# Top **URL:** https://discuss.elastic.co/top.md?page=1273&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1274 --- ## [Logstash kv filter include\_keys](https://discuss.elastic.co/t/logstash-kv-filter-include-keys/50103)
**Author:** [@sundar](https://discuss.elastic.co/u/sundar)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 4:04pm UTC](https://discuss.elastic.co/t/logstash-kv-filter-include-keys/50103 "2016-05-17T16:04:27Z")
Hello Logstash experts, Is it ok to have multiple include\_keys in my kv filter config? I want to avoid parsing all KVs since it is adding a lot of junk KV pairs to my list of fields, so I am whitelisting the keys I am in… --- ## [\[Detection Rule for Security\]: Extract fields from {{context.alerts}} in the Kibana Connector Message Service](https://discuss.elastic.co/t/detection-rule-for-security-extract-fields-from-context-alerts-in-the-kibana-connector-message-service/277919)
**Author:** [@heetS](https://discuss.elastic.co/u/heetS)\ **Replies:** 1\ **Last updated:** [July 16, 2021, 8:49pm UTC](https://discuss.elastic.co/t/detection-rule-for-security-extract-fields-from-context-alerts-in-the-kibana-connector-message-service/277919 "2021-07-16T20:49:40Z")
Hi Everyone, Basically, I was simulating the Password spraying Attack using Kibana Detection Rule (in the Security Tab). For the End-to-End pipeline, I have used WinLog Beat to directly ingest windows log events into th… --- ## [java.lang.OutOfMemoryError Kubernetes GKE](https://discuss.elastic.co/t/java-lang-outofmemoryerror-kubernetes-gke/115535)
**Author:** [@ritasker](https://discuss.elastic.co/u/ritasker)\ **Replies:** 1\ **Last updated:** [January 15, 2018, 3:49pm UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-kubernetes-gke/115535 "2018-01-15T15:49:56Z")
Morning All, I am running Elastricsearch & Kibana with Fluentd in Kubernetes on the GKE. Each node in the cluster is running kubernetes 1.8.5 and has 4 vCPUs, 15 GB memory. I am running ES v6.0.0 with the following co… --- ## [Send to Logstash localhost and remote hosts](https://discuss.elastic.co/t/send-to-logstash-localhost-and-remote-hosts/46659)
**Author:** [@gromit](https://discuss.elastic.co/u/gromit)\ **Replies:** 1\ **Last updated:** [April 7, 2016, 11:53am UTC](https://discuss.elastic.co/t/send-to-logstash-localhost-and-remote-hosts/46659 "2016-04-07T11:53:29Z")
If Filebeat is configured to send to Logstash localhost only it works fine. This is with any version. If Filebeat is configured to send to localhost and remote host then nothing is sent to localhost. To re-create the out… --- ## [Node.rack or node.rack\_id](https://discuss.elastic.co/t/node-rack-or-node-rack-id/21288)
**Author:** [@11149](https://discuss.elastic.co/u/11149)\ **Replies:** 1\ **Last updated:** [December 17, 2014, 11:12am UTC](https://discuss.elastic.co/t/node-rack-or-node-rack-id/21288 "2014-12-17T11:12:06Z")
in the default elasticsearch.yml file I see there is a node.rack configuration parameter: \*# A node can have generic attributes associated with it, which can later be used\* \*# for customized shard allocation filter… --- ## [Max HTTP Connections](https://discuss.elastic.co/t/max-http-connections/5875)
**Author:** [@electic](https://discuss.elastic.co/u/electic)\ **Replies:** 1\ **Last updated:** [November 15, 2011, 1:46pm UTC](https://discuss.elastic.co/t/max-http-connections/5875 "2011-11-15T13:46:50Z")
I was wondering if there was a maximum amount of HTTP connections for ES. Some background, I have modified my limits.conf, etc, so I know that is not the issue. But it seems, ES doesn't take any more connections aroun… --- ## [How to copy only mapping not data](https://discuss.elastic.co/t/how-to-copy-only-mapping-not-data/306415)
**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\ **Replies:** 6\ **Last updated:** [June 6, 2022, 9:55am UTC](https://discuss.elastic.co/t/how-to-copy-only-mapping-not-data/306415 "2022-06-06T09:55:25Z")
Hello There, I am new to ES, and I want to know if we have any way to copy only mappings not data, Or any way to create new index with old mappings, without data Regards, Sam --- ## [Low log rate per agent.hostname](https://discuss.elastic.co/t/low-log-rate-per-agent-hostname/272162)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 6\ **Last updated:** [May 6, 2021, 7:34am UTC](https://discuss.elastic.co/t/low-log-rate-per-agent-hostname/272162 "2021-05-06T07:34:56Z")
Hello everybody, I have created a machine learning job to be able to detect when beats stop sending logs to my cluster. Job Type: Multi-metric Metric: Low count(Event rate) split field: agent.hostname an example of … --- ## [Kibana Canvas: Comparing current month Event counts to previous month counts and result to be in a form of string "increase" or "Decrease"](https://discuss.elastic.co/t/kibana-canvas-comparing-current-month-event-counts-to-previous-month-counts-and-result-to-be-in-a-form-of-string-increase-or-decrease/311641)
**Author:** [@Solomon\_k](https://discuss.elastic.co/u/Solomon_k)\ **Replies:** 3\ **Last updated:** [August 9, 2022, 10:49am UTC](https://discuss.elastic.co/t/kibana-canvas-comparing-current-month-event-counts-to-previous-month-counts-and-result-to-be-in-a-form-of-string-increase-or-decrease/311641 "2022-08-09T10:49:58Z")
Hi Guys, I am trying to create a Canvas page for Data Findings for the current month which compares Data records from the Previous Month and outputs the Result as "Increase" if the number of counts are greater then the… --- ## [Table visualization: calculate percentage](https://discuss.elastic.co/t/table-visualization-calculate-percentage/290304)
**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\ **Replies:** 3\ **Last updated:** [November 26, 2021, 4:49pm UTC](https://discuss.elastic.co/t/table-visualization-calculate-percentage/290304 "2021-11-26T16:49:34Z")
Hi all. Let's say that I have the following documents in an index { "user": "foo", "cost": 10, "revenue": 12 }, { "user": "bar", "cost": 20, "revenue": 25 } { "user": "foo", "cost": 15, "reve… --- ## [APM server /intake/v2/events return 202 but timed too long](https://discuss.elastic.co/t/apm-server-intake-v2-events-return-202-but-timed-too-long/270646)
**Author:** [@badtimo](https://discuss.elastic.co/u/badtimo)\ **Replies:** 3\ **Last updated:** [April 21, 2021, 7:36am UTC](https://discuss.elastic.co/t/apm-server-intake-v2-events-return-202-but-timed-too-long/270646 "2021-04-21T07:36:43Z")
Kibana version: 7.9.1 Elasticsearch version:7.9.1 APM Server version:7.9.1 APM Agent language and version: golang, 1.8.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: helm in… --- ## [Got an eslint error when install](https://discuss.elastic.co/t/got-an-eslint-error-when-install/196696)
**Author:** [@yangz](https://discuss.elastic.co/u/yangz)\ **Replies:** 3\ **Last updated:** [August 30, 2019, 12:36pm UTC](https://discuss.elastic.co/t/got-an-eslint-error-when-install/196696 "2019-08-30T12:36:36Z")
kibana: 7.1.1 node: 10.15.2 yarn: 1.16.0 os: mac os 10.14.5 P.S. behind proxy yarn kbn bootstrap: @kbn/config-schema: $ yarn build @elastic/datemath: $ yarn build --quiet @kbn/config-schema: $ tsc @elastic/datemath… --- ## [Need help in installing ElasticSearch Cluster on Ambari(Hortonworks)](https://discuss.elastic.co/t/need-help-in-installing-elasticsearch-cluster-on-ambari-hortonworks/62579)
**Author:** [@Durga](https://discuss.elastic.co/u/Durga)\ **Replies:** 3\ **Last updated:** [October 10, 2016, 5:36am UTC](https://discuss.elastic.co/t/need-help-in-installing-elasticsearch-cluster-on-ambari-hortonworks/62579 "2016-10-10T05:36:15Z")
Hi Team, I am finding difficulty in installing ElasticSearch Cluster on Ambari as a Service .Can you please let me know any good link or reference? Thanks\< DP --- ## [How can we use Google Drive as a snapshot repository?](https://discuss.elastic.co/t/how-can-we-use-google-drive-as-a-snapshot-repository/25184)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [July 8, 2015, 10:56pm UTC](https://discuss.elastic.co/t/how-can-we-use-google-drive-as-a-snapshot-repository/25184 "2015-07-08T22:56:55Z")
I work at a community college and we have "unlimited" storage with Google Apps for Education. I was wondering if I could take advantage of that and use Google Drive as a snapshot repository for our logs. So, has anyon… --- ## [Is it possible to append to a existing nested type](https://discuss.elastic.co/t/is-it-possible-to-append-to-a-existing-nested-type/6901)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 3\ **Last updated:** [March 6, 2012, 7:35pm UTC](https://discuss.elastic.co/t/is-it-possible-to-append-to-a-existing-nested-type/6901 "2012-03-06T19:35:12Z")
Hi , I have following use case. - I need to index a very big document , this document is so large that i cant load the whole thing to main memory - The document is actually split into various smaller u… --- ## [Fleet agent installation failed: x509 error with --insecure](https://discuss.elastic.co/t/fleet-agent-installation-failed-x509-error-with-insecure/366259)
**Author:** [@kev24](https://discuss.elastic.co/u/kev24)\ **Replies:** 5\ **Last updated:** [September 26, 2024, 1:09pm UTC](https://discuss.elastic.co/t/fleet-agent-installation-failed-x509-error-with-insecure/366259 "2024-09-26T13:09:33Z")
Hello everyone, i'm having some trouble installing a fleet server but there's a twist to it: I'm running Elastic 8.4 installed via Elastic Operator on Kubernetes and I'm not using a certificate authority, all is being d… --- ## [Sizing and configuration for multi-tenant application](https://discuss.elastic.co/t/sizing-and-configuration-for-multi-tenant-application/169620)
**Author:** [@Simon\_Westlake](https://discuss.elastic.co/u/Simon_Westlake)\ **Replies:** 5\ **Last updated:** [February 28, 2019, 7:35pm UTC](https://discuss.elastic.co/t/sizing-and-configuration-for-multi-tenant-application/169620 "2019-02-28T19:35:30Z")
Hi, I've been using ES in production for a long time for our application, but it is currently single tenant, and so I have dedicated ES instances running for each client. We are moving towards a multi-tenant platform an… --- ## [Short URL redirecting to default space](https://discuss.elastic.co/t/short-url-redirecting-to-default-space/164677)
**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\ **Replies:** 5\ **Last updated:** [January 24, 2019, 2:36am UTC](https://discuss.elastic.co/t/short-url-redirecting-to-default-space/164677 "2019-01-24T02:36:56Z")
When using the share functionality of a dashboard and choosing the short URL. When using the short URL its redirects me to the default space? --- ## [Machine Learning - Watcher - Not Firing](https://discuss.elastic.co/t/machine-learning-watcher-not-firing/150361)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 5\ **Last updated:** [October 2, 2018, 7:25pm UTC](https://discuss.elastic.co/t/machine-learning-watcher-not-firing/150361 "2018-10-02T19:25:37Z")
I've set up a ML job that tracks all of the servers that we have deployed metricbeat on by using the Detector low\_count thats then split by beat.name so that each server is tracked. I've setup a Watcher that matches the… --- ## [Logstash exec input plugin - only some remote nodes](https://discuss.elastic.co/t/logstash-exec-input-plugin-only-some-remote-nodes/138784)
**Author:** [@MikaelLindstrom](https://discuss.elastic.co/u/MikaelLindstrom)\ **Replies:** 5\ **Last updated:** [July 6, 2018, 7:26pm UTC](https://discuss.elastic.co/t/logstash-exec-input-plugin-only-some-remote-nodes/138784 "2018-07-06T19:26:25Z")
I've been using metricbeat and filebeat and it works well and I'm trying to use exec plugin to run a command (netstat...) on certain nodes only. I have 4 different types of remote nodes I'm ingesting data from and I want… --- ## [Trying to get values in array](https://discuss.elastic.co/t/trying-to-get-values-in-array/133736)
**Author:** [@Shivom\_Kumar](https://discuss.elastic.co/u/Shivom_Kumar)\ **Replies:** 5\ **Last updated:** [May 31, 2018, 9:10am UTC](https://discuss.elastic.co/t/trying-to-get-values-in-array/133736 "2018-05-31T09:10:06Z")
hi . i was doing something similar to getting values as an array. i have my log something like this fab 20 gds 30 rt 21 i want to create two array : one contating {fab,dgs,rt} and other containing their respective valu… --- ## [EsRejectedExecutionException when just refresh kibana](https://discuss.elastic.co/t/esrejectedexecutionexception-when-just-refresh-kibana/116166)
**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\ **Replies:** 5\ **Last updated:** [January 25, 2018, 9:05am UTC](https://discuss.elastic.co/t/esrejectedexecutionexception-when-just-refresh-kibana/116166 "2018-01-25T09:05:22Z")
Recently the Kibana fail to show any content. It just show empty or give us the error. Check the log of Elasticsearch, we found the very long EsRejectedExecutionException for search queue: rejected execution of org.elas… --- ## [Heartbeat stops pinging http(s) routes](https://discuss.elastic.co/t/heartbeat-stops-pinging-http-s-routes/325181)
**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\ **Replies:** 7\ **Last updated:** [March 16, 2023, 5:39pm UTC](https://discuss.elastic.co/t/heartbeat-stops-pinging-http-s-routes/325181 "2023-03-16T17:39:06Z")
Hello, I have installed heartbeat (heartbeat-7.17.6-windows-x86\_64) in order to monitor the availability of some URLs. The pb is that it stops pinging without apparent reason (I see nothing special in the logs) while t… --- ## [JDBC input with SSL enabled](https://discuss.elastic.co/t/jdbc-input-with-ssl-enabled/233516)
**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\ **Replies:** 1\ **Last updated:** [May 21, 2020, 9:59am UTC](https://discuss.elastic.co/t/jdbc-input-with-ssl-enabled/233516 "2020-05-21T09:59:52Z")
Hi, Earlier I was using logstash jdbc plugin to input mongodb data which was working fine. Now we have made changes to our mongodb and enabled SSL , replicaset with self signed certificate. I am not sure how can I give… --- ## [How can I set up default settings in Kibana / Docker?](https://discuss.elastic.co/t/how-can-i-set-up-default-settings-in-kibana-docker/219056)
**Author:** [@F\_eq\_kx](https://discuss.elastic.co/u/F_eq_kx)\ **Replies:** 1\ **Last updated:** [February 13, 2020, 5:44pm UTC](https://discuss.elastic.co/t/how-can-i-set-up-default-settings-in-kibana-docker/219056 "2020-02-13T17:44:13Z")
Is there a way to do this? I mean settings as in using the dark theme, index patterns, etc. --- ## [Host data wont populate in dashboards when upgrading beats from 7.0 to 7.3 and using Logstash](https://discuss.elastic.co/t/host-data-wont-populate-in-dashboards-when-upgrading-beats-from-7-0-to-7-3-and-using-logstash/215344)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 7\ **Last updated:** [February 4, 2020, 7:06pm UTC](https://discuss.elastic.co/t/host-data-wont-populate-in-dashboards-when-upgrading-beats-from-7-0-to-7-3-and-using-logstash/215344 "2020-02-04T19:06:34Z")
ECE - Elasticsearch 7.3 Kibana -7 .3 Our metricbeat system overview dashboard will not display a Beat thats running 7.3 after upgrading from 7.0 if we run the beat through Logstash. The beat will populate in the dashb… --- ## [Make create-fields index out of range error](https://discuss.elastic.co/t/make-create-fields-index-out-of-range-error/116131)
**Author:** [@Zachary\_Buckholz](https://discuss.elastic.co/u/Zachary_Buckholz)\ **Replies:** 7\ **Last updated:** [January 24, 2018, 3:12pm UTC](https://discuss.elastic.co/t/make-create-fields-index-out-of-range-error/116131 "2018-01-24T15:12:10Z")
I am attempting to remake a haproxy filebeat module I did last year manually using the recommended process from https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html make create-fileset M… --- ## [Multiple patterns for log file](https://discuss.elastic.co/t/multiple-patterns-for-log-file/62831)
**Author:** [@dmitry1980](https://discuss.elastic.co/u/dmitry1980)\ **Replies:** 1\ **Last updated:** [October 12, 2016, 6:27pm UTC](https://discuss.elastic.co/t/multiple-patterns-for-log-file/62831 "2016-10-12T18:27:05Z")
I have two patterns for the logs file. Grok debugger shows a match, but I see Kibana show grokparsefailure for pattern TEST2. What could be the problem? input { file { type =\> "nginx\_access" path =\> "/var/log/… --- ## [How to delete and what to use](https://discuss.elastic.co/t/how-to-delete-and-what-to-use/41509)
**Author:** [@mc1392](https://discuss.elastic.co/u/mc1392)\ **Replies:** 7\ **Last updated:** [February 11, 2016, 9:23pm UTC](https://discuss.elastic.co/t/how-to-delete-and-what-to-use/41509 "2016-02-11T21:23:31Z")
Elasticsearch seems to be moving really quickly with changes. I am trying to figure out 1 way of deleted data, not multiple ways. I just installed the delete-by-query plugin. I have a few questions: How do I actua… --- ## [Index\_not\_found\_exception when trying to connect to ES](https://discuss.elastic.co/t/index-not-found-exception-when-trying-to-connect-to-es/34719)
**Author:** [@jgerry](https://discuss.elastic.co/u/jgerry)\ **Replies:** 1\ **Last updated:** [November 16, 2015, 8:16pm UTC](https://discuss.elastic.co/t/index-not-found-exception-when-trying-to-connect-to-es/34719 "2015-11-16T20:16:53Z")
I'm having some trouble getting Kibana 4 working with a fresh ES 2.0 install. Network is good, I get a clean connection to ES via curl, but Kibana is throwing an index\_not\_found\_exception, I would expect it would try to… --- ## [Failed to publish events caused by: write tcp X.X.X.X:36524-\>X.X.X.X:5044: write: connection reset by peer error in filebeat](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-write-tcp-x-x-x-x-36524-x-x-x-x-write-connection-reset-by-peer-error-in-filebeat/237031)
**Author:** [@Aqel](https://discuss.elastic.co/u/Aqel)\ **Replies:** 2\ **Last updated:** [June 15, 2020, 1:50am UTC](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-write-tcp-x-x-x-x-36524-x-x-x-x-write-connection-reset-by-peer-error-in-filebeat/237031 "2020-06-15T01:50:30Z")
I am getting this error while trying to push logs using filebeat to logstash. |filebeat | 2020-06-14T16:45:36.660318702Z 2020-06-14T16:45:36.660Z|ERROR|logstash/async.go:256|Failed to publish events caused by: wri… --- ## [Metricbeats system disk usage not showing when using 15 min interval](https://discuss.elastic.co/t/metricbeats-system-disk-usage-not-showing-when-using-15-min-interval/205267)
**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\ **Replies:** 2\ **Last updated:** [October 31, 2019, 3:22pm UTC](https://discuss.elastic.co/t/metricbeats-system-disk-usage-not-showing-when-using-15-min-interval/205267 "2019-10-31T15:22:26Z")
Looking at the dashboard created by metricbeats for system metrics, the gauge for disk usage does not display any value when using last 15 mins. When switching to an the last hour the gauge does display correctly. We hav… --- ## [Select template for different types of logs in Filebeat](https://discuss.elastic.co/t/select-template-for-different-types-of-logs-in-filebeat/205207)
**Author:** [@flowsys](https://discuss.elastic.co/u/flowsys)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 7:45am UTC](https://discuss.elastic.co/t/select-template-for-different-types-of-logs-in-filebeat/205207 "2019-10-30T07:45:53Z")
How do I configure in filebeat.yml to select different index template based on different type of filebeat inputs configured? I was trying as below, didnt work: filebeat.inputs: - type: log enabled: true paths: - /… --- ## [Can i import other web page(html with javascript) to Kibana like iframe or frame?](https://discuss.elastic.co/t/can-i-import-other-web-page-html-with-javascript-to-kibana-like-iframe-or-frame/167957)
**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 7:54pm UTC](https://discuss.elastic.co/t/can-i-import-other-web-page-html-with-javascript-to-kibana-like-iframe-or-frame/167957 "2019-02-15T19:54:23Z")
Hi. I'm using Kibana 6.4.1 I need to handle some graphs via external script (D3.js or Charts.js with javascript etc). now im using Vega visualization for drawing json array to graph. (Kibana's Default visuailizes are … --- ## [FieldFormat is not a constructor](https://discuss.elastic.co/t/fieldformat-is-not-a-constructor/142739)
**Author:** [@voix](https://discuss.elastic.co/u/voix)\ **Replies:** 2\ **Last updated:** [August 6, 2018, 6:04am UTC](https://discuss.elastic.co/t/fieldformat-is-not-a-constructor/142739 "2018-08-06T06:04:14Z")
Hi all. I try to get indexPattern by id, using courier.indexPatterns.get(index); function, but there is an error "Field format is not a constructor. I tried to import ui/registry/\_registry and ui/registry/field\_formats. … --- ## [Charset not considered on HTTP input plugin](https://discuss.elastic.co/t/charset-not-considered-on-http-input-plugin/62765)
**Author:** [@Javier\_Bravo\_Conde](https://discuss.elastic.co/u/Javier_Bravo_Conde)\ **Replies:** 2\ **Last updated:** [October 13, 2016, 4:39pm UTC](https://discuss.elastic.co/t/charset-not-considered-on-http-input-plugin/62765 "2016-10-13T16:39:45Z")
Hi! Before opening a ticket I would like to discuss my issue here. I receive a event.message string encoded in UTF-8 even though I specify codec =\> plain { charset =\> "ASCII-8BIT"} in my config. Here my config: inp… --- ## [I am confused by the postFilter and filter of elasticsearch‘s java client](https://discuss.elastic.co/t/i-am-confused-by-the-postfilter-and-filter-of-elasticsearch-s-java-client/16067)
**Author:** [@xzer\_LR](https://discuss.elastic.co/u/xzer_LR)\ **Replies:** 2\ **Last updated:** [March 4, 2014, 5:44pm UTC](https://discuss.elastic.co/t/i-am-confused-by-the-postfilter-and-filter-of-elasticsearch-s-java-client/16067 "2014-03-04T17:44:09Z")
AFAIK, There are three types search I can perform on elasticsearch: 1. query =\> which will do scoring and affect the hit 2. filter =\> which will not do scoring and affect the hit 3. post\_filter =\> which will b… --- ## [Number filtering logstash](https://discuss.elastic.co/t/number-filtering-logstash/98599)
**Author:** [@luciferdude](https://discuss.elastic.co/u/luciferdude)\ **Replies:** 8\ **Last updated:** [August 29, 2017, 4:53pm UTC](https://discuss.elastic.co/t/number-filtering-logstash/98599 "2017-08-29T16:53:28Z")
{"name": "hello", "xy": "ab", "ip": "123.456.78.910", "abc": "AB", "nbc": 12345, "cidr": "123.456.78.9/10", "last\_seen\_at": "2017-08-15", "first\_seen\_at": "2015-09-03", "categories": \["hello"\]} I have an array of numb… --- ## [Deadlock in Elastic Search 0.17.4!](https://discuss.elastic.co/t/deadlock-in-elastic-search-0-17-4/5098)
**Author:** [@Wojciech\_Durczynski](https://discuss.elastic.co/u/Wojciech_Durczynski)\ **Replies:** 8\ **Last updated:** [August 9, 2011, 2:26pm UTC](https://discuss.elastic.co/t/deadlock-in-elastic-search-0-17-4/5098 "2011-08-09T14:26:48Z")
Hello. I just upgraded from ES 0.16.2 to 0.17.4. After upgrade my tests started to deadlock ALWAYS. Below is log from jstack: Found one Java-level deadlock: ============================= "elasticsearch\[index\]-pool… --- ## [Elasticsearch search querry](https://discuss.elastic.co/t/elasticsearch-search-querry/320021)
**Author:** [@Ali5](https://discuss.elastic.co/u/Ali5)\ **Replies:** 4\ **Last updated:** [November 29, 2022, 11:56am UTC](https://discuss.elastic.co/t/elasticsearch-search-querry/320021 "2022-11-29T11:56:35Z")
GET products/\_search { "query": { "multi\_match" : { "query": "novel", "fields": \[ "description", "name","id" ,"price"\] } } } this is the querry which get my results done i want to convert it into java api in … --- ## [Dump JSON directly in to ElasticSearch](https://discuss.elastic.co/t/dump-json-directly-in-to-elasticsearch/240940)
**Author:** [@saurabhbhatt](https://discuss.elastic.co/u/saurabhbhatt)\ **Replies:** 4\ **Last updated:** [July 13, 2020, 11:41am UTC](https://discuss.elastic.co/t/dump-json-directly-in-to-elasticsearch/240940 "2020-07-13T11:41:14Z")
Hi, I have this requirement of dumping big JSON file with over 700K records into ES directly. However the JSON I have is formatted in PRETTY array format as below: STRING 1: indent preformatted text by 4 spaces \[ {… --- ## [How to delete dashboards using API in 5.6 version](https://discuss.elastic.co/t/how-to-delete-dashboards-using-api-in-5-6-version/167027)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 4\ **Last updated:** [February 25, 2019, 5:55am UTC](https://discuss.elastic.co/t/how-to-delete-dashboards-using-api-in-5-6-version/167027 "2019-02-25T05:55:34Z")
Hello All, Could any one suggest is there any way to delete dashboards through API i.e curl commands instead of deleting through GUI Kibana. Thanks --- ## [Filebeat source log file line length sanity check needed](https://discuss.elastic.co/t/filebeat-source-log-file-line-length-sanity-check-needed/152486)
**Author:** [@meritus](https://discuss.elastic.co/u/meritus)\ **Replies:** 4\ **Last updated:** [November 13, 2018, 3:26pm UTC](https://discuss.elastic.co/t/filebeat-source-log-file-line-length-sanity-check-needed/152486 "2018-11-13T15:26:50Z")
Hi there. This weekend i had a situation where my logfile got somehow corrupted having binary data at the beginning (0x00), and there normal txt data appended to it. And filebeat was scanning this file to put it into ES… --- ## [Logstash stopped pushing logs to elastic(UPD)](https://discuss.elastic.co/t/logstash-stopped-pushing-logs-to-elastic-upd/93397)
**Author:** [@maslenkov](https://discuss.elastic.co/u/maslenkov)\ **Replies:** 4\ **Last updated:** [July 19, 2017, 12:46pm UTC](https://discuss.elastic.co/t/logstash-stopped-pushing-logs-to-elastic-upd/93397 "2017-07-19T12:46:20Z")
Hey friends! My question about ELK stack. I have remote rails server. It writes two logs - production.log and reports.log. Also I didn't remove ELK's server syslog from my logstash input. So my logstash has to parse loca… --- ## [Set buffer size for each index respectively?](https://discuss.elastic.co/t/set-buffer-size-for-each-index-respectively/53174)
**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\ **Replies:** 4\ **Last updated:** [June 23, 2016, 12:46pm UTC](https://discuss.elastic.co/t/set-buffer-size-for-each-index-respectively/53174 "2016-06-23T12:46:25Z")
I know we have IndexBuffer as global setting for elasticsearch. But i wonder if there is any way to set different buffer size for those BIG index. (I'd like to reduce merge rate when indexing). Thanks for guiding. --- ## [Elasticserach configuration](https://discuss.elastic.co/t/elasticserach-configuration/45803)
**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 8:33am UTC](https://discuss.elastic.co/t/elasticserach-configuration/45803 "2016-03-31T08:33:05Z")
Hi, i'm working wirth ES 2.2.0. I have created 3 clusters. All of them are set with 3 master nodes, 6 data nodes, and 2 client nodes. In my system , are install Nginx and Php fpm. My clusters are used for: - cluster A to… --- ## [Log4j input with empty members](https://discuss.elastic.co/t/log4j-input-with-empty-members/37221)
**Author:** [@David\_Pocivalnik](https://discuss.elastic.co/u/David_Pocivalnik)\ **Replies:** 4\ **Last updated:** [December 17, 2015, 9:07am UTC](https://discuss.elastic.co/t/log4j-input-with-empty-members/37221 "2015-12-17T09:07:16Z")
I'm trying to use Logstash to index my log files created by log4j. I'm using the following versions: Logstash: 2.1.1 ES: 2.1.0 log4j: 1.2.17 I followed the recommendation found at http://stackoverflow.com/a/26227002 … --- ## [Kibana not showing Uptime Monitors added in Monitor Management or via Fleet Policy](https://discuss.elastic.co/t/kibana-not-showing-uptime-monitors-added-in-monitor-management-or-via-fleet-policy/321322)
**Author:** [@rowra](https://discuss.elastic.co/u/rowra)\ **Replies:** 3\ **Last updated:** [December 27, 2022, 11:58am UTC](https://discuss.elastic.co/t/kibana-not-showing-uptime-monitors-added-in-monitor-management-or-via-fleet-policy/321322 "2022-12-27T11:58:15Z")
I used to have several monitors added in Monitor Management and those showed up just fine in Uptime / Monitors. Now they don't. If I delete them / add them again nothing changes. If I add them manually via Integrations (… --- ## [\_grokparsefailure with date, but not without it](https://discuss.elastic.co/t/-grokparsefailure-with-date-but-not-without-it/80755)
**Author:** [@yacovm](https://discuss.elastic.co/u/yacovm)\ **Replies:** 3\ **Last updated:** [March 31, 2017, 4:28pm UTC](https://discuss.elastic.co/t/-grokparsefailure-with-date-but-not-without-it/80755 "2017-03-31T16:28:52Z")
Hi all. I have an ELK container and I send logs to it using filebeats. root@20e13712ecb2:/# cat /etc/logstash/conf.d/02-beats-input.conf input { beats { port =\> 5044 ssl =\> false ssl\_certificate =\> "/etc/pki/tls/… --- ## [Carrot 2 integration](https://discuss.elastic.co/t/carrot-2-integration/5977)
**Author:** [@jagdeep](https://discuss.elastic.co/u/jagdeep)\ **Replies:** 3\ **Last updated:** [January 13, 2017, 7:20am UTC](https://discuss.elastic.co/t/carrot-2-integration/5977 "2017-01-13T07:20:06Z")
Hi, I am really thankful to guys behind elasticsearch. I have started to explore it recently and I must say that i am loving it. I am wondering if I can do integration with Carrot2 for clustering. I have gone throu… [Previous page](https://discuss.elastic.co/top.md?page=1272&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1274&per_page=50&period=all)