# Top **URL:** https://discuss.elastic.co/top.md?page=1214&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1215 --- ## [Multiple Filter Problem after upgrading to Kibana 7.3](https://discuss.elastic.co/t/multiple-filter-problem-after-upgrading-to-kibana-7-3/194264)
**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\ **Replies:** 2\ **Last updated:** [August 12, 2019, 12:27pm UTC](https://discuss.elastic.co/t/multiple-filter-problem-after-upgrading-to-kibana-7-3/194264 "2019-08-12T12:27:47Z")
Hi, I have recently updated to version 7.3 and I'm experiencing problems when using multiples filters in dashboards, visualizations and searches. When combining more than two filters (as shown in picture) it suddenly st… --- ## [Option list (Controls visualization) does not refresh values](https://discuss.elastic.co/t/option-list-controls-visualization-does-not-refresh-values/126335)
**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\ **Replies:** 2\ **Last updated:** [April 2, 2018, 7:49pm UTC](https://discuss.elastic.co/t/option-list-controls-visualization-does-not-refresh-values/126335 "2018-04-02T19:49:16Z")
Hi, i'm using Kibana v6.2.3, and tried out the controls visualization with option list. i expected to have the lists refresh the values based on my selection, but instead all values remain the same which is very confus… --- ## [How to visualize user login](https://discuss.elastic.co/t/how-to-visualize-user-login/339280)
**Author:** [@frh](https://discuss.elastic.co/u/frh)\ **Replies:** 3\ **Last updated:** [July 31, 2023, 7:50am UTC](https://discuss.elastic.co/t/how-to-visualize-user-login/339280 "2023-07-31T07:50:38Z")
Hi, I'm trying to figure out the number of user logins in certain instance. The reason being is I want to see how many users have logged in to instance ABC and who are the users logged in to instance ABC. Thank you. --- ## [Ecs compatibiliy warning in logstash](https://discuss.elastic.co/t/ecs-compatibiliy-warning-in-logstash/308263)
**Author:** [@NomanLatif](https://discuss.elastic.co/u/NomanLatif)\ **Replies:** 3\ **Last updated:** [June 28, 2022, 7:53am UTC](https://discuss.elastic.co/t/ecs-compatibiliy-warning-in-logstash/308263 "2022-06-28T07:53:14Z")
We see the following warning in logstash logs \[2022-06-27T12:23:27,848\]\[WARN \]\[deprecation.logstash.codecs.json\]\[my\_pipeline\] Relying on default value of pipeline.ecs\_compatibility, which may change in a future major re… --- ## [Kibana - can visualize a field that we multiply by a fixed value?](https://discuss.elastic.co/t/kibana-can-visualize-a-field-that-we-multiply-by-a-fixed-value/271742)
**Author:** [@felix180](https://discuss.elastic.co/u/felix180)\ **Replies:** 3\ **Last updated:** [April 30, 2021, 8:27am UTC](https://discuss.elastic.co/t/kibana-can-visualize-a-field-that-we-multiply-by-a-fixed-value/271742 "2021-04-30T08:27:05Z")
I did a visualization with a field but I would like to visualize it multiplied (or divised) by a fixed value. Is it possible ? Thanks for your help --- ## [Query by max date](https://discuss.elastic.co/t/query-by-max-date/251424)
**Author:** [@Kennethtruyers](https://discuss.elastic.co/u/Kennethtruyers)\ **Replies:** 0\ **Last updated:** [October 8, 2020, 11:10am UTC](https://discuss.elastic.co/t/query-by-max-date/251424 "2020-10-08T11:10:55Z")
I have an index that is append only. Every change gets saved as a new document, together with a date property. In order to get the current active data I need to group all entities by their ID and get the one with the lat… --- ## [Filebeat stops proccessing s3 input with no error](https://discuss.elastic.co/t/filebeat-stops-proccessing-s3-input-with-no-error/212590)
**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\ **Replies:** 3\ **Last updated:** [December 23, 2019, 9:42pm UTC](https://discuss.elastic.co/t/filebeat-stops-proccessing-s3-input-with-no-error/212590 "2019-12-23T21:42:52Z")
Using filebeat 7.4.2 and stack monitoring we see where the throughput of filebeat drops to zero and the only abnormal log message is: 2019-12-20T03:47:31.711Z INFO \[s3\] s3/input.go:293 Message visibility timeout updated… --- ## [Query DSL, matching string, very easy example](https://discuss.elastic.co/t/query-dsl-matching-string-very-easy-example/189532)
**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\ **Replies:** 3\ **Last updated:** [July 10, 2019, 12:21pm UTC](https://discuss.elastic.co/t/query-dsl-matching-string-very-easy-example/189532 "2019-07-10T12:21:17Z")
hi, I'm starting on DSL query... I'm a little bit lost because as an example I try to match a very easy sample but I can't match... Is somebody can help me ? the only answer I get (on elasticsearch Head) is the 10th fi… --- ## [Logstash syslog rfc 5424 and rfc 3164 input](https://discuss.elastic.co/t/logstash-syslog-rfc-5424-and-rfc-3164-input/180520)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 0\ **Last updated:** [May 10, 2019, 9:04am UTC](https://discuss.elastic.co/t/logstash-syslog-rfc-5424-and-rfc-3164-input/180520 "2019-05-10T09:04:20Z")
Hi, I want to handle syslogs of both RFC in ELK 6.7. So far my working config is: input { tcp { port =\> 514 type =\> syslog } udp { port =\> 514 type =\> syslog … --- ## [Visualization long title truncated?](https://discuss.elastic.co/t/visualization-long-title-truncated/101658)
**Author:** [@fxprunayre](https://discuss.elastic.co/u/fxprunayre)\ **Replies:** 3\ **Last updated:** [September 26, 2017, 3:57pm UTC](https://discuss.elastic.co/t/visualization-long-title-truncated/101658 "2017-09-26T15:57:43Z")
Visualization title have ellipsis() applied and when title is too long, users can't read the complete title: \[image\] It looks like past versions were displaying tooltips: Does it make sense to restore the tooltip ? … --- ## [Exessive field mapping Twitter to Elasticsearch](https://discuss.elastic.co/t/exessive-field-mapping-twitter-to-elasticsearch/86401)
**Author:** [@kubersakkie](https://discuss.elastic.co/u/kubersakkie)\ **Replies:** 3\ **Last updated:** [May 19, 2017, 1:12pm UTC](https://discuss.elastic.co/t/exessive-field-mapping-twitter-to-elasticsearch/86401 "2017-05-19T13:12:34Z")
Hey guys I am using the ElasticStack\_twitter configuration to ingest tweets. (ES, Logstash and Kibana are on version 5.2) I have applied the exact same config and templates from this commit. When I view the data… --- ## [Elastic Cloudで504 GatewayTimeout](https://discuss.elastic.co/t/elastic-cloud-504-gatewaytimeout/65465)
**Author:** [@hideki](https://discuss.elastic.co/u/hideki)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 10:03am UTC](https://discuss.elastic.co/t/elastic-cloud-504-gatewaytimeout/65465 "2016-11-14T10:03:29Z")
こんにちは。 本日11/9(水) 7:00から現在まで十数回Elastic Cloudのクラスターから504 GatewayTimeoutが返ってくる事象が発生しています。 クラスター側のログを確認してもとくにエラーは見当たりませんでした。 エンドポイントのホスト名をDNSで引くとELBのアドレスが返ってくるため、 クラスターの前段にリバースプロクシがいてリクエストのHostヘッダーで切り替えていると推測しますが、 そのリバ… --- ## [Kibana url redirecting to /space/enter and giving 503 error when deployed on Kubernetes cluster](https://discuss.elastic.co/t/kibana-url-redirecting-to-space-enter-and-giving-503-error-when-deployed-on-kubernetes-cluster/275257)
**Author:** [@Shubham\_Dhote](https://discuss.elastic.co/u/Shubham_Dhote)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 3:57am UTC](https://discuss.elastic.co/t/kibana-url-redirecting-to-space-enter-and-giving-503-error-when-deployed-on-kubernetes-cluster/275257 "2021-06-09T03:57:17Z")
I have deployed Kibana and elasticsearch pods in Kubernetes cluster, I have created ingress path url for both of them. Elasticsearch is accessible with ingress path url, but when trying to access kibana ui with ingress u… --- ## [Resizable Table Legends and Multiple Terms aggregations](https://discuss.elastic.co/t/resizable-table-legends-and-multiple-terms-aggregations/260039)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 3:40pm UTC](https://discuss.elastic.co/t/resizable-table-legends-and-multiple-terms-aggregations/260039 "2021-01-04T15:40:55Z")
Hello, In Grafana we have the option to show legends as a table, showing a lot of useful aggregated info, for example: I have tried many things to achieve the same in Kibana, but never managed to get even close to w… --- ## [Windows DNS parsing](https://discuss.elastic.co/t/windows-dns-parsing/205437)
**Author:** [@Jan\_Kaspar](https://discuss.elastic.co/u/Jan_Kaspar)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 1:06pm UTC](https://discuss.elastic.co/t/windows-dns-parsing/205437 "2019-10-28T13:06:16Z")
Hi All, I would like to ask you for help. I am trying to parse Microsoft DNS debug logs but I stucked. My testing environment is running on ELK version 7.2. Beats are also running on 7.2 version. Problem is I am getti… --- ## [Upgrade to 7.2](https://discuss.elastic.co/t/upgrade-to-7-2/187913)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 2\ **Last updated:** [June 27, 2019, 11:11pm UTC](https://discuss.elastic.co/t/upgrade-to-7-2/187913 "2019-06-27T23:11:39Z")
My upgrade of my elkstack 6.8 to 7.2 seems to have gone OK(cluster is green) except for the following kibana error - money@elkstack:/etc/kibana$ sudo systemctl status kibana.service ● kibana.service - Kibana Loaded: … --- ## [How to pass multiple values in kibana dashboard - 'add filter' - 'is one of'](https://discuss.elastic.co/t/how-to-pass-multiple-values-in-kibana-dashboard-add-filter-is-one-of/173119)
**Author:** [@Amitittech](https://discuss.elastic.co/u/Amitittech)\ **Replies:** 2\ **Last updated:** [March 25, 2019, 12:20pm UTC](https://discuss.elastic.co/t/how-to-pass-multiple-values-in-kibana-dashboard-add-filter-is-one-of/173119 "2019-03-25T12:20:33Z")
Hi, How can i pass multiple values in kibana dashboard - 'add filter' - 'is one of' ? --- ## [Searching in same condition but different scoring](https://discuss.elastic.co/t/searching-in-same-condition-but-different-scoring/73319)
**Author:** [@tanimoto](https://discuss.elastic.co/u/tanimoto)\ **Replies:** 2\ **Last updated:** [January 31, 2017, 8:40am UTC](https://discuss.elastic.co/t/searching-in-same-condition-but-different-scoring/73319 "2017-01-31T08:40:28Z")
I use ES5.1.1 query is as below index/type/\_search { "query": { "term": { "status": "ZA" } } } Conditions all data have status field. ZA is full match value. result by explain API { "\_index… --- ## [\[Config\] marvel.history.duration (format)](https://discuss.elastic.co/t/config-marvel-history-duration-format/50228)
**Author:** [@TroyAndAbed](https://discuss.elastic.co/u/TroyAndAbed)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 2:43pm UTC](https://discuss.elastic.co/t/config-marvel-history-duration-format/50228 "2016-05-17T14:43:41Z")
Hi everyone, I'm trying to setup the config marvel.history.duration to delete automatically the indices created by Marvel. The documentation says: Sets the retention duration beyond which the indices created by Marvel … --- ## [Always add a not\_analyzed field to strings template mapping](https://discuss.elastic.co/t/always-add-a-not-analyzed-field-to-strings-template-mapping/27561)
**Author:** [@GX1](https://discuss.elastic.co/u/GX1)\ **Replies:** 2\ **Last updated:** [August 19, 2015, 4:03am UTC](https://discuss.elastic.co/t/always-add-a-not-analyzed-field-to-strings-template-mapping/27561 "2015-08-19T04:03:26Z")
Hi all, I have run into a problem where I have a value 'testing-beta' when I try filter this field I get no results, from my understanding its the analyser that splits it into tokens, I have tried creating a dynamic temp… --- ## [Kibana's Logstash Dashboard missing data](https://discuss.elastic.co/t/kibanas-logstash-dashboard-missing-data/16939)
**Author:** [@Stephen\_Grow](https://discuss.elastic.co/u/Stephen_Grow)\ **Replies:** 1\ **Last updated:** [April 11, 2017, 3:45am UTC](https://discuss.elastic.co/t/kibanas-logstash-dashboard-missing-data/16939 "2017-04-11T03:45:37Z")
I've downloaded the latest kibana / elasticsearch / logstash stack. I have everything working just fine. I can view all logs being sent by rsyslog from one server to my log stash server. When i bring up Elastic… --- ## [Fleet Server only binding to IPv6](https://discuss.elastic.co/t/fleet-server-only-binding-to-ipv6/278213)
**Author:** [@omurad](https://discuss.elastic.co/u/omurad)\ **Replies:** 1\ **Last updated:** [July 28, 2021, 6:37pm UTC](https://discuss.elastic.co/t/fleet-server-only-binding-to-ipv6/278213 "2021-07-28T18:37:07Z")
I couldn't get an agent connected to the Fleet Server, so I ran netstat on the Fleet Server machine and noticed the port I configured is only bound to IPv6, not IPv4. My Fleet Server URL is set to http://0.0.0.0:8220. I… --- ## [Failed to compile inline script when remove field in pipeline](https://discuss.elastic.co/t/failed-to-compile-inline-script-when-remove-field-in-pipeline/168965)
**Author:** [@krrz](https://discuss.elastic.co/u/krrz)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 11:44am UTC](https://discuss.elastic.co/t/failed-to-compile-inline-script-when-remove-field-in-pipeline/168965 "2019-02-21T11:44:48Z")
In elastic logs I have errors ElasticsearchParseException: Error updating pipeline with id (...) Too many dynamic script compilations within I am trying to change the configuration of the pipe and one thing is very… --- ## [Highlight query to match exact word](https://discuss.elastic.co/t/highlight-query-to-match-exact-word/89889)
**Author:** [@jshraddha](https://discuss.elastic.co/u/jshraddha)\ **Replies:** 1\ **Last updated:** [June 19, 2017, 7:26am UTC](https://discuss.elastic.co/t/highlight-query-to-match-exact-word/89889 "2017-06-19T07:26:11Z")
Hi, I am using highlight query like this { "\_source": false, "query": { "bool": { "must": \[ { "terms": { "\_id": \[ "AVy-uHOZT… --- ## [Large terms query slow](https://discuss.elastic.co/t/large-terms-query-slow/69221)
**Author:** [@tcollinsworth](https://discuss.elastic.co/u/tcollinsworth)\ **Replies:** 1\ **Last updated:** [December 16, 2016, 7:33pm UTC](https://discuss.elastic.co/t/large-terms-query-slow/69221 "2016-12-16T19:33:34Z")
Is there some mechanism to pass large filter lists at query time? We found that we can send 35K boolean clauses in Solr and return results in under 1 sec. We're trying to move our search to elasticsearch, but a terms q… --- ## [How to properly use two Filebeat modules listening on the same port?](https://discuss.elastic.co/t/how-to-properly-use-two-filebeat-modules-listening-on-the-same-port/320098)
**Author:** [@scantron](https://discuss.elastic.co/u/scantron)\ **Replies:** 5\ **Last updated:** [November 30, 2022, 3:39pm UTC](https://discuss.elastic.co/t/how-to-properly-use-two-filebeat-modules-listening-on-the-same-port/320098 "2022-11-30T15:39:58Z")
I currently have Fortinet and Cisco modules enabled on the same filebeat instance, and have a cisco meraki network device sending syslogs as well as fortinet firewall logs to the same port, 5514. I am using Docker with a… --- ## [Delete child document without parent](https://discuss.elastic.co/t/delete-child-document-without-parent/305745)
**Author:** [@Udayaprakash\_S\_10d](https://discuss.elastic.co/u/Udayaprakash_S_10d)\ **Replies:** 5\ **Last updated:** [May 30, 2022, 10:05am UTC](https://discuss.elastic.co/t/delete-child-document-without-parent/305745 "2022-05-30T10:05:08Z")
i want to delete the child document in the index with out parent .i want delete query for this --- ## [Post filter results by score and max\_score](https://discuss.elastic.co/t/post-filter-results-by-score-and-max-score/294366)
**Author:** [@faza.zheten123](https://discuss.elastic.co/u/faza.zheten123)\ **Replies:** 5\ **Last updated:** [January 14, 2022, 11:59am UTC](https://discuss.elastic.co/t/post-filter-results-by-score-and-max-score/294366 "2022-01-14T11:59:59Z")
Hello, I want to show only max scored results. Is it possible? If possible could you tell me how to do it? Thanks as lot! --- ## [Combining aggregations in a query](https://discuss.elastic.co/t/combining-aggregations-in-a-query/191676)
**Author:** [@JamesPeck](https://discuss.elastic.co/u/JamesPeck)\ **Replies:** 5\ **Last updated:** [July 22, 2019, 4:40pm UTC](https://discuss.elastic.co/t/combining-aggregations-in-a-query/191676 "2019-07-22T16:40:57Z")
I am new to Elasticsearch queries and I am trying to combine two aggregations into one aggregation field. Below I have the basic idea I am trying to get to. I realize that statusCategoriesCombo wont work that way, but I… --- ## [Passing ctx fields to stored proc as parameter](https://discuss.elastic.co/t/passing-ctx-fields-to-stored-proc-as-parameter/149742)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 5\ **Last updated:** [October 8, 2018, 9:26pm UTC](https://discuss.elastic.co/t/passing-ctx-fields-to-stored-proc-as-parameter/149742 "2018-10-08T21:26:27Z")
I am managing hundreds of scripts that all use an inline script to go through the nested buckets inside the ctx.payload structure. We've recently run into the circuit break error of: "reason": "\[script\] Too many dynamic … --- ## [How to configure logging for helm? logging output different than manually running logstash](https://discuss.elastic.co/t/how-to-configure-logging-for-helm-logging-output-different-than-manually-running-logstash/186667)
**Author:** [@procyclinsur](https://discuss.elastic.co/u/procyclinsur)\ **Replies:** 0\ **Last updated:** [June 20, 2019, 11:20am UTC](https://discuss.elastic.co/t/how-to-configure-logging-for-helm-logging-output-different-than-manually-running-logstash/186667 "2019-06-20T11:20:50Z")
I have been trying to deploying logstash via helm with my setup described more HERE for two weeks now and I cannot get it to work, it keeps crashing.... I need to configure logging in such a way that I know what is going… --- ## [Best approach for field mapping limit alerts?](https://discuss.elastic.co/t/best-approach-for-field-mapping-limit-alerts/227122)
**Author:** [@andrew\_h](https://discuss.elastic.co/u/andrew_h)\ **Replies:** 0\ **Last updated:** [April 8, 2020, 12:23pm UTC](https://discuss.elastic.co/t/best-approach-for-field-mapping-limit-alerts/227122 "2020-04-08T12:23:12Z")
Hi folks, I've just recently started to work with ElasticSearch and Kibana. My development team have stood-up our own EK stack (ElasticSearch w/Kibana - no Logstash). Everything has been going reasonably smooth so far b… --- ## [WInlogbeat - event\_data Default SD String:](https://discuss.elastic.co/t/winlogbeat-event-data-default-sd-string/210766)
**Author:** [@mgotechlock](https://discuss.elastic.co/u/mgotechlock)\ **Replies:** 0\ **Last updated:** [December 5, 2019, 6:30pm UTC](https://discuss.elastic.co/t/winlogbeat-event-data-default-sd-string/210766 "2019-12-05T18:30:57Z")
Winlogbeat 7.4.0 is occasionally producing this: "date\_partition": { "day": "05", "month": "12", "year": "2019" }, "@version": "1", "log": { "level": "information" }, "winlog": { "computer\_name": "Server2106.a… --- ## [EventStore Beat](https://discuss.elastic.co/t/eventstore-beat/172991)
**Author:** [@aloulo47](https://discuss.elastic.co/u/aloulo47)\ **Replies:** 0\ **Last updated:** [March 19, 2019, 2:03pm UTC](https://discuss.elastic.co/t/eventstore-beat/172991 "2019-03-19T14:03:04Z")
Hey Guys am working on a beat that catches events from eventstore and send it to logstash you can check it and help me to improve it take a look ! --- ## [Can we add pattern matching in document\_id while updating?](https://discuss.elastic.co/t/can-we-add-pattern-matching-in-document-id-while-updating/92899)
**Author:** [@g\_dev](https://discuss.elastic.co/u/g_dev)\ **Replies:** 0\ **Last updated:** [July 12, 2017, 11:46pm UTC](https://discuss.elastic.co/t/can-we-add-pattern-matching-in-document-id-while-updating/92899 "2017-07-12T23:46:33Z")
I want to add a new field to a document with document\_id like "{id}-{word}" by using logstash. I just know {id} part while updating. Is there a way can I do it either by update\_by\_query in script and how should I define… --- ## [Regarding the logstash cacerts issue](https://discuss.elastic.co/t/regarding-the-logstash-cacerts-issue/355961)
**Author:** [@HSc](https://discuss.elastic.co/u/HSc)\ **Replies:** 1\ **Last updated:** [March 22, 2024, 12:24pm UTC](https://discuss.elastic.co/t/regarding-the-logstash-cacerts-issue/355961 "2024-03-22T12:24:08Z")
Hi, I am new to ELK. As i am using beats to send logs to logstash and then to elasticsearch but the issue is when i run the logstash as service then the status is running but when i went to logs of logstash it shows.. e… --- ## [How to use Logstash to import csv file into elasticsearch](https://discuss.elastic.co/t/how-to-use-logstash-to-import-csv-file-into-elasticsearch/179727)
**Author:** [@idris](https://discuss.elastic.co/u/idris)\ **Replies:** 4\ **Last updated:** [May 6, 2019, 8:26am UTC](https://discuss.elastic.co/t/how-to-use-logstash-to-import-csv-file-into-elasticsearch/179727 "2019-05-06T08:26:11Z")
Need help guys, i need to store data (csv file) on elasticsearch , but i m confused about the way to do that . May i have to install firstly logstash on docker compose and try configure it manually??? What are the ma… --- ## [Filebeast working, Elastic Working, but data not in Kibana](https://discuss.elastic.co/t/filebeast-working-elastic-working-but-data-not-in-kibana/131465)
**Author:** [@necrolingus](https://discuss.elastic.co/u/necrolingus)\ **Replies:** 4\ **Last updated:** [May 13, 2018, 7:50am UTC](https://discuss.elastic.co/t/filebeast-working-elastic-working-but-data-not-in-kibana/131465 "2018-05-13T07:50:17Z")
Hi guys I hope you can help me out as I've been banging my head against this for the past few hours now. I installed the following: filebeat version 6.2.4 (amd64), libbeat 6.2.4 elasticsearch-6.2.4.msi kibana-6.2.4-… --- ## [Understanding running logstash container command](https://discuss.elastic.co/t/understanding-running-logstash-container-command/111923)
**Author:** [@marouane](https://discuss.elastic.co/u/marouane)\ **Replies:** 4\ **Last updated:** [December 20, 2017, 9:05am UTC](https://discuss.elastic.co/t/understanding-running-logstash-container-command/111923 "2017-12-20T09:05:21Z")
Hello every one, I'm working on creating the container logstash using docker run I found this commande and i want to understand what is means , docker run -d --name=logstash --restart=unless-stopped --link elasticsear… --- ## [Target required xml-filter option](https://discuss.elastic.co/t/target-required-xml-filter-option/54700)
**Author:** [@tollef](https://discuss.elastic.co/u/tollef)\ **Replies:** 4\ **Last updated:** [July 5, 2016, 12:21pm UTC](https://discuss.elastic.co/t/target-required-xml-filter-option/54700 "2016-07-05T12:21:37Z")
I'm using a quite simple xml-filter filter { xml { source =\> "recordedmessage" } } But when I run logstash I get "ConfigurationError: translation missing" and logstash stops. So I changed the filter to filter… --- ## [The impact of allowing swap](https://discuss.elastic.co/t/the-impact-of-allowing-swap/70316)
**Author:** [@aabed](https://discuss.elastic.co/u/aabed)\ **Replies:** 6\ **Last updated:** [January 2, 2017, 11:07am UTC](https://discuss.elastic.co/t/the-impact-of-allowing-swap/70316 "2017-01-02T11:07:14Z")
Hello, I was wondering what is performance impact of enabling the swap on the server running Elasticsearch Given that the swap disk is on SSD Thanks, --- ## [Extracting a substring](https://discuss.elastic.co/t/extracting-a-substring/134268)
**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\ **Replies:** 2\ **Last updated:** [June 4, 2018, 3:59pm UTC](https://discuss.elastic.co/t/extracting-a-substring/134268 "2018-06-04T15:59:05Z")
I was wondering what I can use to extract the first three letters of a given string "/opt/LogStashOutputFormatted/TMOES/TNTMO072.2018-05-02\_08:40.log" I want to extract " TNT" from the string was able to extract TNTMO0… --- ## [Exception using painless script](https://discuss.elastic.co/t/exception-using-painless-script/87223)
**Author:** [@xam](https://discuss.elastic.co/u/xam)\ **Replies:** 2\ **Last updated:** [June 9, 2017, 4:24pm UTC](https://discuss.elastic.co/t/exception-using-painless-script/87223 "2017-06-09T16:24:06Z")
Hi, I use a simple painless script "doc\['myFieldName'\].value" for my aggregation with ES 5.3 and I get the following exception: java.lang.AssertionError: docid=-1,maxDoc=29 at \_\_randomizedtesting.SeedInfo.seed(\[9BC01… --- ## [Add user and password and failed](https://discuss.elastic.co/t/add-user-and-password-and-failed/67525)
**Author:** [@robertchen117](https://discuss.elastic.co/u/robertchen117)\ **Replies:** 2\ **Last updated:** [December 1, 2016, 2:58pm UTC](https://discuss.elastic.co/t/add-user-and-password-and-failed/67525 "2016-12-01T14:58:10Z")
I followed this doc after I installed x-pack. And I update my logstash.conf with user and password. the error is: \[LogStash::Runner\] FATAL logstash.runner - The given configuration is invalid. Reason: Expected one of #… --- ## [\[logstash.outputsCould not index event to Elasticsearch."error {"type"=\>"mapper\_parsing\_exception", "reason"=\>"object mapping for \[host\] tried to parse field \[host\] as object, but found a concrete value"](https://discuss.elastic.co/t/logstash-outputscould-not-index-event-to-elasticsearch-error-type-mapper-parsing-exception-reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/294000)
**Author:** [@jannatnishat](https://discuss.elastic.co/u/jannatnishat)\ **Replies:** 3\ **Last updated:** [January 12, 2022, 2:18pm UTC](https://discuss.elastic.co/t/logstash-outputscould-not-index-event-to-elasticsearch-error-type-mapper-parsing-exception-reason-object-mapping-for-host-tried-to-parse-field-host-as-object-but-found-a-concrete-value/294000 "2022-01-12T14:18:38Z")
Getting this error \[2022-01-11T12:48:53,887\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[d60352f946d70780df98c56812b4beacd1633b0b5fb5d9c306d2c578620115b7\] Could not index event to Elasticsearch. {:status=\>400, :action=\>… --- ## [Apache Log4j2 vulnerability](https://discuss.elastic.co/t/apache-log4j2-vulnerability/292690)
**Author:** [@Amina\_LAARIM-SC](https://discuss.elastic.co/u/Amina_LAARIM-SC)\ **Replies:** 3\ **Last updated:** [December 22, 2021, 9:25pm UTC](https://discuss.elastic.co/t/apache-log4j2-vulnerability/292690 "2021-12-22T21:25:23Z")
Hello community, I am using Elasticsearch 6.2.1 and I can't find any information if this version is impacted with the Apache Log4j2 vulnerability discovered at the begining of this month. Do you have any information pl… --- ## [Update by query on nested mapping](https://discuss.elastic.co/t/update-by-query-on-nested-mapping/243290)
**Author:** [@e-rossi](https://discuss.elastic.co/u/e-rossi)\ **Replies:** 3\ **Last updated:** [August 2, 2020, 9:44pm UTC](https://discuss.elastic.co/t/update-by-query-on-nested-mapping/243290 "2020-08-02T21:44:50Z")
So, I've successfully created a field and added a value for it in existing documents using the put mapping and update by query APIs with the following NEW\_FIELD = { 'properties': { 'deleted': { … --- ## [Install on LXC hangs at 17%](https://discuss.elastic.co/t/install-on-lxc-hangs-at-17/194724)
**Author:** [@Jeremy\_D](https://discuss.elastic.co/u/Jeremy_D)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 12:02am UTC](https://discuss.elastic.co/t/install-on-lxc-hangs-at-17/194724 "2019-08-14T00:02:17Z")
Trying to install kibana on an LXC container under proxmox. Fresh container using an ubuntu template, installed the repo just fine, did apt update, no problems. Once I do apt install kibana, it seems to go ok until it r… --- ## [Logstash 6.2 out of memory : suspects](https://discuss.elastic.co/t/logstash-6-2-out-of-memory-suspects/126798)
**Author:** [@anselme](https://discuss.elastic.co/u/anselme)\ **Replies:** 3\ **Last updated:** [April 6, 2018, 8:38am UTC](https://discuss.elastic.co/t/logstash-6-2-out-of-memory-suspects/126798 "2018-04-06T08:38:49Z")
Dear all, Any help welcome, since I did all I could but now I need specialists... I have 1 logstash instance fed by 1 filebeat and outputting to 1 ES. I get an OOM logstash crash after a few hours. I tried to increase… --- ## [The client is unable to verify that the server is Elasticsearch](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch/335912)
**Author:** [@marcosrobles-qo](https://discuss.elastic.co/u/marcosrobles-qo)\ **Replies:** 1\ **Last updated:** [June 19, 2023, 4:09pm UTC](https://discuss.elastic.co/t/the-client-is-unable-to-verify-that-the-server-is-elasticsearch/335912 "2023-06-19T16:09:22Z")
Kibana version: Elasticsearch version: 8.6.0 APM Server version: APM Agent language and version: 8.6.0 - C# Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and version: … [Previous page](https://discuss.elastic.co/top.md?page=1213&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1215&per_page=50&period=all)