# Top **URL:** https://discuss.elastic.co/top.md?page=1215&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1216 --- ## [Problem about pushing oracle alert.log to es](https://discuss.elastic.co/t/problem-about-pushing-oracle-alert-log-to-es/110510)
**Author:** [@tuankun](https://discuss.elastic.co/u/tuankun)\ **Replies:** 1\ **Last updated:** [December 6, 2017, 2:49pm UTC](https://discuss.elastic.co/t/problem-about-pushing-oracle-alert-log-to-es/110510 "2017-12-06T14:49:32Z")
Hi Guys, I'm trying to push oracle alert.log to es,like this: alert log-\>filebeat-\>logstash-\>elasticsearch alert log format like blow: Sun Mar 19 16:55:27 2017 DBRM started with pid=7, OS id=21297 Sun Mar 19 16:58:… --- ## [Restore Snapshot from different cluster](https://discuss.elastic.co/t/restore-snapshot-from-different-cluster/102882)
**Author:** [@ParitoshBh](https://discuss.elastic.co/u/ParitoshBh)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 1:25am UTC](https://discuss.elastic.co/t/restore-snapshot-from-different-cluster/102882 "2017-10-06T01:25:45Z")
An overview before discussing the problem, I have 2 clusters running, Cluster A and Cluster B. Cluster A is primarily for testing. It has 2 nodes, Indexer Node, and Search Node. The Indexer node is responsible for gener… --- ## [TransportClient: Timeout waiting for task](https://discuss.elastic.co/t/transportclient-timeout-waiting-for-task/58315)
**Author:** [@whzcl](https://discuss.elastic.co/u/whzcl)\ **Replies:** 1\ **Last updated:** [August 29, 2016, 2:04pm UTC](https://discuss.elastic.co/t/transportclient-timeout-waiting-for-task/58315 "2016-08-29T14:04:21Z")
ElasticSearch version: 1.5.2 Hi all, I am using the java transport client to index documents. Recently I sometimes met this exception: However, it seems that my Elasticsearch node is still in healthy state. Noting e… --- ## [Documents qui n'apparaissent pas dans le bonne ordre dans kibana](https://discuss.elastic.co/t/documents-qui-napparaissent-pas-dans-le-bonne-ordre-dans-kibana/92968)
**Author:** [@jstn](https://discuss.elastic.co/u/jstn)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 2:54pm UTC](https://discuss.elastic.co/t/documents-qui-napparaissent-pas-dans-le-bonne-ordre-dans-kibana/92968 "2017-08-15T14:54:34Z")
Bonjour, Lorsque j'ai des documents avec des timestamps identiques mes documents n'apparaissent pas dans le bonne ordre. Existe-t-il une solution pour contourner ce problème ? --- ## [How to recover Console queries after Kibana browser crash?](https://discuss.elastic.co/t/how-to-recover-console-queries-after-kibana-browser-crash/149152)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 5\ **Last updated:** [September 19, 2018, 5:50pm UTC](https://discuss.elastic.co/t/how-to-recover-console-queries-after-kibana-browser-crash/149152 "2018-09-19T17:50:07Z")
Is there a way to recover our queries from the dev tools console after Kibana has crashed on the browser? --- ## [Logstash 6.2.2 with JDBC data on not updated](https://discuss.elastic.co/t/logstash-6-2-2-with-jdbc-data-on-not-updated/126949)
**Author:** [@Ongun](https://discuss.elastic.co/u/Ongun)\ **Replies:** 5\ **Last updated:** [April 6, 2018, 7:54am UTC](https://discuss.elastic.co/t/logstash-6-2-2-with-jdbc-data-on-not-updated/126949 "2018-04-06T07:54:02Z")
Hello all, I have an ELK Stack 6.2.2 with X-pack trial license. I am running a multiple pipeline configuration with JDBC drivers and sometimes I notice that my data on Elasticsearch is not updated (particularly when mul… --- ## [How to Improve ES responsiveness when getting warning: retrying failed action with response code: 429](https://discuss.elastic.co/t/how-to-improve-es-responsiveness-when-getting-warning-retrying-failed-action-with-response-code-429/305173)
**Author:** [@truptir](https://discuss.elastic.co/u/truptir)\ **Replies:** 2\ **Last updated:** [June 7, 2022, 1:19pm UTC](https://discuss.elastic.co/t/how-to-improve-es-responsiveness-when-getting-warning-retrying-failed-action-with-response-code-429/305173 "2022-06-07T13:19:21Z")
My flow is Logs files will be processed from FileBeat \> Logstash \> Elasticsearch. I m getting the below 2 errors many times in Logstash logs. Error 1: \[INFO \]\[logstash.outputs.elasticsearch\]\[inventory\] retrying faile… --- ## [Changing codec for existing indexes](https://discuss.elastic.co/t/changing-codec-for-existing-indexes/152422)
**Author:** [@Neha\_Sharma1](https://discuss.elastic.co/u/Neha_Sharma1)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 6:11am UTC](https://discuss.elastic.co/t/changing-codec-for-existing-indexes/152422 "2018-10-18T06:11:39Z")
We are upgrading our ES version to 6.4.2 and would set default compression to best\_comrpession. Problem is that when restoring index from a snapshot, the best-compression is not applied even when explicitly setting codec… --- ## [Elastic 6.3.1 and configuring emails so Watcher can send emails rather than just exporting to the local log file](https://discuss.elastic.co/t/elastic-6-3-1-and-configuring-emails-so-watcher-can-send-emails-rather-than-just-exporting-to-the-local-log-file/139050)
**Author:** [@jamesl](https://discuss.elastic.co/u/jamesl)\ **Replies:** 2\ **Last updated:** [July 8, 2018, 12:55pm UTC](https://discuss.elastic.co/t/elastic-6-3-1-and-configuring-emails-so-watcher-can-send-emails-rather-than-just-exporting-to-the-local-log-file/139050 "2018-07-08T12:55:44Z")
Hi. I am trying to setup email alerts for my watchers. I have the following setup in my /etc/elasticsearch/elasticsearch.yml file: xpack.notification.email.account: elastic@domain.com profile: gmail smtp.auth: true … --- ## [A question about custom scoring](https://discuss.elastic.co/t/a-question-about-custom-scoring/76520)
**Author:** [@Yuchen\_He](https://discuss.elastic.co/u/Yuchen_He)\ **Replies:** 2\ **Last updated:** [February 27, 2017, 2:43am UTC](https://discuss.elastic.co/t/a-question-about-custom-scoring/76520 "2017-02-27T02:43:45Z")
My goal is to rank my documents based the position of my keyword occurrence in the documents. For example, when I search for "Thor", and there are two documents "Batman Thor", and "Thor Marvel", then "Thor Marvel" will r… --- ## [Last.fm sample data](https://discuss.elastic.co/t/last-fm-sample-data/63286)
**Author:** [@Adello](https://discuss.elastic.co/u/Adello)\ **Replies:** 2\ **Last updated:** [October 18, 2016, 2:49pm UTC](https://discuss.elastic.co/t/last-fm-sample-data/63286 "2016-10-18T14:49:36Z")
Hi everyone :slight\_smile: while become more and more familiar with the Graph-plugin, I wonder where the last.fm sample data could be found? All the demo clips are talking about it. Could someone provide some link her… --- ## [Match the query String with multiple fields of elasticsearch index and merge all result through java API](https://discuss.elastic.co/t/match-the-query-string-with-multiple-fields-of-elasticsearch-index-and-merge-all-result-through-java-api/54507)
**Author:** [@apratapi](https://discuss.elastic.co/u/apratapi)\ **Replies:** 2\ **Last updated:** [July 4, 2016, 3:58pm UTC](https://discuss.elastic.co/t/match-the-query-string-with-multiple-fields-of-elasticsearch-index-and-merge-all-result-through-java-api/54507 "2016-07-04T15:58:42Z")
I have a elasticsearch index with multiple fields, i want to match a string with all the fields (if this string present in any of the field then get the field data as result) and gather the result , has to to done by Ja… --- ## [Snapshot of ES Index failing Using Curator to S3](https://discuss.elastic.co/t/snapshot-of-es-index-failing-using-curator-to-s3/28601)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [September 4, 2015, 7:21am UTC](https://discuss.elastic.co/t/snapshot-of-es-index-failing-using-curator-to-s3/28601 "2015-09-04T07:21:52Z")
Hi, I am trying to take a snapshot of ES Index having name of the type reincarnation.2015.07.21 with the below curator command:- curator --host locahost --port 9200 snapshot --repository walle\_elk\_archive indices -… --- ## [Possibility to limit memory usage of MMap FS?](https://discuss.elastic.co/t/possibility-to-limit-memory-usage-of-mmap-fs/24908)
**Author:** [@rmeindl](https://discuss.elastic.co/u/rmeindl)\ **Replies:** 2\ **Last updated:** [July 5, 2015, 10:31am UTC](https://discuss.elastic.co/t/possibility-to-limit-memory-usage-of-mmap-fs/24908 "2015-07-05T10:31:10Z")
ES is using hybrid MMap/NIO FS as default. Downside of this setup is that on our nodes ES (1.5.2) only leaves ~300 MB free for the operating system (Ubuntu 14.04.2) ... is there a way to limit the Off-Heap memory footpri… --- ## [Elasticsearch not starting after RHEL kernel upgrade](https://discuss.elastic.co/t/elasticsearch-not-starting-after-rhel-kernel-upgrade/322076)
**Author:** [@hasith-adl](https://discuss.elastic.co/u/hasith-adl)\ **Replies:** 7\ **Last updated:** [January 12, 2023, 6:22am UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-after-rhel-kernel-upgrade/322076 "2023-01-12T06:22:42Z")
Hi, Elasticsearch (v7.5.2) does not start after performing a kernel upgrade from 3.10.0-957.el7 to 3.10.0-1160.80.1.el7. \[2022-12-28T12:30:27,741\]\[INFO \]\[o.e.b.BootstrapChecks \] \[igw-edb3\] bound or publishing to a n… --- ## [Can I add title to each visualization in my dashboard?](https://discuss.elastic.co/t/can-i-add-title-to-each-visualization-in-my-dashboard/258199)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 9, 2020, 11:20pm UTC](https://discuss.elastic.co/t/can-i-add-title-to-each-visualization-in-my-dashboard/258199 "2020-12-09T23:20:27Z")
Hi, I am wondering if I can add title to my visualization in dashboard. In my example, I have a name for the visualization "Upload\_Stack\_Post\_Proc\_Vertical\_Bar". Instead of changing this, I would like to add title in th… --- ## [\_bucket\_count in bucket\_selector- pipeline aggregation](https://discuss.elastic.co/t/-bucket-count-in-bucket-selector-pipeline-aggregation/85519)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 1\ **Last updated:** [May 12, 2017, 11:07am UTC](https://discuss.elastic.co/t/-bucket-count-in-bucket-selector-pipeline-aggregation/85519 "2017-05-12T11:07:01Z")
hello, I'm trying to make this work with no luck. should this syntax even work? I am referring this git issue: thanks! GET client\_data\_228\_d\_2017-03-15,client\_data\_228\_d\_2017-03-16/prt/\_search?ignore\_unavailable {… --- ## [Sorting and querying semantic version strings](https://discuss.elastic.co/t/sorting-and-querying-semantic-version-strings/20727)
**Author:** [@Jeff\_Potts](https://discuss.elastic.co/u/Jeff_Potts)\ **Replies:** 1\ **Last updated:** [November 13, 2014, 7:52pm UTC](https://discuss.elastic.co/t/sorting-and-querying-semantic-version-strings/20727 "2014-11-13T19:52:47Z")
I have a property called "version" that will have semantic version strings like "1.1.0", "10.0.1", and "2.0.0". There will always be three integers separated by periods and no other characters. I need to be able to s… --- ## [CLA sign required even for tiny typo fix?](https://discuss.elastic.co/t/cla-sign-required-even-for-tiny-typo-fix/18528)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 7\ **Last updated:** [July 8, 2014, 11:34pm UTC](https://discuss.elastic.co/t/cla-sign-required-even-for-tiny-typo-fix/18528 "2014-07-08T23:34:03Z")
Hi, http://www.infoworld.com/d/open-source-software/red-hat-joyent-and-others-break-down-licensing-barriers-244727 May be some companies showing what the future trend will be? :-) (yes, I am biased, I work for o… --- ## [NESTされたフィールドに対するwhitelistの適用について](https://discuss.elastic.co/t/nest-whitelist/306282)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 4\ **Last updated:** [June 3, 2022, 7:08am UTC](https://discuss.elastic.co/t/nest-whitelist/306282 "2022-06-03T07:08:06Z")
下記のようなドキュメントをlogstashにて解析し、Elasticsearchに連携しています。 ～省略～ "timestamp\_log": "2022-06-03T09:01:28.000+09:00", "awsRegion": "us-east-1", "requestParameters": { "template": false, "resourceId": "5tfEXAMPLE", "restApiId":… --- ## [Logstash issues with certificate](https://discuss.elastic.co/t/logstash-issues-with-certificate/291124)
**Author:** [@dominbdg](https://discuss.elastic.co/u/dominbdg)\ **Replies:** 4\ **Last updated:** [December 9, 2021, 12:11pm UTC](https://discuss.elastic.co/t/logstash-issues-with-certificate/291124 "2021-12-09T12:11:10Z")
Hello, From a couple of days I'm fighting with certificates for logstash. Certificate was generated for logstash and filebeat clients but after couple of minutes I'm receiving below errors: in attach I don't know if t… --- ## [Vega: Signal value automatically resets to initial value](https://discuss.elastic.co/t/vega-signal-value-automatically-resets-to-initial-value/261441)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 4\ **Last updated:** [January 21, 2021, 3:50pm UTC](https://discuss.elastic.co/t/vega-signal-value-automatically-resets-to-initial-value/261441 "2021-01-21T15:50:56Z")
I am trying to create a toggle button using Vega viz to add/remove a Dashboard filter. Everything works fine except when I toggle it ON, the filter gets added but the toggle button jumps back to the OFF state automatical… --- ## [Command line works, service does not](https://discuss.elastic.co/t/command-line-works-service-does-not/102857)
**Author:** [@Frizz\_Supertramp](https://discuss.elastic.co/u/Frizz_Supertramp)\ **Replies:** 4\ **Last updated:** [October 6, 2017, 8:06pm UTC](https://discuss.elastic.co/t/command-line-works-service-does-not/102857 "2017-10-06T20:06:54Z")
I have a very simple config that should produce tons of output: input { file { path =\> "/var/log/glusterfs/\*.log" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } output { stdout { codec =\> … --- ## [How to bulid ECE in multiple EC2 instances?](https://discuss.elastic.co/t/how-to-bulid-ece-in-multiple-ec2-instances/83392)
**Author:** [@weibin.wu](https://discuss.elastic.co/u/weibin.wu)\ **Replies:** 4\ **Last updated:** [April 25, 2017, 4:50am UTC](https://discuss.elastic.co/t/how-to-bulid-ece-in-multiple-ec2-instances/83392 "2017-04-25T04:50:08Z")
Hi ECE: I just successfully built ECE in one EC2 node in AWS. I assume we use Docker to separate the EC2 instances in many container and run ES on it? Its like building a VM on a VM. Am I right? I would like to know … --- ## [Docker implementation - Filebeats 7.17.2 - drop\_events not working](https://discuss.elastic.co/t/docker-implementation-filebeats-7-17-2-drop-events-not-working/303647)
**Author:** [@amills157](https://discuss.elastic.co/u/amills157)\ **Replies:** 8\ **Last updated:** [May 1, 2022, 4:44pm UTC](https://discuss.elastic.co/t/docker-implementation-filebeats-7-17-2-drop-events-not-working/303647 "2022-05-01T16:44:06Z")
I am trying to setup filebeats to monitor some docker containers - I am using autodiscover, but I don't want to be logging anything from my stack (Elastic, Kibana, Filebeats itself). I have tried to use drop\_events but i… --- ## [Problème connection filebeat](https://discuss.elastic.co/t/probleme-connection-filebeat/257870)
**Author:** [@f.boer](https://discuss.elastic.co/u/f.boer)\ **Replies:** 8\ **Last updated:** [December 10, 2020, 4:29pm UTC](https://discuss.elastic.co/t/probleme-connection-filebeat/257870 "2020-12-10T16:29:49Z")
bonjour je viens d'installer une version 7.10 d'elasticsearch pour pouvoir récupérer et stocker mes logs de firewall fortinet. Après recherche, il s'avère qu'il existe un module filebeat tout pret pour cela. j'ai instal… --- ## [Gerer des durées au format hh:mm:ss,SSS (sans la date)](https://discuss.elastic.co/t/gerer-des-durees-au-format-hhss-sss-sans-la-date/184009)
**Author:** [@r.thery](https://discuss.elastic.co/u/r.thery)\ **Replies:** 3\ **Last updated:** [June 4, 2019, 8:19am UTC](https://discuss.elastic.co/t/gerer-des-durees-au-format-hhss-sss-sans-la-date/184009 "2019-06-04T08:19:26Z")
bonjour, est il possible de gérer un champ "horaire" sans notion de date ? (d'autres sujets évoquent la fusion d'une date et d'un horaire,ici ce n'est pas l'objectif recherché) je dispose déjà d'un champ qui exprime u… --- ## [Error when running logstash.bat -f ..\\logstash.conf](https://discuss.elastic.co/t/error-when-running-logstash-bat-f-logstash-conf/131533)
**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\ **Replies:** 3\ **Last updated:** [May 22, 2018, 2:43pm UTC](https://discuss.elastic.co/t/error-when-running-logstash-bat-f-logstash-conf/131533 "2018-05-22T14:43:20Z")
Hi, This might be a simple error but I cant find the solution for it. When I run - logstash.bat -f ..\\logstash.conf in command prompt, I get the following. '-Xms1g' is not recognized as an internal or external comma… --- ## [Index\_Pattern set to metricbeat-\* on sample dashboards](https://discuss.elastic.co/t/index-pattern-set-to-metricbeat-on-sample-dashboards/118889)
**Author:** [@andyliddle](https://discuss.elastic.co/u/andyliddle)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 1:46pm UTC](https://discuss.elastic.co/t/index-pattern-set-to-metricbeat-on-sample-dashboards/118889 "2018-02-09T13:46:11Z")
Hi, Not sure if this is limited to metricbeat but, I noticed that in 6.2 that the index\_pattern on the default dashboards is set to "index\_pattern":"metricbeat-" when in the version 6.1.3 is was set to "index\_pattern"… --- ## [No .kibana privilege on Kibana UI?](https://discuss.elastic.co/t/no-kibana-privilege-on-kibana-ui/71684)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 7:43am UTC](https://discuss.elastic.co/t/no-kibana-privilege-on-kibana-ui/71684 "2017-01-20T07:43:10Z")
Environement Kibana 5.1.2 x-pack 5.1.2 Newly created role requires .kibana index access when search is done through kibana UI otherwise below error occurs in the audit log. \[2017-01-16T15:47:26,692\] \[transport\] \[acc… --- ## [Need guide for data retension/archiving](https://discuss.elastic.co/t/need-guide-for-data-retension-archiving/64806)
**Author:** [@Eugene\_Gwon](https://discuss.elastic.co/u/Eugene_Gwon)\ **Replies:** 3\ **Last updated:** [November 3, 2016, 1:45pm UTC](https://discuss.elastic.co/t/need-guide-for-data-retension-archiving/64806 "2016-11-03T13:45:46Z")
Hello all, I'm using ES 1.7.4 with Graylog. this system stores almost 200GB of data per month. After several months of test and live-use, I realize that I don't need more than 2 or 3 months of data on ES. so I decide… --- ## [Geo IP throwing wrong Country names](https://discuss.elastic.co/t/geo-ip-throwing-wrong-country-names/56990)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 3\ **Last updated:** [August 2, 2016, 10:42am UTC](https://discuss.elastic.co/t/geo-ip-throwing-wrong-country-names/56990 "2016-08-02T10:42:42Z")
Hi Elastic, Geo IP Plugin is not populating correct information. and for some of the IPs it is not showing the City Name. Ex: 170.251.154.205 This IP belongs to Bangalore and India, but in Kibana it is showing as Da… --- ## [Courier Fetch: Bad Gateway](https://discuss.elastic.co/t/courier-fetch-bad-gateway/52778)
**Author:** [@pip0](https://discuss.elastic.co/u/pip0)\ **Replies:** 3\ **Last updated:** [June 15, 2016, 3:36pm UTC](https://discuss.elastic.co/t/courier-fetch-bad-gateway/52778 "2016-06-15T15:36:37Z")
I been getting this error lately as soon as fire up Kibana. Any ideas why this is happening ? As soon as I hit the Go Back button my queries would populate. Please attached errors below. \[image\] \[image\] --- ## [Getting error while running main function in packetbeat](https://discuss.elastic.co/t/getting-error-while-running-main-function-in-packetbeat/51082)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 3\ **Last updated:** [May 30, 2016, 8:48am UTC](https://discuss.elastic.co/t/getting-error-while-running-main-function-in-packetbeat/51082 "2016-05-30T08:48:56Z")
I am trying to build packetbeat from sources, and I tried running using command "go run main.go -c packetbeat.yml" It gives error Exiting: error initializing publisher: Error loading template /tmp/go-build318793343/co… --- ## [Rspec tests for logstash 2.1](https://discuss.elastic.co/t/rspec-tests-for-logstash-2-1/39548)
**Author:** [@Rudy\_Gevaert](https://discuss.elastic.co/u/Rudy_Gevaert)\ **Replies:** 3\ **Last updated:** [January 21, 2016, 9:36pm UTC](https://discuss.elastic.co/t/rspec-tests-for-logstash-2-1/39548 "2016-01-21T21:36:32Z")
Hello, I'm trying to write a rspec test for the following filter: filter { if \[type\] == "apache-access" { grok { pattern =\> "%{COMBINEDAPACHELOG}" singles =\> true } date { match =\> \["t… --- ## [PDF's are not getting indexed in AppSearch when crawling it using AppSearch Web Crawler](https://discuss.elastic.co/t/pdfs-are-not-getting-indexed-in-appsearch-when-crawling-it-using-appsearch-web-crawler/329932)
**Author:** [@Disha\_Bodade](https://discuss.elastic.co/u/Disha_Bodade)\ **Replies:** 6\ **Last updated:** [April 19, 2023, 11:18am UTC](https://discuss.elastic.co/t/pdfs-are-not-getting-indexed-in-appsearch-when-crawling-it-using-appsearch-web-crawler/329932 "2023-04-19T11:18:52Z")
Hi Team, I have some PDF documents in my domain sitemap, and while crawling it, Appsearch web crawler logs shows message. \[2023-04-13T08:11:53.831+00:00\]\[844759\]\[49052\]\[crawler\]\[WARN\]: \[crawl:6437b871e4f7669ec8fc6df1\] … --- ## [Logstash 6.2 Multiple Pipelines,each with its own output file](https://discuss.elastic.co/t/logstash-6-2-multiple-pipelines-each-with-its-own-output-file/127547)
**Author:** [@davehatma](https://discuss.elastic.co/u/davehatma)\ **Replies:** 6\ **Last updated:** [April 11, 2018, 3:23pm UTC](https://discuss.elastic.co/t/logstash-6-2-multiple-pipelines-each-with-its-own-output-file/127547 "2018-04-11T15:23:08Z")
I'm running three pipelines from 'pipelines.yml' each pipeline config file has its own output filter: file { path =\> "/var/log/logstash/logstash-\[my-pipeline name\].log" } I'm finding that the output for all thr… --- ## [Config files for mutliple pipelines](https://discuss.elastic.co/t/config-files-for-mutliple-pipelines/115976)
**Author:** [@shubham\_kumar1](https://discuss.elastic.co/u/shubham_kumar1)\ **Replies:** 6\ **Last updated:** [February 2, 2018, 9:46am UTC](https://discuss.elastic.co/t/config-files-for-mutliple-pipelines/115976 "2018-02-02T09:46:39Z")
Hi, I am trying to configure two separate pipelines in logstash-6.1.1 through pipeline.yml. For each configuration file i am specifying same input and output. 1st\_pipeline.conf:- input{ beats{ port =\> 5044 } } fi… --- ## [Aggregation topHits problem](https://discuss.elastic.co/t/aggregation-tophits-problem/58022)
**Author:** [@xinevic](https://discuss.elastic.co/u/xinevic)\ **Replies:** 6\ **Last updated:** [August 15, 2016, 4:49pm UTC](https://discuss.elastic.co/t/aggregation-tophits-problem/58022 "2016-08-15T16:49:53Z")
Hi all! I need to do aggregation by field and return all relevant hits, not only 10. But now I have a strange problem: I have 8 relevant hits (according to count), but topHits returns me only 3. Why? --- ## [Could I drop @timestamp and @metadata in a event before sending event to Kafka?](https://discuss.elastic.co/t/could-i-drop-timestamp-and-metadata-in-a-event-before-sending-event-to-kafka/261719)
**Author:** [@cy-zheng](https://discuss.elastic.co/u/cy-zheng)\ **Replies:** 1\ **Last updated:** [January 21, 2021, 4:40am UTC](https://discuss.elastic.co/t/could-i-drop-timestamp-and-metadata-in-a-event-before-sending-event-to-kafka/261719 "2021-01-21T04:40:23Z")
Could I drop @timestamp and @metadata in a event before sending event to Kafka? --- ## [Elastic Agent Fleet Setup unauthorized](https://discuss.elastic.co/t/elastic-agent-fleet-setup-unauthorized/317406)
**Author:** [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\ **Replies:** 1\ **Last updated:** [October 26, 2022, 7:21pm UTC](https://discuss.elastic.co/t/elastic-agent-fleet-setup-unauthorized/317406 "2022-10-26T19:21:33Z")
When trying to deploy a fleet server via ECK, sometimes the pod is never created. The logs from the operator shows {"log.level":"error","@timestamp":"2022-10-25T11:42:57.936Z","log.logger":"manager.eck-operator","messa… --- ## [Kibana rules and group by](https://discuss.elastic.co/t/kibana-rules-and-group-by/304572)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 1\ **Last updated:** [May 16, 2022, 12:30pm UTC](https://discuss.elastic.co/t/kibana-rules-and-group-by/304572 "2022-05-16T12:30:53Z")
Hi all, I am trying to create a rule/alert. The rule is working as inteded, but the mail notification is causing my troubles. Hopefully someone smarter than me can point me in the right direction. I am using the UI t… --- ## [Did I hit bug related to scroll and too many scroll contexts](https://discuss.elastic.co/t/did-i-hit-bug-related-to-scroll-and-too-many-scroll-contexts/230954)
**Author:** [@crs](https://discuss.elastic.co/u/crs)\ **Replies:** 1\ **Last updated:** [May 14, 2020, 7:47am UTC](https://discuss.elastic.co/t/did-i-hit-bug-related-to-scroll-and-too-many-scroll-contexts/230954 "2020-05-14T07:47:23Z")
Hi, I've probably hit bug related to scrolling feature. I'm running ES 7.6.2 and have one process iterating over all entries from one of indices. It uses scroll feature and was working fine till yesterday. Now when I'm … --- ## [Date Maths in Kibana 4](https://discuss.elastic.co/t/date-maths-in-kibana-4/30038)
**Author:** [@Giovanii\_Mirko\_Terra](https://discuss.elastic.co/u/Giovanii_Mirko_Terra)\ **Replies:** 1\ **Last updated:** [September 26, 2015, 5:08am UTC](https://discuss.elastic.co/t/date-maths-in-kibana-4/30038 "2015-09-26T05:08:23Z")
Hi all!, I was wondering if this feature to work with date maths in scripted fields will be back in some future releases like here : https://www.elastic.co/blog/kibana-4-beta-3-now-more-filtery? As far as I can underst… --- ## [How to get and create users in elasticsearch with API by using python](https://discuss.elastic.co/t/how-to-get-and-create-users-in-elasticsearch-with-api-by-using-python/239565)
**Author:** [@Mahathir\_Mohammad](https://discuss.elastic.co/u/Mahathir_Mohammad)\ **Replies:** 2\ **Last updated:** [July 2, 2020, 5:51am UTC](https://discuss.elastic.co/t/how-to-get-and-create-users-in-elasticsearch-with-api-by-using-python/239565 "2020-07-02T05:51:33Z")
I want to get and create users in elasticsearch with python. I'm trying to use API. I'm following this documentation. I send a get request with Postman in this URL: http://localhost:9200/\_opendistro/\_security/api/intern… --- ## [ElasticsearchにWebページをクローリングしたい](https://discuss.elastic.co/t/elasticsearch-web/233509)
**Author:** [@s-hatanaka](https://discuss.elastic.co/u/s-hatanaka)\ **Replies:** 2\ **Last updated:** [June 5, 2020, 1:45am UTC](https://discuss.elastic.co/t/elasticsearch-web/233509 "2020-06-05T01:45:27Z")
社内のファイル検索にElasticsearchを利用させて頂いています。 社内のWebサイト（インターネットからは閲覧不可）情報も含めて横断検索できるようにするとより便利になるかなと考えておりまして、気軽にクローリングして、検索できるかどうかを試したいと思っています。 認証必要なページは不必要なページがありますが、まずは不必要なページから試したいと思っています。 ElasticStackのBeatsやLogstashを利用してWe… --- ## [Cluster's node distributed in two subnets](https://discuss.elastic.co/t/clusters-node-distributed-in-two-subnets/204372)
**Author:** [@tsmbalu](https://discuss.elastic.co/u/tsmbalu)\ **Replies:** 2\ **Last updated:** [October 20, 2019, 6:46pm UTC](https://discuss.elastic.co/t/clusters-node-distributed-in-two-subnets/204372 "2019-10-20T18:46:31Z")
We have created elasticsearch cluster with 4 nodes which is distributed in two subnets of aws with all the nodes with the role assigned as master, data, ingest and. It was all discovered and master node is elected. While… --- ## [Kibana - range based on count timeseries](https://discuss.elastic.co/t/kibana-range-based-on-count-timeseries/203435)
**Author:** [@megakoresh](https://discuss.elastic.co/u/megakoresh)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 11:59am UTC](https://discuss.elastic.co/t/kibana-range-based-on-count-timeseries/203435 "2019-10-14T11:59:20Z")
As continuation of this question: https://discuss.elastic.co/t/kibana-range-based-on-count/ I would like to now display this data over time. Kind of like this: Which is backed by the following expression: filters | … --- ## [Xpack Error in Elastic search. xpack settings not recognized](https://discuss.elastic.co/t/xpack-error-in-elastic-search-xpack-settings-not-recognized/200358)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 7:56am UTC](https://discuss.elastic.co/t/xpack-error-in-elastic-search-xpack-settings-not-recognized/200358 "2019-09-20T07:56:13Z")
Hi, I am using Elasticsearch 7.1.0, and im setting up my xpack such as: xpack.security.enabled: true discovery.type: single-node in my elasticsearch.yml. Then, i ran \>elasticsearch-setup-passwords interactive ERRO… --- ## [Unable to use rename processor](https://discuss.elastic.co/t/unable-to-use-rename-processor/154733)
**Author:** [@rocketraman](https://discuss.elastic.co/u/rocketraman)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 6:28am UTC](https://discuss.elastic.co/t/unable-to-use-rename-processor/154733 "2018-11-01T06:28:44Z")
I am trying to use the rename processor in Filebeat 6.4.2 like this: processors: - rename: fields: - from: "app.kubernetes.io/name" to: "app" - from: "app.kubernetes.io/… [Previous page](https://discuss.elastic.co/top.md?page=1214&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1216&per_page=50&period=all)