# Top **URL:** https://discuss.elastic.co/top.md?page=1200&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1201 --- ## [Filebeat logstash communication](https://discuss.elastic.co/t/filebeat-logstash-communication/283757)
**Author:** [@Nitzan\_Zaifman](https://discuss.elastic.co/u/Nitzan_Zaifman)\ **Replies:** 0\ **Last updated:** [September 9, 2021, 9:05am UTC](https://discuss.elastic.co/t/filebeat-logstash-communication/283757 "2021-09-09T09:05:35Z")
Hi, I've took a look at However I still have multiple questions regarding filebeat's logstash output. How many TCP connections are generated? from my testing even with multiple pipelines (the default) and setting u… --- ## [Updating source with aggregation values](https://discuss.elastic.co/t/updating-source-with-aggregation-values/138915)
**Author:** [@uyth](https://discuss.elastic.co/u/uyth)\ **Replies:** 0\ **Last updated:** [July 6, 2018, 12:53pm UTC](https://discuss.elastic.co/t/updating-source-with-aggregation-values/138915 "2018-07-06T12:53:37Z")
Using Elasticsearch v. 6.2.4, I want to update a field in my document based on multiple aggregations done on a nested object. Something like this: POST \/\_doc/\/\_update { "script": { "lang": "painl… --- ## [Kibana anonymous authentication error](https://discuss.elastic.co/t/kibana-anonymous-authentication-error/259159)
**Author:** [@Valerioq](https://discuss.elastic.co/u/Valerioq)\ **Replies:** 2\ **Last updated:** [December 21, 2020, 10:16am UTC](https://discuss.elastic.co/t/kibana-anonymous-authentication-error/259159 "2020-12-21T10:16:50Z")
Hi, I tried to set anonymous authentication on kibana ver 7.8 following these instructions: But when I insert in my kibana.yml: xpack.security. authc.providers: basic.basic1: order: 0 anonymous.anonymous1: ord… --- ## [No filebeat index in Elasticsearch after running setup](https://discuss.elastic.co/t/no-filebeat-index-in-elasticsearch-after-running-setup/249017)
**Author:** [@stor314](https://discuss.elastic.co/u/stor314)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 10:21pm UTC](https://discuss.elastic.co/t/no-filebeat-index-in-elasticsearch-after-running-setup/249017 "2020-09-17T22:21:26Z")
New to filebeat, trying to get an index up and running in elasticsearch. I followed this guide: https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-installation-configuration.html but for some reason even af… --- ## [Sync data form MySQL to AWS-elastic-service](https://discuss.elastic.co/t/sync-data-form-mysql-to-aws-elastic-service/169927)
**Author:** [@raychou1203](https://discuss.elastic.co/u/raychou1203)\ **Replies:** 2\ **Last updated:** [March 2, 2019, 3:05am UTC](https://discuss.elastic.co/t/sync-data-form-mysql-to-aws-elastic-service/169927 "2019-03-02T03:05:23Z")
I have an Elastic Service on AWS, there is no entrance to run command on command line or LogStash plugin. Is there an solution to sync data from mysql to elastic search? MySQL is on cloud, too. //elastic 6.4 Thanks! --- ## [Predicate pushdown in elasticsearch](https://discuss.elastic.co/t/predicate-pushdown-in-elasticsearch/98613)
**Author:** [@Pritom\_Ahmed](https://discuss.elastic.co/u/Pritom_Ahmed)\ **Replies:** 2\ **Last updated:** [September 7, 2017, 1:30am UTC](https://discuss.elastic.co/t/predicate-pushdown-in-elasticsearch/98613 "2017-09-07T01:30:39Z")
Is there any support for predicate pushdown in elasticsearch? I am using elasticsearch with Flink for stream processing. org.apache.flink flink-connector-elasticsearch5\_2.10 1.3.1 Thanks --- ## [Fingerprint issue](https://discuss.elastic.co/t/fingerprint-issue/25554)
**Author:** [@Khoa\_Nguyen1](https://discuss.elastic.co/u/Khoa_Nguyen1)\ **Replies:** 2\ **Last updated:** [September 3, 2015, 6:19pm UTC](https://discuss.elastic.co/t/fingerprint-issue/25554 "2015-09-03T18:19:18Z")
My CSV file has 26041 unique lines (I checked by manually generating sha1sum for each line). However, when using fingerprint as the document\_id, elastic only stores 25919 documents. One document has the wrong \_id: \_id:… --- ## [Optimizing single-node search performance](https://discuss.elastic.co/t/optimizing-single-node-search-performance/319292)
**Author:** [@Jozef](https://discuss.elastic.co/u/Jozef)\ **Replies:** 3\ **Last updated:** [November 18, 2022, 2:13pm UTC](https://discuss.elastic.co/t/optimizing-single-node-search-performance/319292 "2022-11-18T14:13:20Z")
Hello all, I am relatively new to Elasticsearch, and am currently trying to optimize a single-node ES instance. I am trying to understand a concept, which seems to have conflicting information. First of all, the data I… --- ## [Strange Behaviour in alerts](https://discuss.elastic.co/t/strange-behaviour-in-alerts/283539)
**Author:** [@anyla](https://discuss.elastic.co/u/anyla)\ **Replies:** 8\ **Last updated:** [September 7, 2021, 4:34pm UTC](https://discuss.elastic.co/t/strange-behaviour-in-alerts/283539 "2021-09-07T16:34:55Z")
Hi, I'm starting to migrate our old nagios into the Elastic's Observability solution. When trying to do a simple Infrastructure alert if happens something strange. I define a CPU alert with a very low threshold (in or… --- ## [What does filebeat's multiline tool match](https://discuss.elastic.co/t/what-does-filebeats-multiline-tool-match/225720)
**Author:** [@kevin5617](https://discuss.elastic.co/u/kevin5617)\ **Replies:** 3\ **Last updated:** [March 31, 2020, 9:07pm UTC](https://discuss.elastic.co/t/what-does-filebeats-multiline-tool-match/225720 "2020-03-31T21:07:22Z")
I am using filebeat to read Docker logs and feed them to logstash. I have some logs that are being split into separate events. This happens with stack traces, or just any logs with a new line in them. Here is my filebea… --- ## [Logstash rotation logs](https://discuss.elastic.co/t/logstash-rotation-logs/207686)
**Author:** [@typzea](https://discuss.elastic.co/u/typzea)\ **Replies:** 3\ **Last updated:** [December 11, 2019, 8:59am UTC](https://discuss.elastic.co/t/logstash-rotation-logs/207686 "2019-12-11T08:59:07Z")
Bonjour à tous, Dans le cadre d'un projet dans l'entreprise ou je travail actuellement, je dois mettre en place une serveur elk pour la récupération des logs de notre infrastructure. Je viens vers vous car je voudrais … --- ## [How to create SearchResponse from json object](https://discuss.elastic.co/t/how-to-create-searchresponse-from-json-object/181988)
**Author:** [@gangakrishhh](https://discuss.elastic.co/u/gangakrishhh)\ **Replies:** 0\ **Last updated:** [May 21, 2019, 11:48am UTC](https://discuss.elastic.co/t/how-to-create-searchresponse-from-json-object/181988 "2019-05-21T11:48:12Z")
Hi All, I'm trying convert the json response to SearchResponse.. with this solution https://stackoverflow.com/questions/25425243/create-dummy-searchresponse-instance-for-elasticsearch-test-case it is working for simple … --- ## [Logstash Not Starting 7.0](https://discuss.elastic.co/t/logstash-not-starting-7-0/176720)
**Author:** [@lakshykar](https://discuss.elastic.co/u/lakshykar)\ **Replies:** 3\ **Last updated:** [April 13, 2019, 6:56am UTC](https://discuss.elastic.co/t/logstash-not-starting-7-0/176720 "2019-04-13T06:56:48Z")
Hi, I am trying to configure logstash on a server, i did fresh install but when i am starting logstash getting below error. \[2019-04-13T10:44:26,616\]\[DEBUG\]\[logstash.modules.scaffold\] Found module {:module\_name=\>"netfl… --- ## [Search for a file with the ID](https://discuss.elastic.co/t/search-for-a-file-with-the-id/143896)
**Author:** [@sah](https://discuss.elastic.co/u/sah)\ **Replies:** 3\ **Last updated:** [August 10, 2018, 9:00pm UTC](https://discuss.elastic.co/t/search-for-a-file-with-the-id/143896 "2018-08-10T21:00:18Z")
I am trying to search for a file with the ID "fe4cec0f-4c57-4371-9828-a8ab01192285" How would I do that? I suck as elastic :frowning: Here is an example what is stored contentType":{"name":"Asset"},"createdModifiedBy"… --- ## [Expired https certificate elasticsearch](https://discuss.elastic.co/t/expired-https-certificate-elasticsearch/138633)
**Author:** [@fhalde](https://discuss.elastic.co/u/fhalde)\ **Replies:** 3\ **Last updated:** [July 5, 2018, 7:14am UTC](https://discuss.elastic.co/t/expired-https-certificate-elasticsearch/138633 "2018-07-05T07:14:53Z")
wondering what will happen to my elasticsearch cluster if https certificate gets expired \[it's used for transport and https\] --- ## [Store a field as a global var](https://discuss.elastic.co/t/store-a-field-as-a-global-var/126774)
**Author:** [@Khaled\_Saidi](https://discuss.elastic.co/u/Khaled_Saidi)\ **Replies:** 3\ **Last updated:** [April 5, 2018, 7:41pm UTC](https://discuss.elastic.co/t/store-a-field-as-a-global-var/126774 "2018-04-05T19:41:42Z")
Hello everyone, I am a new user of the ELK stack and I am facing a problem that I can not solve. i'm using filebeat to collect datas from several logs files and send them to logstash for parsing. Is it possible for lo… --- ## [Logstash throughput drops to 0 with no apparent memory problems and 0 cpu usage](https://discuss.elastic.co/t/logstash-throughput-drops-to-0-with-no-apparent-memory-problems-and-0-cpu-usage/79596)
**Author:** [@David\_McClain](https://discuss.elastic.co/u/David_McClain)\ **Replies:** 8\ **Last updated:** [March 23, 2017, 3:05pm UTC](https://discuss.elastic.co/t/logstash-throughput-drops-to-0-with-no-apparent-memory-problems-and-0-cpu-usage/79596 "2017-03-23T15:05:37Z")
Logstash Version: 2.4 Elasticsearch Version: 2.3.4 Redis version: 2.19 I have an indexing setup where Logstash reads from Redis, parses the data, and indexes into Elasticsearch (fairly standard). I monitor the list si… --- ## [Storm 1.0.x - elastic 5.0.x integration issue](https://discuss.elastic.co/t/storm-1-0-x-elastic-5-0-x-integration-issue/76337)
**Author:** [@sreevaddi](https://discuss.elastic.co/u/sreevaddi)\ **Replies:** 3\ **Last updated:** [March 16, 2017, 2:46am UTC](https://discuss.elastic.co/t/storm-1-0-x-elastic-5-0-x-integration-issue/76337 "2017-03-16T02:46:24Z")
following the documentation at: https://storm.apache.org/releases/1.0.1/storm-elasticsearch.html ran into this issue: java.lang.NoClassDefFoundError: org/elasticsearch/common/base/Preconditions at org.apache.storm.ela… --- ## [Getting Marvel Dashboard Data via API](https://discuss.elastic.co/t/getting-marvel-dashboard-data-via-api/54871)
**Author:** [@anil\_varghese](https://discuss.elastic.co/u/anil_varghese)\ **Replies:** 3\ **Last updated:** [July 8, 2016, 4:32pm UTC](https://discuss.elastic.co/t/getting-marvel-dashboard-data-via-api/54871 "2016-07-08T16:32:03Z")
Hi All, I have an Elastic search cluster and i configured Marvel to monitor those clusters. In my Marvel Dashboard i can see all information about my production ES cluster and nodes like CPU, Heap for all nodes and so… --- ## [\[Spring Data Elasticsearch\] Exception during save regardless of success](https://discuss.elastic.co/t/spring-data-elasticsearch-exception-during-save-regardless-of-success/306813)
**Author:** [@Almost\_Familiar](https://discuss.elastic.co/u/Almost_Familiar)\ **Replies:** 1\ **Last updated:** [June 9, 2022, 3:59pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-exception-during-save-regardless-of-success/306813 "2022-06-09T15:59:21Z")
Hello everyone, we are using version Spring Boot 2.7.0 with Spring Data Elasticsearch, with reactive code. We prefer to make our requests with native queries via the ReactiveElasticsearchOperations interface. For an i… --- ## [Field limit exceeded, Docs count too high](https://discuss.elastic.co/t/field-limit-exceeded-docs-count-too-high/140785)
**Author:** [@Jacob\_Steele](https://discuss.elastic.co/u/Jacob_Steele)\ **Replies:** 1\ **Last updated:** [July 27, 2018, 5:30pm UTC](https://discuss.elastic.co/t/field-limit-exceeded-docs-count-too-high/140785 "2018-07-27T17:30:30Z")
Hello Elastic-co, We are currently using a full ride of your system, LogStash to Kibana to Elastic Search. However I have some questions, 1. Field Limit Exceeded: I am randomly getting in my logs an error about the: \[… --- ## [How to change the page of kibana?](https://discuss.elastic.co/t/how-to-change-the-page-of-kibana/49252)
**Author:** [@BendMoly](https://discuss.elastic.co/u/BendMoly)\ **Replies:** 1\ **Last updated:** [May 5, 2016, 8:21pm UTC](https://discuss.elastic.co/t/how-to-change-the-page-of-kibana/49252 "2016-05-05T20:21:53Z")
hello everyone , I have a problem about the kibana page. I need to change the page as my project. When I try to change some htmls in src/plugins/kibana/public/,but nothing changed. So I want to konw how to change the… --- ## [Like query not working in string contains &(ampersand)](https://discuss.elastic.co/t/like-query-not-working-in-string-contains-ampersand/44521)
**Author:** [@Bony\_Thomas](https://discuss.elastic.co/u/Bony_Thomas)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 7:01am UTC](https://discuss.elastic.co/t/like-query-not-working-in-string-contains-ampersand/44521 "2016-03-17T07:01:09Z")
Hi friends, I have a query which is not working. I think the searched value containing & (ampersand) symbol. I am talking about the following query. GET "path"\_search { "from": 0, … --- ## [Open Source SOAR integration with ELK](https://discuss.elastic.co/t/open-source-soar-integration-with-elk/358108)
**Author:** [@amjadkhan\_291](https://discuss.elastic.co/u/amjadkhan_291)\ **Replies:** 4\ **Last updated:** [April 24, 2024, 12:39pm UTC](https://discuss.elastic.co/t/open-source-soar-integration-with-elk/358108 "2024-04-24T12:39:25Z")
Hello All, Can anyone please suggest open source SOAR that works well with ELK Stack? Thank You. --- ## [Logstash - Reading files from Windows Network Share](https://discuss.elastic.co/t/logstash-reading-files-from-windows-network-share/321105)
**Author:** [@anon99430464](https://discuss.elastic.co/u/anon99430464)\ **Replies:** 4\ **Last updated:** [December 14, 2022, 7:05am UTC](https://discuss.elastic.co/t/logstash-reading-files-from-windows-network-share/321105 "2022-12-14T07:05:50Z")
I'm trying to read log files from a network share on Windows. I know this isn't best practice, but currently there is no way around it, and from the documentation it sounds like it is supported. However I can not get th… --- ## [Does elastic eck operators support open distro for Elasticsearch](https://discuss.elastic.co/t/does-elastic-eck-operators-support-open-distro-for-elasticsearch/258215)
**Author:** [@NK2812](https://discuss.elastic.co/u/NK2812)\ **Replies:** 4\ **Last updated:** [January 6, 2021, 2:55pm UTC](https://discuss.elastic.co/t/does-elastic-eck-operators-support-open-distro-for-elasticsearch/258215 "2021-01-06T14:55:09Z")
Hi, We use the eck operator docker.elastic.co/eck/eck-operator:1.0.0-beta1 to deploy the ES cluster in kubernetes. Now we are trying to use the open distro for Elasticsearch docker image to create the ES cluster but ope… --- ## [Lowercase analyzer and aggregation sort](https://discuss.elastic.co/t/lowercase-analyzer-and-aggregation-sort/175657)
**Author:** [@Michele\_Caccia](https://discuss.elastic.co/u/Michele_Caccia)\ **Replies:** 4\ **Last updated:** [April 6, 2019, 6:22pm UTC](https://discuss.elastic.co/t/lowercase-analyzer-and-aggregation-sort/175657 "2019-04-06T18:22:11Z")
Hello everybody, I think I'm wrong using Elastic custom analyzer (version 1.7 :frowning: ). I use a lowercase analyzer to sort a field in case insensitive way. I found a problem when I analyze the aggregations (I need … --- ## [Logstash Failed to excute action](https://discuss.elastic.co/t/logstash-failed-to-excute-action/123753)
**Author:** [@Invictus](https://discuss.elastic.co/u/Invictus)\ **Replies:** 4\ **Last updated:** [March 14, 2018, 1:08pm UTC](https://discuss.elastic.co/t/logstash-failed-to-excute-action/123753 "2018-03-14T13:08:12Z")
Hi, i am running ELK on docker. Every container is running and up. Exept logstash. 0dbb793596af dockerelk\_elasticsearch "/usr/local/bin/dock…" 28 hours ago Up About an hour … --- ## [Locked memory exceeded](https://discuss.elastic.co/t/locked-memory-exceeded/26117)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 4\ **Last updated:** [July 23, 2015, 12:35pm UTC](https://discuss.elastic.co/t/locked-memory-exceeded/26117 "2015-07-23T12:35:59Z")
Curious how this is happening: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND 105 27647 124 93.5 409500956 15397724 ? SLl 21:52 72:26 /usr/lib/jvm/java-7-oracle/bin/java -Xms10g -Xmx1… --- ## [How to manipulate response data in Kibana?](https://discuss.elastic.co/t/how-to-manipulate-response-data-in-kibana/231638)
**Author:** [@skazan](https://discuss.elastic.co/u/skazan)\ **Replies:** 2\ **Last updated:** [May 8, 2020, 2:45pm UTC](https://discuss.elastic.co/t/how-to-manipulate-response-data-in-kibana/231638 "2020-05-08T14:45:28Z")
Hi there, I am switching from Splunk to ELK and I want to generate a summary errors report showing errors count broken down by error message. Now the error message can have random numbers in it that will make report a b… --- ## [Mask the IP address using custom grok pattern](https://discuss.elastic.co/t/mask-the-ip-address-using-custom-grok-pattern/161293)
**Author:** [@Manjushree\_Gokhale](https://discuss.elastic.co/u/Manjushree_Gokhale)\ **Replies:** 2\ **Last updated:** [December 20, 2018, 5:53am UTC](https://discuss.elastic.co/t/mask-the-ip-address-using-custom-grok-pattern/161293 "2018-12-20T05:53:10Z")
Hi, I am new to Logstash and grok and want to mask/ change first octets of ip addresses in my logs for security purpose. but unable to create a grok pattern which will work for the situation. I am getting IP from logs… --- ## [Create field depending on array index value](https://discuss.elastic.co/t/create-field-depending-on-array-index-value/124099)
**Author:** [@No\_Executable](https://discuss.elastic.co/u/No_Executable)\ **Replies:** 2\ **Last updated:** [March 15, 2018, 1:23pm UTC](https://discuss.elastic.co/t/create-field-depending-on-array-index-value/124099 "2018-03-15T13:23:13Z")
What I want to do is depending on the ID, array index 0, is to instead put the ID label, array index 1 into the new field Command. My current filter config looks like this: filter { xml { source =\> 'message… --- ## [\_grokparsefailure on \[fields\]\[document\_type\]](https://discuss.elastic.co/t/grokparsefailure-on-fields-document-type/117312)
**Author:** [@mr.szop](https://discuss.elastic.co/u/mr.szop)\ **Replies:** 2\ **Last updated:** [January 27, 2018, 4:21pm UTC](https://discuss.elastic.co/t/grokparsefailure-on-fields-document-type/117312 "2018-01-27T16:21:33Z")
Hey guys, I'm having a hard time to understand my mistake getting a \_grokparsefailure on a Logstash filter. Im unsing an Apache access log and a NGINX access log which are prospected by Filebeat and then send to Logstas… --- ## [Access to Elasticsearch data from an ingest plugin](https://discuss.elastic.co/t/access-to-elasticsearch-data-from-an-ingest-plugin/113019)
**Author:** [@uderline](https://discuss.elastic.co/u/uderline)\ **Replies:** 2\ **Last updated:** [December 29, 2017, 10:56am UTC](https://discuss.elastic.co/t/access-to-elasticsearch-data-from-an-ingest-plugin/113019 "2017-12-29T10:56:50Z")
Hello, Using @dadoonet's article on how to make an ingest plugin in Elasticsearch 5.6, I want to be able to use Duke in a ES plugin. Basically, I integrated Duke-core to the ingest plugin I am programming. The main goa… --- ## [Logstash 5.6 Persistent Queue issue (Docker)](https://discuss.elastic.co/t/logstash-5-6-persistent-queue-issue-docker/101162)
**Author:** [@godson2006](https://discuss.elastic.co/u/godson2006)\ **Replies:** 2\ **Last updated:** [September 26, 2017, 11:57pm UTC](https://discuss.elastic.co/t/logstash-5-6-persistent-queue-issue-docker/101162 "2017-09-26T23:57:30Z")
Hello, I currently have logstash running within a docker container and when I have it configured for persistent queue it works as it should. The only issue is when I mount a volume to where the persistent queue director… --- ## [Packet Beat support protocol HTTPS?](https://discuss.elastic.co/t/packet-beat-support-protocol-https/54383)
**Author:** [@roccodelux](https://discuss.elastic.co/u/roccodelux)\ **Replies:** 2\ **Last updated:** [June 30, 2016, 12:31pm UTC](https://discuss.elastic.co/t/packet-beat-support-protocol-https/54383 "2016-06-30T12:31:01Z")
I would like to know if packet beat supports https of which I possess the private key. I have to monitor soap calls and rest over https on my server. --- ## [Metric count on multiple indices](https://discuss.elastic.co/t/metric-count-on-multiple-indices/25849)
**Author:** [@cdominik](https://discuss.elastic.co/u/cdominik)\ **Replies:** 2\ **Last updated:** [July 20, 2015, 6:39am UTC](https://discuss.elastic.co/t/metric-count-on-multiple-indices/25849 "2015-07-20T06:39:28Z")
Hi All, I'm using ES and Kibana on my thesis work and I faced up to the count metric the question is, is there a way to count grouping by index ? I mean, I would like to get 1 point even if the searched term (e.g color… --- ## [Linking with NextJS](https://discuss.elastic.co/t/linking-with-nextjs/359498)
**Author:** [@kudumine](https://discuss.elastic.co/u/kudumine)\ **Replies:** 3\ **Last updated:** [May 22, 2024, 3:18pm UTC](https://discuss.elastic.co/t/linking-with-nextjs/359498 "2024-05-22T15:18:07Z")
I am looking for an update to Linking/routing with NextJS 14 and Elasticsearch. I saw this issue and it says it was updated and linked this: search-ui/docs/guides-nextjs-integration.mdx at main · elastic/search-ui · GitH… --- ## [Could not start Kibana after install X-Pack](https://discuss.elastic.co/t/could-not-start-kibana-after-install-x-pack/135266)
**Author:** [@SimpleCC](https://discuss.elastic.co/u/SimpleCC)\ **Replies:** 3\ **Last updated:** [June 11, 2018, 11:12am UTC](https://discuss.elastic.co/t/could-not-start-kibana-after-install-x-pack/135266 "2018-06-11T11:12:22Z")
I installed X-Pack witn the command ./bin/kibana-plugin install x-pack And I launched the Elasticsearch and Kibana,the Elasticsearch started successfully but Kibana failed. the Kibana logs are as follow: \[XXX@foxbert … --- ## [Why forwarding logs by Logstash to Elasticsearch is not working](https://discuss.elastic.co/t/why-forwarding-logs-by-logstash-to-elasticsearch-is-not-working/125058)
**Author:** [@apetrovYa](https://discuss.elastic.co/u/apetrovYa)\ **Replies:** 3\ **Last updated:** [March 22, 2018, 8:06pm UTC](https://discuss.elastic.co/t/why-forwarding-logs-by-logstash-to-elasticsearch-is-not-working/125058 "2018-03-22T20:06:49Z")
Hi all, I am playing with Elastic stack through Docker containers (Filebeat -\> Logstash Reciever -\> Elasticsearch \<- Kibana). Everything works pretty fine, but I have one problem. Assuming the following logstash.conf f… --- ## [Terms aggregation and regex filter](https://discuss.elastic.co/t/terms-aggregation-and-regex-filter/22791)
**Author:** [@JZ1](https://discuss.elastic.co/u/JZ1)\ **Replies:** 0\ **Last updated:** [March 21, 2015, 8:32am UTC](https://discuss.elastic.co/t/terms-aggregation-and-regex-filter/22791 "2015-03-21T08:32:40Z")
Hi all, With the terms aggregation, you can use include/exclude to filter the buckets with regular expressions as described here: http://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bu… --- ## [Asa integration in elastic agent](https://discuss.elastic.co/t/asa-integration-in-elastic-agent/327163)
**Author:** [@bex](https://discuss.elastic.co/u/bex)\ **Replies:** 7\ **Last updated:** [March 13, 2023, 12:54pm UTC](https://discuss.elastic.co/t/asa-integration-in-elastic-agent/327163 "2023-03-13T12:54:33Z")
Can anyone please advise with "Asa" integration in elastic agent? As we know, there are 2 ways: I am sending logs of ASA(192.168.110.1) by syslog udp to logstash(192.168.110.243). When checking by tcpdump, I see that… --- ## [How to use the terms filter for a whitelist (or blacklist) for a search](https://discuss.elastic.co/t/how-to-use-the-terms-filter-for-a-whitelist-or-blacklist-for-a-search/187223)
**Author:** [@wengsengtam](https://discuss.elastic.co/u/wengsengtam)\ **Replies:** 1\ **Last updated:** [June 25, 2019, 7:12am UTC](https://discuss.elastic.co/t/how-to-use-the-terms-filter-for-a-whitelist-or-blacklist-for-a-search/187223 "2019-06-25T07:12:17Z")
Can somebody please explain how the terms filter can be used as a Whitelist / Blacklist for a search. I tried the following, but it did not work. Thanks. PUT iplist/\_doc/\_bulk { "index":{}} { "type" : "C2", "so… --- ## [Unexpected behaviour with script query (script executed twice)](https://discuss.elastic.co/t/unexpected-behaviour-with-script-query-script-executed-twice/116420)
**Author:** [@luis1](https://discuss.elastic.co/u/luis1)\ **Replies:** 7\ **Last updated:** [January 26, 2018, 5:01pm UTC](https://discuss.elastic.co/t/unexpected-behaviour-with-script-query-script-executed-twice/116420 "2018-01-26T17:01:54Z")
Hi, all. I found some unexpected behaviour with script query (script is executing twice in a simple query). The steps to reproduce the issue: My elastic search version: 2.4.6 My elasticsearch.yml: script.indexed: true… --- ## [Synonym exact match - phrase query](https://discuss.elastic.co/t/synonym-exact-match-phrase-query/57216)
**Author:** [@amol.shelar2002](https://discuss.elastic.co/u/amol.shelar2002)\ **Replies:** 1\ **Last updated:** [August 8, 2016, 7:58am UTC](https://discuss.elastic.co/t/synonym-exact-match-phrase-query/57216 "2016-08-08T07:58:59Z")
Hi Team, I am trying to implement acronym functionality using synonym feature like (TS =\> Time Sheet). This works fine for documents containing both these keywords time and sheet. But it is not doing exact match for … --- ## [How to convert a field from type long to double](https://discuss.elastic.co/t/how-to-convert-a-field-from-type-long-to-double/17510)
**Author:** [@Saurabh\_Minni](https://discuss.elastic.co/u/Saurabh_Minni)\ **Replies:** 1\ **Last updated:** [May 14, 2014, 1:41pm UTC](https://discuss.elastic.co/t/how-to-convert-a-field-from-type-long-to-double/17510 "2014-05-14T13:41:59Z")
Hi, I wanted to get a list of results sorted by a particular field. I am getting the following error on search from kibana on this. { "error" : "ReduceSearchPhaseException\[Failed to execute phase \[query\], … --- ## [SAML authentication request scoping (using IDP proxy)](https://discuss.elastic.co/t/saml-authentication-request-scoping-using-idp-proxy/297932)
**Author:** [@Cap\_Ho](https://discuss.elastic.co/u/Cap_Ho)\ **Replies:** 5\ **Last updated:** [February 27, 2022, 4:04pm UTC](https://discuss.elastic.co/t/saml-authentication-request-scoping-using-idp-proxy/297932 "2022-02-27T16:04:34Z")
Hi all, I am now trying to test the ELK do auth using SAML. the basic flow is ok since i may follow the documentation. But i think that one of the case is not fit. i would like to use ELK as SP and connect to a IDP prox… --- ## [Shards management in ElasticSearch](https://discuss.elastic.co/t/shards-management-in-elasticsearch/291252)
**Author:** [@Akanksha\_Pandey](https://discuss.elastic.co/u/Akanksha_Pandey)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 4:49am UTC](https://discuss.elastic.co/t/shards-management-in-elasticsearch/291252 "2021-12-09T04:49:41Z")
I'm using Elasticsearch version 7.9.2 as a single node docker cluster for my production as well as development environment. Every once in a while I'm getting these two errors frequently. Error1: ElasticsearchError erro… --- ## [Beat and x-pack monitoring](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051)
**Author:** [@franco.federico](https://discuss.elastic.co/u/franco.federico)\ **Replies:** 5\ **Last updated:** [May 27, 2019, 11:52am UTC](https://discuss.elastic.co/t/beat-and-x-pack-monitoring/182051 "2019-05-27T11:52:05Z")
Hello Is it possible to monitor the beat. I have a winlogbeat service on the DC and I'd like to know if this service goes down. I know that winlogbeat send monitoring information, but in the monitor system I don't find… --- ## [Export Kibana Dashboard](https://discuss.elastic.co/t/export-kibana-dashboard/70648)
**Author:** [@bollu\_anitha](https://discuss.elastic.co/u/bollu_anitha)\ **Replies:** 5\ **Last updated:** [January 6, 2017, 11:54pm UTC](https://discuss.elastic.co/t/export-kibana-dashboard/70648 "2017-01-06T23:54:09Z")
Hi All, Any idea how to export Kibana Dashboard to PDF on button click. Thanks in Advance. [Previous page](https://discuss.elastic.co/top.md?page=1199&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1201&per_page=50&period=all)