Elasticsearch slows down when sending logs to multiple indexes](https://discuss.elastic.co/t/logstash-or-elasticsearch-slows-down-when-sending-logs-to-multiple-indexes/149476)

<div class="topic-metadata">

**Author:** [@byoungb](https://discuss.elastic.co/u/byoungb)\
**Replies:** 4\
**Last updated:** [September 21, 2018, 6:57pm UTC](https://discuss.elastic.co/t/logstash-or-elasticsearch-slows-down-when-sending-logs-to-multiple-indexes/149476 "2018-09-21T18:57:30Z")

</div>

I am really not sure if this is a logstash issue or an elasticsearch issue. I have a logstash set up with 3 pipelines each with their own filebeat input, each with logs coming from a different website, logstash then doe…

---

## [Match query doesn\`t find my string?](https://discuss.elastic.co/t/match-query-doesn-t-find-my-string/106267)

<div class="topic-metadata">

**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\
**Replies:** 4\
**Last updated:** [November 13, 2017, 9:23am UTC](https://discuss.elastic.co/t/match-query-doesn-t-find-my-string/106267 "2017-11-13T09:23:15Z")

</div>

Hi all: I indexed a string "3L-LEEMARK LOGISTIC LTD." using "ik" analyzer, when i use "3l" to query the string can not be find, what\`s the problem? Here is my DSL : "match" : { "name" : { "query" : "3l", "type" : …

---

## [Not able to send add logstash output in Elastic Agent setup](https://discuss.elastic.co/t/not-able-to-send-add-logstash-output-in-elastic-agent-setup/326726)

<div class="topic-metadata">

**Author:** [@sanju1323](https://discuss.elastic.co/u/sanju1323)\
**Replies:** 7\
**Last updated:** [March 9, 2023, 12:46pm UTC](https://discuss.elastic.co/t/not-able-to-send-add-logstash-output-in-elastic-agent-setup/326726 "2023-03-09T12:46:44Z")

</div>

I have created Fleet output as Logstash but while assigning the output to the agent, I'm getting only Elasticsearch output (default). But I want to send the data from Elastic Agent to Logstash. I have followed this link…

---

## [Scripted fields not working for nested value in Kibana 7.x](https://discuss.elastic.co/t/scripted-fields-not-working-for-nested-value-in-kibana-7-x/297647)

<div class="topic-metadata">

**Author:** [@frankfenomena](https://discuss.elastic.co/u/frankfenomena)\
**Replies:** 7\
**Last updated:** [March 9, 2022, 4:38am UTC](https://discuss.elastic.co/t/scripted-fields-not-working-for-nested-value-in-kibana-7-x/297647 "2022-03-09T04:38:50Z")

</div>

My scripted field works as intended in older version of kibana 5.x, but we use 7.x in a different environment and the same scripted field does not work. I've searched for what the syntax change would be in 7.x but could…

---

## [Logstash Encountered an unexpected error submitting a bulk request! "undefined method \`sanitized'](https://discuss.elastic.co/t/logstash-encountered-an-unexpected-error-submitting-a-bulk-request-undefined-method-sanitized/103360)

<div class="topic-metadata">

**Author:** [@Orsius](https://discuss.elastic.co/u/Orsius)\
**Replies:** 1\
**Last updated:** [October 10, 2017, 9:55pm UTC](https://discuss.elastic.co/t/logstash-encountered-an-unexpected-error-submitting-a-bulk-request-undefined-method-sanitized/103360 "2017-10-10T21:55:56Z")

</div>

Dear all, I would like to change my actual flow: FROM metricbeat \> elasticsearch TO metricbeat \> logstash \> elasticsearch The following configuration works on my laptop but not on a linux production machine :confu…

---

## [Training on Cloud when Free trial has lapsed](https://discuss.elastic.co/t/training-on-cloud-when-free-trial-has-lapsed/286505)

<div class="topic-metadata">

**Author:** [@Mark3](https://discuss.elastic.co/u/Mark3)\
**Replies:** 3\
**Last updated:** [October 20, 2021, 3:52pm UTC](https://discuss.elastic.co/t/training-on-cloud-when-free-trial-has-lapsed/286505 "2021-10-20T15:52:41Z")

</div>

Hi, following having the Free access to the cloud for the free training modules, now I am attempting to complete the Lab: Introduction to Elastic App Search but it is prompting me for payment details as the 3 month job …

---

## [Viewing the Raw "Message" Line from Filebeat for a few thousand entries](https://discuss.elastic.co/t/viewing-the-raw-message-line-from-filebeat-for-a-few-thousand-entries/205508)

<div class="topic-metadata">

**Author:** [@ELKNub](https://discuss.elastic.co/u/ELKNub)\
**Replies:** 3\
**Last updated:** [October 30, 2019, 7:58pm UTC](https://discuss.elastic.co/t/viewing-the-raw-message-line-from-filebeat-for-a-few-thousand-entries/205508 "2019-10-30T19:58:53Z")

</div>

Hey Folks, So I have Filebeat pumping from a few IIS Servers into Kibana (YAY!) My question is this: Once I have a filter that makes say, 100,000 log-lines filtered down into 1,000, is there a way I can output the "Me…

---

## [Ruby filter code for parsing JSON column sometimes insert values twice](https://discuss.elastic.co/t/ruby-filter-code-for-parsing-json-column-sometimes-insert-values-twice/204032)

<div class="topic-metadata">

**Author:** [@xibal](https://discuss.elastic.co/u/xibal)\
**Replies:** 3\
**Last updated:** [October 17, 2019, 8:11pm UTC](https://discuss.elastic.co/t/ruby-filter-code-for-parsing-json-column-sometimes-insert-values-twice/204032 "2019-10-17T20:11:33Z")

</div>

Hi! I'm importing a large (20M rows) table into elasticsearch and sometimes these rows have a column notes that is either empty or holding a JSON string. As this is a legacy app, this notes column may hold two differen…

---

## [Logstash avro error can't start](https://discuss.elastic.co/t/logstash-avro-error-cant-start/179914)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 3\
**Last updated:** [May 7, 2019, 1:45pm UTC](https://discuss.elastic.co/t/logstash-avro-error-cant-start/179914 "2019-05-07T13:45:31Z")

</div>

logstash 7.0.1 \[2019-05-07T15:51:16,703\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! {:error=\>#\<ArgumentError: negative length -17 given\>, :backtrace=\>\["org/jruby/ext/stringio/StringIO.java:852:in \`r…

---

## [File input plugin not sending to elasticsearch](https://discuss.elastic.co/t/file-input-plugin-not-sending-to-elasticsearch/102482)

<div class="topic-metadata">

**Author:** [@cm47](https://discuss.elastic.co/u/cm47)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 5:19am UTC](https://discuss.elastic.co/t/file-input-plugin-not-sending-to-elasticsearch/102482 "2017-10-12T05:19:25Z")

</div>

Hi, I am trying to index AWS CloudTrail logs in elastic search using the file input plugin for logstash. The format of the JSON file it is reading is multiline events of json, separated by new line. From my understandi…

---

## [How can change the bulk size with geonames](https://discuss.elastic.co/t/how-can-change-the-bulk-size-with-geonames/94594)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 3\
**Last updated:** [July 26, 2017, 9:03am UTC](https://discuss.elastic.co/t/how-can-change-the-bulk-size-with-geonames/94594 "2017-07-26T09:03:45Z")

</div>

@danielmitterdorfer how can change the bulk size with geonames when i change about .rally/benchmarks/tracks/default/geonames/operations/default.json i wan't change "bulk-size": 5000 to 10000,but when i change it i can'…

---

## [The newest curator, how to set up time range not ages?](https://discuss.elastic.co/t/the-newest-curator-how-to-set-up-time-range-not-ages/58034)

<div class="topic-metadata">

**Author:** [@DravenJohnson](https://discuss.elastic.co/u/DravenJohnson)\
**Replies:** 3\
**Last updated:** [August 15, 2016, 4:26pm UTC](https://discuss.elastic.co/t/the-newest-curator-how-to-set-up-time-range-not-ages/58034 "2016-08-15T16:26:03Z")

</div>

I need exact time range for snapshot/indices, not ages.

---

## [IndexFormatTooNewException after bringing node upgraded 2.0.0 -\> 2.3.2 into cluster](https://discuss.elastic.co/t/indexformattoonewexception-after-bringing-node-upgraded-2-0-0-2-3-2-into-cluster/56014)

<div class="topic-metadata">

**Author:** [@jthoni](https://discuss.elastic.co/u/jthoni)\
**Replies:** 0\
**Last updated:** [July 20, 2016, 7:11pm UTC](https://discuss.elastic.co/t/indexformattoonewexception-after-bringing-node-upgraded-2-0-0-2-3-2-into-cluster/56014 "2016-07-20T19:11:07Z")

</div>

This is a rescoping of a question I posted in Node upgraded 2.0.0 to 2.3.2 can’t communicate with other nodes in cluster. I think I have narrowed down the cause, and wanted a clean thread to cover it. Our cluster is ru…

---

## [Problem while execute npm run elasticsearch after restart](https://discuss.elastic.co/t/problem-while-execute-npm-run-elasticsearch-after-restart/108566)

<div class="topic-metadata">

**Author:** [@RajeshAJ](https://discuss.elastic.co/u/RajeshAJ)\
**Replies:** 6\
**Last updated:** [November 28, 2017, 5:42am UTC](https://discuss.elastic.co/t/problem-while-execute-npm-run-elasticsearch-after-restart/108566 "2017-11-28T05:42:20Z")

</div>

atlast, I start the elasticsearch in the dev mode using npm run elasticsearch, it works fine.i stop that using ctrl+c , then i start the elasticsearch using the same command npm run elasticsearch, it shows an error,\[Scre…

---

## [Adding a new node to ES](https://discuss.elastic.co/t/adding-a-new-node-to-es/56718)

<div class="topic-metadata">

**Author:** [@brandonmcgrath1](https://discuss.elastic.co/u/brandonmcgrath1)\
**Replies:** 6\
**Last updated:** [August 3, 2016, 12:57pm UTC](https://discuss.elastic.co/t/adding-a-new-node-to-es/56718 "2016-08-03T12:57:12Z")

</div>

Hey guys, I have a lot of servers throwing data to ES and I need to improve its performance. From what I understand, I need to add a new data node? The \_cluster/health active shards is slowly dropping and there are 80 + …

---

## [Appending data in Elasticsearch indexes](https://discuss.elastic.co/t/appending-data-in-elasticsearch-indexes/38061)

<div class="topic-metadata">

**Author:** [@Aakash\_Garg](https://discuss.elastic.co/u/Aakash_Garg)\
**Replies:** 6\
**Last updated:** [January 22, 2016, 9:02am UTC](https://discuss.elastic.co/t/appending-data-in-elasticsearch-indexes/38061 "2016-01-22T09:02:24Z")

</div>

I have 2 servers where Elasticsearch Indexes are stored with same index name but different data on both the indexes, now there is requirement of putting that data into one server, so I want to append the data of both the…

---

## [Beats to check pings](https://discuss.elastic.co/t/beats-to-check-pings/38875)

<div class="topic-metadata">

**Author:** [@elastic-fan](https://discuss.elastic.co/u/elastic-fan)\
**Replies:** 6\
**Last updated:** [January 12, 2016, 8:41am UTC](https://discuss.elastic.co/t/beats-to-check-pings/38875 "2016-01-12T08:41:40Z")

</div>

Hi all, how can i check the reachability of a server through beats for windows, i am a newbie here

---

## [java.lang.ArrayIndexOutOfBoundsException: -1 in 0.18.4](https://discuss.elastic.co/t/java-lang-arrayindexoutofboundsexception-1-in-0-18-4/6225)

<div class="topic-metadata">

**Author:** [@Jason\_2](https://discuss.elastic.co/u/Jason_2)\
**Replies:** 6\
**Last updated:** [December 28, 2011, 8:23pm UTC](https://discuss.elastic.co/t/java-lang-arrayindexoutofboundsexception-1-in-0-18-4/6225 "2011-12-28T20:23:57Z")

</div>

---

## [Log4j2 issue](https://discuss.elastic.co/t/log4j2-issue/291776)

<div class="topic-metadata">

**Author:** [@umangpatel](https://discuss.elastic.co/u/umangpatel)\
**Replies:** 2\
**Last updated:** [January 5, 2022, 2:33pm UTC](https://discuss.elastic.co/t/log4j2-issue/291776 "2022-01-05T14:33:31Z")

</div>

I have this mentioned 2 jar file... 1.)log4j-1.2.17.jar 2.)apache-log4j-extras-1.2.17.jar does this 2 jar affect any vulnerability? and yes so what changes required from our end please suggest.

---

## [Nest 5.5 es 5.6 ttl](https://discuss.elastic.co/t/nest-5-5-es-5-6-ttl/100687)

<div class="topic-metadata">

**Author:** [@czaban](https://discuss.elastic.co/u/czaban)\
**Replies:** 2\
**Last updated:** [September 15, 2017, 6:41pm UTC](https://discuss.elastic.co/t/nest-5-5-es-5-6-ttl/100687 "2017-09-15T18:41:48Z")

</div>

I've been working with ES 2.6 and the index like this one: var response = MyElasticClient.Index(myObject, i =\> i.Type("mytype").Ttl(new Time(TimeSpan.FromDays(31)))); now stop working and the error goes like follow: p…

---

## [Search/count for all documents for which field X contains a specific substring, with hyphens](https://discuss.elastic.co/t/search-count-for-all-documents-for-which-field-x-contains-a-specific-substring-with-hyphens/84330)

<div class="topic-metadata">

**Author:** [@GuillaumeN](https://discuss.elastic.co/u/GuillaumeN)\
**Replies:** 2\
**Last updated:** [May 4, 2017, 2:14am UTC](https://discuss.elastic.co/t/search-count-for-all-documents-for-which-field-x-contains-a-specific-substring-with-hyphens/84330 "2017-05-04T02:14:04Z")

</div>

Hi all, I'm trying to count the number of documents which fields contain a specific substring containing hyphens. The documents were loaded using logstash to logstash-x indices, they are basically archived syslog mes…

---

## [How to specifiy the timefield to be used in Timelion?](https://discuss.elastic.co/t/how-to-specifiy-the-timefield-to-be-used-in-timelion/78821)

<div class="topic-metadata">

**Author:** [@kiran\_kumar\_sukumar](https://discuss.elastic.co/u/kiran_kumar_sukumar)\
**Replies:** 2\
**Last updated:** [March 16, 2017, 9:18am UTC](https://discuss.elastic.co/t/how-to-specifiy-the-timefield-to-be-used-in-timelion/78821 "2017-03-16T09:18:30Z")

</div>

Hi, Im plotting a time series where one of the timeseries will be plotted based on the timestamp but the other one will be plotted based on the "Execution Date" as the time. How do i do this in Timelion ? Regar…

---

## [Logstash to elastic index created but missing data](https://discuss.elastic.co/t/logstash-to-elastic-index-created-but-missing-data/76425)

<div class="topic-metadata">

**Author:** [@Ximeng\_Zhao](https://discuss.elastic.co/u/Ximeng_Zhao)\
**Replies:** 2\
**Last updated:** [February 24, 2017, 8:35pm UTC](https://discuss.elastic.co/t/logstash-to-elastic-index-created-but-missing-data/76425 "2017-02-24T20:35:19Z")

</div>

Hello, I want to import a csv file to elasticsearch via logstash but later I can find the index called bitcoin-price is created but missing a lot of data, 1320 rows with 1310 rows missing. Here are some details below. …

---

## [FScrawler: perform OCR selectively only on PDF files that do not have text](https://discuss.elastic.co/t/fscrawler-perform-ocr-selectively-only-on-pdf-files-that-do-not-have-text/236016)

<div class="topic-metadata">

**Author:** [@equj](https://discuss.elastic.co/u/equj)\
**Replies:** 5\
**Last updated:** [June 18, 2020, 1:14pm UTC](https://discuss.elastic.co/t/fscrawler-perform-ocr-selectively-only-on-pdf-files-that-do-not-have-text/236016 "2020-06-18T13:14:36Z")

</div>

Hello, I'm using FScrawler (2.7) to load text from PDFs into Elasticsearch (7.6.x). Most of PDF files have text, but some of PDF files contain images of scanned text and need to be OCRed. Is there a way to configure FSc…

---

## [Filebeat to count events picked up before sending to elasticsearch or logstash](https://discuss.elastic.co/t/filebeat-to-count-events-picked-up-before-sending-to-elasticsearch-or-logstash/133631)

<div class="topic-metadata">

**Author:** [@inhinyera16](https://discuss.elastic.co/u/inhinyera16)\
**Replies:** 5\
**Last updated:** [June 5, 2018, 3:05am UTC](https://discuss.elastic.co/t/filebeat-to-count-events-picked-up-before-sending-to-elasticsearch-or-logstash/133631 "2018-06-05T03:05:35Z")

</div>

Hello Is it possible? Scenario: We have a file that is being picked up by filebeat. The prospectors splits up the content of the file into multiple events. Now, how do we capture the total events before it passes to o…

---

## [Docker S3 log error](https://discuss.elastic.co/t/docker-s3-log-error/58634)

<div class="topic-metadata">

**Author:** [@luisgzvs](https://discuss.elastic.co/u/luisgzvs)\
**Replies:** 5\
**Last updated:** [August 24, 2016, 2:44pm UTC](https://discuss.elastic.co/t/docker-s3-log-error/58634 "2016-08-24T14:44:09Z")

</div>

I'm trying to analice an asset log from AWS S3 bucket, I have a docker container with the ELK stack integrated, my logstash config file is this one: input { file { path =\> "/home/\*" start\_position =\> …

---

## [Rollup or downsampling](https://discuss.elastic.co/t/rollup-or-downsampling/350342)

<div class="topic-metadata">

**Author:** [@EdRayQO](https://discuss.elastic.co/u/EdRayQO)\
**Replies:** 0\
**Last updated:** [January 3, 2024, 11:17pm UTC](https://discuss.elastic.co/t/rollup-or-downsampling/350342 "2024-01-03T23:17:07Z")

</div>

I'm trying to compress log data I have in a monitoring cluster and that is configured to be erased after 7 days, and I'm not sure which path should I follow between rollup jobs and down sampling in order to compress that…

---

## [Log for ALL elasticsearch search queries, query latency, and query hits](https://discuss.elastic.co/t/log-for-all-elasticsearch-search-queries-query-latency-and-query-hits/16517)

<div class="topic-metadata">

**Author:** [@Dhruv\_Garg](https://discuss.elastic.co/u/Dhruv_Garg)\
**Replies:** 0\
**Last updated:** [March 21, 2014, 8:17am UTC](https://discuss.elastic.co/t/log-for-all-elasticsearch-search-queries-query-latency-and-query-hits/16517 "2014-03-21T08:17:42Z")

</div>

Hey folks, I'd like to setup logstash to keep track of all search queries made against my elasticsearch cluster along with the amount of time it takes to return the results and number of results returned. Ideally …

---

## [How to connect elasticsearch and sentry](https://discuss.elastic.co/t/how-to-connect-elasticsearch-and-sentry/114637)

<div class="topic-metadata">

**Author:** [@aliceup](https://discuss.elastic.co/u/aliceup)\
**Replies:** 0\
**Last updated:** [January 9, 2018, 4:43am UTC](https://discuss.elastic.co/t/how-to-connect-elasticsearch-and-sentry/114637 "2018-01-09T04:43:56Z")

</div>

I am using getsentry/onpremise version 8.22.0. I used docker to install sentry on my local MacBook. And i installed elasticsearch by docker on my local MacBook too. Elasticsearch's image is docker.elastic.co/elasticse…

---

## [Convert scientific notation (ex: 7.533992951114973E-4) to float](https://discuss.elastic.co/t/convert-scientific-notation-ex-7-533992951114973e-4-to-float/254482)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [November 9, 2020, 3:08pm UTC](https://discuss.elastic.co/t/convert-scientific-notation-ex-7-533992951114973e-4-to-float/254482 "2020-11-09T15:08:35Z")

</div>

Im trying to add the actual and typical field to the ML alerts on watcher, is there a method in painless to convert scientific notation to float? "actual" : \[ 7.533992951114973E-4 …

---

## [Send alert only if the error has http status code 500](https://discuss.elastic.co/t/send-alert-only-if-the-error-has-http-status-code-500/212689)

<div class="topic-metadata">

**Author:** [@Edgar\_Peixoto](https://discuss.elastic.co/u/Edgar_Peixoto)\
**Replies:** 1\
**Last updated:** [December 20, 2019, 8:58pm UTC](https://discuss.elastic.co/t/send-alert-only-if-the-error-has-http-status-code-500/212689 "2019-12-20T20:58:58Z")

</div>

I can send error alerts to a slack channel when an Java application send an error to APM. But I want to send only errors with status code 500. I tried to put the following in the bool filter but now the alert does not s…

---

## [Unable to retrieve version information from Elasticsearch nodes](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/320128)

<div class="topic-metadata">

**Author:** [@ali\_haider](https://discuss.elastic.co/u/ali_haider)\
**Replies:** 4\
**Last updated:** [December 6, 2022, 1:21pm UTC](https://discuss.elastic.co/t/unable-to-retrieve-version-information-from-elasticsearch-nodes/320128 "2022-12-06T13:21:42Z")

</div>

I am using Elasticsearch and Kibana 7.17 free and basic version. I am trying to setting up the minimal security. I did all of the following steps mentioned in the following document : I saw multiple solutions in whic…

---

## [Unable to setup kibana](https://discuss.elastic.co/t/unable-to-setup-kibana/286983)

<div class="topic-metadata">

**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\
**Replies:** 4\
**Last updated:** [October 18, 2021, 1:00pm UTC](https://discuss.elastic.co/t/unable-to-setup-kibana/286983 "2021-10-18T13:00:52Z")

</div>

Hello Team, I am using ansible playbook to run all three Elasticsearch, Kibana and logstash containers in one go. After running the ansible playbook I can see all three containers are up and running. Following is the …

---

## [Kibana Maps- Configure Label Text so it is legible](https://discuss.elastic.co/t/kibana-maps-configure-label-text-so-it-is-legible/251973)

<div class="topic-metadata">

**Author:** [@PeterC](https://discuss.elastic.co/u/PeterC)\
**Replies:** 4\
**Last updated:** [October 18, 2020, 1:00pm UTC](https://discuss.elastic.co/t/kibana-maps-configure-label-text-so-it-is-legible/251973 "2020-10-18T13:00:44Z")

</div>

Hi there using Kibana 17.9.2 and setting up a Maps widget. All great.. u,nti,l, ,yo,u, setup a label,., Totally illegible Have played with colors and pixel sizing to no avail., Is there a way to set the font/and size f…

---

## [No results match your search criteria - Scripted Fields](https://discuss.elastic.co/t/no-results-match-your-search-criteria-scripted-fields/192987)

<div class="topic-metadata">

**Author:** [@pedroamc](https://discuss.elastic.co/u/pedroamc)\
**Replies:** 4\
**Last updated:** [August 1, 2019, 1:36pm UTC](https://discuss.elastic.co/t/no-results-match-your-search-criteria-scripted-fields/192987 "2019-08-01T13:36:46Z")

</div>

Hi! I'm trying to use a scripted field to build some visualization at Kibana, but something is going wrong. When I am at Management -\> Index Pattern -\> Create Scripted Field and preview the results for my script, it re…

---

## [Evade base64 binary data encoding](https://discuss.elastic.co/t/evade-base64-binary-data-encoding/73218)

<div class="topic-metadata">

**Author:** [@vglazkov](https://discuss.elastic.co/u/vglazkov)\
**Replies:** 4\
**Last updated:** [February 3, 2017, 2:17pm UTC](https://discuss.elastic.co/t/evade-base64-binary-data-encoding/73218 "2017-02-03T14:17:31Z")

</div>

Hi! Is there any way to store binary data fields without base64 encoding? I have a bunch of such fields in each document and it will be costly for me to encode/decode them every time. I don't want to index them. Or is …

---

## [Exclude pattern help](https://discuss.elastic.co/t/exclude-pattern-help/68562)

<div class="topic-metadata">

**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\
**Replies:** 4\
**Last updated:** [December 10, 2016, 1:08am UTC](https://discuss.elastic.co/t/exclude-pattern-help/68562 "2016-12-10T01:08:24Z")

</div>

Hi guys. I'm creating some pie chart based on a check.ouput content , that output has a value that represents memory usage ( it's a custom java metric I'm trying to achieve ), so far so good, but the output also contai…

---

## [Upgrading to 5.0.0 and plugins](https://discuss.elastic.co/t/upgrading-to-5-0-0-and-plugins/64504)

<div class="topic-metadata">

**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Replies:** 4\
**Last updated:** [November 1, 2016, 3:31am UTC](https://discuss.elastic.co/t/upgrading-to-5-0-0-and-plugins/64504 "2016-11-01T03:31:12Z")

</div>

Hi, I'm trying to upgrade ES from 2.3 to 5.0 via RPM on a RHEL server. I followed the instructions and installed via RPM, but when I try to upgrade the plugins, I'm getting the following error: $ sudo bin/elasticsea…

---

## [Unable to create dashboards using "ip-x.x.x.x" String](https://discuss.elastic.co/t/unable-to-create-dashboards-using-ip-x-x-x-x-string/41363)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 4\
**Last updated:** [February 10, 2016, 2:20pm UTC](https://discuss.elastic.co/t/unable-to-create-dashboards-using-ip-x-x-x-x-string/41363 "2016-02-10T14:20:35Z")

</div>

I have field hostname -- \> which look's like this "ip-1.2.3.4" When I try to create a dashboard its seperating the hostname into multiple field. I think its because of analyzed field. I have convert it back to not\_analyz…

---

## [Vector embedding huge size increase](https://discuss.elastic.co/t/vector-embedding-huge-size-increase/356670)

<div class="topic-metadata">

**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\
**Replies:** 2\
**Last updated:** [April 10, 2024, 12:40pm UTC](https://discuss.elastic.co/t/vector-embedding-huge-size-increase/356670 "2024-04-10T12:40:57Z")

</div>

Hello! I am currently doing a few tests on Vector Search and Vector Embeddings and found that with a subset of 1.000 documents I have an index with the size of 15mb(+-). When I create a new Index for the vector embeddin…

---

## [What are the docker-compose equivalent environment variables for this?](https://discuss.elastic.co/t/what-are-the-docker-compose-equivalent-environment-variables-for-this/286486)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 2\
**Last updated:** [October 12, 2021, 12:20pm UTC](https://discuss.elastic.co/t/what-are-the-docker-compose-equivalent-environment-variables-for-this/286486 "2021-10-12T12:20:26Z")

</div>

I'm trying to set up kibana (running as docker via compose) to have anonymous user auth for a few iframes that we are using. I do not wish to mount kibana.yml in compose. I would want to use the env variables to get the…

---

## [Can't use text fields in lens : Kibana](https://discuss.elastic.co/t/cant-use-text-fields-in-lens-kibana/272177)

<div class="topic-metadata">

**Author:** [@Sarra](https://discuss.elastic.co/u/Sarra)\
**Replies:** 2\
**Last updated:** [May 5, 2021, 2:06pm UTC](https://discuss.elastic.co/t/cant-use-text-fields-in-lens-kibana/272177 "2021-05-05T14:06:55Z")

</div>

Hello , I am a beginner for Elastic search.I have some difficulties dealing with lens in Kibana. I imported a csv dataset named : 'traces\_data' in Kibana .The main fields are : 'Code Op', 'Pays' ,' Marque' , 'Modèle' …

---

## [Editing old questions](https://discuss.elastic.co/t/editing-old-questions/129058)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 2\
**Last updated:** [April 23, 2018, 8:45am UTC](https://discuss.elastic.co/t/editing-old-questions/129058 "2018-04-23T08:45:43Z")

</div>

Hi, I saw an old question of mine that was viewed by a lot of people but when I looked at it I saw that the title might mislead people, therefore I wanted to change the title to be more accurate. Can I do this on old que…

---

## [Configuring message\_key kafka output plugin](https://discuss.elastic.co/t/configuring-message-key-kafka-output-plugin/121421)

<div class="topic-metadata">

**Author:** [@Maher\_Ben\_Taleb\_Ali](https://discuss.elastic.co/u/Maher_Ben_Taleb_Ali)\
**Replies:** 2\
**Last updated:** [February 27, 2018, 4:44pm UTC](https://discuss.elastic.co/t/configuring-message-key-kafka-output-plugin/121421 "2018-02-27T16:44:36Z")

</div>

Hi, I am trying to send data from elasticsearch into Kafka. input { elasticsearch { hosts =\> "localhost" index =\> "articles" } } output { kafka { topic\_id =\> "articles"…

[Previous page](https://discuss.elastic.co/top.md?page=1184&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1186&per_page=50&period=all)
