# Top

**URL:** https://discuss.elastic.co/top.md?page=1230&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1231

---

## [Connect logstash with Cassandra and send data to Elastic](https://discuss.elastic.co/t/connect-logstash-with-cassandra-and-send-data-to-elastic/82912)

<div class="topic-metadata">

**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\
**Replies:** 2\
**Last updated:** [April 22, 2017, 11:21am UTC](https://discuss.elastic.co/t/connect-logstash-with-cassandra-and-send-data-to-elastic/82912 "2017-04-22T11:21:36Z")

</div>

Hi Team : I am trying to import data from Cassandra to Elastic using logstash jdbc , but I am getting an error as org.apache.cassandra.cql.jdbc.CassandraDriver not loaded. where as I added the jar and class path as below…

---

## [Using the elasticsearch-mongodb-river to index multiple collections in the same db](https://discuss.elastic.co/t/using-the-elasticsearch-mongodb-river-to-index-multiple-collections-in-the-same-db/7004)

<div class="topic-metadata">

**Author:** [@MoizD](https://discuss.elastic.co/u/MoizD)\
**Replies:** 2\
**Last updated:** [December 12, 2012, 10:35pm UTC](https://discuss.elastic.co/t/using-the-elasticsearch-mongodb-river-to-index-multiple-collections-in-the-same-db/7004 "2012-12-12T22:35:03Z")

</div>

Hello, I am not sure if this is the right forum for the mongodb river by Richard Willy (https://github.com/richardwilly98/elasticsearch-river- mongodb/). I have used it successfully for indexing a single collection…

---

## [Logstash Date Filter Not Working with tab](https://discuss.elastic.co/t/logstash-date-filter-not-working-with-tab/228300)

<div class="topic-metadata">

**Author:** [@Atul\_Gunjal](https://discuss.elastic.co/u/Atul_Gunjal)\
**Replies:** 3\
**Last updated:** [April 17, 2020, 2:52pm UTC](https://discuss.elastic.co/t/logstash-date-filter-not-working-with-tab/228300 "2020-04-17T14:52:54Z")

</div>

I need to parse event and time separated by tab using the date filter in logstash, but logstash failed to identify tab and gives an error grok{ patterns\_dir =\> \["./patterns"\] match =\> { "message" =\> "%{TIME…

---

## [How to call fscrawler in an app web (python)?](https://discuss.elastic.co/t/how-to-call-fscrawler-in-an-app-web-python/134983)

<div class="topic-metadata">

**Author:** [@samy\_ouldali](https://discuss.elastic.co/u/samy_ouldali)\
**Replies:** 3\
**Last updated:** [June 21, 2018, 12:31pm UTC](https://discuss.elastic.co/t/how-to-call-fscrawler-in-an-app-web-python/134983 "2018-06-21T12:31:11Z")

</div>

Hello everybody, this is my first topic on this forum :slight\_smile: I would like if it was possible to use fscrawler on an app python. In fact, i created a simple interface to communicate with my ES cluster with flask,…

---

## [How do I manage schema/mapping migrations/evolutions in Elasticsearch?](https://discuss.elastic.co/t/how-do-i-manage-schema-mapping-migrations-evolutions-in-elasticsearch/82105)

<div class="topic-metadata">

**Author:** [@elnur](https://discuss.elastic.co/u/elnur)\
**Replies:** 0\
**Last updated:** [April 12, 2017, 7:32am UTC](https://discuss.elastic.co/t/how-do-i-manage-schema-mapping-migrations-evolutions-in-elasticsearch/82105 "2017-04-12T07:32:26Z")

</div>

Flyway is a very convenient schema migration/evolution tool in the RDBMS world. I'm looking for something similar for ES. Even though ES is different from RDBMS and I get that, the whole point of a tool like Flyway is …

---

## [Need to promote nested field to a higherlevel using logstash](https://discuss.elastic.co/t/need-to-promote-nested-field-to-a-higherlevel-using-logstash/34292)

<div class="topic-metadata">

**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\
**Replies:** 3\
**Last updated:** [February 18, 2016, 9:39am UTC](https://discuss.elastic.co/t/need-to-promote-nested-field-to-a-higherlevel-using-logstash/34292 "2016-02-18T09:39:57Z")

</div>

Hi: I have a mapping similar to this : { "type1" : { "properties" : { "field1": { "type": "nested", "nested\_field1": { "typ…

---

## [Filebeat fails connection to Logstash on Kubernetes](https://discuss.elastic.co/t/filebeat-fails-connection-to-logstash-on-kubernetes/351822)

<div class="topic-metadata">

**Author:** [@Ziggiyzoo](https://discuss.elastic.co/u/Ziggiyzoo)\
**Replies:** 5\
**Last updated:** [January 29, 2024, 2:14pm UTC](https://discuss.elastic.co/t/filebeat-fails-connection-to-logstash-on-kubernetes/351822 "2024-01-29T14:14:19Z")

</div>

Hi, I'm trying to connect a Filebeats deployment to Logstash but I am having error getting Filebeat to connect. A connection attempt failed because the connected party did not properly respond after a period of time, o…

---

## [Elasticsearch performance issue](https://discuss.elastic.co/t/elasticsearch-performance-issue/56974)

<div class="topic-metadata">

**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\
**Replies:** 5\
**Last updated:** [August 3, 2016, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-performance-issue/56974 "2016-08-03T08:15:17Z")

</div>

Hello, I had 2 node (version 2.x) test setup which was running properly. recently I have added two more nodes and changed the cluster name, due to cluster name change i have lost indexes and new indexes were created, …

---

## [How to cheat unique count to not use HLL++](https://discuss.elastic.co/t/how-to-cheat-unique-count-to-not-use-hll/35237)

<div class="topic-metadata">

**Author:** [@Marcin\_Kubica](https://discuss.elastic.co/u/Marcin_Kubica)\
**Replies:** 5\
**Last updated:** [December 1, 2015, 10:01am UTC](https://discuss.elastic.co/t/how-to-cheat-unique-count-to-not-use-hll/35237 "2015-12-01T10:01:40Z")

</div>

Hi Is there any way to cheat unique count to get non-aproximated value? Need this for kibana displays. Scripted field? Cheers Marcin

---

## [Getting file text content from mapper?](https://discuss.elastic.co/t/getting-file-text-content-from-mapper/20851)

<div class="topic-metadata">

**Author:** [@Raymond\_Giorgi1](https://discuss.elastic.co/u/Raymond_Giorgi1)\
**Replies:** 5\
**Last updated:** [November 13, 2015, 2:54pm UTC](https://discuss.elastic.co/t/getting-file-text-content-from-mapper/20851 "2015-11-13T14:54:56Z")

</div>

Hey all, I'm hoping someone can help me out with something I'm having an issue with. The short: I'm trying to extract plaintext from the attachment-mapper. The long: I'm posting the contents of a file Base64 enc…

---

## [List of Lucene jar dependencies of Java API](https://discuss.elastic.co/t/list-of-lucene-jar-dependencies-of-java-api/12408)

<div class="topic-metadata">

**Author:** [@Paul\_Bellora](https://discuss.elastic.co/u/Paul_Bellora)\
**Replies:** 5\
**Last updated:** [December 3, 2013, 5:57pm UTC](https://discuss.elastic.co/t/list-of-lucene-jar-dependencies-of-java-api/12408 "2013-12-03T17:57:26Z")

</div>

I'm in the process of integrating with ES and I'm installing the Java client jar (0.90.0). I'm not using maven. As I've read elsewhere (and learned via runtime errors), the Java client depends on various Lucene jar…

---

## [Kibana Generate PDF Report Cutting Off X-Axis](https://discuss.elastic.co/t/kibana-generate-pdf-report-cutting-off-x-axis/270624)

<div class="topic-metadata">

**Author:** [@thedevelpr](https://discuss.elastic.co/u/thedevelpr)\
**Replies:** 8\
**Last updated:** [April 23, 2021, 4:44pm UTC](https://discuss.elastic.co/t/kibana-generate-pdf-report-cutting-off-x-axis/270624 "2021-04-23T16:44:26Z")

</div>

I'm having issues generating reports using Kibana. All my charts get cut off on the x-axis whether I optimize for printing or not. I've also tried to generate pdfs by creating a canvas and adding Kibana elements into …

---

## [ERROR: Failed to verify bootstrap password when setting built in user's password](https://discuss.elastic.co/t/error-failed-to-verify-bootstrap-password-when-setting-built-in-users-password/241341)

<div class="topic-metadata">

**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\
**Replies:** 0\
**Last updated:** [July 15, 2020, 5:21pm UTC](https://discuss.elastic.co/t/error-failed-to-verify-bootstrap-password-when-setting-built-in-users-password/241341 "2020-07-15T17:21:45Z")

</div>

I have imported and started Elasticsearch Source Code into an IntelliJ IDEA project. I want to create the password for the built-in users To enable security, I passed -Dtests.es.xpack.security.enabled=true as a parame…

---

## [No indices - but winlogbeat thinks it's working](https://discuss.elastic.co/t/no-indices-but-winlogbeat-thinks-its-working/191422)

<div class="topic-metadata">

**Author:** [@B\_Frap](https://discuss.elastic.co/u/B_Frap)\
**Replies:** 8\
**Last updated:** [July 19, 2019, 10:23pm UTC](https://discuss.elastic.co/t/no-indices-but-winlogbeat-thinks-its-working/191422 "2019-07-19T22:23:19Z")

</div>

Winlogbeat is pretty happy, but I'm not able to see anything in Kibana. I have some other beats reporting data. Here's a snip from winlogbeat: 2019-07-19T11:13:25.816-0400 INFO beater/eventlogger.go:76 EventLog\[Forward…

---

## [Elasticsearch filter plugin query failure](https://discuss.elastic.co/t/elasticsearch-filter-plugin-query-failure/48838)

<div class="topic-metadata">

**Author:** [@jchoinski](https://discuss.elastic.co/u/jchoinski)\
**Replies:** 1\
**Last updated:** [May 1, 2016, 1:38am UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-query-failure/48838 "2016-05-01T01:38:16Z")

</div>

Hello, I'm trying to query for an instrument in elasticsearch and calculate the time difference between the events. I'm running into an error trying to query elasticsearch. Here is the config. filter { if \[type\] …

---

## [Search\_phase\_execution\_exception filebeat all shards failed](https://discuss.elastic.co/t/search-phase-execution-exception-filebeat-all-shards-failed/259755)

<div class="topic-metadata">

**Author:** [@whosecode](https://discuss.elastic.co/u/whosecode)\
**Replies:** 1\
**Last updated:** [December 29, 2020, 1:11am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-filebeat-all-shards-failed/259755 "2020-12-29T01:11:42Z")

</div>

Hi! My ealstic cluster overview panel shows health yellow as shards are missing, and I get below reponses whenever I try to produce some visualization, or dashboard search\_phase\_execution\_exception all shards failed E…

---

## [\_grokparsefailure, \_geoip\_lookup\_failure après un reindex](https://discuss.elastic.co/t/grokparsefailure-geoip-lookup-failure-apres-un-reindex/115051)

<div class="topic-metadata">

**Author:** [@Soufiane\_Zamouri](https://discuss.elastic.co/u/Soufiane_Zamouri)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 3:19pm UTC](https://discuss.elastic.co/t/grokparsefailure-geoip-lookup-failure-apres-un-reindex/115051 "2018-01-11T15:19:39Z")

</div>

Bonjour, Après avoir migres mes données avec un reindex avec un for i in cat index\_list.txt do echo $i curl -XPOST \[DESTINATION\]:9200/\_reindex?pretty -d '{ "source": { "remote": { "host": "http://\[SOURCE\]:9…

---

## [DataTable with two different indices](https://discuss.elastic.co/t/datatable-with-two-different-indices/142441)

<div class="topic-metadata">

**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\
**Replies:** 2\
**Last updated:** [August 4, 2018, 12:43am UTC](https://discuss.elastic.co/t/datatable-with-two-different-indices/142441 "2018-08-04T00:43:11Z")

</div>

I have documents in two different indices that relate to each other. Each document has a unique ID field that matches one or more documents in the other index. I am trying to build a visualization (datatable) that displ…

---

## [How to Configure S3 input plugin?](https://discuss.elastic.co/t/how-to-configure-s3-input-plugin/59371)

<div class="topic-metadata">

**Author:** [@Allie\_Yang](https://discuss.elastic.co/u/Allie_Yang)\
**Replies:** 2\
**Last updated:** [August 31, 2016, 6:54am UTC](https://discuss.elastic.co/t/how-to-configure-s3-input-plugin/59371 "2016-08-31T06:54:50Z")

</div>

Hi I am trying to connect the S3 bucket to my logstash, since i have stored log files on S3. Would you pls suggest what i am missing? Below is my input filter: input { s3 { bucket =\> "purchaselogs" access\_key…

---

## [Packet Beat /mac address](https://discuss.elastic.co/t/packet-beat-mac-address/55314)

<div class="topic-metadata">

**Author:** [@zivn](https://discuss.elastic.co/u/zivn)\
**Replies:** 2\
**Last updated:** [July 13, 2016, 4:47am UTC](https://discuss.elastic.co/t/packet-beat-mac-address/55314 "2016-07-13T04:47:42Z")

</div>

Hi I am trying to record the traffic using the packet beat and Iwas expected to have the data of the unparsered traffic, within that field I was expected to see the MAC adress. yet I cannot. How can I ercord and then i…

---

## [Producing Arm builds with beats packer](https://discuss.elastic.co/t/producing-arm-builds-with-beats-packer/39727)

<div class="topic-metadata">

**Author:** [@kai5263499](https://discuss.elastic.co/u/kai5263499)\
**Replies:** 2\
**Last updated:** [January 21, 2016, 1:34pm UTC](https://discuss.elastic.co/t/producing-arm-builds-with-beats-packer/39727 "2016-01-21T13:34:10Z")

</div>

Has anyone tried producing linux arm builds (deb or rpm) with the beats packer docker images?

---

## [Filebeat and incompatible CentOS](https://discuss.elastic.co/t/filebeat-and-incompatible-centos/38908)

<div class="topic-metadata">

**Author:** [@Munsta0](https://discuss.elastic.co/u/Munsta0)\
**Replies:** 2\
**Last updated:** [January 12, 2016, 7:34am UTC](https://discuss.elastic.co/t/filebeat-and-incompatible-centos/38908 "2016-01-12T07:34:29Z")

</div>

Hey All, Our IT department was tasked with finding and implementing a new log parser for our servers and we chose the ELK solution. Everything went smooth until we tried to installing filebeat on the servers. We ar…

---

## [Unable to Read from File in Windows](https://discuss.elastic.co/t/unable-to-read-from-file-in-windows/23784)

<div class="topic-metadata">

**Author:** [@JamesRenaud](https://discuss.elastic.co/u/JamesRenaud)\
**Replies:** 2\
**Last updated:** [June 16, 2015, 8:27pm UTC](https://discuss.elastic.co/t/unable-to-read-from-file-in-windows/23784 "2015-06-16T20:27:01Z")

</div>

Hey all, I'm at a bit of a loss on this one after spending a couple hours on Google and checking through about a dozen articles I'm still not getting this resolved. I have a flat \*.log file that I'm trying to read fr…

---

## [Assistance requried for Logstash filter with GROK](https://discuss.elastic.co/t/assistance-requried-for-logstash-filter-with-grok/22370)

<div class="topic-metadata">

**Author:** [@Bharath\_Paruchuri](https://discuss.elastic.co/u/Bharath_Paruchuri)\
**Replies:** 2\
**Last updated:** [February 25, 2015, 3:27pm UTC](https://discuss.elastic.co/t/assistance-requried-for-logstash-filter-with-grok/22370 "2015-02-25T15:27:23Z")

</div>

Hi, I'm trying to filter below weblogic log using Logtrash filter GROK. \[2015-02-24T19:17:31.238-05:00\] \[SOA1\] \[NOTIFICATION\] \[\] \[oracle.soa.b2b.engine\] \[tid: DaemonWorkThread: '4' of WorkManager: 'wm/SOAWorkMa…

---

## [Bucket aggregation](https://discuss.elastic.co/t/bucket-aggregation/304271)

<div class="topic-metadata">

**Author:** [@meyer1](https://discuss.elastic.co/u/meyer1)\
**Replies:** 2\
**Last updated:** [May 10, 2022, 1:38am UTC](https://discuss.elastic.co/t/bucket-aggregation/304271 "2022-05-10T01:38:08Z")

</div>

Hello everyone, I have a short question for you. Currently I am trying to make an aggregation request for a table visualization. Except that I am limited to 65000 bucket or so (by default I believe according to the erro…

---

## [Kibana 6.4.2 plugin](https://discuss.elastic.co/t/kibana-6-4-2-plugin/151513)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 6\
**Last updated:** [October 19, 2018, 2:05pm UTC](https://discuss.elastic.co/t/kibana-6-4-2-plugin/151513 "2018-10-19T14:05:54Z")

</div>

Where are plugin listed in for kibana? I am trying to install enhanced-table plugin but it does not work and I can't find any other table plugin for 6.4.2

---

## [Question about strange behaviour with Fuzzy query in elasticsearch](https://discuss.elastic.co/t/question-about-strange-behaviour-with-fuzzy-query-in-elasticsearch/296362)

<div class="topic-metadata">

**Author:** [@psydow](https://discuss.elastic.co/u/psydow)\
**Replies:** 4\
**Last updated:** [February 7, 2022, 12:30pm UTC](https://discuss.elastic.co/t/question-about-strange-behaviour-with-fuzzy-query-in-elasticsearch/296362 "2022-02-07T12:30:07Z")

</div>

Hello everyone, I am new to the elastic stack and fulltext search for this reason there came up a question regarding some fuzzy queries I was working with the last Weeks. For context I want to realise a system where th…

---

## [Legend in map visualization](https://discuss.elastic.co/t/legend-in-map-visualization/263799)

<div class="topic-metadata">

**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\
**Replies:** 4\
**Last updated:** [February 11, 2021, 4:38am UTC](https://discuss.elastic.co/t/legend-in-map-visualization/263799 "2021-02-11T04:38:57Z")

</div>

Hello, I have tried to get legend (as above one) for below map but didn't find that option anywhere in 7.9 version. Is there any way to add legend in map ?

---

## [Kibana load balancing](https://discuss.elastic.co/t/kibana-load-balancing/82813)

<div class="topic-metadata">

**Author:** [@hello4usharath](https://discuss.elastic.co/u/hello4usharath)\
**Replies:** 4\
**Last updated:** [April 19, 2017, 5:01pm UTC](https://discuss.elastic.co/t/kibana-load-balancing/82813 "2017-04-19T17:01:02Z")

</div>

Hi , If we are using 2 kibana instance. Does required any common mount point to save the dashboards or kibana index is capable of managing it? Thanks Sharath

---

## [Relational-\>ES index schema strategy (1 index per table or all tables in 1 index)](https://discuss.elastic.co/t/relational-es-index-schema-strategy-1-index-per-table-or-all-tables-in-1-index/5392)

<div class="topic-metadata">

**Author:** [@datadev](https://discuss.elastic.co/u/datadev)\
**Replies:** 4\
**Last updated:** [October 2, 2011, 7:00am UTC](https://discuss.elastic.co/t/relational-es-index-schema-strategy-1-index-per-table-or-all-tables-in-1-index/5392 "2011-10-02T07:00:02Z")

</div>

We have an application contains over 50,000 user-generated tables (each with user-defined fields and data, etc…) in a relational db, and new tables are created on the fly. Some of the tables have large data sets a…

---

## [In Kibana 7.7.1, often try create too many scroll contexts when query the index kibana\_task\_manager](https://discuss.elastic.co/t/in-kibana-7-7-1-often-try-create-too-many-scroll-contexts-when-query-the-index-kibana-task-manager/251626)

<div class="topic-metadata">

**Author:** [@bruceandalvin](https://discuss.elastic.co/u/bruceandalvin)\
**Replies:** 3\
**Last updated:** [October 29, 2020, 10:50pm UTC](https://discuss.elastic.co/t/in-kibana-7-7-1-often-try-create-too-many-scroll-contexts-when-query-the-index-kibana-task-manager/251626 "2020-10-29T22:50:43Z")

</div>

\[2020-10-09T21:08:38,776\]\[WARN \]\[r.suppressed \] \[MyNode00\] path: /.kibana\_task\_manager/\_update\_by\_query, params: {ignore\_unavailable=true, refresh=true, conflicts=proceed, index=.kibana\_task\_manager, max\_doc…

---

## [Set \_id field when creating index template](https://discuss.elastic.co/t/set-id-field-when-creating-index-template/206706)

<div class="topic-metadata">

**Author:** [@newkate12](https://discuss.elastic.co/u/newkate12)\
**Replies:** 3\
**Last updated:** [December 7, 2019, 3:52am UTC](https://discuss.elastic.co/t/set-id-field-when-creating-index-template/206706 "2019-12-07T03:52:10Z")

</div>

I want to use index template when creating index in elasticsearch. I saw that we can set \_id field with specific field when creating index. (https://www.elastic.co/guide/en/elasticsearch/reference/1.4/mapping-id-field.…

---

## [Unable to start Kibana (7.4) server at boot in CENTOS 7.7](https://discuss.elastic.co/t/unable-to-start-kibana-7-4-server-at-boot-in-centos-7-7/203105)

<div class="topic-metadata">

**Author:** [@clundy](https://discuss.elastic.co/u/clundy)\
**Replies:** 3\
**Last updated:** [October 15, 2019, 2:01pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-7-4-server-at-boot-in-centos-7-7/203105 "2019-10-15T14:01:45Z")

</div>

I disabled selinux in an affort to get Kibana started. It worked initially, but the kibana service fails to start. I checked /var/log/kibana/kibana.stderr. The following log entry is present: "FATAL Error: Port 5601 is…

---

## [Nested object visualization](https://discuss.elastic.co/t/nested-object-visualization/192377)

<div class="topic-metadata">

**Author:** [@theo1991](https://discuss.elastic.co/u/theo1991)\
**Replies:** 3\
**Last updated:** [August 8, 2019, 3:21pm UTC](https://discuss.elastic.co/t/nested-object-visualization/192377 "2019-08-08T15:21:48Z")

</div>

Hello, Is it possible to select a nested object to visualize in Kibana ? I want to select the first field in this nested object. Here is my filter : grok : u'rules': \\\[(?\<\[@metadata\]\[rules\]\>\[^\\\]\]+)\\\] ruby : rules =…

---

## [Exact matches with match query on analyzed field not showing on top](https://discuss.elastic.co/t/exact-matches-with-match-query-on-analyzed-field-not-showing-on-top/87395)

<div class="topic-metadata">

**Author:** [@shashankgutha](https://discuss.elastic.co/u/shashankgutha)\
**Replies:** 3\
**Last updated:** [May 29, 2017, 7:12am UTC](https://discuss.elastic.co/t/exact-matches-with-match-query-on-analyzed-field-not-showing-on-top/87395 "2017-05-29T07:12:58Z")

</div>

---

## [Newbie 1st script having issues - load from SQL to ES](https://discuss.elastic.co/t/newbie-1st-script-having-issues-load-from-sql-to-es/78842)

<div class="topic-metadata">

**Author:** [@Natan\_Zarhin](https://discuss.elastic.co/u/Natan_Zarhin)\
**Replies:** 3\
**Last updated:** [March 17, 2017, 11:03am UTC](https://discuss.elastic.co/t/newbie-1st-script-having-issues-load-from-sql-to-es/78842 "2017-03-17T11:03:57Z")

</div>

Hello. I am probably doing many things wrong on my baby steps in trying to load from sql to ES using python. I have some syntax error if you can help pls? import pyodbc from elasticsearch import Elasticsearch,helpers…

---

## [Accessing payload in nested object with groovy](https://discuss.elastic.co/t/accessing-payload-in-nested-object-with-groovy/50452)

<div class="topic-metadata">

**Author:** [@peppetrick](https://discuss.elastic.co/u/peppetrick)\
**Replies:** 3\
**Last updated:** [May 20, 2016, 2:00pm UTC](https://discuss.elastic.co/t/accessing-payload-in-nested-object-with-groovy/50452 "2016-05-20T14:00:26Z")

</div>

Hi all I have a problem with inline script for condition in a watch. The payload response is like the one below, and I have to calculate the condition on the ratio KO.dco\_count/hits.total I wrote "condition" :…

---

## [Access user to access particular index in shield](https://discuss.elastic.co/t/access-user-to-access-particular-index-in-shield/25310)

<div class="topic-metadata">

**Author:** [@karthikjaps](https://discuss.elastic.co/u/karthikjaps)\
**Replies:** 3\
**Last updated:** [July 10, 2015, 1:01pm UTC](https://discuss.elastic.co/t/access-user-to-access-particular-index-in-shield/25310 "2015-07-10T13:01:23Z")

</div>

Hi , i try to work in elastic shield with elastic search , i have an query about , how to assign single user to access only particular index ? in creating roles in roles.yml , there is option to speciall paricular ro…

---

## [What's a Good Resource to Learn How to Create Custom Panels in Kibana 4.1?](https://discuss.elastic.co/t/whats-a-good-resource-to-learn-how-to-create-custom-panels-in-kibana-4-1/25191)

<div class="topic-metadata">

**Author:** [@Maruf789](https://discuss.elastic.co/u/Maruf789)\
**Replies:** 3\
**Last updated:** [July 9, 2015, 7:25am UTC](https://discuss.elastic.co/t/whats-a-good-resource-to-learn-how-to-create-custom-panels-in-kibana-4-1/25191 "2015-07-09T07:25:21Z")

</div>

Hi Kibana Experts, I came across this blog post (http://blog.trifork.com/2014/05/20/advanced-kibana-dashboard/) but was looking forward to a more inclusive and detailed (and probably "official") docs on how to create c…

---

## [Force filebeat to reparse CSV](https://discuss.elastic.co/t/force-filebeat-to-reparse-csv/237082)

<div class="topic-metadata">

**Author:** [@Youssef\_SBAI](https://discuss.elastic.co/u/Youssef_SBAI)\
**Replies:** 3\
**Last updated:** [June 16, 2020, 7:16am UTC](https://discuss.elastic.co/t/force-filebeat-to-reparse-csv/237082 "2020-06-16T07:16:15Z")

</div>

Hello, I'm using filebeat and Logstash I want to force re-parse the files provided in the path section, but that doesn't seem to work my config filebeat is: filebeat.inputs: - type: log enabled: true paths: …

---

## [Filebeat sends logs with delay](https://discuss.elastic.co/t/filebeat-sends-logs-with-delay/311038)

<div class="topic-metadata">

**Author:** [@behzad\_alipoor](https://discuss.elastic.co/u/behzad_alipoor)\
**Replies:** 1\
**Last updated:** [August 1, 2022, 8:51am UTC](https://discuss.elastic.co/t/filebeat-sends-logs-with-delay/311038 "2022-08-01T08:51:00Z")

</div>

I send logs from filebeat to elasticsearch directly . the service that i use generates logs every second . most of the time it works properly but sometimes the logs reach to elastic after 15 minutes or later and I don'…

---

## [How do I run multiple filebeat.yml files on Windows?](https://discuss.elastic.co/t/how-do-i-run-multiple-filebeat-yml-files-on-windows/269003)

<div class="topic-metadata">

**Author:** [@pradeep\_gadkari](https://discuss.elastic.co/u/pradeep_gadkari)\
**Replies:** 1\
**Last updated:** [April 1, 2021, 10:05am UTC](https://discuss.elastic.co/t/how-do-i-run-multiple-filebeat-yml-files-on-windows/269003 "2021-04-01T10:05:58Z")

</div>

I have to make a centralized log monitoring system. I have to read logs from multiple locations and parse the logs differently in logstash. All these logs need to be sent to one index to Kibana at the output of logstash. …

---

## [Logstash Jdbc Input Plugin format for timestamp in prepared statement](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-format-for-timestamp-in-prepared-statement/241307)

<div class="topic-metadata">

**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\
**Replies:** 1\
**Last updated:** [July 15, 2020, 2:47pm UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-format-for-timestamp-in-prepared-statement/241307 "2020-07-15T14:47:27Z")

</div>

We are looking to use prepared statements with the Jdbc input plugin, where the source database is a Db2 instance. So far we've not been using prepared statements, so that the relevant part of the (working) config looks…

---

## [Index has no aliases](https://discuss.elastic.co/t/index-has-no-aliases/189000)

<div class="topic-metadata">

**Author:** [@rizkan\_abadi](https://discuss.elastic.co/u/rizkan_abadi)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 7:47am UTC](https://discuss.elastic.co/t/index-has-no-aliases/189000 "2019-07-05T07:47:17Z")

</div>

Hi, i have define the index rollup alias on metricbeat config, but if i add index to policy always show this error on kibana "Index has no aliases Policy test is configured for rollover, but index index-test does not …

---

## [Logstash output to FTP](https://discuss.elastic.co/t/logstash-output-to-ftp/183680)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 1\
**Last updated:** [May 31, 2019, 9:21am UTC](https://discuss.elastic.co/t/logstash-output-to-ftp/183680 "2019-05-31T09:21:21Z")

</div>

Hello, We have a use case, where our admins would like to receive Logstash's json output files directly to their FTP using non-standard ftp port. I tried using file output plugin with below path, but it fails. ftp://l…

---

## [Nginx proxy for Elastic Cloud instance](https://discuss.elastic.co/t/nginx-proxy-for-elastic-cloud-instance/161360)

<div class="topic-metadata">

**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\
**Replies:** 1\
**Last updated:** [December 26, 2018, 7:41pm UTC](https://discuss.elastic.co/t/nginx-proxy-for-elastic-cloud-instance/161360 "2018-12-26T19:41:53Z")

</div>

I am trying to create an Nginx reverse proxy to a cloud.elastic.co instance. All attempts at this result in the following message: {"ok":false,"message":"Unknown cluster."} upstream elasticsearch { server {{my ins…

---

## [Elasticsearch Problems and Best Distro for Production Deployments](https://discuss.elastic.co/t/elasticsearch-problems-and-best-distro-for-production-deployments/76826)

<div class="topic-metadata">

**Author:** [@x0r](https://discuss.elastic.co/u/x0r)\
**Replies:** 1\
**Last updated:** [February 28, 2017, 9:22pm UTC](https://discuss.elastic.co/t/elasticsearch-problems-and-best-distro-for-production-deployments/76826 "2017-02-28T21:22:53Z")

</div>

Hey there everyone, I wanted to write to get some feedback from the community on what people feel is the best Linux distro to utilize for a production deployment of elasticsearch/logstash/kibana. It seems that since t…

---

## [How to use SSL between Filebeat 5 and Kafka 0.10?](https://discuss.elastic.co/t/how-to-use-ssl-between-filebeat-5-and-kafka-0-10/57023)

<div class="topic-metadata">

**Author:** [@Tsury](https://discuss.elastic.co/u/Tsury)\
**Replies:** 1\
**Last updated:** [August 3, 2016, 9:29am UTC](https://discuss.elastic.co/t/how-to-use-ssl-between-filebeat-5-and-kafka-0-10/57023 "2016-08-03T09:29:22Z")

</div>

Hi. I am new to Filebeat and Kafka and managed to set them together just fine. I now want to add SSL and don't know where to begin. I can set Kafka to work with SSL as explained in the official Apache documentation, …

---

## [How do I add doc\_values to logstash index mapping template in Elasticsearch?](https://discuss.elastic.co/t/how-do-i-add-doc-values-to-logstash-index-mapping-template-in-elasticsearch/25385)

<div class="topic-metadata">

**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\
**Replies:** 1\
**Last updated:** [July 12, 2015, 11:04am UTC](https://discuss.elastic.co/t/how-do-i-add-doc-values-to-logstash-index-mapping-template-in-elasticsearch/25385 "2015-07-12T11:04:37Z")

</div>

This is the default logstash index mapping template I currently have in elasticsearch : { "order" : 0, "template" : "logstash-\*", "settings" : { "index.refresh\_interval" : "5s" }, "mappings" : { "default" : { "dynamic\_…

---

## [Logstash 8.17.6, 8.18.1, and 9.0.1 Security Update (ESA-2025-08)](https://discuss.elastic.co/t/logstash-8-17-6-8-18-1-and-9-0-1-security-update-esa-2025-08/377869)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [May 6, 2025, 4:33pm UTC](https://discuss.elastic.co/t/logstash-8-17-6-8-18-1-and-9-0-1-security-update-esa-2025-08/377869 "2025-05-06T16:33:44Z")

</div>

Logstash Improper Certificate Validation in TCP output (ESA-2025-08) Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in…

[Previous page](https://discuss.elastic.co/top.md?page=1229&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1231&per_page=50&period=all)
