# Top **URL:** https://discuss.elastic.co/top.md?page=1241&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1242 --- ## [Connection refused - elastic search doesnt listen anywhere](https://discuss.elastic.co/t/connection-refused-elastic-search-doesnt-listen-anywhere/51977)
**Author:** [@xon](https://discuss.elastic.co/u/xon)\ **Replies:** 3\ **Last updated:** [June 7, 2016, 10:20am UTC](https://discuss.elastic.co/t/connection-refused-elastic-search-doesnt-listen-anywhere/51977 "2016-06-07T10:20:55Z")
Straight to my configuration... I edited the /etc/elasticsearch/elasticsearch.yml and I have tried the following different options: network.host: localhost network.host: 127.0.0.1 network.host: 0.0.0.0 I al… --- ## [Comparing the result(sum count) of 2 aggregations - ElasticSearch](https://discuss.elastic.co/t/comparing-the-result-sum-count-of-2-aggregations-elasticsearch/193826)
**Author:** [@Kaushik123](https://discuss.elastic.co/u/Kaushik123)\ **Replies:** 1\ **Last updated:** [August 7, 2019, 3:39am UTC](https://discuss.elastic.co/t/comparing-the-result-sum-count-of-2-aggregations-elasticsearch/193826 "2019-08-07T03:39:45Z")
Hi all, I am relatively new to Elasticsearch and am trying to write a script that is supposed to compare two different aggregations. For example, I have 2 sum aggregations of the same field, but calculated at 2 differe… --- ## [Split logstash config into multiple files](https://discuss.elastic.co/t/split-logstash-config-into-multiple-files/171166)
**Author:** [@richbai90](https://discuss.elastic.co/u/richbai90)\ **Replies:** 1\ **Last updated:** [March 7, 2019, 4:46pm UTC](https://discuss.elastic.co/t/split-logstash-config-into-multiple-files/171166 "2019-03-07T16:46:07Z")
I am just learning elasticsearch and I need to know how to correctly split a configuration file into multiple. I'm using the official logstash on docker with ports bound on 9600 and 5044. Originally I had a working singl… --- ## [\[host\] is defined as an object in mapping \[logs\] but this name is already used for a field in other types](https://discuss.elastic.co/t/host-is-defined-as-an-object-in-mapping-logs-but-this-name-is-already-used-for-a-field-in-other-types/162237)
**Author:** [@xojima](https://discuss.elastic.co/u/xojima)\ **Replies:** 1\ **Last updated:** [January 4, 2019, 11:11am UTC](https://discuss.elastic.co/t/host-is-defined-as-an-object-in-mapping-logs-but-this-name-is-already-used-for-a-field-in-other-types/162237 "2019-01-04T11:11:39Z")
Hi, We started getting this error in the active master log. It is so bad that the log file fills the disk overnight. I've read about it but what I've found is people having fields named the same but with different type… --- ## [Empty configuration for pipeline\_id: test](https://discuss.elastic.co/t/empty-configuration-for-pipeline-id-test/116963)
**Author:** [@akiyamayami](https://discuss.elastic.co/u/akiyamayami)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 9:31pm UTC](https://discuss.elastic.co/t/empty-configuration-for-pipeline-id-test/116963 "2018-01-26T21:31:03Z")
Hi, i have problem after i install x-pack for elk, logstash can't read config for pipeline when i enable security in kibana and elastic \[52\] i already try create pipeline in kinana but not working \[58\] But if i disab… --- ## [Error 401](https://discuss.elastic.co/t/error-401/94192)
**Author:** [@Keith\_Sanks](https://discuss.elastic.co/u/Keith_Sanks)\ **Replies:** 1\ **Last updated:** [July 22, 2017, 8:50am UTC](https://discuss.elastic.co/t/error-401/94192 "2017-07-22T08:50:31Z")
running the following command: curl -XGET http://elastic:changme@127.0.0.1:9200/bro-\*/\_search?q=\* -d ' { "sort": \[{ "@timestamp": { "order": "desc" } }, { "\_score": { "order": … --- ## [Reindex "host" to "host.ip"](https://discuss.elastic.co/t/reindex-host-to-host-ip/305102)
**Author:** [@teamomni](https://discuss.elastic.co/u/teamomni)\ **Replies:** 6\ **Last updated:** [May 23, 2022, 12:52pm UTC](https://discuss.elastic.co/t/reindex-host-to-host-ip/305102 "2022-05-23T12:52:56Z")
Hello, we recently moved our Logstash that was receiving SNMP to the data stream. All of the current data has worked fine, but when I went to reindex the past several months it failed due to the old files had placed the… --- ## [How can sort assorted logs to steam line logs](https://discuss.elastic.co/t/how-can-sort-assorted-logs-to-steam-line-logs/146943)
**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\ **Replies:** 6\ **Last updated:** [September 6, 2018, 6:03pm UTC](https://discuss.elastic.co/t/how-can-sort-assorted-logs-to-steam-line-logs/146943 "2018-09-06T18:03:23Z")
I have below assorted logs, how can i sort to Time Device Source only log message and remove rest all unwanted log message Sep 1 14:40:33 VPX-02 09/01/2018:13:40:33 GMT VPX-02 0-PPE-0 : default API CMD\_EXECUTED 52… --- ## [Can Kibana use the encrypted private key for SSL?](https://discuss.elastic.co/t/can-kibana-use-the-encrypted-private-key-for-ssl/131090)
**Author:** [@nxthuong](https://discuss.elastic.co/u/nxthuong)\ **Replies:** 6\ **Last updated:** [May 10, 2018, 8:31am UTC](https://discuss.elastic.co/t/can-kibana-use-the-encrypted-private-key-for-ssl/131090 "2018-05-10T08:31:19Z")
Hi all, Is there any ways to use the encrypted private key for SSL in Kibana? Encrypted private key can be stored in Windows Certificate Store, then Kibana can retrieve the key from that to use. Currently, I use the de… --- ## [SSL(curl) connection error in ElasticSearch setup](https://discuss.elastic.co/t/ssl-curl-connection-error-in-elasticsearch-setup/318137)
**Author:** [@Boodle](https://discuss.elastic.co/u/Boodle)\ **Replies:** 4\ **Last updated:** [November 3, 2022, 10:15pm UTC](https://discuss.elastic.co/t/ssl-curl-connection-error-in-elasticsearch-setup/318137 "2022-11-03T22:15:40Z")
Have setup a 3-node Elasticsearch cluster using docker-compose. Followed below steps: On one of the master nodes, es11, gets below error, however same curl command works fine on other 2 nodes i.e. es12, es13: Error: cu… --- ## [Snaphsot repository Read Only URL via FTP](https://discuss.elastic.co/t/snaphsot-repository-read-only-url-via-ftp/287497)
**Author:** [@ylasri](https://discuss.elastic.co/u/ylasri)\ **Replies:** 4\ **Last updated:** [October 23, 2021, 6:04pm UTC](https://discuss.elastic.co/t/snaphsot-repository-read-only-url-via-ftp/287497 "2021-10-23T18:04:44Z")
I have an Elasticsearch cluster of 3 nodes with version 7.15.0. I want to add a read-only URL repository soi can fetch a snapshot for restore. PUT /\_snapshot/ftp\_snaphoot { "type": "url", "settings": { "url": "… --- ## [Visualizing Average with Removing Outliers](https://discuss.elastic.co/t/visualizing-average-with-removing-outliers/276184)
**Author:** [@JR42](https://discuss.elastic.co/u/JR42)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 7:09pm UTC](https://discuss.elastic.co/t/visualizing-average-with-removing-outliers/276184 "2021-06-17T19:09:24Z")
Hey all, looking to get some help on a topic that has had me stumped. I am currently charting the average compile times (which the compile time is a scripted field on the index pattern), bucketed by month using a date h… --- ## [Client unable to trust server certificate](https://discuss.elastic.co/t/client-unable-to-trust-server-certificate/223404)
**Author:** [@brb44](https://discuss.elastic.co/u/brb44)\ **Replies:** 4\ **Last updated:** [March 12, 2020, 10:05pm UTC](https://discuss.elastic.co/t/client-unable-to-trust-server-certificate/223404 "2020-03-12T22:05:01Z")
Hi, I'm getting below error when I tried to enabling transport ssl. Caused by: sun.security.validator.ValidatorException: Extended key usage does not permit use for TLS client authentication at sun.security.val… --- ## [How to run development mode in docker](https://discuss.elastic.co/t/how-to-run-development-mode-in-docker/190171)
**Author:** [@tony21177](https://discuss.elastic.co/u/tony21177)\ **Replies:** 4\ **Last updated:** [July 15, 2019, 2:17am UTC](https://discuss.elastic.co/t/how-to-run-development-mode-in-docker/190171 "2019-07-15T02:17:32Z")
Hi, I want to know how to run development mode in docker. In my DockerFile the base image is docker.elastic.co/kibana/kibana:6.8.0 and the last line CMD /usr/local/bin/kibana-docker how shold I modify so that the run… --- ## [A question on the spooling to disk](https://discuss.elastic.co/t/a-question-on-the-spooling-to-disk/149018)
**Author:** [@sentient](https://discuss.elastic.co/u/sentient)\ **Replies:** 4\ **Last updated:** [September 19, 2018, 6:09pm UTC](https://discuss.elastic.co/t/a-question-on-the-spooling-to-disk/149018 "2018-09-19T18:09:26Z")
When events cannot be send to Elastic Search, events are nicely written to disk. On restart the events are send to ElasticSearch. I was wondering, do we always need to restart? Or can we set an option to retry to submi… --- ## [Grok/logstash efficiency](https://discuss.elastic.co/t/grok-logstash-efficiency/144402)
**Author:** [@if-meaton](https://discuss.elastic.co/u/if-meaton)\ **Replies:** 4\ **Last updated:** [August 14, 2018, 9:20pm UTC](https://discuss.elastic.co/t/grok-logstash-efficiency/144402 "2018-08-14T21:20:00Z")
Hi Guys, I'm wondering if the below logstash conf could be improved in anyway, on one of my logstash servers (a lower powered one) we get about 300 e/s and this server is pinned at 100% cpu and 60% memory when things ar… --- ## [More than 1 day's log per index?](https://discuss.elastic.co/t/more-than-1-days-log-per-index/62224)
**Author:** [@suanmeiguo](https://discuss.elastic.co/u/suanmeiguo)\ **Replies:** 4\ **Last updated:** [October 4, 2016, 11:05pm UTC](https://discuss.elastic.co/t/more-than-1-days-log-per-index/62224 "2016-10-04T23:05:17Z")
It looks like Marvel create one index per day. Things like .marvel-es-1-2016.10.04. Can I configure this to be a bigger date range? for example one index per week or per month? I want to keep a longer history but don't… --- ## [Pulsar connectivity](https://discuss.elastic.co/t/pulsar-connectivity/317939)
**Author:** [@omicronian8](https://discuss.elastic.co/u/omicronian8)\ **Replies:** 2\ **Last updated:** [November 2, 2022, 11:40pm UTC](https://discuss.elastic.co/t/pulsar-connectivity/317939 "2022-11-02T23:40:43Z")
I need to store the output of logstash onto a pulsar topic. Looking at the documentation and other threads here, I couldn't find any leads on it. I could only get a git repo where we can use pulsar topic as an input to l… --- ## [Can File Output Drop Messages?](https://discuss.elastic.co/t/can-file-output-drop-messages/43556)
**Author:** [@wstrater](https://discuss.elastic.co/u/wstrater)\ **Replies:** 0\ **Last updated:** [March 4, 2016, 9:23pm UTC](https://discuss.elastic.co/t/can-file-output-drop-messages/43556 "2016-03-04T21:23:54Z")
I am trying to work with beats, logstash, elasticsearch and kafka and it appears that logstash file output could be dropping messages. I started with a simple filebeat to logstash to work on my filtering. The logstash … --- ## [How to add leading zeros to a numeric field using the ingest pipeline?](https://discuss.elastic.co/t/how-to-add-leading-zeros-to-a-numeric-field-using-the-ingest-pipeline/300885)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 2\ **Last updated:** [March 30, 2022, 3:36pm UTC](https://discuss.elastic.co/t/how-to-add-leading-zeros-to-a-numeric-field-using-the-ingest-pipeline/300885 "2022-03-30T15:36:43Z")
I have a field that needs to be a 3 digit field always. so if the field value is 1 it should be coming in as 001 and if its 11 then it should be coming in as 011. I am parsing this field from a different field using the… --- ## [Dynamic value of the add\_field processor](https://discuss.elastic.co/t/dynamic-value-of-the-add-field-processor/216827)
**Author:** [@nahiko2000](https://discuss.elastic.co/u/nahiko2000)\ **Replies:** 2\ **Last updated:** [January 29, 2020, 3:56pm UTC](https://discuss.elastic.co/t/dynamic-value-of-the-add-field-processor/216827 "2020-01-29T15:56:25Z")
Hi! In a Filebeat input I have a processor in Filebeat like this: processors: - add\_fields: when: regexp: message: '\[0-9\]{8}\\-?\[a-zA-Z\]' fileds: newfield: XXX So, when a new line gets … --- ## [Index not listed only when trying to add a map](https://discuss.elastic.co/t/index-not-listed-only-when-trying-to-add-a-map/200222)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 12:45pm UTC](https://discuss.elastic.co/t/index-not-listed-only-when-trying-to-add-a-map/200222 "2019-09-20T12:45:50Z")
Hello, Kibana has well identified my index (ims\_cyber\_logs). I can see the logs in Discover and build some classic visualization like bar, char, area.. But when I try to build a map, and specifically by selecting a so… --- ## [Multiple filebeat instances on RedHat using "service"](https://discuss.elastic.co/t/multiple-filebeat-instances-on-redhat-using-service/141406)
**Author:** [@zebu14](https://discuss.elastic.co/u/zebu14)\ **Replies:** 2\ **Last updated:** [July 26, 2018, 3:32pm UTC](https://discuss.elastic.co/t/multiple-filebeat-instances-on-redhat-using-service/141406 "2018-07-26T15:32:46Z")
Hello, I am a redhat user using Filebeat 6.2.2 installed through rpm. I need to send some log files to multiple logstash instances and the only solution in my situation is running two filebeat instances in parallel. I… --- ## [Logstash Not Running, keep restarting](https://discuss.elastic.co/t/logstash-not-running-keep-restarting/204393)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 7\ **Last updated:** [November 19, 2019, 7:13am UTC](https://discuss.elastic.co/t/logstash-not-running-keep-restarting/204393 "2019-11-19T07:13:15Z")
Hi all, I am facing with this issue that my logstash keep restarting. How do I troubleshoot this? Installing logstash on /usr/share/ is it correct? rather than /etc/? logstash.service - logstash Loaded: loaded (/e… --- ## [Percentage visualization](https://discuss.elastic.co/t/percentage-visualization/183017)
**Author:** [@RuBi](https://discuss.elastic.co/u/RuBi)\ **Replies:** 1\ **Last updated:** [May 28, 2019, 11:47am UTC](https://discuss.elastic.co/t/percentage-visualization/183017 "2019-05-28T11:47:08Z")
hello, i'm newbie as i create visualization, which shows the percentage of IP address requests from the total requests of queries? I use Kibana 4.5.0 --- ## [Converting Splunk Field Extraction in Logstash Equivalent](https://discuss.elastic.co/t/converting-splunk-field-extraction-in-logstash-equivalent/56504)
**Author:** [@darioc](https://discuss.elastic.co/u/darioc)\ **Replies:** 1\ **Last updated:** [July 27, 2016, 1:16pm UTC](https://discuss.elastic.co/t/converting-splunk-field-extraction-in-logstash-equivalent/56504 "2016-07-27T13:16:59Z")
Hello, I have the following field extraction in Splunk (?i)- site\\:(?P\[^;:\]+) How can I achieve a similar result with logstash? Sample log message: INFO 2016-07-21 13:17:48,139 \[http-bio-8080-exec-5\] com.vendo… --- ## [How to find the difference of two metric aggregations in kibana](https://discuss.elastic.co/t/how-to-find-the-difference-of-two-metric-aggregations-in-kibana/27579)
**Author:** [@ardian1](https://discuss.elastic.co/u/ardian1)\ **Replies:** 1\ **Last updated:** [August 18, 2015, 11:34pm UTC](https://discuss.elastic.co/t/how-to-find-the-difference-of-two-metric-aggregations-in-kibana/27579 "2015-08-18T23:34:13Z")
If I have metric C which is the sum of metric A and metric B. I created metric C with search query "id1:0210" and give the total of 42,187 I created metric A with search query "id1:0200" and give the total of 35,343 H… --- ## [Bigdesk and top - ES memory usage output](https://discuss.elastic.co/t/bigdesk-and-top-es-memory-usage-output/11808)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 7\ **Last updated:** [May 13, 2013, 6:02pm UTC](https://discuss.elastic.co/t/bigdesk-and-top-es-memory-usage-output/11808 "2013-05-13T18:02:40Z")
Attached screenshot.png file shows the difference between memory usage shown by Bigdesk and top. The memory is set as ES\_HEAP\_SIZE=3g for ES. - Is the actual memory usage 'Used' under 'Heap Mem' on BigDesk? - I … --- ## [ES Snapshot Delete](https://discuss.elastic.co/t/es-snapshot-delete/243902)
**Author:** [@bhuvaneshdct](https://discuss.elastic.co/u/bhuvaneshdct)\ **Replies:** 5\ **Last updated:** [August 10, 2020, 3:37am UTC](https://discuss.elastic.co/t/es-snapshot-delete/243902 "2020-08-10T03:37:23Z")
Elasticsearch backups are always incremental. Let's say I have a daily backup job. After one week I have 7 snapshots. On the 8th day if Im going to delete the day1's snapshot, then the rest of the snapshots will become … --- ## [Building a SIEM, need help](https://discuss.elastic.co/t/building-a-siem-need-help/222007)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 5\ **Last updated:** [March 5, 2020, 7:50am UTC](https://discuss.elastic.co/t/building-a-siem-need-help/222007 "2020-03-05T07:50:45Z")
Hello there i amtrying to build a SIEM using open source tools. using ELK, Suricata for IDS, My sql as a DB, Ngnix as web server, Opendistro for alerting and still developping the architecture. i would apreciate your h… --- ## [React](https://discuss.elastic.co/t/react/219601)
**Author:** [@Gangesh](https://discuss.elastic.co/u/Gangesh)\ **Replies:** 5\ **Last updated:** [February 20, 2020, 10:17am UTC](https://discuss.elastic.co/t/react/219601 "2020-02-20T10:17:30Z")
Hi @ Monfera, Actually i want try to use reactjs for our existing angularjs application where i am using kibana5.1.1 and elasticsearch5. when i import prop-type in our js file it is throw error. --- ## [Xpack Watcher Java API](https://discuss.elastic.co/t/xpack-watcher-java-api/183623)
**Author:** [@Aparna\_Kancharla](https://discuss.elastic.co/u/Aparna_Kancharla)\ **Replies:** 5\ **Last updated:** [June 7, 2019, 7:04pm UTC](https://discuss.elastic.co/t/xpack-watcher-java-api/183623 "2019-06-07T19:04:37Z")
Hi, I am trying to follow the guide linked below for creating a WatchSource using WatchSourceBuilder following the instructions. I have setup the Maven repository and through trial and error (looking at github repos… --- ## [USE Filebeat 6.2 can't work with kafka](https://discuss.elastic.co/t/use-filebeat-6-2-cant-work-with-kafka/134526)
**Author:** [@richard2017](https://discuss.elastic.co/u/richard2017)\ **Replies:** 5\ **Last updated:** [June 6, 2018, 5:44am UTC](https://discuss.elastic.co/t/use-filebeat-6-2-cant-work-with-kafka/134526 "2018-06-06T05:44:14Z")
I installed Filebeat 6.2 ,and want to use filebeat modules , filebeat -\>kafka 0.10.1-\>logstash -\> ES. filebeat.yml: output.kafka: enabled: true hosts: \["10.2.33.33:9092","10.2.33.34:9092","10.2.33.35:9092"\] topic: s… --- ## [How to make bundle false in dev mode](https://discuss.elastic.co/t/how-to-make-bundle-false-in-dev-mode/82749)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 5\ **Last updated:** [April 24, 2017, 2:35pm UTC](https://discuss.elastic.co/t/how-to-make-bundle-false-in-dev-mode/82749 "2017-04-24T14:35:58Z")
how to make bundle false in kibana 5.x dev mode, optimize is really slow --- ## [Stack Monitoring Access Denied](https://discuss.elastic.co/t/stack-monitoring-access-denied/350313)
**Author:** [@sourcreamnormanbates](https://discuss.elastic.co/u/sourcreamnormanbates)\ **Replies:** 3\ **Last updated:** [January 3, 2024, 9:32pm UTC](https://discuss.elastic.co/t/stack-monitoring-access-denied/350313 "2024-01-03T21:32:48Z")
When I try to view Stack Monitoring, I receive an error message. I get the same message with the default elastic admin user as well as my provisioned unique admin user account I use. I only have one cluster, so I'm not… --- ## [Logstash - how to remove strings within a field (whose content itself a raw string)?](https://discuss.elastic.co/t/logstash-how-to-remove-strings-within-a-field-whose-content-itself-a-raw-string/286561)
**Author:** [@helloworld1234](https://discuss.elastic.co/u/helloworld1234)\ **Replies:** 3\ **Last updated:** [October 13, 2021, 4:22pm UTC](https://discuss.elastic.co/t/logstash-how-to-remove-strings-within-a-field-whose-content-itself-a-raw-string/286561 "2021-10-13T16:22:58Z")
I have a event that consists of various fields, one of which is called "raw\_message". This field's contents is a raw string eg. Input: raw\_message: "Raw user details:: \[location:london name:kris wu id:L3j5k category:vi… --- ## [Inconsistent Results/Doc Scores on Query](https://discuss.elastic.co/t/inconsistent-results-doc-scores-on-query/247418)
**Author:** [@Karl\_Kevilus](https://discuss.elastic.co/u/Karl_Kevilus)\ **Replies:** 3\ **Last updated:** [September 8, 2020, 2:09pm UTC](https://discuss.elastic.co/t/inconsistent-results-doc-scores-on-query/247418 "2020-09-08T14:09:34Z")
I'm running the same query back to back on an index and the score and results come back different when I look at explain: { … --- ## [Logstash - Filter.Aggregate - push\_map\_as\_event\_on\_timeout not happening](https://discuss.elastic.co/t/logstash-filter-aggregate-push-map-as-event-on-timeout-not-happening/243044)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 3\ **Last updated:** [July 30, 2020, 5:17pm UTC](https://discuss.elastic.co/t/logstash-filter-aggregate-push-map-as-event-on-timeout-not-happening/243044 "2020-07-30T17:17:53Z")
Hi there, Thanks in advance for your time I'm trying to use filter { aggregate { } } while reading/parsing an old log file Into this log file, every second, there is a block of statistics generated that I'd like to ag… --- ## [Do we have SIEM dashboards and detection anomaly for DHCP logs?](https://discuss.elastic.co/t/do-we-have-siem-dashboards-and-detection-anomaly-for-dhcp-logs/231161)
**Author:** [@sundar\_elk](https://discuss.elastic.co/u/sundar_elk)\ **Replies:** 3\ **Last updated:** [May 6, 2020, 5:27pm UTC](https://discuss.elastic.co/t/do-we-have-siem-dashboards-and-detection-anomaly-for-dhcp-logs/231161 "2020-05-06T17:27:10Z")
Hi Team, I have on boarded DHCP logs into ELK and looking for SIEM detection anomaly for DHCP logs. I didn't seen anything dashboard related for DHCP logs in SIEM DHCP logs example :-1 Fields: ID,Date,Time,Descriptio… --- ## [Could not index event to elasticsearch not sure why](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-not-sure-why/137042)
**Author:** [@rahulsaini](https://discuss.elastic.co/u/rahulsaini)\ **Replies:** 3\ **Last updated:** [June 25, 2018, 5:57pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-not-sure-why/137042 "2018-06-25T17:57:12Z")
\[2018-06-21T10:54:08,459\]\[INFO \]\[logstash.outputs.elasticsearch\] Using mapping template from {:path=\>nil} \[2018-06-21T10:54:08,507\]\[INFO \]\[logstash.outputs.elasticsearch\] Attempting to install template {:manage\_template… --- ## [How does elasticsearch store repeated values across documents?](https://discuss.elastic.co/t/how-does-elasticsearch-store-repeated-values-across-documents/122143)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 3\ **Last updated:** [March 2, 2018, 5:15pm UTC](https://discuss.elastic.co/t/how-does-elasticsearch-store-repeated-values-across-documents/122143 "2018-03-02T17:15:22Z")
Say I have a document {"name":"first","class": "Type-A"} Then another document {"name":"second","class": "Type-A"} Does it store Type-A twice or does it reference repeated values. Lets say I have a million docs like… --- ## [ES 5.3.1 - content\_type cannot be user-specified](https://discuss.elastic.co/t/es-5-3-1-content-type-cannot-be-user-specified/83692)
**Author:** [@christer.n](https://discuss.elastic.co/u/christer.n)\ **Replies:** 3\ **Last updated:** [April 26, 2017, 12:49pm UTC](https://discuss.elastic.co/t/es-5-3-1-content-type-cannot-be-user-specified/83692 "2017-04-26T12:49:23Z")
Hi, when spinning up an empty ES instance v5.3.1 everything works fine, after indexing some stuff, and letting it run - adding some templates, mapping templates e.e - when i shut down the instance (CTRL+C) and try to sta… --- ## [Need Kibana for Elasticsearch 2.2.2 but can't find download link](https://discuss.elastic.co/t/need-kibana-for-elasticsearch-2-2-2-but-cant-find-download-link/47094)
**Author:** [@rolf](https://discuss.elastic.co/u/rolf)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 10:40am UTC](https://discuss.elastic.co/t/need-kibana-for-elasticsearch-2-2-2-but-cant-find-download-link/47094 "2016-04-12T10:40:00Z")
so the headline says everything... where can I download kibana for elasticsearch 2.2.2 ? on the elastic website I found only the current version but not older ones. And the search on the site... :-((( Can anybody help? --- ## [Shield and Grails application](https://discuss.elastic.co/t/shield-and-grails-application/44357)
**Author:** [@pvsousalima](https://discuss.elastic.co/u/pvsousalima)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 11:38am UTC](https://discuss.elastic.co/t/shield-and-grails-application/44357 "2016-03-21T11:38:42Z")
Hello! I am using ElasticSearch in a project for my company. I'm also using shield to make security via http enabled, this way I won't have my ES instance receiving requests from "strangers". The problem is that the … --- ## [Maven shade during build strips guava classes](https://discuss.elastic.co/t/maven-shade-during-build-strips-guava-classes/9266)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 3\ **Last updated:** [October 8, 2012, 3:10pm UTC](https://discuss.elastic.co/t/maven-shade-during-build-strips-guava-classes/9266 "2012-10-08T15:10:43Z")
Hi there, I am struggling right now with a strange problem of missing classes of google guava in elasticsearch, even though the non-shaded version includes what I am searching for. The concrete class is the com.… --- ## [Geojson to Elasticsearch : Failed to parse field \[geometry.coordinates\] of type \[geo\_shape\]](https://discuss.elastic.co/t/geojson-to-elasticsearch-failed-to-parse-field-geometry-coordinates-of-type-geo-shape/235261)
**Author:** [@Scorpion21](https://discuss.elastic.co/u/Scorpion21)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 11:26pm UTC](https://discuss.elastic.co/t/geojson-to-elasticsearch-failed-to-parse-field-geometry-coordinates-of-type-geo-shape/235261 "2020-06-02T23:26:14Z")
I am trying to indexing geojson file into elasticsearch (version 7.6.2) using Python. Here is the mapping I defined in elasticsearch. 'mappings': { "properties": { "geometry": { "properties": { "coo… --- ## [SNMP/SNMPTRAP input with filter and output to CSV](https://discuss.elastic.co/t/snmp-snmptrap-input-with-filter-and-output-to-csv/191905)
**Author:** [@icecotorra](https://discuss.elastic.co/u/icecotorra)\ **Replies:** 2\ **Last updated:** [July 23, 2019, 10:07pm UTC](https://discuss.elastic.co/t/snmp-snmptrap-input-with-filter-and-output-to-csv/191905 "2019-07-23T22:07:07Z")
Hello, I want to be able to grab the output of any SNMP/SNMPTRAP and structure it so it can be exported to a CSV file. I will then take the file and import it to another box running Elasticsearch and Kibana. Can you p… --- ## [Reorder / Change fields in the event](https://discuss.elastic.co/t/reorder-change-fields-in-the-event/174455)
**Author:** [@yagami23](https://discuss.elastic.co/u/yagami23)\ **Replies:** 2\ **Last updated:** [March 29, 2019, 4:45pm UTC](https://discuss.elastic.co/t/reorder-change-fields-in-the-event/174455 "2019-03-29T16:45:39Z")
Hi, is it a way to reorder the fields show inside the event, example like change the "message" field to be the first field OR only show "message" & "timestamp" fields in the event. --- ## [Invalid setting for file input plugin- Logstash](https://discuss.elastic.co/t/invalid-setting-for-file-input-plugin-logstash/128711)
**Author:** [@SabRay](https://discuss.elastic.co/u/SabRay)\ **Replies:** 2\ **Last updated:** [April 19, 2018, 2:13pm UTC](https://discuss.elastic.co/t/invalid-setting-for-file-input-plugin-logstash/128711 "2018-04-19T14:13:15Z")
I am trying to load data from a csv file into elasticsearch. When I try to load the data using the command logstash -f "\\Users\\dell\\Desktop\\Data\\logstash\_cars.config" The logstash\_cars.config file is: input{ file{ p… --- ## [How to size my future production architecture](https://discuss.elastic.co/t/how-to-size-my-future-production-architecture/53116)
**Author:** [@Clement\_Ros](https://discuss.elastic.co/u/Clement_Ros)\ **Replies:** 2\ **Last updated:** [June 20, 2016, 8:32am UTC](https://discuss.elastic.co/t/how-to-size-my-future-production-architecture/53116 "2016-06-20T08:32:29Z")
Hi everybody, I'm an IT student, i'm working for a company. The subject of my internship is over 3 years to put in place an architecture to log , analyze, and visualize the events of this company. So I set up a POC… [Previous page](https://discuss.elastic.co/top.md?page=1240&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1242&per_page=50&period=all)