# Top **URL:** https://discuss.elastic.co/top.md?page=1261&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1262 --- ## [Logstash date parser not parsing correctly](https://discuss.elastic.co/t/logstash-date-parser-not-parsing-correctly/64227)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [November 1, 2016, 11:50pm UTC](https://discuss.elastic.co/t/logstash-date-parser-not-parsing-correctly/64227 "2016-11-01T23:50:45Z")
I am using logstash for parsing events but having problem with the date parser. My environment is below. \[root@elk-analytic logstash\]# rpm -qi logstash Name : logstash Epoch : 1 Version : 5.0.0 Release… --- ## [ES topology](https://discuss.elastic.co/t/es-topology/60469)
**Author:** [@muhamadli302](https://discuss.elastic.co/u/muhamadli302)\ **Replies:** 4\ **Last updated:** [September 15, 2016, 3:15pm UTC](https://discuss.elastic.co/t/es-topology/60469 "2016-09-15T15:15:12Z")
Hi, I have ES 1.7, with two nodes in the cluster: 1. Master, with this config: node.master: true node.data: true it sits on a machine with 8 GB RAM and one TB space (I know there's not enough RAM, we're waiting for… --- ## [Nothing is getting indexed](https://discuss.elastic.co/t/nothing-is-getting-indexed/51616)
**Author:** [@Deepak\_Patnaik](https://discuss.elastic.co/u/Deepak_Patnaik)\ **Replies:** 4\ **Last updated:** [June 5, 2016, 6:31pm UTC](https://discuss.elastic.co/t/nothing-is-getting-indexed/51616 "2016-06-05T18:31:14Z")
Hi, I am new to ELK. I had some log files indexed. Then I deleted the indexes using XDELETE and \_all. Now when i run logstash, and try to see if the files get indexed again. it does not show any index. Please help. … --- ## [Distinct results by field for a given query](https://discuss.elastic.co/t/distinct-results-by-field-for-a-given-query/12469)
**Author:** [@David\_MZ](https://discuss.elastic.co/u/David_MZ)\ **Replies:** 4\ **Last updated:** [June 19, 2013, 5:13am UTC](https://discuss.elastic.co/t/distinct-results-by-field-for-a-given-query/12469 "2013-06-19T05:13:02Z")
I have the following problem, I have a document that has a field 'xxx' which may have duplicate values across the entire index, I want to do a very simple thing, I want to be able to query the index using a bool qu… --- ## [Elasticsearch error when enable ssl/tls](https://discuss.elastic.co/t/elasticsearch-error-when-enable-ssl-tls/304893)
**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\ **Replies:** 7\ **Last updated:** [May 17, 2022, 8:08am UTC](https://discuss.elastic.co/t/elasticsearch-error-when-enable-ssl-tls/304893 "2022-05-17T08:08:10Z")
i just enable ssl/tls but i have an error like this Caused by: org.elasticsearch.ElasticsearchException: failed to initialize SSL TrustManager - truststore file \[/etc/elasticsearch/elastic-certificates.p12\] does not exi… --- ## [How to calculate count of particular fields in data table in Kibana?](https://discuss.elastic.co/t/how-to-calculate-count-of-particular-fields-in-data-table-in-kibana/233014)
**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\ **Replies:** 1\ **Last updated:** [May 18, 2020, 5:16pm UTC](https://discuss.elastic.co/t/how-to-calculate-count-of-particular-fields-in-data-table-in-kibana/233014 "2020-05-18T17:16:10Z")
Hi guys, I want to add some columns like pass/fail/total in my data table, but I don't know how to calculate the count of results and display them on data table. For example, my records have following fields: Version, … --- ## [How to use DSL query from Kibana dev-tools in visualisation?](https://discuss.elastic.co/t/how-to-use-dsl-query-from-kibana-dev-tools-in-visualisation/187846)
**Author:** [@shafeequeaslam](https://discuss.elastic.co/u/shafeequeaslam)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 9:41am UTC](https://discuss.elastic.co/t/how-to-use-dsl-query-from-kibana-dev-tools-in-visualisation/187846 "2019-07-25T09:41:49Z")
I have successfully aggregated and queried a particular content I needed in Kibana Dev Tools. However, I need this information in a tabular form either as CSV or PDF. For this, I need to run the DSL query I constructed i… --- ## [Percentile axis labels incorrect?](https://discuss.elastic.co/t/percentile-axis-labels-incorrect/136321)
**Author:** [@David\_Underwood](https://discuss.elastic.co/u/David_Underwood)\ **Replies:** 7\ **Last updated:** [June 18, 2018, 8:03pm UTC](https://discuss.elastic.co/t/percentile-axis-labels-incorrect/136321 "2018-06-18T20:03:21Z")
I'm using Kibana to visualize my web application's performance. Specifically, I'm graphing response time percentiles. However. Looking at my visualization the scale of the Y axis is incorrect. It shows about double the … --- ## [How to plot a graph excluding weekends](https://discuss.elastic.co/t/how-to-plot-a-graph-excluding-weekends/89681)
**Author:** [@Ipsy91](https://discuss.elastic.co/u/Ipsy91)\ **Replies:** 1\ **Last updated:** [June 17, 2017, 6:10am UTC](https://discuss.elastic.co/t/how-to-plot-a-graph-excluding-weekends/89681 "2017-06-17T06:10:13Z")
I've created a dashboard displaying charts for "AVG time taken for viewIssue". selecting 'month to date' in the date range, line graph has a drop during the weekend time. But we want to plot a graph excluding weekends. P… --- ## [Nxlog can not connet to logstash](https://discuss.elastic.co/t/nxlog-can-not-connet-to-logstash/48377)
**Author:** [@Inbeo\_Beo](https://discuss.elastic.co/u/Inbeo_Beo)\ **Replies:** 1\ **Last updated:** [April 26, 2016, 5:31am UTC](https://discuss.elastic.co/t/nxlog-can-not-connet-to-logstash/48377 "2016-04-26T05:31:35Z")
Hi, I have problem below: i have 02 Servers with - IP Ser1: 10.151.130.119 --\> installed ELK - IP Ser2: 10.151.130.110 --\> OS is Win Server 2008r2 and nxlog is installed in there I have a file nxlog configure … --- ## [Extract a substring and assign to new field](https://discuss.elastic.co/t/extract-a-substring-and-assign-to-new-field/284692)
**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\ **Replies:** 2\ **Last updated:** [September 21, 2021, 3:10pm UTC](https://discuss.elastic.co/t/extract-a-substring-and-assign-to-new-field/284692 "2021-09-21T15:10:18Z")
Hi everyone! Hope everyone's good. in my application, i'm sending a JSON wich has a string field always made of 16 char For example: XXXYYY12Y00K111H Is there a fine way, or do you have any particular hint to extract… --- ## [Getting a 400 Bad Request when hitting the min.io browser login](https://discuss.elastic.co/t/getting-a-400-bad-request-when-hitting-the-min-io-browser-login/179229)
**Author:** [@Joseph\_Gange](https://discuss.elastic.co/u/Joseph_Gange)\ **Replies:** 2\ **Last updated:** [May 1, 2019, 7:05pm UTC](https://discuss.elastic.co/t/getting-a-400-bad-request-when-hitting-the-min-io-browser-login/179229 "2019-05-01T19:05:02Z")
I've configured a monitor to check out Minio instance. The section of the heartbeat.yml is below (address and credentials replaced with "x"s). type: http schedule: '@every 5s' urls: \["http://xxx.xxx.xxx.xxx:9000/min… --- ## [Elastic search v2.3.1backup of an index and restoration](https://discuss.elastic.co/t/elastic-search-v2-3-1backup-of-an-index-and-restoration/74615)
**Author:** [@Vishal\_Joshi](https://discuss.elastic.co/u/Vishal_Joshi)\ **Replies:** 2\ **Last updated:** [February 12, 2017, 2:24pm UTC](https://discuss.elastic.co/t/elastic-search-v2-3-1backup-of-an-index-and-restoration/74615 "2017-02-12T14:24:59Z")
Hi, I am trying to create back up of one index in elastic search v2.3.1. the lucene version is 5.5.0. While creating snapshot repository, URI - /\_snapshot/my\_backup { "my\_backup": { "type": "fs… --- ## [Heap size percentage for master and client nodes](https://discuss.elastic.co/t/heap-size-percentage-for-master-and-client-nodes/44495)
**Author:** [@haizaar](https://discuss.elastic.co/u/haizaar)\ **Replies:** 2\ **Last updated:** [March 16, 2016, 10:20am UTC](https://discuss.elastic.co/t/heap-size-percentage-for-master-and-client-nodes/44495 "2016-03-16T10:20:53Z")
I'm building ES 2.2.x cluster with 5 dedicated data nodes, 8 cores, 20Gb RAM each; handling 1500Gb of data (about 150 shards total). 2 dedicated client nodes, 4 cores, 12Gb RAM each. 3 dedicated master nodes, 2 cores,… --- ## [Aggregate exception occurred {:ERROR=\>#\](https://discuss.elastic.co/t/aggregate-exception-occurred-error-nomethoderror-undefined-method-for-nil-nilclass/308435)
**Author:** [@The-morpho](https://discuss.elastic.co/u/The-morpho)\ **Replies:** 6\ **Last updated:** [July 27, 2022, 8:13am UTC](https://discuss.elastic.co/t/aggregate-exception-occurred-error-nomethoderror-undefined-method-for-nil-nilclass/308435 "2022-07-27T08:13:39Z")
Hello, I'm new with elastic, I'm working with logs, I want to process from them a new fields based on aggregation. This the my configuration file input { beats { port =\> 5044 } } filter { json { source =\>… --- ## [Incorrect indice creation date](https://discuss.elastic.co/t/incorrect-indice-creation-date/298539)
**Author:** [@Helicube](https://discuss.elastic.co/u/Helicube)\ **Replies:** 6\ **Last updated:** [March 4, 2022, 3:15pm UTC](https://discuss.elastic.co/t/incorrect-indice-creation-date/298539 "2022-03-04T15:15:42Z")
Hello, I have an issue with the Index Rotation. My Graylog server automatically create a new Indice every day (Index rotation). But sometimes, the creation date entered in Elasticsearch is not correct. The date entered … --- ## [Strigo workstation not working after first lab](https://discuss.elastic.co/t/strigo-workstation-not-working-after-first-lab/211195)
**Author:** [@JPeery](https://discuss.elastic.co/u/JPeery)\ **Replies:** 6\ **Last updated:** [December 9, 2019, 10:38pm UTC](https://discuss.elastic.co/t/strigo-workstation-not-working-after-first-lab/211195 "2019-12-09T22:38:35Z")
When I try to access the workstation on Strigo after completing the first lab for ECE Fundamentals it just sits and spins saying preparing workstation, eventually it will say there is an error (no other details), then ba… --- ## [Logstash pipelines and conditionals in config](https://discuss.elastic.co/t/logstash-pipelines-and-conditionals-in-config/193416)
**Author:** [@oliverlucas1](https://discuss.elastic.co/u/oliverlucas1)\ **Replies:** 6\ **Last updated:** [August 5, 2019, 9:00pm UTC](https://discuss.elastic.co/t/logstash-pipelines-and-conditionals-in-config/193416 "2019-08-05T21:00:29Z")
Hi All, Although the subject sounds interesting (maybe for some) but I don't really have a clue what I'm doing! I've been trying to search for an answer but no luck so I'm seeing if someone can help or point me to somet… --- ## [Logstash and x-pack monitoring](https://discuss.elastic.co/t/logstash-and-x-pack-monitoring/92929)
**Author:** [@jupp](https://discuss.elastic.co/u/jupp)\ **Replies:** 6\ **Last updated:** [July 28, 2017, 6:37pm UTC](https://discuss.elastic.co/t/logstash-and-x-pack-monitoring/92929 "2017-07-28T18:37:49Z")
hi people, why i can not write my logstash x-pack monitoring data directly in a dedicated monitoring cluster? greetz jupp --- ## [Significant terms, ES5, and memory issues](https://discuss.elastic.co/t/significant-terms-es5-and-memory-issues/65302)
**Author:** [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\ **Replies:** 6\ **Last updated:** [November 18, 2016, 4:54pm UTC](https://discuss.elastic.co/t/significant-terms-es5-and-memory-issues/65302 "2016-11-18T16:54:51Z")
I have a couple questions regarding running significant terms aggregations on an analyzed text field. Caveats: - I'm aware of all the warnings on not running significant terms on analyzed fields, especially on larger … --- ## [Disabled xpack security plugin in Kibana 8](https://discuss.elastic.co/t/disabled-xpack-security-plugin-in-kibana-8/331065)
**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\ **Replies:** 5\ **Last updated:** [April 28, 2023, 4:55pm UTC](https://discuss.elastic.co/t/disabled-xpack-security-plugin-in-kibana-8/331065 "2023-04-28T16:55:00Z")
Hello ! I want to migrate (from 7.16 to 8.6) my own plugin that manage Kibana security with a custom login page and a custom security strategy. Unfortunately, I notice that the xpack.security.enabled configuration disa… --- ## [Kibana delete field from index pattern](https://discuss.elastic.co/t/kibana-delete-field-from-index-pattern/255043)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [November 11, 2020, 2:23pm UTC](https://discuss.elastic.co/t/kibana-delete-field-from-index-pattern/255043 "2020-11-11T14:23:52Z")
Hi, I made a typo mistake in logstash and it caused a field with a wrong name (ts\_duration). I've deleted the data from elasticsearch and now data is in correct field (duration). I did some search and I've found out t… --- ## [Error when definining a mapping for pcap index](https://discuss.elastic.co/t/error-when-definining-a-mapping-for-pcap-index/213980)
**Author:** [@l4m4l](https://discuss.elastic.co/u/l4m4l)\ **Replies:** 1\ **Last updated:** [January 8, 2020, 11:51pm UTC](https://discuss.elastic.co/t/error-when-definining-a-mapping-for-pcap-index/213980 "2020-01-08T23:51:12Z")
Hi everyone, I am currently attempting to use tshark 3.2.0 and elasticsearch 7.4.1 to visualise network traffic from a pcap file. The steps I am following are: Generate test.json in elasticsearch bulk API format: ts… --- ## [Essql COUNT() vs Measure Unique (Canvas Metric)](https://discuss.elastic.co/t/essql-count-vs-measure-unique-canvas-metric/202319)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 1\ **Last updated:** [October 4, 2019, 8:47pm UTC](https://discuss.elastic.co/t/essql-count-vs-measure-unique-canvas-metric/202319 "2019-10-04T20:47:43Z")
I am using Kibana Canvas and making a Metric element over how many logins the system has logged. I ran into a big offset in counts. When using this query in essql: SELECT reference\_ as logins FROM "\*canvas" and in "Di… --- ## [What permissions are required for ILM?](https://discuss.elastic.co/t/what-permissions-are-required-for-ilm/194514)
**Author:** [@jbrowe](https://discuss.elastic.co/u/jbrowe)\ **Replies:** 1\ **Last updated:** [August 16, 2019, 5:33pm UTC](https://discuss.elastic.co/t/what-permissions-are-required-for-ilm/194514 "2019-08-16T17:33:49Z")
I am migrating my indices to be managed by ILM. For this, I need to modify my Logstash pipeline outputs. Here's what I'm using now: output { elasticsearch { hosts =\> \["192.168.10.80:9200","192.168.10.81:9200","192… --- ## [Elasticsearch is not working after x-pack installation](https://discuss.elastic.co/t/elasticsearch-is-not-working-after-x-pack-installation/104217)
**Author:** [@sarit](https://discuss.elastic.co/u/sarit)\ **Replies:** 1\ **Last updated:** [October 17, 2017, 11:36am UTC](https://discuss.elastic.co/t/elasticsearch-is-not-working-after-x-pack-installation/104217 "2017-10-17T11:36:05Z")
Hello, I'm trying to add monitoring to logstash I have elasticsearch,logstash and kibana installed on one server (version 5.5). I installed x-pack on logstash and since then i cannot start elasticsearch. After that I… --- ## [Creating a new date field by splitting an existing timestamp in Kibana 5.0.0](https://discuss.elastic.co/t/creating-a-new-date-field-by-splitting-an-existing-timestamp-in-kibana-5-0-0/64275)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 1\ **Last updated:** [October 28, 2016, 10:03pm UTC](https://discuss.elastic.co/t/creating-a-new-date-field-by-splitting-an-existing-timestamp-in-kibana-5-0-0/64275 "2016-10-28T22:03:11Z")
I already have an index which contains data from a MySQL database and I wanted use Histogram aggregation Kibana so that I can show a vertical bar chart or a data table for every single day. The problem I'm having is tha… --- ## [Unrecognized token 'CONNECTION\_LOST](https://discuss.elastic.co/t/unrecognized-token-connection-lost/46319)
**Author:** [@Farouk\_Samu](https://discuss.elastic.co/u/Farouk_Samu)\ **Replies:** 1\ **Last updated:** [April 5, 2016, 4:00am UTC](https://discuss.elastic.co/t/unrecognized-token-connection-lost/46319 "2016-04-05T04:00:13Z")
This is my logstash config file, after running it I got the below error input { beats { port =\> 5044 ssl =\> true ssl\_certificate =\> "/etc/pki/tls/certs/logstash-forwarder.crt" ssl\_key =\> "/etc/pki/tls… --- ## [Highlighting is not working in complex query](https://discuss.elastic.co/t/highlighting-is-not-working-in-complex-query/27591)
**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\ **Replies:** 1\ **Last updated:** [August 18, 2015, 3:07pm UTC](https://discuss.elastic.co/t/highlighting-is-not-working-in-complex-query/27591 "2015-08-18T15:07:00Z")
Hi, I wanted to use highlight in my query, My Query is $query = \[ "filtered" =\> \[ "query" =\> \[ "bool" =\> \[ "should" =\> \[ \[ 'query\_s… --- ## [Exiting: index management requested but the Elasticsearch output is not configured/enabled](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/360687)
**Author:** [@ascalonking](https://discuss.elastic.co/u/ascalonking)\ **Replies:** 8\ **Last updated:** [June 6, 2024, 9:57am UTC](https://discuss.elastic.co/t/exiting-index-management-requested-but-the-elasticsearch-output-is-not-configured-enabled/360687 "2024-06-06T09:57:23Z")
Hello! I have a problem, I installed a new ELK stack (Elasticsearch, Logstash, Kibana). On the client server I installed filebit to monitor auditd. When I run the command "filebit setup -e" I get the following error \[… --- ## [Elasticsearch 8.3.2 docker org.elasticsearch.gateway.CorruptStateException](https://discuss.elastic.co/t/elasticsearch-8-3-2-docker-org-elasticsearch-gateway-corruptstateexception/310765)
**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\ **Replies:** 3\ **Last updated:** [July 27, 2022, 11:39pm UTC](https://discuss.elastic.co/t/elasticsearch-8-3-2-docker-org-elasticsearch-gateway-corruptstateexception/310765 "2022-07-27T23:39:14Z")
Installed ES 8.3.2 using docker on my local dev machine. Before this installation I had ES 6.3.2 running and I had deleted all my test indices in 6.3.2 before installing 8.3.2 so that I would avoid any v6 issues with 8 o… --- ## [Looking for a well supported jdbc output plugin](https://discuss.elastic.co/t/looking-for-a-well-supported-jdbc-output-plugin/288071)
**Author:** [@David\_Levine](https://discuss.elastic.co/u/David_Levine)\ **Replies:** 3\ **Last updated:** [October 31, 2021, 12:29am UTC](https://discuss.elastic.co/t/looking-for-a-well-supported-jdbc-output-plugin/288071 "2021-10-31T00:29:34Z")
I'm relatively new to logstash and am hoping some of you might be able to point me in the right direction. I'm looking for a reasonably well supported jdbc output plugin that works against the latest version of logstas… --- ## [Circuit\_breaking\_exception \[parent\] Data too large, data for \[\\]](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large-data-for-http-request/239423)
**Author:** [@Netanel\_Malka](https://discuss.elastic.co/u/Netanel_Malka)\ **Replies:** 0\ **Last updated:** [July 1, 2020, 7:22am UTC](https://discuss.elastic.co/t/circuit-breaking-exception-parent-data-too-large-data-for-http-request/239423 "2020-07-01T07:22:58Z")
I'm trying to insert bulk of data( ~60M docs) using spark(39 partitions, 10 concurrent) and I get the following exception: org.elasticsearch.hadoop.rest.EsHadoopInvalidRequest: org.elasticsearch.hadoop.rest.EsHadoopRe… --- ## [ES SQL :: Syntax for "sum( Value1 \* Value2)"?](https://discuss.elastic.co/t/es-sql-syntax-for-sum-value1-value2/204914)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 3:11pm UTC](https://discuss.elastic.co/t/es-sql-syntax-for-sum-value1-value2/204914 "2019-10-24T15:11:54Z")
Hi Elasticsearch Ninja Masters, I’ve recently spun up an Elasticsearch v7.4.0 Docker container, and I’m using the “elasticsearch-sql-cli” script to run SQL-like queries off my ES instance. Which is awesome, thank you f… --- ## [Elasticsearch cannot query WKT](https://discuss.elastic.co/t/elasticsearch-cannot-query-wkt/140442)
**Author:** [@Ash\_Chamari](https://discuss.elastic.co/u/Ash_Chamari)\ **Replies:** 3\ **Last updated:** [July 19, 2018, 7:15am UTC](https://discuss.elastic.co/t/elasticsearch-cannot-query-wkt/140442 "2018-07-19T07:15:01Z")
Elasticsearch cannot query KWT I'm retrieving geometry data from MS sql server 2012 via jdbc connection and pushing it to elasticsearch. Data table consist of: objectid & shape. In Kibana data looks like following. … --- ## [Search scroll returning no hits (possible bug in 6.2?)](https://discuss.elastic.co/t/search-scroll-returning-no-hits-possible-bug-in-6-2/135578)
**Author:** [@Gemma\_Cabero](https://discuss.elastic.co/u/Gemma_Cabero)\ **Replies:** 3\ **Last updated:** [June 13, 2018, 3:31pm UTC](https://discuss.elastic.co/t/search-scroll-returning-no-hits-possible-bug-in-6-2/135578 "2018-06-13T15:31:26Z")
After an upgrade made to 6.2 our scrolling does no longer work. We are currently using a java client for it that follows the docs for first and subsequent requests (https://www.elastic.co/guide/en/elasticsearch/reference… --- ## [Environment variables not replaced in external configuration file](https://discuss.elastic.co/t/environment-variables-not-replaced-in-external-configuration-file/124690)
**Author:** [@oetzi](https://discuss.elastic.co/u/oetzi)\ **Replies:** 3\ **Last updated:** [March 26, 2018, 2:05pm UTC](https://discuss.elastic.co/t/environment-variables-not-replaced-in-external-configuration-file/124690 "2018-03-26T14:05:13Z")
I face the problem that environment variables in external config files are not replaced. The external config files are imported to the filebeat.yml file via the filebeat.config.prospectors option. My external config fil… --- ## [Codec line delimiter by regex](https://discuss.elastic.co/t/codec-line-delimiter-by-regex/114809)
**Author:** [@Nofar](https://discuss.elastic.co/u/Nofar)\ **Replies:** 3\ **Last updated:** [January 15, 2018, 9:55am UTC](https://discuss.elastic.co/t/codec-line-delimiter-by-regex/114809 "2018-01-15T09:55:02Z")
Is it possible? I need to create delimiter like this: \<9\> or \<13\> codec =\> line { delimiter =\> "\<\\d+\>" } It relate to this limiter as is, and expect to receive "\<\\d+\>" string... --- ## [Replace Elasticsearch with Azure-search](https://discuss.elastic.co/t/replace-elasticsearch-with-azure-search/107492)
**Author:** [@Narmatha](https://discuss.elastic.co/u/Narmatha)\ **Replies:** 3\ **Last updated:** [November 14, 2017, 6:50am UTC](https://discuss.elastic.co/t/replace-elasticsearch-with-azure-search/107492 "2017-11-14T06:50:41Z")
The existing application is running in elasticsearch. The functionality of the application covers. MLT search synonym search stopwords multilingual search Filtered search Kibana dashboard to show the metrics using agg… --- ## [Metricbeat counter logstash API](https://discuss.elastic.co/t/metricbeat-counter-logstash-api/68650)
**Author:** [@Jo\_De\_Troy](https://discuss.elastic.co/u/Jo_De_Troy)\ **Replies:** 3\ **Last updated:** [December 14, 2016, 8:29am UTC](https://discuss.elastic.co/t/metricbeat-counter-logstash-api/68650 "2016-12-14T08:29:26Z")
Hello, I was wondering if metricbeat can pull in metrics from logstash instances which are available though the logstash API (e.g. node stats API) ? Or is there another way to get insight on the performance/throughput … --- ## [Got a problem with "size" in kibana](https://discuss.elastic.co/t/got-a-problem-with-size-in-kibana/59990)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 3\ **Last updated:** [September 8, 2016, 4:12am UTC](https://discuss.elastic.co/t/got-a-problem-with-size-in-kibana/59990 "2016-09-08T04:12:20Z")
I loaded a file with 9177 records into ES 2.4.0 using logstash 2.4.0. When i seen the graph in Kibana 4.6.0 its giving abnormal results like when I mention "size" as 5 its showing the count as 8 (As like in the first … --- ## [Logstash installation on a linux server error](https://discuss.elastic.co/t/logstash-installation-on-a-linux-server-error/42962)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 3\ **Last updated:** [March 3, 2016, 9:26am UTC](https://discuss.elastic.co/t/logstash-installation-on-a-linux-server-error/42962 "2016-03-03T09:26:25Z")
I was trying to install logstash on a linux server usinf the command yum install logstash-2.2.2-1.noarch.rpm and i get the following error Loaded plugins: product-id, security, subscription-manager This system is no… --- ## [Average of top n terms](https://discuss.elastic.co/t/average-of-top-n-terms/26165)
**Author:** [@roel](https://discuss.elastic.co/u/roel)\ **Replies:** 3\ **Last updated:** [July 23, 2015, 3:19pm UTC](https://discuss.elastic.co/t/average-of-top-n-terms/26165 "2015-07-23T15:19:27Z")
Hallo, In a certain index documents have a keyword, a rank and a timestamp. The rank for a keyword may differ from time to time. This means the dataset may look like this: {"keywords": "piano", "rank" 1, "timestamp":… --- ## [Kibana 4 installation with httpd 2.4.10](https://discuss.elastic.co/t/kibana-4-installation-with-httpd-2-4-10/25965)
**Author:** [@joiceedattel](https://discuss.elastic.co/u/joiceedattel)\ **Replies:** 3\ **Last updated:** [July 21, 2015, 10:11am UTC](https://discuss.elastic.co/t/kibana-4-installation-with-httpd-2-4-10/25965 "2015-07-21T10:11:15Z")
Hi all, I'm having a kibana 3 setup which is working along with http 2.4.10 ( ie, Kibana directories are kept under apache -\> htdocs directory ). Now I want to use kibana 4 , could any one please suggest me how I can m… --- ## [ElasticSearch 7.4 taking 100% cpu usage](https://discuss.elastic.co/t/elasticsearch-7-4-taking-100-cpu-usage/249241)
**Author:** [@Pavan\_Kalyan\_Ladi](https://discuss.elastic.co/u/Pavan_Kalyan_Ladi)\ **Replies:** 4\ **Last updated:** [September 22, 2020, 8:39am UTC](https://discuss.elastic.co/t/elasticsearch-7-4-taking-100-cpu-usage/249241 "2020-09-22T08:39:07Z")
Recently we migrated from ES-5.1 to ES7.4 and the CPU usage too high in ES7.4 compared to ES5.1 With a given load the max. cpu usage of 5.1 is in between 0% to 10%. However the performance and max. cpu usage of 7.4 is … --- ## [Difference between Top Hit of Metric Visualization and Top Hit in Metric Visual Builder](https://discuss.elastic.co/t/difference-between-top-hit-of-metric-visualization-and-top-hit-in-metric-visual-builder/192016)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 8:41am UTC](https://discuss.elastic.co/t/difference-between-top-hit-of-metric-visualization-and-top-hit-in-metric-visual-builder/192016 "2019-07-30T08:41:30Z")
Hello All, I have an issue in understanding how exactly Metric in Visual Builder settings work. The easiest way would be to explain it on an example. Here's my data set: { "manufacure\_date": "2019-07-01T08:00:00.00… --- ## [Visualize query with nested filter](https://discuss.elastic.co/t/visualize-query-with-nested-filter/170131)
**Author:** [@Bene](https://discuss.elastic.co/u/Bene)\ **Replies:** 4\ **Last updated:** [February 28, 2019, 6:47am UTC](https://discuss.elastic.co/t/visualize-query-with-nested-filter/170131 "2019-02-28T06:47:42Z")
Hi \*, I have some problems visualize data in timelion with this query: .es(timefield=createdAt,index=test\*,q="installUnique:ad822d4 AND controllerNumber:0 and channel\_number.number:00",metric=max:channel\_number.demand)… --- ## [Dead letter queue encoding issues / binary format](https://discuss.elastic.co/t/dead-letter-queue-encoding-issues-binary-format/146617)
**Author:** [@jgzurano](https://discuss.elastic.co/u/jgzurano)\ **Replies:** 4\ **Last updated:** [September 3, 2018, 2:59pm UTC](https://discuss.elastic.co/t/dead-letter-queue-encoding-issues-binary-format/146617 "2018-09-03T14:59:32Z")
Environment: ELK Stack 6.2.3 Version: Logstash 6.2.3 Docker image: docker.elastic.co/logstash/logstash-oss:6.2.3 I have this stack running: filebeat -\> logstash -\> elasticsearch I enabled the DLQ after noticing that … --- ## [Is there a way to cat only yellow shards in haproxy.cfg?](https://discuss.elastic.co/t/is-there-a-way-to-cat-only-yellow-shards-in-haproxy-cfg/108916)
**Author:** [@rogue](https://discuss.elastic.co/u/rogue)\ **Replies:** 4\ **Last updated:** [December 7, 2017, 5:32pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-cat-only-yellow-shards-in-haproxy-cfg/108916 "2017-12-07T17:32:56Z")
Hello fellas! I would like to have yellow shards for one of my backend configs. Right now I have this one: backend blabla mode tcp balance roundrobin option httpchk get /\_cat/indices http-check expect rstring \\b… --- ## [Search Operators](https://discuss.elastic.co/t/search-operators/104012)
**Author:** [@Illidan](https://discuss.elastic.co/u/Illidan)\ **Replies:** 4\ **Last updated:** [October 20, 2017, 4:11am UTC](https://discuss.elastic.co/t/search-operators/104012 "2017-10-20T04:11:56Z")
I trying to achieve behavior similar to using Google search operators. For instance, Google supports "AND", and "OR" operators as part of query string, in order to produce more refined searches. For example: "Junior AND… [Previous page](https://discuss.elastic.co/top.md?page=1260&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1262&per_page=50&period=all)