# Top **URL:** https://discuss.elastic.co/top.md?page=1263&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1264 --- ## [How to match Event ID, Knowledge Base DB with winlogbeat](https://discuss.elastic.co/t/how-to-match-event-id-knowledge-base-db-with-winlogbeat/48891)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 2\ **Last updated:** [May 12, 2016, 1:38am UTC](https://discuss.elastic.co/t/how-to-match-event-id-knowledge-base-db-with-winlogbeat/48891 "2016-05-12T01:38:55Z")
I am new to Winlogbeat and would like to know how to match Event ID, Knowledge Base DB (https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx) with winlogbeat Thanks. --- ## [Disney lawsuit](https://discuss.elastic.co/t/disney-lawsuit/1511)
**Author:** [@johntylerbush](https://discuss.elastic.co/u/johntylerbush)\ **Replies:** 2\ **Last updated:** [May 29, 2015, 4:02am UTC](https://discuss.elastic.co/t/disney-lawsuit/1511 "2015-05-29T04:02:49Z")
Am I the only person that worries about Elastic getting sued from Disney. Naming your products after Marvel characters seems like a slippery slope. Its not like you can hide from this list. It's surprising to me that … --- ## [Elasticsearch http.host default value](https://discuss.elastic.co/t/elasticsearch-http-host-default-value/351384)
**Author:** [@ilya-popkov](https://discuss.elastic.co/u/ilya-popkov)\ **Replies:** 4\ **Last updated:** [February 12, 2024, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-http-host-default-value/351384 "2024-02-12T09:19:35Z")
In the elasticsearch version 8.12 docs says "network.host default value is localhost and http.host value defaults is address given by network.host". But for default in fresh new elasticsearch http.host is equal 0.0.0.0 w… --- ## [How to get the average between two timestamp](https://discuss.elastic.co/t/how-to-get-the-average-between-two-timestamp/301100)
**Author:** [@Roberto\_Mejri](https://discuss.elastic.co/u/Roberto_Mejri)\ **Replies:** 4\ **Last updated:** [March 31, 2022, 10:12am UTC](https://discuss.elastic.co/t/how-to-get-the-average-between-two-timestamp/301100 "2022-03-31T10:12:51Z")
HI, (I'm literally new on Kibana). My Team leader asked to me to do the visualize on Kibana with the count... of the log got on Spring microservice. The problem is now I have to display the average between timestamps of … --- ## [Date Labels in Graphs](https://discuss.elastic.co/t/date-labels-in-graphs/260206)
**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\ **Replies:** 4\ **Last updated:** [January 6, 2021, 3:48pm UTC](https://discuss.elastic.co/t/date-labels-in-graphs/260206 "2021-01-06T15:48:10Z")
I'm using line graph and use histogram over month to display a monthly view. The date labels showing in the graph are not showing Monthly Dates ie. 01/12/2020, 01/11/2020 so on and so forth when selecting absolute time … --- ## [Watcher sending alert when condition not met](https://discuss.elastic.co/t/watcher-sending-alert-when-condition-not-met/237169)
**Author:** [@andywt123](https://discuss.elastic.co/u/andywt123)\ **Replies:** 4\ **Last updated:** [July 1, 2020, 2:04pm UTC](https://discuss.elastic.co/t/watcher-sending-alert-when-condition-not-met/237169 "2020-07-01T14:04:33Z")
I want to send an alert if a cron job has not run in the last 10 minutes. I set the following up in watcher: "query": { "bool": { "must": \[ { "terms": { … --- ## [SIEM detections false positive](https://discuss.elastic.co/t/siem-detections-false-positive/219287)
**Author:** [@danielsnelling](https://discuss.elastic.co/u/danielsnelling)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 9:50pm UTC](https://discuss.elastic.co/t/siem-detections-false-positive/219287 "2020-03-02T21:50:37Z")
We've upgraded our stack to 7.6.0 yesterday, and we love the new Detections mechanism! I'm aware these are in beta, but some of the definitions have a boolean 'or' where there should be an 'and'. This is particularly w… --- ## [Deleting index using curator older than 25 days](https://discuss.elastic.co/t/deleting-index-using-curator-older-than-25-days/193489)
**Author:** [@swapnali](https://discuss.elastic.co/u/swapnali)\ **Replies:** 4\ **Last updated:** [August 5, 2019, 3:05pm UTC](https://discuss.elastic.co/t/deleting-index-using-curator-older-than-25-days/193489 "2019-08-05T15:05:41Z")
Hi, I am trying to deleting index which is older than 25 days. Below are error i am getting \[root@eltest1 elasticsearch-curator\]# curator delete\_3mOdl.yml 2019-08-02 14:02:50,739 INFO Preparing Action ID: 1, "de… --- ## [Watcher version 2.2.0 download](https://discuss.elastic.co/t/watcher-version-2-2-0-download/50130)
**Author:** [@jeurich](https://discuss.elastic.co/u/jeurich)\ **Replies:** 4\ **Last updated:** [May 17, 2016, 3:55pm UTC](https://discuss.elastic.co/t/watcher-version-2-2-0-download/50130 "2016-05-17T15:55:55Z")
Anyone know where I can find version 2.2.0 Watcher with 30 day license? I am not ready to update to a newer version of ES. --- ## [Indexing buffer size](https://discuss.elastic.co/t/indexing-buffer-size/116989)
**Author:** [@cemremengu](https://discuss.elastic.co/u/cemremengu)\ **Replies:** 1\ **Last updated:** [January 26, 2018, 9:55am UTC](https://discuss.elastic.co/t/indexing-buffer-size/116989 "2018-01-26T09:55:45Z")
https://www.elastic.co/guide/en/elasticsearch/reference/current/tune-for-indexing-speed.html#\_indexing\_buffer\_size Is it 512MB for per all shards or per all primary shards? Docs say: indices.memory.index\_buffer\_size … --- ## [Returning more than 10000 records in Power BI](https://discuss.elastic.co/t/returning-more-than-10000-records-in-power-bi/99371)
**Author:** [@adam.burgess](https://discuss.elastic.co/u/adam.burgess)\ **Replies:** 1\ **Last updated:** [September 5, 2017, 6:55am UTC](https://discuss.elastic.co/t/returning-more-than-10000-records-in-power-bi/99371 "2017-09-05T06:55:05Z")
Hi There, I have a requirement to use Power BI to query ES to create a model with ES and other data sources. My problem is that my data I need to return is currently about 14000 rows and slowly growing. I’m looking for … --- ## [Slow update-mapping pending tasks](https://discuss.elastic.co/t/slow-update-mapping-pending-tasks/38965)
**Author:** [@TheDeveloper](https://discuss.elastic.co/u/TheDeveloper)\ **Replies:** 1\ **Last updated:** [January 14, 2016, 7:07am UTC](https://discuss.elastic.co/t/slow-update-mapping-pending-tasks/38965 "2016-01-14T07:07:15Z")
We have a multi-tenant index with a large number of mapped fields - the mapping JSON weighs in at ~47mb. When fields are dynamically added to the mapping, the update-mapping pending task takes 1 minute or more to comple… --- ## [What is the number prefix in less-than/greater-than signs in the Message Field, before Date](https://discuss.elastic.co/t/what-is-the-number-prefix-in-less-than-greater-than-signs-in-the-message-field-before-date/194630)
**Author:** [@samk137](https://discuss.elastic.co/u/samk137)\ **Replies:** 8\ **Last updated:** [August 9, 2019, 4:23pm UTC](https://discuss.elastic.co/t/what-is-the-number-prefix-in-less-than-greater-than-signs-in-the-message-field-before-date/194630 "2019-08-09T16:23:30Z")
Hello, I'm new to the ELK stack and am having trouble figuring out something that's coming through in all my logs. The 'message' field stars with a \<##\>MMM DD HH:MM:SS I cannot for the life of me figure out what the \<#… --- ## [\[ANNOUNCEMENT\] es-sql 2.0.0 Query Elasticsearch using SQL](https://discuss.elastic.co/t/announcement-es-sql-2-0-0-query-elasticsearch-using-sql/43062)
**Author:** [@taowen](https://discuss.elastic.co/u/taowen)\ **Replies:** 0\ **Last updated:** [March 1, 2016, 1:03am UTC](https://discuss.elastic.co/t/announcement-es-sql-2-0-0-query-elasticsearch-using-sql/43062 "2016-03-01T01:03:10Z")
https://github.com/taowen/es-monitor We love SQL and want to leverage the full power of elasticsearch. Using syntax like $ cat \<\< EOF | es-sql http://127.0.0.1:9200 WITH all\_symbols AS (SELECT MAX(market\_cap) AS… --- ## [Cannot convert instance of class org.jruby.RubyTime to class java.lang.String"](https://discuss.elastic.co/t/cannot-convert-instance-of-class-org-jruby-rubytime-to-class-java-lang-string/26477)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 0\ **Last updated:** [July 29, 2015, 10:57am UTC](https://discuss.elastic.co/t/cannot-convert-instance-of-class-org-jruby-rubytime-to-class-java-lang-string/26477 "2015-07-29T10:57:16Z")
filter { date { match =\> \[ "timestamp", "yyyy-MM-dd HH:mm:ss " , "ISO8601" \] target =\> "@timestamp" } } I am using this filter in my conf file for feeding data from postgresql to logstash and from logstash to elast… --- ## [Installing Elasticsearch with third party CA certificates](https://discuss.elastic.co/t/installing-elasticsearch-with-third-party-ca-certificates/318440)
**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\ **Replies:** 3\ **Last updated:** [November 10, 2022, 12:46am UTC](https://discuss.elastic.co/t/installing-elasticsearch-with-third-party-ca-certificates/318440 "2022-11-10T00:46:14Z")
Good afternoon, we are planning on deploying Elastic search with third party publicly signed certificates from Lets Encrypt and i have been trying to find a way of replacing the certificates that are provided by the Elas… --- ## [Cluster\_block\_exception FORBIDDEN/8/index write (api)](https://discuss.elastic.co/t/cluster-block-exception-forbidden-8-index-write-api/210594)
**Author:** [@alatas](https://discuss.elastic.co/u/alatas)\ **Replies:** 0\ **Last updated:** [December 4, 2019, 9:31pm UTC](https://discuss.elastic.co/t/cluster-block-exception-forbidden-8-index-write-api/210594 "2019-12-04T21:31:19Z")
Hi, we have a single node elk cluster running on ubuntu over docker. ELK version is 6.4.3. We started to get "cluster\_block\_exception with FORBIDDEN/8/index write api" error on the logstash output. I checked all the iss… --- ## [APM empty with entries in apm-\* indexes](https://discuss.elastic.co/t/apm-empty-with-entries-in-apm-indexes/149420)
**Author:** [@andrej\_geb](https://discuss.elastic.co/u/andrej_geb)\ **Replies:** 3\ **Last updated:** [September 21, 2018, 12:30pm UTC](https://discuss.elastic.co/t/apm-empty-with-entries-in-apm-indexes/149420 "2018-09-21T12:30:32Z")
APM dashboard is not showing any entries (even with expanding time to last 7 days). It shows only: "Looks like you don't have any services with APM installed. Let's add some!" Request in APM dashboard: http://kibana:560… --- ## [Filebeat 6.1 performance](https://discuss.elastic.co/t/filebeat-6-1-performance/119659)
**Author:** [@artful](https://discuss.elastic.co/u/artful)\ **Replies:** 3\ **Last updated:** [February 16, 2018, 1:01pm UTC](https://discuss.elastic.co/t/filebeat-6-1-performance/119659 "2018-02-16T13:01:13Z")
Hello! I transfer postgres logs with Filebeat PostgreSQL module directly to Elasticsearch 6.1. But bandwidth is limited. How I can tuning my config for max performance? My log: 2018-02-13T12:51:33Z INFO Non-zero metri… --- ## [GROK filter with regular expression not working](https://discuss.elastic.co/t/grok-filter-with-regular-expression-not-working/67211)
**Author:** [@Hans](https://discuss.elastic.co/u/Hans)\ **Replies:** 3\ **Last updated:** [November 28, 2016, 6:30am UTC](https://discuss.elastic.co/t/grok-filter-with-regular-expression-not-working/67211 "2016-11-28T06:30:10Z")
Hi, I have a regular expression in a GROK filter, where the first filter is working however the next 5 filters are not working. Could someone kindly look at the filter and possibly point out where I am going wrong? gro… --- ## [Filebeat holds access to deleted/rotated files and impact disk space stats](https://discuss.elastic.co/t/filebeat-holds-access-to-deleted-rotated-files-and-impact-disk-space-stats/66280)
**Author:** [@mt.michael](https://discuss.elastic.co/u/mt.michael)\ **Replies:** 3\ **Last updated:** [November 18, 2016, 1:13pm UTC](https://discuss.elastic.co/t/filebeat-holds-access-to-deleted-rotated-files-and-impact-disk-space-stats/66280 "2016-11-18T13:13:26Z")
Hi. We're using filebeat version 1.2.3 (amd64) on Ubuntu 12.04.5 LTS server. We are using logrotate to rotate files (20 unique file names) hourly. So filebeat should monitor files with $filenames.log and $filenames.log… --- ## [Right tool for the job?](https://discuss.elastic.co/t/right-tool-for-the-job/47030)
**Author:** [@dom2497](https://discuss.elastic.co/u/dom2497)\ **Replies:** 3\ **Last updated:** [April 12, 2016, 10:31am UTC](https://discuss.elastic.co/t/right-tool-for-the-job/47030 "2016-04-12T10:31:06Z")
Hi gang, my first time posting so hopefully I am in the right place. I am working on a little project mainly to get to grips with Elastic Search and I have hit a stumbling block and I was looking for some advice. I am … --- ## [Problem with data load](https://discuss.elastic.co/t/problem-with-data-load/20025)
**Author:** [@Jochen\_Rieseberg](https://discuss.elastic.co/u/Jochen_Rieseberg)\ **Replies:** 3\ **Last updated:** [October 2, 2014, 6:37am UTC](https://discuss.elastic.co/t/problem-with-data-load/20025 "2014-10-02T06:37:17Z")
Hi, I just tried to follow the reference guide with load data and get an error: No handler found for uri \[/'localhost:9200/bank/account/\_bulk?pretty%27%20--data-binary%20@accounts.json\] and method \[POST\] Is … --- ## [How to set replication to async for a index](https://discuss.elastic.co/t/how-to-set-replication-to-async-for-a-index/18002)
**Author:** [@Jinyuan\_Zhou](https://discuss.elastic.co/u/Jinyuan_Zhou)\ **Replies:** 3\ **Last updated:** [June 10, 2014, 1:29am UTC](https://discuss.elastic.co/t/how-to-set-replication-to-async-for-a-index/18002 "2014-06-10T01:29:16Z")
Hi there, I am new to ES. I understand the concept but cannot find documentation about where to put the setting. Thanks, Jack -- You received this message because you are subscribed to the Google Groups "elast… --- ## [Kibana server is not ready yet status](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-status/379685)
**Author:** [@rootkai94](https://discuss.elastic.co/u/rootkai94)\ **Replies:** 8\ **Last updated:** [July 3, 2025, 7:32pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-status/379685 "2025-07-03T19:32:02Z")
Hello, I recently enrolled into the Elastic Security SIEM on-demand course and i started the course successfully. But while i reached module 3, i am unable to access Kibana dashboard from Strigo VM's. I keep getting the… --- ## [ElasticsearchClient API says Name does not resolve](https://discuss.elastic.co/t/elasticsearchclient-api-says-name-does-not-resolve/335572)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 7\ **Last updated:** [June 9, 2023, 4:47pm UTC](https://discuss.elastic.co/t/elasticsearchclient-api-says-name-does-not-resolve/335572 "2023-06-09T16:47:56Z")
I am converting my existing Java code to the new Elastic Java API. My system is ES 7.17.9. When I send a query, I get the following error: 2023-06-08 20:58:00.918Z ERROR \[ForkJoinPool.commonPool-worker-9\] c.n.b.a.h.c.El… --- ## [New event not inserted](https://discuss.elastic.co/t/new-event-not-inserted/253411)
**Author:** [@micobarac](https://discuss.elastic.co/u/micobarac)\ **Replies:** 7\ **Last updated:** [October 29, 2020, 3:24pm UTC](https://discuss.elastic.co/t/new-event-not-inserted/253411 "2020-10-29T15:24:49Z")
I have a problem with an event not getting inserted on timeout. This is my configuration: filter { if !\[messageid\] { drop {} } aggregate { task\_id =\> "%{messageid}" code =\> " map\['avamis\_status… --- ## [Reload\_search\_analyzers](https://discuss.elastic.co/t/reload-search-analyzers/228002)
**Author:** [@chari](https://discuss.elastic.co/u/chari)\ **Replies:** 7\ **Last updated:** [April 22, 2020, 11:15am UTC](https://discuss.elastic.co/t/reload-search-analyzers/228002 "2020-04-22T11:15:23Z")
i have the following sequence of python api calls to ES. from elasticsearch import Elasticsearch es=Elasticsearch(\[{'host':'127.0.0.1','port':9200}\]) es.indices.reload\_search\_analyzers(index="myindex") but I see an err… --- ## [Multi line pattern for different services to one logstash](https://discuss.elastic.co/t/multi-line-pattern-for-different-services-to-one-logstash/153848)
**Author:** [@kuna](https://discuss.elastic.co/u/kuna)\ **Replies:** 7\ **Last updated:** [November 2, 2018, 5:39am UTC](https://discuss.elastic.co/t/multi-line-pattern-for-different-services-to-one-logstash/153848 "2018-11-02T05:39:18Z")
I have installed file beat agents for different service and pointed them to Logstash and applied my filter for it but noticed multiple logs are coming in a single log even though i was using multi line pattern to differe… --- ## [Using a Variable in Canvas Render CSS](https://discuss.elastic.co/t/using-a-variable-in-canvas-render-css/305618)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [May 25, 2022, 2:19pm UTC](https://discuss.elastic.co/t/using-a-variable-in-canvas-render-css/305618 "2022-05-25T14:19:30Z")
Hi All, I have a need to use a variable in Canvas' render CSS, but I can't find a way to do this. I'm effectively trying to do some math on an animation to be able to handle variable length text. Canvas simplified exa… --- ## [Can a dissect processor have a condition?](https://discuss.elastic.co/t/can-a-dissect-processor-have-a-condition/242578)
**Author:** [@geoffreyphippsuw](https://discuss.elastic.co/u/geoffreyphippsuw)\ **Replies:** 1\ **Last updated:** [July 25, 2020, 12:44am UTC](https://discuss.elastic.co/t/can-a-dissect-processor-have-a-condition/242578 "2020-07-25T00:44:56Z")
Our EFK stack is receiving logs from several different kubernetes containers and other sources that use differing log patterns. I have created a dissect processor that can extract certain fields from the message field. B… --- ## [Urlparams syntax](https://discuss.elastic.co/t/urlparams-syntax/212891)
**Author:** [@luis.montecatine](https://discuss.elastic.co/u/luis.montecatine)\ **Replies:** 1\ **Last updated:** [December 27, 2019, 12:35pm UTC](https://discuss.elastic.co/t/urlparams-syntax/212891 "2019-12-27T12:35:13Z")
Hello. I'm trying to use urlparam on canvas on the "kibana\_sample\_data\_ecommerce" index. My param is "dy", and the value is "Tuesday". When I use on markdown the syntax is: My problem is when I try to use it on oth… --- ## [Order of actions in Bulk API via http between request and response is guaranteed?](https://discuss.elastic.co/t/order-of-actions-in-bulk-api-via-http-between-request-and-response-is-guaranteed/122499)
**Author:** [@wreulicke](https://discuss.elastic.co/u/wreulicke)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 5:03pm UTC](https://discuss.elastic.co/t/order-of-actions-in-bulk-api-via-http-between-request-and-response-is-guaranteed/122499 "2018-03-07T17:03:03Z")
I am writing code to index some document using Bulk API. In my case, I would like to retry to index in failed actions. There are no guarantee that it is equals to order of actions between request and response? (not ex… --- ## [Cant get to elastic when localhost replaced with server name](https://discuss.elastic.co/t/cant-get-to-elastic-when-localhost-replaced-with-server-name/100054)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 1\ **Last updated:** [September 11, 2017, 1:12pm UTC](https://discuss.elastic.co/t/cant-get-to-elastic-when-localhost-replaced-with-server-name/100054 "2017-09-11T13:12:18Z")
HI All, I have elastic search 5.5.1 installed with xpack. I've created an index and used fscrawler to populate it. Via Postman, I perform a GET on a url in the form localhost:9200/myindex/\_search?q="William" and it all … --- ## [How to extract XML attributes using XPath for Logstash](https://discuss.elastic.co/t/how-to-extract-xml-attributes-using-xpath-for-logstash/83105)
**Author:** [@ItsMeSurajR](https://discuss.elastic.co/u/ItsMeSurajR)\ **Replies:** 1\ **Last updated:** [April 20, 2017, 9:04pm UTC](https://discuss.elastic.co/t/how-to-extract-xml-attributes-using-xpath-for-logstash/83105 "2017-04-20T21:04:18Z")
I'm trying to parse below XML to get all classname, name,failure and error message. But I'm unable to extract the individual xml elements using the xpath. Can someone point me where am I going wrong? here is my configu… --- ## [Best Bets implementation in Elastic Search](https://discuss.elastic.co/t/best-bets-implementation-in-elastic-search/21917)
**Author:** [@Nitesh\_Earkara](https://discuss.elastic.co/u/Nitesh_Earkara)\ **Replies:** 1\ **Last updated:** [February 15, 2017, 1:25pm UTC](https://discuss.elastic.co/t/best-bets-implementation-in-elastic-search/21917 "2017-02-15T13:25:30Z")
Hi All, I need to implement best bets using elastic search. Where in few results will be ranked and displayed at top depending upon the keyword searched by user. Please let me know if such implementation is po… --- ## [Logstash-all-plugins-2.3.1 connect to Sybase error](https://discuss.elastic.co/t/logstash-all-plugins-2-3-1-connect-to-sybase-error/49879)
**Author:** [@zhanght1](https://discuss.elastic.co/u/zhanght1)\ **Replies:** 1\ **Last updated:** [June 24, 2016, 9:55am UTC](https://discuss.elastic.co/t/logstash-all-plugins-2-3-1-connect-to-sybase-error/49879 "2016-06-24T09:55:59Z")
After I configure the logstash.conf input{ jdbc { jdbc\_driver\_library =\> "/data/logstash/vendor/jar/jdbc/jconn3.jar" jdbc\_driver\_class =\> "com.sybase.jdbc3.jdbc.SybDriver" jdbc\_connection\_string =\> "jdbc:sy… --- ## [How can I display "Export: Raw | Formatted " data option on kibana (exported iframe) widgets](https://discuss.elastic.co/t/how-can-i-display-export-raw-formatted-data-option-on-kibana-exported-iframe-widgets/51983)
**Author:** [@Nitin\_Shirsat](https://discuss.elastic.co/u/Nitin_Shirsat)\ **Replies:** 1\ **Last updated:** [June 7, 2016, 10:30am UTC](https://discuss.elastic.co/t/how-can-i-display-export-raw-formatted-data-option-on-kibana-exported-iframe-widgets/51983 "2016-06-07T10:30:08Z")
Kibana Version 4.5 I want to display export data(Export: Raw Formatted " option on Kibana (iframe) widgets. Is there any setting or configuration for it. ) --- ## [How to index a large file with Elasticsearch](https://discuss.elastic.co/t/how-to-index-a-large-file-with-elasticsearch/36288)
**Author:** [@hasif.subair](https://discuss.elastic.co/u/hasif.subair)\ **Replies:** 1\ **Last updated:** [December 3, 2015, 2:03pm UTC](https://discuss.elastic.co/t/how-to-index-a-large-file-with-elasticsearch/36288 "2015-12-03T14:03:00Z")
Hi, I have a large file saved in pdf format in Hadoop. I want to index file contents and other file informations. I was looking around the web and finally stumbled on this here. But here they are indexing the file by… --- ## [Buffer between logstash and elasticsearch](https://discuss.elastic.co/t/buffer-between-logstash-and-elasticsearch/33124)
**Author:** [@camarasingham](https://discuss.elastic.co/u/camarasingham)\ **Replies:** 1\ **Last updated:** [October 28, 2015, 6:40am UTC](https://discuss.elastic.co/t/buffer-between-logstash-and-elasticsearch/33124 "2015-10-28T06:40:43Z")
Hi All, We are using logstash tcp/udp json input plugin and the elasticsearch output plugin. I was wondering if there was a buffer of sorts between the two, so that, if the elasticsearch instance is restarted, message… --- ## [Draw Pie Chart in Kibana based on field values](https://discuss.elastic.co/t/draw-pie-chart-in-kibana-based-on-field-values/262077)
**Author:** [@Sudarshan\_Reddy](https://discuss.elastic.co/u/Sudarshan_Reddy)\ **Replies:** 2\ **Last updated:** [February 3, 2021, 7:09am UTC](https://discuss.elastic.co/t/draw-pie-chart-in-kibana-based-on-field-values/262077 "2021-02-03T07:09:26Z")
Hi , we have a requirement to some of our test results in kibana pie chart . e.g we have the index pattern as following with the fields and i want to plot passedCount, failedCount values in kibana Pie Chart with each … --- ## [I will get an error on Vega with new Ealsticsearch version](https://discuss.elastic.co/t/i-will-get-an-error-on-vega-with-new-ealsticsearch-version/262200)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [January 27, 2021, 8:24am UTC](https://discuss.elastic.co/t/i-will-get-an-error-on-vega-with-new-ealsticsearch-version/262200 "2021-01-27T08:24:18Z")
The version of Vega is v.4.3.0 and Elasticsearch is v.7.6.1. With new version of Elasticsearch v.7.10.2, the error message below shows up on the top of Vega and no code has been changed. Infinite extent for field "y1":… --- ## [Logstash concurrency - managing multiple LS nodes that share the same pipeline configuration](https://discuss.elastic.co/t/logstash-concurrency-managing-multiple-ls-nodes-that-share-the-same-pipeline-configuration/204446)
**Author:** [@AlessandroKP](https://discuss.elastic.co/u/AlessandroKP)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 9:47am UTC](https://discuss.elastic.co/t/logstash-concurrency-managing-multiple-ls-nodes-that-share-the-same-pipeline-configuration/204446 "2019-10-25T09:47:56Z")
Hi all, I have a question regarding concurrency management in Logstash. My setup is the following. I have two Logstash nodes that run the same pipeline, i.e. they use the same pipeline configuration. They perform exac… --- ## [Problem understanding phrase matching with stop words](https://discuss.elastic.co/t/problem-understanding-phrase-matching-with-stop-words/97847)
**Author:** [@wmjb](https://discuss.elastic.co/u/wmjb)\ **Replies:** 2\ **Last updated:** [August 24, 2017, 11:48am UTC](https://discuss.elastic.co/t/problem-understanding-phrase-matching-with-stop-words/97847 "2017-08-24T11:48:46Z")
Hi, I have mapped an index as follows PUT test { "settings": { "index": { "number\_of\_shards": 1, "analysis": { "analyzer": { "english": { "tokenizer": "standard", … --- ## [Can Winlogbeat output to Kafka?](https://discuss.elastic.co/t/can-winlogbeat-output-to-kafka/69465)
**Author:** [@ernestgwilsonii](https://discuss.elastic.co/u/ernestgwilsonii)\ **Replies:** 2\ **Last updated:** [December 19, 2016, 3:23pm UTC](https://discuss.elastic.co/t/can-winlogbeat-output-to-kafka/69465 "2016-12-19T15:23:48Z")
I am reviewing a solution where everything goes to Kafka first. Then from Kafka to Logstash then to GrayLog then to Elasticsearch then viewable by Kibana. Can Winlogbeat output to Kafka? Thank you. Ernie --- ## [Multiline queries using multi search API?](https://discuss.elastic.co/t/multiline-queries-using-multi-search-api/67532)
**Author:** [@water2](https://discuss.elastic.co/u/water2)\ **Replies:** 2\ **Last updated:** [November 30, 2016, 12:49pm UTC](https://discuss.elastic.co/t/multiline-queries-using-multi-search-api/67532 "2016-11-30T12:49:18Z")
I get this error: { "type": "json\_parse\_exception", "reason": "Unexpected end-of-input: expected close marker for OBJECT (from \[Source: \[B@3caedf13; line: 1, column: 0\])\\n at \[Source: \[B@3caedf13; line: 1, column: … --- ## [Filebeat crashes](https://discuss.elastic.co/t/filebeat-crashes/56813)
**Author:** [@ori.rubinfeld](https://discuss.elastic.co/u/ori.rubinfeld)\ **Replies:** 2\ **Last updated:** [August 2, 2016, 10:18am UTC](https://discuss.elastic.co/t/filebeat-crashes/56813 "2016-08-02T10:18:31Z")
Hi, We are encountering the following with Filebeat 1.2.3 Windows Machines. After the registry file reaches ~70MB The Service start to fail. When running manually with debug mode, accepting the following error: f… --- ## [How to access the underlying Lucene index in ElasticSearch custom handler?](https://discuss.elastic.co/t/how-to-access-the-underlying-lucene-index-in-elasticsearch-custom-handler/744)
**Author:** [@MJB](https://discuss.elastic.co/u/MJB)\ **Replies:** 2\ **Last updated:** [May 15, 2015, 11:22pm UTC](https://discuss.elastic.co/t/how-to-access-the-underlying-lucene-index-in-elasticsearch-custom-handler/744 "2015-05-15T23:22:21Z")
Cross-posted from http://stackoverflow.com/questions/30170098/how-to-access-the-underlying-lucene-index-in-elasticsearch-custom-handler due to a lack of replies. My current project involves search over highly customise… --- ## [Finding ip address ranges that contain a given ip address](https://discuss.elastic.co/t/finding-ip-address-ranges-that-contain-a-given-ip-address/9719)
**Author:** [@sylvain](https://discuss.elastic.co/u/sylvain)\ **Replies:** 2\ **Last updated:** [November 15, 2012, 3:06pm UTC](https://discuss.elastic.co/t/finding-ip-address-ranges-that-contain-a-given-ip-address/9719 "2012-11-15T15:06:13Z")
Hi, assuming documents that have an object type defining an ip address range, what would be the recommended way to retrieve documents for which the ip range(s) contain a given ip address. \*mapping:\* 'ip\_doc'… --- ## [Unable to create index on elasticsearch](https://discuss.elastic.co/t/unable-to-create-index-on-elasticsearch/290657)
**Author:** [@Somesh\_ng](https://discuss.elastic.co/u/Somesh_ng)\ **Replies:** 5\ **Last updated:** [December 9, 2021, 7:27am UTC](https://discuss.elastic.co/t/unable-to-create-index-on-elasticsearch/290657 "2021-12-09T07:27:47Z")
I'm trying to ingest the data into Elasticsearch using logstash http\_poller but the index is not getting created in Elasticsearch. Can someone help me on this input { http\_poller { urls =\> { "te… [Previous page](https://discuss.elastic.co/top.md?page=1262&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1264&per_page=50&period=all)