# Top **URL:** https://discuss.elastic.co/top.md?page=1209&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1210 --- ## [Fetch Kibana Dashboard links from Canvas Plugin](https://discuss.elastic.co/t/fetch-kibana-dashboard-links-from-canvas-plugin/175774)
**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\ **Replies:** 3\ **Last updated:** [April 15, 2019, 1:50pm UTC](https://discuss.elastic.co/t/fetch-kibana-dashboard-links-from-canvas-plugin/175774 "2019-04-15T13:50:52Z")
Hi, We are running Elasticsearch and Kibana 6.6.1 want to have a landing page as a canvas workpad that displays a set of other canvas workpads and kibana dashboards with the corresponding links. For this we need to be a… --- ## [Kibana config with Timelion and a seperate Marvel cluster](https://discuss.elastic.co/t/kibana-config-with-timelion-and-a-seperate-marvel-cluster/46137)
**Author:** [@Peter\_Paul\_Holzhauer](https://discuss.elastic.co/u/Peter_Paul_Holzhauer)\ **Replies:** 3\ **Last updated:** [April 3, 2016, 9:26am UTC](https://discuss.elastic.co/t/kibana-config-with-timelion-and-a-seperate-marvel-cluster/46137 "2016-04-03T09:26:38Z")
We use a seperate Elasticsearch cluster for Marvel & Watcher. We changed the elasticsearch.url to the monitoring cluster to work with the Marvel plugin in Kibana. When we start to use timelion it doesn't see the indexe… --- ## [Elasticsearch 2.0 2.5X Disk Space](https://discuss.elastic.co/t/elasticsearch-2-0-2-5x-disk-space/34805)
**Author:** [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\ **Replies:** 3\ **Last updated:** [November 17, 2015, 2:38pm UTC](https://discuss.elastic.co/t/elasticsearch-2-0-2-5x-disk-space/34805 "2015-11-17T14:38:22Z")
We utilize Elasticsearch primarily for Logstash data and with the recent upgrade to 2.0 we saw about a 2.5X disk space increase. Same data, same data types and fields. logstash-2015.11.10 - 179.3m - 139.6GB logstash-… --- ## [Multi-tenancy and multiple routing values](https://discuss.elastic.co/t/multi-tenancy-and-multiple-routing-values/10317)
**Author:** [@polyfractal](https://discuss.elastic.co/u/polyfractal)\ **Replies:** 3\ **Last updated:** [January 14, 2013, 2:02am UTC](https://discuss.elastic.co/t/multi-tenancy-and-multiple-routing-values/10317 "2013-01-14T02:02:33Z")
So I'm noodling around and trying to determine the best way to setup a multi-user ES cluster such that each user is an administrator to a portion of the ES cluster. Each administrator could theoretically have their … --- ## [Occasionally shards failing during scroll API (Scroll request has only succeeded on 270 (+0 skipped) shards out of 280)](https://discuss.elastic.co/t/occasionally-shards-failing-during-scroll-api-scroll-request-has-only-succeeded-on-270-0-skipped-shards-out-of-280/361841)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 5\ **Last updated:** [June 21, 2024, 12:33pm UTC](https://discuss.elastic.co/t/occasionally-shards-failing-during-scroll-api-scroll-request-has-only-succeeded-on-270-0-skipped-shards-out-of-280/361841 "2024-06-21T12:33:07Z")
Hi, I am facing some weird errors on our Elasticsearch cluster using scroll API. For some data pipeline that I created I need to use the scroll API. Everything worked fine, but recently I have been encountering the foll… --- ## [Logstash mapping logfile time to @timestamp](https://discuss.elastic.co/t/logstash-mapping-logfile-time-to-timestamp/278772)
**Author:** [@Vajb12](https://discuss.elastic.co/u/Vajb12)\ **Replies:** 5\ **Last updated:** [July 16, 2021, 5:11pm UTC](https://discuss.elastic.co/t/logstash-mapping-logfile-time-to-timestamp/278772 "2021-07-16T17:11:18Z")
Hi Team, Im trying to map the logfile time with @timestamp in logstash. The logfile time is in IST. I would require some help in converting the logfile time to UTC and map it to @timestamp. I used the below ruby code… --- ## [Access Kibana Application and Error Logs on Kibana](https://discuss.elastic.co/t/access-kibana-application-and-error-logs-on-kibana/207299)
**Author:** [@Zany](https://discuss.elastic.co/u/Zany)\ **Replies:** 5\ **Last updated:** [December 12, 2019, 5:36pm UTC](https://discuss.elastic.co/t/access-kibana-application-and-error-logs-on-kibana/207299 "2019-12-12T17:36:27Z")
Question: How can I see Kibana's own application and error logs on Kibana itself? For example, I want to investigate further on the following error that I encountered when trying to delete a dashboard. "TypeError: Faile… --- ## [Transactions not showing Python APM](https://discuss.elastic.co/t/transactions-not-showing-python-apm/187471)
**Author:** [@srpecnik](https://discuss.elastic.co/u/srpecnik)\ **Replies:** 2\ **Last updated:** [June 26, 2019, 2:44pm UTC](https://discuss.elastic.co/t/transactions-not-showing-python-apm/187471 "2019-06-26T14:44:56Z")
Hi, I've recently installed and configured the elastic apm server, and am now configuring instrumentation for our python application. We are not using flask or django, but I am under the impression that we should be ab… --- ## [How to Parse SAP HANA DB Audit logs?](https://discuss.elastic.co/t/how-to-parse-sap-hana-db-audit-logs/178229)
**Author:** [@Vigneshwaran\_Mohanas](https://discuss.elastic.co/u/Vigneshwaran_Mohanas)\ **Replies:** 2\ **Last updated:** [April 25, 2019, 9:07am UTC](https://discuss.elastic.co/t/how-to-parse-sap-hana-db-audit-logs/178229 "2019-04-25T09:07:07Z")
Hi Team, I am new to ELK & GROK filtering . I am trying to parse SAP hana DB audit logs . I am facing one problem .. supposing if a log line consists of " ;;;;;;values\>" , if u notice, after 2 values I have 4 semicolon… --- ## [Failed to execute action \[LCunrRXlStS-vH4o05YY8w\_elasticsearch\_nodes/send\_email\_to\_admin\] java.lang.IllegalArgumentException: no accounts of type \[email\] configured. Please set up an account using the \[xpack.notification.email\] settings](https://discuss.elastic.co/t/failed-to-execute-action-lcunrrxlsts-vh4o05yy8w-elasticsearch-nodes-send-email-to-admin-java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/175260)
**Author:** [@vkank](https://discuss.elastic.co/u/vkank)\ **Replies:** 2\ **Last updated:** [April 5, 2019, 8:41am UTC](https://discuss.elastic.co/t/failed-to-execute-action-lcunrrxlsts-vh4o05yy8w-elasticsearch-nodes-send-email-to-admin-java-lang-illegalargumentexception-no-accounts-of-type-email-configured-please-set-up-an-account-using-the-xpack-notification-email-settings/175260 "2019-04-05T08:41:54Z")
It says, no accounts of type \[email\] configured. Please set up an account using the \[xpack.notification.email\] settings I tried adding the information but it closes. \[2019-04-03T11:08:54,349\]\[INFO \]\[o.e.n.Node … --- ## [Elasticsearch ingest processor to test for field type](https://discuss.elastic.co/t/elasticsearch-ingest-processor-to-test-for-field-type/97325)
**Author:** [@htandra](https://discuss.elastic.co/u/htandra)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 11:12pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-processor-to-test-for-field-type/97325 "2017-08-17T23:12:06Z")
Hello all, I am looking for a way to check if a field is “array” or “object” datatype before a document is ingested. For example, PUT my\_id2/\_create { “locations” : { “first” : { … } } } PUT my\_id1/\_create { … --- ## [ElasticSearch not starting after export ES\_HEAP\_SIZE=10g](https://discuss.elastic.co/t/elasticsearch-not-starting-after-export-es-heap-size-10g/92145)
**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\ **Replies:** 2\ **Last updated:** [July 6, 2017, 5:31pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-export-es-heap-size-10g/92145 "2017-07-06T17:31:05Z")
Hi Elastic Team I was having some memeory issue where Elasticseach was not start after a reload . Even No logs were genrated . after searching on google I notice that issue could be related to HEAP size . I used th… --- ## [Elasticsearch-2.3.5 maven build error with enforce-plugin (java home)](https://discuss.elastic.co/t/elasticsearch-2-3-5-maven-build-error-with-enforce-plugin-java-home/67188)
**Author:** [@srikanth\_muddu](https://discuss.elastic.co/u/srikanth_muddu)\ **Replies:** 2\ **Last updated:** [November 25, 2016, 1:28pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-5-maven-build-error-with-enforce-plugin-java-home/67188 "2016-11-25T13:28:38Z")
I have been trying to build ES-2.3.5 with in eclipse.When i run as clean package build fails with the following message: WARNING\] Rule 0: org.apache.maven.plugins.enforcer.RequireEnvironmentVariable failed with message: … --- ## [Logstash elatcisearch index a revit file](https://discuss.elastic.co/t/logstash-elatcisearch-index-a-revit-file/56153)
**Author:** [@josefboukersi](https://discuss.elastic.co/u/josefboukersi)\ **Replies:** 2\ **Last updated:** [July 22, 2016, 10:22am UTC](https://discuss.elastic.co/t/logstash-elatcisearch-index-a-revit-file/56153 "2016-07-22T10:22:23Z")
Hey, i try to index a revit file (.rvt) it's a Building Information Modeling; I wonder if elasitcsearch logstash or can do ? or if there is a plugin that do that thanks a lot for your help ps : i use elasticsearch 2.3.… --- ## [Error fetching fields for index pattern abcd-\* (ID: 9dffc420-9ea5-11ec-93d5-xxxxxxxxxx)](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-abcd-id-9dffc420-9ea5-11ec-93d5-xxxxxxxxxx/304552)
**Author:** [@homesh\_joshi](https://discuss.elastic.co/u/homesh_joshi)\ **Replies:** 7\ **Last updated:** [May 30, 2022, 3:04am UTC](https://discuss.elastic.co/t/error-fetching-fields-for-index-pattern-abcd-id-9dffc420-9ea5-11ec-93d5-xxxxxxxxxx/304552 "2022-05-30T03:04:30Z")
Hi , I am using kibana 7.17.0 , started getting this error "Error fetching fields for index pattern abcd-\* (ID: 9dffc420-9ea5-11ec-93d5-xxxxxxxxxx) undefined Response" from today. it was working from last 2 months. it p… --- ## [Real minimal hardware requirements](https://discuss.elastic.co/t/real-minimal-hardware-requirements/298008)
**Author:** [@jfs1](https://discuss.elastic.co/u/jfs1)\ **Replies:** 1\ **Last updated:** [February 23, 2022, 10:49am UTC](https://discuss.elastic.co/t/real-minimal-hardware-requirements/298008 "2022-02-23T10:49:53Z")
What are the real minimal requirements for a lab Elastic stack deployment ? I mean : no production data. Only functionnal testing in the lab. So how much RAM/CPU/Disk to run Elastic + Kibana + Logstash on a single node… --- ## [Kibana change field type to geopoint](https://discuss.elastic.co/t/kibana-change-field-type-to-geopoint/96152)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 10:53pm UTC](https://discuss.elastic.co/t/kibana-change-field-type-to-geopoint/96152 "2017-08-07T22:53:50Z")
Hello, I have parsed the an auth.log via grok and elasticsearch is looking up the IP geo location but the system.auth.ssh.geoip.city\_name field is set as string and not geopoint. Is it possible to change it’s type someh… --- ## [How to add a pattern variable for all messages](https://discuss.elastic.co/t/how-to-add-a-pattern-variable-for-all-messages/75418)
**Author:** [@gcranshaw](https://discuss.elastic.co/u/gcranshaw)\ **Replies:** 1\ **Last updated:** [February 17, 2017, 4:18pm UTC](https://discuss.elastic.co/t/how-to-add-a-pattern-variable-for-all-messages/75418 "2017-02-17T16:18:39Z")
OK, I'm at a loss on how I can accomplish this. I am using the following logstash 5.2 filter for Cisco ASA's. filter { if \[type\] == "cisco-asa" { grok { patterns\_dir =\> \["/opt/logstash/patterns"\] matc… --- ## [Whitespace in search term causes ES to return all entries when ngram analyzer is used](https://discuss.elastic.co/t/whitespace-in-search-term-causes-es-to-return-all-entries-when-ngram-analyzer-is-used/64414)
**Author:** [@shazvi](https://discuss.elastic.co/u/shazvi)\ **Replies:** 1\ **Last updated:** [October 31, 2016, 10:32am UTC](https://discuss.elastic.co/t/whitespace-in-search-term-causes-es-to-return-all-entries-when-ngram-analyzer-is-used/64414 "2016-10-31T10:32:33Z")
Hi, I'm using elasticsearch 1.5.2 provided by amazon aws and I'm using the official php library to connect to it. I've got this problem where if i apply ngram analyzer for the searchable fields, and then search through … --- ## [Logstash Input Plugin Java Implementation](https://discuss.elastic.co/t/logstash-input-plugin-java-implementation/55032)
**Author:** [@Ross\_Duncan](https://discuss.elastic.co/u/Ross_Duncan)\ **Replies:** 1\ **Last updated:** [July 8, 2016, 12:49pm UTC](https://discuss.elastic.co/t/logstash-input-plugin-java-implementation/55032 "2016-07-08T12:49:00Z")
Hello, I would like to write a custom Logstash Input plugin in java. I realise ruby/jruby is native in this instance, but Id rather not introduce new languages to my project. What is the simplest way to do this? --- ## [\_shards problem when create query](https://discuss.elastic.co/t/-shards-problem-when-create-query/25975)
**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\ **Replies:** 1\ **Last updated:** [July 23, 2015, 6:48am UTC](https://discuss.elastic.co/t/-shards-problem-when-create-query/25975 "2015-07-23T06:48:06Z")
Hi!!! I have response like this, when I create a query { "took": 3568, "timed\_out": false, "\_shards": { "total": 20, "successful": 10, "failed": 10, "failures": \[ { "… --- ## [Timelion chaining cusum() and derivative() on distinct time intervals](https://discuss.elastic.co/t/timelion-chaining-cusum-and-derivative-on-distinct-time-intervals/241600)
**Author:** [@Henk21](https://discuss.elastic.co/u/Henk21)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 9:01am UTC](https://discuss.elastic.co/t/timelion-chaining-cusum-and-derivative-on-distinct-time-intervals/241600 "2020-08-31T09:01:30Z")
I am using timelion to plot the number of connection sessions in our VPN infrastructure. To do so, I have a cumulative sum of the difference between connection and disconnection events. The time interval is set to 1h. … --- ## [Drop down filter for long fields cut off](https://discuss.elastic.co/t/drop-down-filter-for-long-fields-cut-off/250368)
**Author:** [@luminance](https://discuss.elastic.co/u/luminance)\ **Replies:** 3\ **Last updated:** [October 12, 2020, 11:39am UTC](https://discuss.elastic.co/t/drop-down-filter-for-long-fields-cut-off/250368 "2020-10-12T11:39:19Z")
It is very frustrating when you work with fields with longer name. The drop down fields for the filter become unusable, so you have to memorize all the field names by heart, or hovering over all of them one by one. Here … --- ## [Logstash output to create an index based on 2 hour data](https://discuss.elastic.co/t/logstash-output-to-create-an-index-based-on-2-hour-data/201729)
**Author:** [@Bob94](https://discuss.elastic.co/u/Bob94)\ **Replies:** 1\ **Last updated:** [October 1, 2019, 6:46am UTC](https://discuss.elastic.co/t/logstash-output-to-create-an-index-based-on-2-hour-data/201729 "2019-10-01T06:46:54Z")
Hi, Is there in any way i can create an index from logstash output and segregate the index based on 2 hours index ? %{+yyyy.mm.dd.hh} will create the data in every hour...what i need is in every 2 hour.. --- ## [Multiple patterns for dissect processor in the pipeline](https://discuss.elastic.co/t/multiple-patterns-for-dissect-processor-in-the-pipeline/332420)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 4\ **Last updated:** [May 5, 2023, 1:22pm UTC](https://discuss.elastic.co/t/multiple-patterns-for-dissect-processor-in-the-pipeline/332420 "2023-05-05T13:22:55Z")
Hello, We have logs with similar but different log formats and we would like to use the pipeline dissect processor with multiple patterns to dissect the different formats. We have already tried with grok but the ingesti… --- ## [Problem loading CSV file using logstash](https://discuss.elastic.co/t/problem-loading-csv-file-using-logstash/111455)
**Author:** [@aperez](https://discuss.elastic.co/u/aperez)\ **Replies:** 4\ **Last updated:** [December 13, 2017, 4:16pm UTC](https://discuss.elastic.co/t/problem-loading-csv-file-using-logstash/111455 "2017-12-13T16:16:58Z")
I am new into Logstash/elasticsearch/kibana I have created the following logstash config in windows input { file { path =\> "C:\\Users\\aperez.SEAPUB\\Downloads\\logstash-6.0.1\\data\\avrs\_syslog" start\_position =\> "beginn… --- ## [Filter to verify json fields type](https://discuss.elastic.co/t/filter-to-verify-json-fields-type/89330)
**Author:** [@Amir\_Gilad](https://discuss.elastic.co/u/Amir_Gilad)\ **Replies:** 4\ **Last updated:** [June 14, 2017, 12:48pm UTC](https://discuss.elastic.co/t/filter-to-verify-json-fields-type/89330 "2017-06-14T12:48:44Z")
Hi, We're currently using internal pipeline to store our raw data and want to move to Logstash. The inputs are jsons and the json filter actually works quite well in parsing them. The problem is that currently we have … --- ## [Jdbc scheduler vs linux cron](https://discuss.elastic.co/t/jdbc-scheduler-vs-linux-cron/62297)
**Author:** [@Igal\_Karlinsky](https://discuss.elastic.co/u/Igal_Karlinsky)\ **Replies:** 4\ **Last updated:** [October 6, 2016, 6:37am UTC](https://discuss.elastic.co/t/jdbc-scheduler-vs-linux-cron/62297 "2016-10-06T06:37:57Z")
Hi, I want to keep my sql DB synced with ELK. I'm wondering, are there any advantages using jdbc scheduler against native linux cron? thanks. --- ## [How can i get the access url in node layer](https://discuss.elastic.co/t/how-can-i-get-the-access-url-in-node-layer/53739)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 4\ **Last updated:** [June 28, 2016, 1:44am UTC](https://discuss.elastic.co/t/how-can-i-get-the-access-url-in-node-layer/53739 "2016-06-28T01:44:43Z")
kibana is a plugin and which contains: 1. /app/kibana#/visualize' 2. '/app/kibana#/dashboard' 3. '/app/kibana#/settings' 4./app/kibana#/visualize which all are routed by ng-routes, so the access url i get from node l… --- ## [Help for removing a crashed node?](https://discuss.elastic.co/t/help-for-removing-a-crashed-node/43456)
**Author:** [@boreal](https://discuss.elastic.co/u/boreal)\ **Replies:** 4\ **Last updated:** [March 4, 2016, 7:51am UTC](https://discuss.elastic.co/t/help-for-removing-a-crashed-node/43456 "2016-03-04T07:51:49Z")
Hi, I have a two node cluster, and master node crashed while running update on an index. Number of replicas is set to 1. I want to remove sick node, then add new node. I saw a page for how to shutdown a node. I didn'… --- ## [Ordering Significant Terms aggregation?](https://discuss.elastic.co/t/ordering-significant-terms-aggregation/27570)
**Author:** [@Arnaud\_Cassaigne](https://discuss.elastic.co/u/Arnaud_Cassaigne)\ **Replies:** 4\ **Last updated:** [August 18, 2015, 12:17pm UTC](https://discuss.elastic.co/t/ordering-significant-terms-aggregation/27570 "2015-08-18T12:17:15Z")
Hello, I'd like to order the results of a Significant Terms aggregation by descending count. It is possible to specify: "order": { "\_count" : "desc" } for a Terms aggregation but the key "order" is not recognized for… --- ## [Failed to setup APM - yaml: line 159: did not find expected key](https://discuss.elastic.co/t/failed-to-setup-apm-yaml-line-159-did-not-find-expected-key/241575)
**Author:** [@GraceYu](https://discuss.elastic.co/u/GraceYu)\ **Replies:** 2\ **Last updated:** [July 17, 2020, 5:29am UTC](https://discuss.elastic.co/t/failed-to-setup-apm-yaml-line-159-did-not-find-expected-key/241575 "2020-07-17T05:29:13Z")
Hi, I have failed to setup APM. ./apm-server setup Exiting: error loading config file: yaml: line 159: did not find expected key The following is the yml file: output.elasticsearch: hosts: \[":9200"\] username: "ela… --- ## [Deleting field mapping](https://discuss.elastic.co/t/deleting-field-mapping/223974)
**Author:** [@m-o-t-h](https://discuss.elastic.co/u/m-o-t-h)\ **Replies:** 2\ **Last updated:** [March 18, 2020, 8:10am UTC](https://discuss.elastic.co/t/deleting-field-mapping/223974 "2020-03-18T08:10:43Z")
Elastic/Kibana vs: 6.7.1 I'm searching for solution for fixing mapping explosion in index pattern. Indices under this contains logs from Winlogbeat. There is one problematic field: Pipelineexecutiondetailsforcommandline… --- ## [Elasticsearch fails to start when xpack security is enabled](https://discuss.elastic.co/t/elasticsearch-fails-to-start-when-xpack-security-is-enabled/220514)
**Author:** [@ljacobs7211](https://discuss.elastic.co/u/ljacobs7211)\ **Replies:** 2\ **Last updated:** [February 24, 2020, 6:06am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-start-when-xpack-security-is-enabled/220514 "2020-02-24T06:06:23Z")
Caused by: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\] at org.elasticsearch.plugins.PluginsService.loadPlugin(PluginsService.java:614) ~\[elasticsearch-7.5.0.ja… --- ## [Elasticsearch HOT/WARM infrastructure with S3 mounted as a filesystem using S3FS problem](https://discuss.elastic.co/t/elasticsearch-hot-warm-infrastructure-with-s3-mounted-as-a-filesystem-using-s3fs-problem/159660)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 8:14am UTC](https://discuss.elastic.co/t/elasticsearch-hot-warm-infrastructure-with-s3-mounted-as-a-filesystem-using-s3fs-problem/159660 "2018-12-06T08:14:27Z")
Hello ! So I've got a cluster of 3xMASTER | 4x HOT | 4x WARM nodes. The goal of my project is to store indices on HOT nodes for about 1-2 weeks and then allocate them (with the help of Curator) on WARM nodes. We are t… --- ## [How to remove IP-address from elasticsearch submission after geoip parses it?](https://discuss.elastic.co/t/how-to-remove-ip-address-from-elasticsearch-submission-after-geoip-parses-it/90504)
**Author:** [@UnitedMarsupials](https://discuss.elastic.co/u/UnitedMarsupials)\ **Replies:** 2\ **Last updated:** [June 22, 2017, 11:36pm UTC](https://discuss.elastic.co/t/how-to-remove-ip-address-from-elasticsearch-submission-after-geoip-parses-it/90504 "2017-06-22T23:36:09Z")
Our logs contain clients' IP-addresses, which we pass to the geoip-filter: filter { geoip { source =\> "client\_ip" } ... output { elasticsearch { hosts =\> \["...."\] index =\> "logstash-%{+YYYY.MM.dd}" } .… --- ## [Using X-pack anomaly detection on my own time series data](https://discuss.elastic.co/t/using-x-pack-anomaly-detection-on-my-own-time-series-data/84613)
**Author:** [@michalp](https://discuss.elastic.co/u/michalp)\ **Replies:** 2\ **Last updated:** [May 5, 2017, 1:59pm UTC](https://discuss.elastic.co/t/using-x-pack-anomaly-detection-on-my-own-time-series-data/84613 "2017-05-05T13:59:32Z")
I looked at the demo of multi-series anomaly detection in X-Pack, and it's really cool. But I want to use it on my own data that does not come from ElasticSearch. I don't suppose that this is supported, but want to ask a… --- ## [Query analyzed field](https://discuss.elastic.co/t/query-analyzed-field/55450)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 2\ **Last updated:** [July 14, 2016, 4:37pm UTC](https://discuss.elastic.co/t/query-analyzed-field/55450 "2016-07-14T16:37:34Z")
Hi Team, I am trying to build a tabular dashboard and need some help for fields that are analyzed ones. is there any way we can set "not\_analyzed" in kibana, or updating index is the only option? e.g.: if value region=… --- ## [\[Alerting\] My alerts are broken after upgrading Elastic Cloud to 7.10.2](https://discuss.elastic.co/t/alerting-my-alerts-are-broken-after-upgrading-elastic-cloud-to-7-10-2/263898)
**Author:** [@nickbabkin](https://discuss.elastic.co/u/nickbabkin)\ **Replies:** 3\ **Last updated:** [February 11, 2021, 6:38am UTC](https://discuss.elastic.co/t/alerting-my-alerts-are-broken-after-upgrading-elastic-cloud-to-7-10-2/263898 "2021-02-11T06:38:41Z")
Hi! After upgrading ES cluster and Kibana to 7.10.2, I noticed that some of my alerts have started to throw error and hence refuse to work due to these error: An error occurred when decrypting the alert. Unable to dec… --- ## [How can i make logstash to read file with same filename after processing](https://discuss.elastic.co/t/how-can-i-make-logstash-to-read-file-with-same-filename-after-processing/226187)
**Author:** [@yigene](https://discuss.elastic.co/u/yigene)\ **Replies:** 3\ **Last updated:** [April 3, 2020, 2:00pm UTC](https://discuss.elastic.co/t/how-can-i-make-logstash-to-read-file-with-same-filename-after-processing/226187 "2020-04-03T14:00:49Z")
Hi, I have tried many ways but still not able to get it work basically, i have logstash to watching one folder and load into ES with read model input { file { path =\> \[ "/tmp/\*csv" \] type =\> "stp" tags =\> \["aa"\] … --- ## [Scalar product sort for vector types](https://discuss.elastic.co/t/scalar-product-sort-for-vector-types/208791)
**Author:** [@dvisz-inf](https://discuss.elastic.co/u/dvisz-inf)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 8:30am UTC](https://discuss.elastic.co/t/scalar-product-sort-for-vector-types/208791 "2019-11-28T08:30:55Z")
Hi all :slight\_smile: Presumably ES has some optimized scalar product scoring/sorting for textual relevance similarity scoring using documents' term vectors. Is this same mechanism available for dense\_vector and sparse… --- ## [Search not giving desired result](https://discuss.elastic.co/t/search-not-giving-desired-result/189324)
**Author:** [@Shubham\_Yadav1](https://discuss.elastic.co/u/Shubham_Yadav1)\ **Replies:** 3\ **Last updated:** [July 10, 2019, 12:31pm UTC](https://discuss.elastic.co/t/search-not-giving-desired-result/189324 "2019-07-10T12:31:34Z")
I am searching for a keyword in my aws elasticsearch where it is indexed seperately and it is also present in other fields that are indexed. The problem is I am not able to search it when it is prefixed with some other a… --- ## [APM with Apache proxy](https://discuss.elastic.co/t/apm-with-apache-proxy/173084)
**Author:** [@tflorac](https://discuss.elastic.co/u/tflorac)\ **Replies:** 3\ **Last updated:** [March 20, 2019, 4:52pm UTC](https://discuss.elastic.co/t/apm-with-apache-proxy/173084 "2019-03-20T16:52:49Z")
Elasticsearch version: 6.6.2 (Free license) APM Server version: 6.6.2 APM Agent language and version: Java 1.4.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: deb Fresh instal… --- ## [Different search behavior between ascii code and multibyte character](https://discuss.elastic.co/t/different-search-behavior-between-ascii-code-and-multibyte-character/69992)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [December 27, 2016, 8:37am UTC](https://discuss.elastic.co/t/different-search-behavior-between-ascii-code-and-multibyte-character/69992 "2016-12-27T08:37:56Z")
Elastic verision : elasticsearch 5.1.1 I am testing the match query result between ascii code and multibyte character to decide what analyzer to use for our upcoming deployment. I would like to know if below behavior i… --- ## [Elasticsearch using systemd and different JAVA\_HOME path](https://discuss.elastic.co/t/elasticsearch-using-systemd-and-different-java-home-path/37768)
**Author:** [@Stelios2](https://discuss.elastic.co/u/Stelios2)\ **Replies:** 0\ **Last updated:** [December 22, 2015, 3:23pm UTC](https://discuss.elastic.co/t/elasticsearch-using-systemd-and-different-java-home-path/37768 "2015-12-22T15:23:15Z")
I have installed elasticserach on debian jessie and although i have successfully got it running on ubuntu 14.04 this time i am having an issue with starting the service. starting elasticsearch from systemd is complaiin… --- ## [Is there a way to find out on logstash pipeline status?](https://discuss.elastic.co/t/is-there-a-way-to-find-out-on-logstash-pipeline-status/306066)
**Author:** [@newelastic](https://discuss.elastic.co/u/newelastic)\ **Replies:** 1\ **Last updated:** [June 1, 2022, 8:00am UTC](https://discuss.elastic.co/t/is-there-a-way-to-find-out-on-logstash-pipeline-status/306066 "2022-06-01T08:00:23Z")
I've a logstash pipeline which extracts the data from the Elasticsearch and outputs to a file. Is there a way to check if the pipeline is successfully completed by writing to the output file? Right now, I keep checking t… --- ## [Supervisord: memlock problem](https://discuss.elastic.co/t/supervisord-memlock-problem/164357)
**Author:** [@langerma](https://discuss.elastic.co/u/langerma)\ **Replies:** 1\ **Last updated:** [January 22, 2019, 9:31pm UTC](https://discuss.elastic.co/t/supervisord-memlock-problem/164357 "2019-01-22T21:31:35Z")
hello, i am building a solution where i have to start native tar.gz deployments with supervisord. elasticsearch limits are set like this: elasticsearch hard nofile 65536 elasticsearch hard memlock unlimited… --- ## [Composite Aggregation and Sorting with a non source](https://discuss.elastic.co/t/composite-aggregation-and-sorting-with-a-non-source/131932)
**Author:** [@William\_Chu](https://discuss.elastic.co/u/William_Chu)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 9:24am UTC](https://discuss.elastic.co/t/composite-aggregation-and-sorting-with-a-non-source/131932 "2018-05-18T09:24:46Z")
Hello, Using Elasticsearch, I would like to construct a query that buckets my results but also allows for pagination. Based on this requirement, it seems that I need to use a composite aggregation. However, I also woul… --- ## [Custom Visualization using c3 JS](https://discuss.elastic.co/t/custom-visualization-using-c3-js/63572)
**Author:** [@nkp1988](https://discuss.elastic.co/u/nkp1988)\ **Replies:** 1\ **Last updated:** [October 24, 2016, 10:44pm UTC](https://discuss.elastic.co/t/custom-visualization-using-c3-js/63572 "2016-10-24T22:44:39Z")
I am creating a custom speedometer using gauge in C3 JS. How ever i am not getting the Visualization when i log in to kibana. I am able to see some text values from controller. Please help. C3 code works separately. Howe… --- ## [Frequent shard failures](https://discuss.elastic.co/t/frequent-shard-failures/336358)
**Author:** [@viera120](https://discuss.elastic.co/u/viera120)\ **Replies:** 6\ **Last updated:** [June 22, 2023, 1:02pm UTC](https://discuss.elastic.co/t/frequent-shard-failures/336358 "2023-06-22T13:02:19Z")
Hi, We are running a 3 node Elasticsearch Cluster on Elastic stack version 8.8.1. The nodes are running on 3 identical computers with SSD storage and 16GB RAM. The setup is being used to index Firewall logs. Node 1: es… [Previous page](https://discuss.elastic.co/top.md?page=1208&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1210&per_page=50&period=all)