# Top **URL:** https://discuss.elastic.co/top.md?page=1227&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1228 --- ## [Horizontal scaling doesn't improve logshash performance with kinesis input plugin](https://discuss.elastic.co/t/horizontal-scaling-doesnt-improve-logshash-performance-with-kinesis-input-plugin/225674)
**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Replies:** 6\ **Last updated:** [April 1, 2020, 11:42am UTC](https://discuss.elastic.co/t/horizontal-scaling-doesnt-improve-logshash-performance-with-kinesis-input-plugin/225674 "2020-04-01T11:42:31Z")
as per prometheus metrics, only 1 logstash pod is processing the kinesis input, we need to vertically scale the pods in this case. can multiple logstash not work in parallel with kinesis input? --- ## [How to change colour in pie chart according to value in kibana canvas](https://discuss.elastic.co/t/how-to-change-colour-in-pie-chart-according-to-value-in-kibana-canvas/187014)
**Author:** [@Malini\_Sahoo](https://discuss.elastic.co/u/Malini_Sahoo)\ **Replies:** 1\ **Last updated:** [June 28, 2019, 1:29pm UTC](https://discuss.elastic.co/t/how-to-change-colour-in-pie-chart-according-to-value-in-kibana-canvas/187014 "2019-06-28T13:29:30Z")
Hi, how to change colour in pie chart according to value in kibana canvas? --- ## [Multiple Indexes in logstash from multiple filebeats -hostname](https://discuss.elastic.co/t/multiple-indexes-in-logstash-from-multiple-filebeats-hostname/88976)
**Author:** [@Vijayant\_Panda](https://discuss.elastic.co/u/Vijayant_Panda)\ **Replies:** 1\ **Last updated:** [June 12, 2017, 8:06pm UTC](https://discuss.elastic.co/t/multiple-indexes-in-logstash-from-multiple-filebeats-hostname/88976 "2017-06-12T20:06:22Z")
Hi I am a complete newbie to ELK. I have downloaded set up ELK in local.Now i am able to search one log file(from filebeats) in Kibana UI with logstash-\* index. In my json logs I have a filed called hostname:xxxx . i ne… --- ## [Support for Anchoring in Elasticsearch Regex](https://discuss.elastic.co/t/support-for-anchoring-in-elasticsearch-regex/14925)
**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\ **Replies:** 1\ **Last updated:** [July 29, 2014, 12:24pm UTC](https://discuss.elastic.co/t/support-for-anchoring-in-elasticsearch-regex/14925 "2014-07-29T12:24:49Z")
Hi Folks, I see that Elasticsearch supports Regex. But that is limited to Lucene's Regex Engine which does not support anchoring i.e. the entire string will always be anchored. This works as long as you have fixed r… --- ## [Logstash Issue sending data to elasticseach cluster](https://discuss.elastic.co/t/logstash-issue-sending-data-to-elasticseach-cluster/205205)
**Author:** [@pdkgamage](https://discuss.elastic.co/u/pdkgamage)\ **Replies:** 2\ **Last updated:** [October 28, 2019, 8:29am UTC](https://discuss.elastic.co/t/logstash-issue-sending-data-to-elasticseach-cluster/205205 "2019-10-28T08:29:20Z")
I have upgraded ELK stack into 7.4 version ( filebeat, logstash, elasticalert, kibana). I am using elasticsearch cloud. Once after the upgrade, following error shows in logstash log file. but few of records can see in k… --- ## [Changing the precision of the @timestamp field](https://discuss.elastic.co/t/changing-the-precision-of-the-timestamp-field/353728)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 8\ **Last updated:** [February 22, 2024, 8:23am UTC](https://discuss.elastic.co/t/changing-the-precision-of-the-timestamp-field/353728 "2024-02-22T08:23:50Z")
I have been using the generated @timestamp field in our documents as a record of when a document was sent to Elastic. I have been renaming the field in Logstash to suit our document structure. rename =\> { "@timestamp" =\>… --- ## [The Kibana website reports an error "Status Code 500"](https://discuss.elastic.co/t/the-kibana-website-reports-an-error-status-code-500/349138)
**Author:** [@sharbich](https://discuss.elastic.co/u/sharbich)\ **Replies:** 3\ **Last updated:** [December 27, 2023, 11:02pm UTC](https://discuss.elastic.co/t/the-kibana-website-reports-an-error-status-code-500/349138 "2023-12-27T23:02:52Z")
The call to my Kibana website terminates with the following error message: {"statusCode":500,"error":"Internal Server Error","message":"An internal server error occurred. Check Kibana server logs for details."} My Kiba… --- ## [Modify index.routing.allocation.total\_shards\_per\_node by ILM when going to WARM](https://discuss.elastic.co/t/modify-index-routing-allocation-total-shards-per-node-by-ilm-when-going-to-warm/282551)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [August 26, 2021, 12:53pm UTC](https://discuss.elastic.co/t/modify-index-routing-allocation-total-shards-per-node-by-ilm-when-going-to-warm/282551 "2021-08-26T12:53:45Z")
I have set "index.routing.allocation.total\_shards\_per\_node" :1 in index template for index with 6 primary shards. Because it is index intensive ETL and having shards on different nodes gives best performance results. … --- ## [Auditbeat permission Error](https://discuss.elastic.co/t/auditbeat-permission-error/213318)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 3\ **Last updated:** [January 6, 2020, 12:14pm UTC](https://discuss.elastic.co/t/auditbeat-permission-error/213318 "2020-01-06T12:14:54Z")
Hi, i'm using elk stack 7.1.1 with x-pack installed and i'm trying to setup auditbeat but i am getting the following error: 2019-12-30T13:18:04.176+0530 ERROR instance/beat.go:802 Exiting: 1 error: 1 error: failed to cr… --- ## [Kibana 6.4 chracter limit?](https://discuss.elastic.co/t/kibana-6-4-chracter-limit/148446)
**Author:** [@Ufkun\_Karaman](https://discuss.elastic.co/u/Ufkun_Karaman)\ **Replies:** 8\ **Last updated:** [October 5, 2018, 6:14am UTC](https://discuss.elastic.co/t/kibana-6-4-chracter-limit/148446 "2018-10-05T06:14:47Z")
I use elk 6.4 How can I solve the problem ? ( The problem is missing value ??) --- ## [Finding most severe code from a set of "error, warning and success"](https://discuss.elastic.co/t/finding-most-severe-code-from-a-set-of-error-warning-and-success/49137)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 3\ **Last updated:** [May 13, 2016, 7:56am UTC](https://discuss.elastic.co/t/finding-most-severe-code-from-a-set-of-error-warning-and-success/49137 "2016-05-13T07:56:01Z")
I have a log that looks like this: RequestID=request1 ComponentID=component1 Result=success RequestID=request2 ComponentID=component2 Result=warning RequestID=request1 ComponentID=component1 Result=success RequestID=requ… --- ## [How to setup pki auth for kibana and elasticsearch](https://discuss.elastic.co/t/how-to-setup-pki-auth-for-kibana-and-elasticsearch/154729)
**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\ **Replies:** 7\ **Last updated:** [November 2, 2018, 1:36pm UTC](https://discuss.elastic.co/t/how-to-setup-pki-auth-for-kibana-and-elasticsearch/154729 "2018-11-02T13:36:37Z")
Hello. I would like to set Kibana to use PKI auth instead of username/password. I have added realms in elasticsearch.yml file. but it dint work . \` elasticsearch.yml cluster.name: cluster node.master: false node.data… --- ## [Problem with function\_score and bool query including range](https://discuss.elastic.co/t/problem-with-function-score-and-bool-query-including-range/100701)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 1\ **Last updated:** [September 15, 2017, 4:11pm UTC](https://discuss.elastic.co/t/problem-with-function-score-and-bool-query-including-range/100701 "2017-09-15T16:11:57Z")
I am trying to randomly pick documents from an index. This query successfully returns one document. GET logstash-2017.09.10/\_search { "size": 1, "query": { "function\_score": { "query": { "bool": {… --- ## [About certgen, csr, and wildcard certificates](https://discuss.elastic.co/t/about-certgen-csr-and-wildcard-certificates/100380)
**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\ **Replies:** 1\ **Last updated:** [September 14, 2017, 12:48pm UTC](https://discuss.elastic.co/t/about-certgen-csr-and-wildcard-certificates/100380 "2017-09-14T12:48:11Z")
Hi, I'm desperately trying to enable TLS on my cluster (I want the node to use TLS for transport communication, for API access, and https for kibana). My cluster is composed of 9 nodes, but may evolve in the future so … --- ## [How to use our index name in data section in vega?](https://discuss.elastic.co/t/how-to-use-our-index-name-in-data-section-in-vega/304416)
**Author:** [@Arifullah](https://discuss.elastic.co/u/Arifullah)\ **Replies:** 2\ **Last updated:** [May 12, 2022, 6:46am UTC](https://discuss.elastic.co/t/how-to-use-our-index-name-in-data-section-in-vega/304416 "2022-05-12T06:46:16Z")
I want to create tree layout graph in vega from my index which its name is 123. the index has many fields but I want only two fields of the index to be showed in the graph which is A and B. The question is how to use my… --- ## [Elastic-endpoint process still running when I stop the elastic-agent service](https://discuss.elastic.co/t/elastic-endpoint-process-still-running-when-i-stop-the-elastic-agent-service/276269)
**Author:** [@lotus](https://discuss.elastic.co/u/lotus)\ **Replies:** 2\ **Last updated:** [June 18, 2021, 1:35am UTC](https://discuss.elastic.co/t/elastic-endpoint-process-still-running-when-i-stop-the-elastic-agent-service/276269 "2021-06-18T01:35:56Z")
Hello, we have installed elastic-agent-7.12 on Ubuntu 18.04 to test Endpoint security recently, but we found the elastic-endpoint take a quit large CPU, we decide to sopt it temporarily. while we stop the service elas… --- ## [Access field name with space in config?](https://discuss.elastic.co/t/access-field-name-with-space-in-config/64383)
**Author:** [@glagidse](https://discuss.elastic.co/u/glagidse)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 4:37pm UTC](https://discuss.elastic.co/t/access-field-name-with-space-in-config/64383 "2017-04-10T16:37:38Z")
I assign field names in from a csv into columns, one of them is called "Primary Key" I've tried a lot of combinations, but I can't figure out how to assign it to the document index. document\_id =\> "%{Primary Key}" j… --- ## [What's the status of topbeat](https://discuss.elastic.co/t/whats-the-status-of-topbeat/56629)
**Author:** [@Dmitry\_Belyakov](https://discuss.elastic.co/u/Dmitry_Belyakov)\ **Replies:** 2\ **Last updated:** [July 29, 2016, 8:57am UTC](https://discuss.elastic.co/t/whats-the-status-of-topbeat/56629 "2016-07-29T08:57:26Z")
Hi! Can someone please tell me what is the status of this beat? Will it make it into v.5? Because I currently don't see it in 5.0 branch on github.... Is there an alpha version of this beat somewhere? Also there used… --- ## [Failure in putting template mapping using Java Api](https://discuss.elastic.co/t/failure-in-putting-template-mapping-using-java-api/51122)
**Author:** [@supernovae](https://discuss.elastic.co/u/supernovae)\ **Replies:** 2\ **Last updated:** [May 27, 2016, 9:21am UTC](https://discuss.elastic.co/t/failure-in-putting-template-mapping-using-java-api/51122 "2016-05-27T09:21:05Z")
Hi, I'm trying to put a template mapping into elasticsearch using the Java api. This is the code I'm using: Client client = TransportClient.builder() .build() .addTransportAddress(new InetSocketTransportAddres… --- ## [Term offsets in scripting returning "-1"](https://discuss.elastic.co/t/term-offsets-in-scripting-returning-1/29221)
**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\ **Replies:** 2\ **Last updated:** [September 14, 2015, 9:54pm UTC](https://discuss.elastic.co/t/term-offsets-in-scripting-returning-1/29221 "2015-09-14T21:54:53Z")
I'm trying to get the term offsets and positions for a field in my index via scripting following the examples here: https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-advanced-scripting.html I wa… --- ## [Exact Phrase Match on a not\_analyzed field with a space in the phrase](https://discuss.elastic.co/t/exact-phrase-match-on-a-not-analyzed-field-with-a-space-in-the-phrase/14251)
**Author:** [@Edwin\_Frey](https://discuss.elastic.co/u/Edwin_Frey)\ **Replies:** 2\ **Last updated:** [November 5, 2013, 3:31am UTC](https://discuss.elastic.co/t/exact-phrase-match-on-a-not-analyzed-field-with-a-space-in-the-phrase/14251 "2013-11-05T03:31:02Z")
Good afternoon, I'm trying to boost a query that has an exact match on a field (in this case a name field). I've looked on Stack overflow and in this group and all of the answers seem to be set the field to no… --- ## [Installing App Search 7.2 GA](https://discuss.elastic.co/t/installing-app-search-7-2-ga/188103)
**Author:** [@bpamiri](https://discuss.elastic.co/u/bpamiri)\ **Replies:** 4\ **Last updated:** [July 8, 2019, 9:26pm UTC](https://discuss.elastic.co/t/installing-app-search-7-2-ga/188103 "2019-07-08T21:26:36Z")
I've just finished standing up a 10 node Elasticsearch 7.2 cluster on CentOS VMs in our data center. Now I want to download App Search and play with it. I'm a little confused as to where it needs to be installed. The doc… --- ## [How to get output in CSV format in Elastic Node Sql POST method](https://discuss.elastic.co/t/how-to-get-output-in-csv-format-in-elastic-node-sql-post-method/275330)
**Author:** [@Resington\_R](https://discuss.elastic.co/u/Resington_R)\ **Replies:** 4\ **Last updated:** [June 9, 2021, 7:42pm UTC](https://discuss.elastic.co/t/how-to-get-output-in-csv-format-in-elastic-node-sql-post-method/275330 "2021-06-09T19:42:26Z")
Hi... Can someone help to format the output in CSV for this Node JS code. I am using Elastic 7.10.2. I have tried change the path like /\_sql?format=csv its not working. But the same path in Kibana Dev Terminal, I am abl… --- ## [Elasticsearch 7.10.1 - Indexing term\_vector for search\_as\_you\_type field issue](https://discuss.elastic.co/t/elasticsearch-7-10-1-indexing-term-vector-for-search-as-you-type-field-issue/258456)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 4\ **Last updated:** [December 15, 2020, 8:20pm UTC](https://discuss.elastic.co/t/elasticsearch-7-10-1-indexing-term-vector-for-search-as-you-type-field-issue/258456 "2020-12-15T20:20:47Z")
Hi, Elasticsearch Version: 7.10.1 Getting the following error when trying to index a document {"\_index":"test1","\_type":"\_doc","\_id":"1000370980","status":400,"error":{"type":"illegal\_argument\_exception","reason":"can… --- ## [Can I require elastic-apm-node twice?](https://discuss.elastic.co/t/can-i-require-elastic-apm-node-twice/224684)
**Author:** [@ambrozy](https://discuss.elastic.co/u/ambrozy)\ **Replies:** 4\ **Last updated:** [March 26, 2020, 9:47am UTC](https://discuss.elastic.co/t/can-i-require-elastic-apm-node-twice/224684 "2020-03-26T09:47:39Z")
Hi guys, In my git repo I have an internal logger module that is stored as a git submodule, let's call it logger-module. It looks like this MyApp submodules logger-module The logger-module/index.js requires and s… --- ## [Manually Setting Geoip.Location](https://discuss.elastic.co/t/manually-setting-geoip-location/176429)
**Author:** [@David\_Berry](https://discuss.elastic.co/u/David_Berry)\ **Replies:** 4\ **Last updated:** [April 11, 2019, 4:41pm UTC](https://discuss.elastic.co/t/manually-setting-geoip-location/176429 "2019-04-11T16:41:48Z")
Hello Folks, I am looking for a way to manually set the geo location of various Logstash servers. While these Logstash server are all separated geographically, they are collecting logs and beats from servers that don't … --- ## [Unable to install x-pack for version 6.2.1](https://discuss.elastic.co/t/unable-to-install-x-pack-for-version-6-2-1/119371)
**Author:** [@kev](https://discuss.elastic.co/u/kev)\ **Replies:** 4\ **Last updated:** [February 14, 2018, 12:22am UTC](https://discuss.elastic.co/t/unable-to-install-x-pack-for-version-6-2-1/119371 "2018-02-14T00:22:46Z")
I am building a new CentOS with ELK. CentOS version is: # hostnamectl Static hostname: localhost.localdomain Icon name: computer-vm Chassis: vm Virtualization: vmware Operating System: CentO… --- ## [How to merge two lines having different patterns in a log file?](https://discuss.elastic.co/t/how-to-merge-two-lines-having-different-patterns-in-a-log-file/94208)
**Author:** [@Amit\_Singh1](https://discuss.elastic.co/u/Amit_Singh1)\ **Replies:** 4\ **Last updated:** [July 31, 2017, 5:15pm UTC](https://discuss.elastic.co/t/how-to-merge-two-lines-having-different-patterns-in-a-log-file/94208 "2017-07-31T17:15:31Z")
SAMPLE LOG: 2017-07-14 17:47:11 +0000 \[INFO\] from application in application-akka.actor.default-dispatcher-9 - requestId: 8e5ccc9dbb4611cf9f363efbbe8e1c59,user: gaurav@sigmoid.com, organization: Vdopia, view: Auction, … --- ## [Can I provide access to the user to change his password?](https://discuss.elastic.co/t/can-i-provide-access-to-the-user-to-change-his-password/58604)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [August 22, 2016, 7:51pm UTC](https://discuss.elastic.co/t/can-i-provide-access-to-the-user-to-change-his-password/58604 "2016-08-22T19:51:33Z")
Hi Experts, I have installed ES shield and Shield for kibana for testing purpose. Is it possible that user can change his password of it's own from kibana browser itself. I know this is something which is not available… --- ## [Search query format](https://discuss.elastic.co/t/search-query-format/51385)
**Author:** [@srinathkm](https://discuss.elastic.co/u/srinathkm)\ **Replies:** 4\ **Last updated:** [June 7, 2016, 7:53am UTC](https://discuss.elastic.co/t/search-query-format/51385 "2016-06-07T07:53:34Z")
Hi , I am trying to run search from elastic based on output from another application which dumps data in JSON format. Here is the format : {"currentRow":100,"fields":\[{"name":"dDocName"},{"name":"dDocTitle"},{"name… --- ## [App hangs (with es blocking requests)](https://discuss.elastic.co/t/app-hangs-with-es-blocking-requests/13864)
**Author:** [@nicolas\_long](https://discuss.elastic.co/u/nicolas_long)\ **Replies:** 4\ **Last updated:** [October 8, 2013, 1:33pm UTC](https://discuss.elastic.co/t/app-hangs-with-es-blocking-requests/13864 "2013-10-08T13:33:35Z")
Hi all, I've been experiencing a bug where my application hangs. I haven't been able to work out the problem and the code looks okay. Inspecting the threads I see several are blocked with the following: - sun.m… --- ## [Strange Polish Stempel Analysis](https://discuss.elastic.co/t/strange-polish-stempel-analysis/113705)
**Author:** [@Maciej\_Sek](https://discuss.elastic.co/u/Maciej_Sek)\ **Replies:** 0\ **Last updated:** [January 1, 2018, 6:24pm UTC](https://discuss.elastic.co/t/strange-polish-stempel-analysis/113705 "2018-01-01T18:24:56Z")
Hi, I have a problem with Polish Stempel Add-in analyzer. It converts "5531" number to "c" letter. This causing strange search results.. Example: GET products\_10\_pl\_1/\_analyze { "analyzer" : "polish", "text" : "5531… --- ## [Integration with nginx stubstatus doesn't work](https://discuss.elastic.co/t/integration-with-nginx-stubstatus-doesnt-work/315402)
**Author:** [@odelacruzc](https://discuss.elastic.co/u/odelacruzc)\ **Replies:** 5\ **Last updated:** [September 29, 2022, 5:43pm UTC](https://discuss.elastic.co/t/integration-with-nginx-stubstatus-doesnt-work/315402 "2022-09-29T17:43:31Z")
I work with nginx integration and elastic agent so, I configured host by default http://127.0.0.1:80, but my instance nginx is https, so kibana observability logs give me the follow error: "Error fetching data for metri… --- ## [API key and document-level security: Query not limiting response](https://discuss.elastic.co/t/api-key-and-document-level-security-query-not-limiting-response/271786)
**Author:** [@sgasse](https://discuss.elastic.co/u/sgasse)\ **Replies:** 5\ **Last updated:** [May 10, 2021, 1:54pm UTC](https://discuss.elastic.co/t/api-key-and-document-level-security-query-not-limiting-response/271786 "2021-05-10T13:54:25Z")
Hi! I was reading up a bit on API keys and document level security. Here are the relevant guides that I read: Create an API key Document Level Secuity Now I created an API key like this: POST /\_security/api\_key { … --- ## [Why ECK does not support gold and platinum license?](https://discuss.elastic.co/t/why-eck-does-not-support-gold-and-platinum-license/242272)
**Author:** [@cnlics](https://discuss.elastic.co/u/cnlics)\ **Replies:** 5\ **Last updated:** [September 22, 2020, 3:09am UTC](https://discuss.elastic.co/t/why-eck-does-not-support-gold-and-platinum-license/242272 "2020-09-22T03:09:15Z")
why ECK does not support gold and platinum license?really very strange design for a product is there plan to support them? will gold and platinum license be discarded in future? --- ## [Unable to join nodes to cluster](https://discuss.elastic.co/t/unable-to-join-nodes-to-cluster/244832)
**Author:** [@john7](https://discuss.elastic.co/u/john7)\ **Replies:** 5\ **Last updated:** [August 13, 2020, 12:24pm UTC](https://discuss.elastic.co/t/unable-to-join-nodes-to-cluster/244832 "2020-08-13T12:24:55Z")
I'm trying to setup a cluster of 3 elastic nodes. 1 master and two data nodes. I'm able to start all 3 of them yet they seem to setup there own cluster instead of joining together. Node 1 (the master) 192.168.56.114 … --- ## [I have latitude and longitude separate fields without any wrapper(like location), how do I define "geo\_point" data type](https://discuss.elastic.co/t/i-have-latitude-and-longitude-separate-fields-without-any-wrapper-like-location-how-do-i-define-geo-point-data-type/54678)
**Author:** [@sabiriqbal](https://discuss.elastic.co/u/sabiriqbal)\ **Replies:** 5\ **Last updated:** [July 5, 2016, 2:19pm UTC](https://discuss.elastic.co/t/i-have-latitude-and-longitude-separate-fields-without-any-wrapper-like-location-how-do-i-define-geo-point-data-type/54678 "2016-07-05T14:19:43Z")
Here is my json. { "app\_id": "5647", "contacts": \[ { "first\_name": "Sabir", "last\_name": "Iqbal" } \], "latitude": 44.669365, "longitude": -73.44533 } Here is my mapping. { … --- ## [How to extract timestamp and log level from message and add it as a filed](https://discuss.elastic.co/t/how-to-extract-timestamp-and-log-level-from-message-and-add-it-as-a-filed/316639)
**Author:** [@Akumar22](https://discuss.elastic.co/u/Akumar22)\ **Replies:** 6\ **Last updated:** [October 18, 2022, 9:47am UTC](https://discuss.elastic.co/t/how-to-extract-timestamp-and-log-level-from-message-and-add-it-as-a-filed/316639 "2022-10-18T09:47:42Z")
Hi I want to extract timestamp and log level from message and want to add it as a field can you please suggest some filter or grok pattern to do this sample log : 2022-10-12 12:02:32,611 \[DEBUG\]\[pool-5-thread-14\]\[com.… --- ## [Breaking change v6 to v7 to search date\_time\_parse\_exception 'hh:mm:ss a'](https://discuss.elastic.co/t/breaking-change-v6-to-v7-to-search-date-time-parse-exception-hhss-a/217444)
**Author:** [@akatz](https://discuss.elastic.co/u/akatz)\ **Replies:** 6\ **Last updated:** [March 13, 2020, 4:24pm UTC](https://discuss.elastic.co/t/breaking-change-v6-to-v7-to-search-date-time-parse-exception-hhss-a/217444 "2020-03-13T16:24:22Z")
I have tested that the following query works in versions of ES 6 (6.2.3, 6.8.2), but fails in versions of 7 (7.1.1, 7.3.1). The query is: { "query": { "bool": { "filter": \[ { "range": { … --- ## [Data frame vs datafeed vs rollup](https://discuss.elastic.co/t/data-frame-vs-datafeed-vs-rollup/213811)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 6\ **Last updated:** [January 9, 2020, 9:43am UTC](https://discuss.elastic.co/t/data-frame-vs-datafeed-vs-rollup/213811 "2020-01-09T09:43:56Z")
Hello There are few components in the Elastic stack, which I'm not sure I understand the difference and when to use which. for ML I use (currently) datafeed with pre-defined query (in practice it seems to aggregate met… --- ## [When is 2.1.1 coming out? Reaching a breaking point with this Windows JVM Memory Leak stuff](https://discuss.elastic.co/t/when-is-2-1-1-coming-out-reaching-a-breaking-point-with-this-windows-jvm-memory-leak-stuff/36338)
**Author:** [@h2k](https://discuss.elastic.co/u/h2k)\ **Replies:** 6\ **Last updated:** [December 9, 2015, 6:27pm UTC](https://discuss.elastic.co/t/when-is-2-1-1-coming-out-reaching-a-breaking-point-with-this-windows-jvm-memory-leak-stuff/36338 "2015-12-09T18:27:58Z")
I am running Logstash 1.5.4 on a number of Windows servers as an agent to collect eventlog and other data. I've done a decent job of tweaking the configuration such that it minimizes the use of expensive filtering and ot… --- ## [DNS Filter And GeoIP can't see ip field](https://discuss.elastic.co/t/dns-filter-and-geoip-cant-see-ip-field/142690)
**Author:** [@Alper\_Mehmet\_Ozdemir](https://discuss.elastic.co/u/Alper_Mehmet_Ozdemir)\ **Replies:** 3\ **Last updated:** [August 4, 2018, 10:32am UTC](https://discuss.elastic.co/t/dns-filter-and-geoip-cant-see-ip-field/142690 "2018-08-04T10:32:45Z")
Hello, I am trying to parse netflow logs and would like to perform a DNS lookup and get GeoIP information for the source and destination IPs. However, I can't seem to get Logstash to see the fields that contain the IPs. … --- ## [More detail about why you recommend running Watcher on a separate monitoring cluster (for larger clusters)?](https://discuss.elastic.co/t/more-detail-about-why-you-recommend-running-watcher-on-a-separate-monitoring-cluster-for-larger-clusters/60007)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 3\ **Last updated:** [September 7, 2016, 6:48pm UTC](https://discuss.elastic.co/t/more-detail-about-why-you-recommend-running-watcher-on-a-separate-monitoring-cluster-for-larger-clusters/60007 "2016-09-07T18:48:20Z")
Hi! We've been playing with watcher in our dev environment and were just about to deploy it on our main, apx 15 node cluster that hosts 10 TB of data. I just now saw "If you have a larger cluster, we recommend running… --- ## [EsRejectedExecutionException indexing 10 small (2k) docs per second](https://discuss.elastic.co/t/esrejectedexecutionexception-indexing-10-small-2k-docs-per-second/55644)
**Author:** [@jbalaguero](https://discuss.elastic.co/u/jbalaguero)\ **Replies:** 3\ **Last updated:** [July 25, 2016, 3:54pm UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-indexing-10-small-2k-docs-per-second/55644 "2016-07-25T15:54:23Z")
Hello, I have 1 ES node (ES 2.1.1) on RHEL 6.5, Oracle jdk1.7.9\_79, 8 Cores and 64 GB of RAM. Heap size = 1G, Index with 0 Replicas, indexing about 10 documents per second (one per thread). I’m getting these messages o… --- ## [How can i filter the deleted records from Kibana Dashboard](https://discuss.elastic.co/t/how-can-i-filter-the-deleted-records-from-kibana-dashboard/27500)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 3\ **Last updated:** [August 18, 2015, 4:35am UTC](https://discuss.elastic.co/t/how-can-i-filter-the-deleted-records-from-kibana-dashboard/27500 "2015-08-18T04:35:39Z")
Hi All I am using jdbc logstash plugin to post data to elastic. At this stage i have logstash ON and refresh every minute I am getting all the new records and the updated to ES/Kibana but the deleted record is showin… --- ## [Performance impact due to \_source storage](https://discuss.elastic.co/t/performance-impact-due-to--source-storage/2081)
**Author:** [@mosiddi](https://discuss.elastic.co/u/mosiddi)\ **Replies:** 3\ **Last updated:** [July 3, 2015, 4:42pm UTC](https://discuss.elastic.co/t/performance-impact-due-to--source-storage/2081 "2015-07-03T16:42:45Z")
If we store the \_source so that we can do partial update Partial Updates to Documents | Elasticsearch: The Definitive Guide \[2.x\] | Elastic Other than having a hit on disk space needed to sore the data, do we have an… --- ## [Upload images to elastic search and display it in kibana](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258)
**Author:** [@Raghupathy\_M](https://discuss.elastic.co/u/Raghupathy_M)\ **Replies:** 1\ **Last updated:** [December 17, 2021, 3:31pm UTC](https://discuss.elastic.co/t/upload-images-to-elastic-search-and-display-it-in-kibana/292258 "2021-12-17T15:31:48Z")
How to Upload images to Elasticsearch and display it in kibana --- ## [Filebeat & Windows DHCP Logging](https://discuss.elastic.co/t/filebeat-windows-dhcp-logging/271017)
**Author:** [@billkindle](https://discuss.elastic.co/u/billkindle)\ **Replies:** 1\ **Last updated:** [April 24, 2021, 9:45am UTC](https://discuss.elastic.co/t/filebeat-windows-dhcp-logging/271017 "2021-04-24T09:45:36Z")
I'm trying to locate some examples that are specific to elastic cloud when using filebeat to capture Microsoft DHCP logs. All the examples I find online aren't really matching what I'm seeing in 7.12.0 example files, or … --- ## [Can't get ILM to work with filebeat / metricbeat 8.4](https://discuss.elastic.co/t/cant-get-ilm-to-work-with-filebeat-metricbeat-8-4/315302)
**Author:** [@thomas\_huesler](https://discuss.elastic.co/u/thomas_huesler)\ **Replies:** 2\ **Last updated:** [October 15, 2022, 1:40pm UTC](https://discuss.elastic.co/t/cant-get-ilm-to-work-with-filebeat-metricbeat-8-4/315302 "2022-10-15T13:40:44Z")
Dear all I'm struggling to get the ILM on Filebeat and Metricbeat to work and was reading through the docs and blogs the last couple of days. I think I must miss something basic but can't figure out what... I would lik… --- ## [ElasticSearch Keystore Setup up error when deploying Docker image 7:10:2 to pod](https://discuss.elastic.co/t/elasticsearch-keystore-setup-up-error-when-deploying-docker-image-72-to-pod/276402)
**Author:** [@patelsop78](https://discuss.elastic.co/u/patelsop78)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-keystore-setup-up-error-when-deploying-docker-image-72-to-pod/276402 "2021-06-21T14:40:20Z")
Getting below error when deploying pod using Docker 7.10.2 image. Exception in thread "main" java.io.IOException: Is a directory: SimpleFSIndexInput(path="/usr/share/elasticsearch/config/elasticsearch.keystore") at org… [Previous page](https://discuss.elastic.co/top.md?page=1226&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1228&per_page=50&period=all)