# Top **URL:** https://discuss.elastic.co/top.md?page=1191&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1192 --- ## [Elastic Forwarder not decoding json](https://discuss.elastic.co/t/elastic-forwarder-not-decoding-json/319330)
**Author:** [@eyear](https://discuss.elastic.co/u/eyear)\ **Replies:** 4\ **Last updated:** [November 29, 2022, 2:32am UTC](https://discuss.elastic.co/t/elastic-forwarder-not-decoding-json/319330 "2022-11-29T02:32:03Z")
I'm working on setting up the Elastic Forwarder. The documentation states that it automatically discovers json content - but it's not splitting all of the json content out into fields like it does when using the decode\_… --- ## [Pls Help me I'm stuck over here](https://discuss.elastic.co/t/pls-help-me-im-stuck-over-here/307601)
**Author:** [@Draco\_King](https://discuss.elastic.co/u/Draco_King)\ **Replies:** 1\ **Last updated:** [June 20, 2022, 5:53am UTC](https://discuss.elastic.co/t/pls-help-me-im-stuck-over-here/307601 "2022-06-20T05:53:04Z")
{"error":{"root\_cause":\[{"type":"not\_x\_content\_exception","reason":"Compressor detection can only be called on some xcontent bytes or compressed xcontent bytes"}\],"type":"not\_x\_content\_exception","reason":"Compressor det… --- ## [Watcher basics Looping into the bucket and processing its values](https://discuss.elastic.co/t/watcher-basics-looping-into-the-bucket-and-processing-its-values/235849)
**Author:** [@Rolf\_Nufable](https://discuss.elastic.co/u/Rolf_Nufable)\ **Replies:** 1\ **Last updated:** [June 30, 2020, 7:56am UTC](https://discuss.elastic.co/t/watcher-basics-looping-into-the-bucket-and-processing-its-values/235849 "2020-06-30T07:56:46Z")
Hi All, I'm fairly new to watchers (just started to learn about it yesterday, and I'm quite in a problem here wherein I want to know if the value of the doc\_count is greater than 10 ( for example ) and would hopefully a… --- ## [Subtract numeric fields between two documents with different timestamp](https://discuss.elastic.co/t/subtract-numeric-fields-between-two-documents-with-different-timestamp/190685)
**Author:** [@darmanto](https://discuss.elastic.co/u/darmanto)\ **Replies:** 1\ **Last updated:** [July 20, 2019, 12:34am UTC](https://discuss.elastic.co/t/subtract-numeric-fields-between-two-documents-with-different-timestamp/190685 "2019-07-20T00:34:16Z")
Hello, Lets say I have these data samples: { "date": "2019-06-16", "rank": 150 "name": "doc 1" } { "date": "2019-07-16", "rank": 100 "name": "doc 1" } { "date": "2019-06-16", "rank": 5… --- ## [Query with multiple has\_children clauses](https://discuss.elastic.co/t/query-with-multiple-has-children-clauses/159987)
**Author:** [@Andrew\_Hackley](https://discuss.elastic.co/u/Andrew_Hackley)\ **Replies:** 1\ **Last updated:** [December 10, 2018, 4:26pm UTC](https://discuss.elastic.co/t/query-with-multiple-has-children-clauses/159987 "2018-12-10T16:26:08Z")
I'd like to know if it's possible to have multiple has\_children clauses in one query. I've not been able to get it to work. Here's an example of what I'm trying: GET test-index/\_search { "query": { "bool": { … --- ## [Not all Java classes can be parsed using GROK pattern %{JAVACLASS}](https://discuss.elastic.co/t/not-all-java-classes-can-be-parsed-using-grok-pattern-javaclass/157545)
**Author:** [@ovanekem](https://discuss.elastic.co/u/ovanekem)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 1:34pm UTC](https://discuss.elastic.co/t/not-all-java-classes-can-be-parsed-using-grok-pattern-javaclass/157545 "2018-11-20T13:34:14Z")
I'm writing a Logstash filter (using Logstash 6.4.0) that will filter lots of different applications (some are Spring Boot, some are Wildfly, some uses generated classes from wsdl2java,...). An issue I face is that the … --- ## [How to resolve '530 5.7.0 Must issue a STARTTLS command first. o63-v6sm4041934ywc.36 - gsmtp\\n'?](https://discuss.elastic.co/t/how-to-resolve-530-5-7-0-must-issue-a-starttls-command-first-o63-v6sm4041934ywc-36-gsmtp-n/149447)
**Author:** [@Vyankatesh\_S\_Repal](https://discuss.elastic.co/u/Vyankatesh_S_Repal)\ **Replies:** 1\ **Last updated:** [September 21, 2018, 12:49pm UTC](https://discuss.elastic.co/t/how-to-resolve-530-5-7-0-must-issue-a-starttls-command-first-o63-v6sm4041934ywc-36-gsmtp-n/149447 "2018-09-21T12:49:07Z")
HI, I am creating an application where I need to send an email alert for my logs. Here is input to create a watcher: PUT \_xpack/watcher/watch/log\_error\_watch { "trigger" : { "schedule" : { "interval" : "10s" } … --- ## [\_grokparsefailure, \_geoip\_lookup\_failure with \_reindex](https://discuss.elastic.co/t/grokparsefailure-geoip-lookup-failure-with-reindex/115095)
**Author:** [@Soufiane\_Zamouri](https://discuss.elastic.co/u/Soufiane_Zamouri)\ **Replies:** 1\ **Last updated:** [January 11, 2018, 3:17pm UTC](https://discuss.elastic.co/t/grokparsefailure-geoip-lookup-failure-with-reindex/115095 "2018-01-11T15:17:21Z")
Hello, after migrate my indeces with an \_reindex with this script : for i in cat index\_list.txt do echo $i curl -XPOST \[DESTINATION\]:9200/\_reindex?pretty -d '{ "source": { "remote": { "host": "http://\[SOURCE\]:9200" … --- ## [Migrating SOLR indexes into ElasticSearch](https://discuss.elastic.co/t/migrating-solr-indexes-into-elasticsearch/97620)
**Author:** [@krinker](https://discuss.elastic.co/u/krinker)\ **Replies:** 1\ **Last updated:** [August 22, 2017, 1:29pm UTC](https://discuss.elastic.co/t/migrating-solr-indexes-into-elasticsearch/97620 "2017-08-22T13:29:47Z")
We already have SOLR instance and we would like to migrate indexes that were already created into our ES instance. I see that river plug in was available, but was deprecated since then. Also, I would rather avoid to do i… --- ## [Logstash crashing:NoMethodError: undefined method \`map\_cleanup' for nil:NilClass](https://discuss.elastic.co/t/logstash-crashing-nomethoderror-undefined-method-map-cleanup-for-nil-nilclass/46630)
**Author:** [@baneshbanna](https://discuss.elastic.co/u/baneshbanna)\ **Replies:** 1\ **Last updated:** [April 24, 2016, 7:43pm UTC](https://discuss.elastic.co/t/logstash-crashing-nomethoderror-undefined-method-map-cleanup-for-nil-nilclass/46630 "2016-04-24T19:43:13Z")
Logstash crashed with the below exception. No information available about this exception. Thanks in advance. NoMethodError: undefined method \`map\_cleanup' for nil:NilClass start at /apps/logstash-2.2.2/vendor/bundle/jr… --- ## [Using the Curl Command](https://discuss.elastic.co/t/using-the-curl-command/33111)
**Author:** [@Didier](https://discuss.elastic.co/u/Didier)\ **Replies:** 1\ **Last updated:** [October 27, 2015, 9:17pm UTC](https://discuss.elastic.co/t/using-the-curl-command/33111 "2015-10-27T21:17:48Z")
Hello, In order to validate that my log entries are being parsed correctly, I am running the following command: curl http://localhost:9200/\_search? Whenever a new entry is added, I see the "Hit" increment as expec… --- ## [Best practice for handling \_ids in get and search results](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500)
**Author:** [@davestewart](https://discuss.elastic.co/u/davestewart)\ **Replies:** 5\ **Last updated:** [November 30, 2021, 4:19pm UTC](https://discuss.elastic.co/t/best-practice-for-handling-ids-in-get-and-search-results/290500 "2021-11-30T16:19:52Z")
Hello, Frontend engineer here, slowly improving at using Elasticsearch. Does anyone have any advice on how to best work with document \_ids, specifically with regards to sending them to the front end after a \_search or \_… --- ## [How to save the data obtained by using the http\_poller input plug-in of logstash to elasticsearch?](https://discuss.elastic.co/t/how-to-save-the-data-obtained-by-using-the-http-poller-input-plug-in-of-logstash-to-elasticsearch/282304)
**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\ **Replies:** 5\ **Last updated:** [August 25, 2021, 3:06am UTC](https://discuss.elastic.co/t/how-to-save-the-data-obtained-by-using-the-http-poller-input-plug-in-of-logstash-to-elasticsearch/282304 "2021-08-25T03:06:01Z")
Hi :slightly\_smiling\_face: I use version 7.12.0. I used http\_poller to call the SQL API of elasticsearch and got some statistics. input { http\_poller { urls =\> { item =\> { method =\> post url =\> "http://localho… --- ## [Multiple matches in same line using grok](https://discuss.elastic.co/t/multiple-matches-in-same-line-using-grok/163637)
**Author:** [@ellje](https://discuss.elastic.co/u/ellje)\ **Replies:** 5\ **Last updated:** [January 14, 2019, 10:35pm UTC](https://discuss.elastic.co/t/multiple-matches-in-same-line-using-grok/163637 "2019-01-14T22:35:51Z")
Hey guys, new-ish to Elastic and was hoping to get help for the following question. To start off, I want to use logstash to parse a log file using grok statements. Say I have an input as follows: 'Test failed with the… --- ## [Issues with PGSQL-Module | Too much errors](https://discuss.elastic.co/t/issues-with-pgsql-module-too-much-errors/141768)
**Author:** [@mkr](https://discuss.elastic.co/u/mkr)\ **Replies:** 5\ **Last updated:** [August 3, 2018, 11:04am UTC](https://discuss.elastic.co/t/issues-with-pgsql-module-too-much-errors/141768 "2018-08-03T11:04:45Z")
Hi there, we recently installed Packetbeat on one of our PostgreSQL-Servers. Basicly it works. It sends things to Elasticsearch and created the Dashboards in Kibana. But in the PGSQL-Performace Dashboard it tells us tha… --- ## [Adaptive Replica Selection - deeper details](https://discuss.elastic.co/t/adaptive-replica-selection-deeper-details/272963)
**Author:** [@Glen\_Smith](https://discuss.elastic.co/u/Glen_Smith)\ **Replies:** 2\ **Last updated:** [May 17, 2021, 3:24pm UTC](https://discuss.elastic.co/t/adaptive-replica-selection-deeper-details/272963 "2021-05-17T15:24:14Z")
Hello, If possible, I'd like to learn more specifically how shard ranking is calculated for a search. The current documentation for Adaptive Replica Selection says By default, Elasticsearch uses adaptive replica sele… --- ## [Dashboard embeded iframe CORS issue](https://discuss.elastic.co/t/dashboard-embeded-iframe-cors-issue/271681)
**Author:** [@Manuel\_Castro\_Romero](https://discuss.elastic.co/u/Manuel_Castro_Romero)\ **Replies:** 2\ **Last updated:** [May 4, 2021, 11:09am UTC](https://discuss.elastic.co/t/dashboard-embeded-iframe-cors-issue/271681 "2021-05-04T11:09:17Z")
Tried to embed a kibana iframe into my SPA built with react. I try to adjusting the height of the iframe to fit with its content this is a code snips of who I am trying to do it: const Iframe = ({ url }) =\> { const … --- ## [No monitoring data found: IndexNotFoundException](https://discuss.elastic.co/t/no-monitoring-data-found-indexnotfoundexception/155431)
**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\ **Replies:** 2\ **Last updated:** [November 5, 2018, 4:52pm UTC](https://discuss.elastic.co/t/no-monitoring-data-found-indexnotfoundexception/155431 "2018-11-05T16:52:27Z")
Hi, I'm seeing "No monitoring data found in Kibana Dashboard". In elasticsearch logs, I found following: \[2018-11-05T11:11:09,553\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] unexpected error whi … --- ## [Logstash Kafka input causes duplicates](https://discuss.elastic.co/t/logstash-kafka-input-causes-duplicates/96885)
**Author:** [@guyisra](https://discuss.elastic.co/u/guyisra)\ **Replies:** 2\ **Last updated:** [August 15, 2017, 10:56am UTC](https://discuss.elastic.co/t/logstash-kafka-input-causes-duplicates/96885 "2017-08-15T10:56:21Z")
I am using Logstash 5.5.1 with kafka input 5.1.8. When consuming the topic, logstash forwards many duplicates to the output, while the event it self was consumed only once. Is this a bug or a configuration issue? This… --- ## [Breaking \_ingest.timestamp change in ES 5.2.0](https://discuss.elastic.co/t/breaking--ingest-timestamp-change-in-es-5-2-0/73575)
**Author:** [@Jin\_Wang](https://discuss.elastic.co/u/Jin_Wang)\ **Replies:** 2\ **Last updated:** [February 7, 2017, 10:53am UTC](https://discuss.elastic.co/t/breaking--ingest-timestamp-change-in-es-5-2-0/73575 "2017-02-07T10:53:43Z")
I have a very simple ingest set processor which copied from our official document, it stop working after upgrading to 5.2.0 yesterday. { "set": { "field": "received" "value": "{{\_ingest.timestamp}}" } } n… --- ## [Legend label is incomplete in pie chart](https://discuss.elastic.co/t/legend-label-is-incomplete-in-pie-chart/73934)
**Author:** [@chris2016](https://discuss.elastic.co/u/chris2016)\ **Replies:** 2\ **Last updated:** [February 6, 2017, 2:22pm UTC](https://discuss.elastic.co/t/legend-label-is-incomplete-in-pie-chart/73934 "2017-02-06T14:22:03Z")
The country name "Hashemite Kingdom of Jordan" is displayed as "Hashemite Kingdom..." in the legend of Pie Chart. Is there a way to display it in complete length other than cutting off? See the attached screenshot. I us… --- ## [Recherche multi index et filtre sur l'index pas l'alias](https://discuss.elastic.co/t/recherche-multi-index-et-filtre-sur-lindex-pas-lalias/73778)
**Author:** [@gabriel\_tessier](https://discuss.elastic.co/u/gabriel_tessier)\ **Replies:** 2\ **Last updated:** [February 3, 2017, 11:09am UTC](https://discuss.elastic.co/t/recherche-multi-index-et-filtre-sur-lindex-pas-lalias/73778 "2017-02-03T11:09:16Z")
Bonjour, J'ai des documents comme suit: index: index\_banane\_1 (alias index\_banane) type: gros\_michel id: 1 name: tomate status: private index: index\_ananas\_1 (alias index\_ananas) type: gros\_michel id: 1 name… --- ## [How to reimport logs after deleting them with XDELETE?](https://discuss.elastic.co/t/how-to-reimport-logs-after-deleting-them-with-xdelete/57195)
**Author:** [@Gisamark](https://discuss.elastic.co/u/Gisamark)\ **Replies:** 2\ **Last updated:** [August 11, 2016, 8:14am UTC](https://discuss.elastic.co/t/how-to-reimport-logs-after-deleting-them-with-xdelete/57195 "2016-08-11T08:14:10Z")
My config is : - ELK server - Filebeat server I made tests with old logs and wanted to delete them all by doing sudo curl -XDELETE localhost:9200/index on the ELK server. It works fine. But now, I want to reimport t… --- ## [How to defines both the index\_analyzer and search\_analyzer explicitly?](https://discuss.elastic.co/t/how-to-defines-both-the-index-analyzer-and-search-analyzer-explicitly/6426)
**Author:** [@shammi\_mishra](https://discuss.elastic.co/u/shammi_mishra)\ **Replies:** 2\ **Last updated:** [January 18, 2012, 1:12pm UTC](https://discuss.elastic.co/t/how-to-defines-both-the-index-analyzer-and-search-analyzer-explicitly/6426 "2012-01-18T13:12:40Z")
Hi I want to define both the index\_analyzer and search\_analyzer explicitly using mapping. i have read following documents Index / Search Analyzers http://www.elasticsearch.org/guide/reference/mapping/root-object… --- ## [elasticsearch.exceptions.ConnectionError](https://discuss.elastic.co/t/elasticsearch-exceptions-connectionerror/301221)
**Author:** [@Hammadi\_Ben\_cheikh1](https://discuss.elastic.co/u/Hammadi_Ben_cheikh1)\ **Replies:** 3\ **Last updated:** [April 1, 2022, 12:35pm UTC](https://discuss.elastic.co/t/elasticsearch-exceptions-connectionerror/301221 "2022-04-01T12:35:23Z")
Hello my friends ! i am working at a Django project , that use Elasticsearch , so when i transfert my project to docker container , i got this error from indexer es = Elasticsearch('http://127.0.0.1:9200/') Plea… --- ## [Winlogbeat logs filtering in Logstash for storage management and relevant info to elastic](https://discuss.elastic.co/t/winlogbeat-logs-filtering-in-logstash-for-storage-management-and-relevant-info-to-elastic/282218)
**Author:** [@Rojal\_Paul](https://discuss.elastic.co/u/Rojal_Paul)\ **Replies:** 3\ **Last updated:** [August 25, 2021, 9:25am UTC](https://discuss.elastic.co/t/winlogbeat-logs-filtering-in-logstash-for-storage-management-and-relevant-info-to-elastic/282218 "2021-08-25T09:25:14Z")
I want to know the problem with my configuration. I want to reduce the windows logs saved in Logstash by sending relevant info such as warnings, errors. For now, it's taking a huge amount of data for storing all wind… --- ## [Competitive Filebeat access on local disk](https://discuss.elastic.co/t/competitive-filebeat-access-on-local-disk/243708)
**Author:** [@LomigFR](https://discuss.elastic.co/u/LomigFR)\ **Replies:** 3\ **Last updated:** [August 5, 2020, 9:43am UTC](https://discuss.elastic.co/t/competitive-filebeat-access-on-local-disk/243708 "2020-08-05T09:43:03Z")
Hello, Following my previous posts, I'm coming to the end of my project. To finalize all this, I would have liked this time to pass the logs from 2 Nginx (located in different namespaces) to ES then Kibana (both located… --- ## [Invalid UTF-8 middle byte 0x22\\n at -- Português](https://discuss.elastic.co/t/invalid-utf-8-middle-byte-0x22-n-at-portugues/236794)
**Author:** [@joaopedro](https://discuss.elastic.co/u/joaopedro)\ **Replies:** 3\ **Last updated:** [July 11, 2020, 1:24pm UTC](https://discuss.elastic.co/t/invalid-utf-8-middle-byte-0x22-n-at-portugues/236794 "2020-07-11T13:24:56Z")
Olá, então, eu tenho uma database que, dentre outros, tem um campo chamado "nomes", com os nomes dos cadastrados, para pesquisar nessa database eu uso um json no formato: { "query" : { "match" : { "nome" : "nome\_pesquis… --- ## [Field value not populating in kibana dashboard](https://discuss.elastic.co/t/field-value-not-populating-in-kibana-dashboard/224281)
**Author:** [@Vinay\_Kumar2](https://discuss.elastic.co/u/Vinay_Kumar2)\ **Replies:** 3\ **Last updated:** [March 22, 2020, 6:29pm UTC](https://discuss.elastic.co/t/field-value-not-populating-in-kibana-dashboard/224281 "2020-03-22T18:29:47Z")
Hi I am trying to create a visualization using data table in kibana 7.6. Able to see the field value in Discover tab. But not able to create visualization for the one field iws message2. Below is my logstash configurati… --- ## [How can update logstash field value?](https://discuss.elastic.co/t/how-can-update-logstash-field-value/162110)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 3\ **Last updated:** [January 6, 2019, 8:12pm UTC](https://discuss.elastic.co/t/how-can-update-logstash-field-value/162110 "2019-01-06T20:12:49Z")
Logstash field: "keywords" =\> \[ \[0\] "Audit Success" \] I wish: "keywords" =\> "Audit Success" --- ## [Insert and Update in less than a second. Is it safe?](https://discuss.elastic.co/t/insert-and-update-in-less-than-a-second-is-it-safe/67881)
**Author:** [@Ranieri\_Mazili\_de\_Ol](https://discuss.elastic.co/u/Ranieri_Mazili_de_Ol)\ **Replies:** 3\ **Last updated:** [December 2, 2016, 4:53pm UTC](https://discuss.elastic.co/t/insert-and-update-in-less-than-a-second-is-it-safe/67881 "2016-12-02T16:53:02Z")
Hello, I'm completely new with elasticsearch and don't have any experience with it yet, and now I'm evaluating if it can be part of a solution I'm creating, because I would like to use kibana. I've a JMS Queue where ev… --- ## [APM Java agent not tracking spans](https://discuss.elastic.co/t/apm-java-agent-not-tracking-spans/270993)
**Author:** [@Mohammad\_Etemad](https://discuss.elastic.co/u/Mohammad_Etemad)\ **Replies:** 6\ **Last updated:** [April 27, 2021, 7:34am UTC](https://discuss.elastic.co/t/apm-java-agent-not-tracking-spans/270993 "2021-04-27T07:34:36Z")
Kibana version: 7.4.0 Elasticsearch version: 7.4.0 APM Server version: 7.4.1 APM Agent language and version: apm java agent: 1.16.0 AND 1.23.0 (tested both) Description of the problem including expected versus actual… --- ## [Basic License showing wrong expiration date](https://discuss.elastic.co/t/basic-license-showing-wrong-expiration-date/245237)
**Author:** [@baidwan007](https://discuss.elastic.co/u/baidwan007)\ **Replies:** 6\ **Last updated:** [August 18, 2020, 7:54am UTC](https://discuss.elastic.co/t/basic-license-showing-wrong-expiration-date/245237 "2020-08-18T07:54:33Z")
I ran the update license command on ES cluster and kibana cluster today to switch to basic license. On kibana console it shows todays date itself as expiration date. I hope this is not the real case? Does this mean s… --- ## [Logging which user creates and deletes indexes](https://discuss.elastic.co/t/logging-which-user-creates-and-deletes-indexes/238352)
**Author:** [@ebru](https://discuss.elastic.co/u/ebru)\ **Replies:** 6\ **Last updated:** [June 25, 2020, 2:46pm UTC](https://discuss.elastic.co/t/logging-which-user-creates-and-deletes-indexes/238352 "2020-06-25T14:46:11Z")
Hi, I am new to ElasticSearch and am trying to see if there is a way to see which user creates/deletes indexes. Currently I can see it in logs when an index is created or deleted, but can't see which user initiated these… --- ## [Access APM cloud remotely](https://discuss.elastic.co/t/access-apm-cloud-remotely/171027)
**Author:** [@snavas](https://discuss.elastic.co/u/snavas)\ **Replies:** 6\ **Last updated:** [March 6, 2019, 7:59am UTC](https://discuss.elastic.co/t/access-apm-cloud-remotely/171027 "2019-03-06T07:59:34Z")
I am new to Elastic. I would like to access my APM server on AWS, remotely, to fetch some transaction data and I'm wondering what the cURL command should be. From the documentation it say's to use curl -XGET "http://XXX.… --- ## [Restore a snapshot error ULTRAWARM INTERNAL EXCEPTION](https://discuss.elastic.co/t/restore-a-snapshot-error-ultrawarm-internal-exception/227470)
**Author:** [@michel1](https://discuss.elastic.co/u/michel1)\ **Replies:** 2\ **Last updated:** [April 10, 2020, 10:49am UTC](https://discuss.elastic.co/t/restore-a-snapshot-error-ultrawarm-internal-exception/227470 "2020-04-10T10:49:00Z")
I'm trying to restore an index with curator on an Amazon Elasticsearch domain (version 6.8), but the operation seems to failed with the error ULTRAWARM INTERNAL EXCEPTION. The curator restore yaml is: actions: 1… --- ## [MSSQL Deadlocks metric](https://discuss.elastic.co/t/mssql-deadlocks-metric/216869)
**Author:** [@razgrim](https://discuss.elastic.co/u/razgrim)\ **Replies:** 2\ **Last updated:** [January 28, 2020, 11:27pm UTC](https://discuss.elastic.co/t/mssql-deadlocks-metric/216869 "2020-01-28T23:27:39Z")
Proposing feature per https://www.elastic.co/guide/en/beats/devguide/current/beats-contributing.html Our DBA is looking to have MSSQL deadlocks included in metricbeat mssql performance metricset. The following query ge… --- ## [Add Synthetic Test Tags to Alerts?](https://discuss.elastic.co/t/add-synthetic-test-tags-to-alerts/361053)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [January 9, 2025, 6:14pm UTC](https://discuss.elastic.co/t/add-synthetic-test-tags-to-alerts/361053 "2025-01-09T18:14:47Z")
Can I add synthetic test tags to my Synthetics alerts? E.g., in the following test, can I add the contents of the tags field to my alert in the event of a failure? heartbeat.monitors: - id: '7cdb4578-aa8a-4d46-86fe-a… --- ## [Filter :Active Directory Event](https://discuss.elastic.co/t/filter-active-directory-event/130796)
**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\ **Replies:** 7\ **Last updated:** [May 10, 2018, 9:56am UTC](https://discuss.elastic.co/t/filter-active-directory-event/130796 "2018-05-10T09:56:03Z")
Hello, Please how can I create a filter AD event on winlogbeat ?(security,application,system) I add some event id on each section but it doesn't work. Thank You. what I have written on winlogbeat.yml: Security:463… --- ## [Parsing CSV file to Logstash and Elastic Search which is in the server](https://discuss.elastic.co/t/parsing-csv-file-to-logstash-and-elastic-search-which-is-in-the-server/119444)
**Author:** [@bpk](https://discuss.elastic.co/u/bpk)\ **Replies:** 7\ **Last updated:** [March 6, 2018, 6:28am UTC](https://discuss.elastic.co/t/parsing-csv-file-to-logstash-and-elastic-search-which-is-in-the-server/119444 "2018-03-06T06:28:31Z")
Hi, I am a Beginner. Hardly 10 days of experience in Logstash. I have a csv file (Unstructured). I have copied it to the server, where Logstash is been configured. I am trying to parse CSV file into Logstash, But I am… --- ## [X-pack security using java code](https://discuss.elastic.co/t/x-pack-security-using-java-code/102851)
**Author:** [@pravin1](https://discuss.elastic.co/u/pravin1)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 2:46pm UTC](https://discuss.elastic.co/t/x-pack-security-using-java-code/102851 "2017-10-05T14:46:10Z")
We are creating restclient for connection elastic server, and using HTTPentity for fetching data using index name check below code RestClient restClient = RestClient.builder(new HttpHost(Constents.ELK\_URL, Constents.EL… --- ## [Is there any way to update or delete elasticsearch data through Kibana UI](https://discuss.elastic.co/t/is-there-any-way-to-update-or-delete-elasticsearch-data-through-kibana-ui/76952)
**Author:** [@Jaynil.Bagdai](https://discuss.elastic.co/u/Jaynil.Bagdai)\ **Replies:** 1\ **Last updated:** [March 1, 2017, 5:29pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-update-or-delete-elasticsearch-data-through-kibana-ui/76952 "2017-03-01T17:29:35Z")
Kibana is mainly use for searching. Kibana dashboards are intuitive and displays clear information of elasticsearch data. I wonder while quering elasticsearch in Kibana UI or with plugin's embedded in Kibana, can I perfo… --- ## [Aggregation of Regex of Terms](https://discuss.elastic.co/t/aggregation-of-regex-of-terms/45717)
**Author:** [@lawndart](https://discuss.elastic.co/u/lawndart)\ **Replies:** 1\ **Last updated:** [March 29, 2016, 8:31pm UTC](https://discuss.elastic.co/t/aggregation-of-regex-of-terms/45717 "2016-03-29T20:31:28Z")
I have some textual data (snort alert messages) I would like to do a regex of a field and then an aggregation (count by day) of the results of that regex'd field. For instance: data: "01/01/2016","WEB more words here" "… --- ## [1) How to integrate Elasticsearch with MySQL DB at the backend and User interface developed in dhtmlx, Spring. 2) Also how to integrate Elasticsearch with Services written in Spring MVC](https://discuss.elastic.co/t/1-how-to-integrate-elasticsearch-with-mysql-db-at-the-backend-and-user-interface-developed-in-dhtmlx-spring-2-also-how-to-integrate-elasticsearch-with-services-written-in-spring-mvc/43221)
**Author:** [@prashanthrd](https://discuss.elastic.co/u/prashanthrd)\ **Replies:** 1\ **Last updated:** [March 2, 2016, 10:09pm UTC](https://discuss.elastic.co/t/1-how-to-integrate-elasticsearch-with-mysql-db-at-the-backend-and-user-interface-developed-in-dhtmlx-spring-2-also-how-to-integrate-elasticsearch-with-services-written-in-spring-mvc/43221 "2016-03-02T22:09:37Z")
1) How to integrate Elasticsearch with MySQL DB at the backend and User interface developed in dhtmlx, Spring. 2) Also how to integrate Elasticsearch with Services written in Spring MVC. Please consider the latest ver… --- ## [Delete host specific index data](https://discuss.elastic.co/t/delete-host-specific-index-data/15375)
**Author:** [@Prasad\_Lele](https://discuss.elastic.co/u/Prasad_Lele)\ **Replies:** 1\ **Last updated:** [January 23, 2014, 2:26pm UTC](https://discuss.elastic.co/t/delete-host-specific-index-data/15375 "2014-01-23T14:26:12Z")
Hi, We have setup elasticsearch + logstash. The log stash collects data from various firewalls/Linux servers etc. I do not need firewall's info logs older than 7 days, but still need logs above that (critical, wa… --- ## [\[ERROR\]\[logstash.outputs.elasticsearch\]\[main\] Encountered a retryable error (will retry with exponential backoff) {:code=\>400, :url=\>"http://127.0.0.1:9200/\_bulk", :content\_length=\>137306}](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436)
**Author:** [@sunpasup](https://discuss.elastic.co/u/sunpasup)\ **Replies:** 4\ **Last updated:** [May 24, 2022, 2:03am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-main-encountered-a-retryable-error-will-retry-with-exponential-backoff-code-400-url-http-127-0-0-1-9200-bulk-content-length-137306/305436 "2022-05-24T02:03:29Z")
we are facing above issue while uploading large sets of data from postgres table. based on basic research it looks like, its because of malfunctioned data. how to fix this ? how to identify what data is causing this is… --- ## [Logstash to elasticsearch complaining state not recovered and no master](https://discuss.elastic.co/t/logstash-to-elasticsearch-complaining-state-not-recovered-and-no-master/25354)
**Author:** [@nivinm](https://discuss.elastic.co/u/nivinm)\ **Replies:** 0\ **Last updated:** [July 10, 2015, 9:55pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-complaining-state-not-recovered-and-no-master/25354 "2015-07-10T21:55:15Z")
Hello, I am changing my ELK configuration from logstash \> kafka \> river \> elasticsearch. To logstash1 \> kafka \> logstash2 \> elasticsearch, all 4 layers have a different set of servers. For the logstash2 set I am using … --- ## [Journalbeat -multiline](https://discuss.elastic.co/t/journalbeat-multiline/251013)
**Author:** [@sidhesh\_kumar](https://discuss.elastic.co/u/sidhesh_kumar)\ **Replies:** 0\ **Last updated:** [October 5, 2020, 3:04pm UTC](https://discuss.elastic.co/t/journalbeat-multiline/251013 "2020-10-05T15:04:20Z")
Hi.. Is there multiline support avaialble for journalbeat . I am using 7.9 --- ## [Null Field Name](https://discuss.elastic.co/t/null-field-name/216457)
**Author:** [@kdp494](https://discuss.elastic.co/u/kdp494)\ **Replies:** 0\ **Last updated:** [January 24, 2020, 3:36pm UTC](https://discuss.elastic.co/t/null-field-name/216457 "2020-01-24T15:36:31Z")
Hello, I am getting an error message "field name cannot be an empty string" for a number of documents coming into logstash. I am attempting to remove the null fields with a mutate filter: mutate { remove\_field =\> \[ "\[… --- ## [Elastic warm node heap unexpected behavior](https://discuss.elastic.co/t/elastic-warm-node-heap-unexpected-behavior/138680)
**Author:** [@farin99](https://discuss.elastic.co/u/farin99)\ **Replies:** 0\ **Last updated:** [July 5, 2018, 9:49am UTC](https://discuss.elastic.co/t/elastic-warm-node-heap-unexpected-behavior/138680 "2018-07-05T09:49:15Z")
Hi, One of our elasticsearch clusters is showing an unexpected behavior on the heap of its warm nodes. The cluster consists of 40 hot data nodes (8 cores, 64gb ram out of which 30.5gb heap and 1.5tb of local SSD storage… [Previous page](https://discuss.elastic.co/top.md?page=1190&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1192&per_page=50&period=all)