# Top **URL:** https://discuss.elastic.co/top.md?page=1284&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1285 --- ## [Open data portal and elasticsearch](https://discuss.elastic.co/t/open-data-portal-and-elasticsearch/92649)
**Author:** [@trundle](https://discuss.elastic.co/u/trundle)\ **Replies:** 2\ **Last updated:** [July 11, 2017, 1:27pm UTC](https://discuss.elastic.co/t/open-data-portal-and-elasticsearch/92649 "2017-07-11T13:27:09Z")
Hello , I'm trying to use an open data portal which is CKAN . However its search platorm uses solr , but i want to use elasticsearch to index my data . Is this a way to use elasticsearch with CKAN ? Thanks. --- ## [LogStash Startup error](https://discuss.elastic.co/t/logstash-startup-error/81196)
**Author:** [@anshul\_pandey](https://discuss.elastic.co/u/anshul_pandey)\ **Replies:** 2\ **Last updated:** [April 6, 2017, 6:57pm UTC](https://discuss.elastic.co/t/logstash-startup-error/81196 "2017-04-06T18:57:06Z")
hi all, during the logstash startup i am getting following message. I don't think i have installed monitoring tools, for either elastic or logstash... Not sure, what's causing this error and how to fix this. {:c… --- ## [Suggestions for storing hierarchical structure](https://discuss.elastic.co/t/suggestions-for-storing-hierarchical-structure/11109)
**Author:** [@sujoysett](https://discuss.elastic.co/u/sujoysett)\ **Replies:** 2\ **Last updated:** [March 13, 2013, 1:14pm UTC](https://discuss.elastic.co/t/suggestions-for-storing-hierarchical-structure/11109 "2013-03-13T13:14:13Z")
Hi, Looking for suggestions on a business case which is being currently addressed to. Following is the sample of data we want to store in elasticsearch in hierarchical format. It is close to a hierarchical synony… --- ## [High CPU utilization on two nodes due to DSL Queries and slower query response](https://discuss.elastic.co/t/high-cpu-utilization-on-two-nodes-due-to-dsl-queries-and-slower-query-response/292535)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 5\ **Last updated:** [December 23, 2021, 3:45pm UTC](https://discuss.elastic.co/t/high-cpu-utilization-on-two-nodes-due-to-dsl-queries-and-slower-query-response/292535 "2021-12-23T15:45:41Z")
Hi, I am using elastic version 7.11.2. I am observing that two nodes that contain an index of 102Gb (51+51), multiple DSL queries are running in the background resulting in high CPU utilization. Enabled autoscaling on … --- ## [Mapping, error my normalizer](https://discuss.elastic.co/t/mapping-error-my-normalizer/266995)
**Author:** [@jcornejo](https://discuss.elastic.co/u/jcornejo)\ **Replies:** 5\ **Last updated:** [March 11, 2021, 8:53pm UTC](https://discuss.elastic.co/t/mapping-error-my-normalizer/266995 "2021-03-11T20:53:58Z")
Help, how to create a mapping in elasticsearch ? PUT /sdm\_cr\_nrt/\_mapping { "properties" : { "@timestamp" : { "type" : "date" }, "@version" : { "type" : "text" … --- ## [SIEM Rule Failures](https://discuss.elastic.co/t/siem-rule-failures/260409)
**Author:** [@Ameer\_Mukadam](https://discuss.elastic.co/u/Ameer_Mukadam)\ **Replies:** 5\ **Last updated:** [February 1, 2021, 9:39pm UTC](https://discuss.elastic.co/t/siem-rule-failures/260409 "2021-02-01T21:39:14Z")
Hello Everyone, We are on Elastic 7.9 and are mainly using it as a SIEM, suddenly all of the SIEM rules start to fail and not just some but all of them. --- ## [Custom roles in eck 1.2.1](https://discuss.elastic.co/t/custom-roles-in-eck-1-2-1/251115)
**Author:** [@Tihomir\_Plachkov](https://discuss.elastic.co/u/Tihomir_Plachkov)\ **Replies:** 5\ **Last updated:** [October 7, 2020, 8:14am UTC](https://discuss.elastic.co/t/custom-roles-in-eck-1-2-1/251115 "2020-10-07T08:14:35Z")
Can't get to work the custom roles in eck 1.2.1 Here is a fraction of my yaml: spec: version: 7.9.0 http: service: spec: type: ClusterIP selector: elasticsearch.k8s.elastic.co/cl… --- ## [Is there a way to get a more verbose response than just "\_grokparsefailure"](https://discuss.elastic.co/t/is-there-a-way-to-get-a-more-verbose-response-than-just--grokparsefailure/98915)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 5\ **Last updated:** [August 31, 2017, 6:09pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-a-more-verbose-response-than-just--grokparsefailure/98915 "2017-08-31T18:09:24Z")
Hello, I have been using grok filtering for a couple months now and have noticed the pain point of the very vague grok parse failure tag. I am wondering if there is a way for that to give a little bit more detail on whe… --- ## [System call filter/OnError and OnOutOfMemoryError - Bootstrap check](https://discuss.elastic.co/t/system-call-filter-onerror-and-onoutofmemoryerror-bootstrap-check/91376)
**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\ **Replies:** 5\ **Last updated:** [June 30, 2017, 3:54pm UTC](https://discuss.elastic.co/t/system-call-filter-onerror-and-onoutofmemoryerror-bootstrap-check/91376 "2017-06-30T15:54:05Z")
As part of ES 5.x bootstrap, it checks for System call filter. What actually is System call filter Also can you please explain whats OnError and OnOutOfMemoryError check --- ## [IP2Location LITE and Logstash](https://discuss.elastic.co/t/ip2location-lite-and-logstash/83948)
**Author:** [@MikeC0](https://discuss.elastic.co/u/MikeC0)\ **Replies:** 5\ **Last updated:** [May 10, 2017, 11:23am UTC](https://discuss.elastic.co/t/ip2location-lite-and-logstash/83948 "2017-05-10T11:23:46Z")
It looks like Logstash is supporting GeoIP. However, we would like to use the free IP2Location LITE database in Logstash. Is there any 3rd party plug-in available? --- ## [Expectable performance](https://discuss.elastic.co/t/expectable-performance/40111)
**Author:** [@norlo](https://discuss.elastic.co/u/norlo)\ **Replies:** 5\ **Last updated:** [January 28, 2016, 4:07pm UTC](https://discuss.elastic.co/t/expectable-performance/40111 "2016-01-28T16:07:13Z")
Hi, we have some application servers and we would like to ship all their logs into ES. Therefore I set up a ES 2.0.0 cluster of 8 nodes on 5 different virtual machines (we are using xen): 3 machines with each 1 dat… --- ## [Unicast help](https://discuss.elastic.co/t/unicast-help/4102)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 5\ **Last updated:** [March 16, 2011, 6:23pm UTC](https://discuss.elastic.co/t/unicast-help/4102 "2011-03-16T18:23:43Z")
Hi, I need some help in configuring unicast in 15.0: This is my YAML config on the "master" (data=true) node: cluster: name: CMTLocal node: data: true http: enabled: true discovery: zen: … --- ## [Difference between sharing dashboard as snapshot and saved object](https://discuss.elastic.co/t/difference-between-sharing-dashboard-as-snapshot-and-saved-object/264385)
**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\ **Replies:** 1\ **Last updated:** [February 16, 2021, 12:33pm UTC](https://discuss.elastic.co/t/difference-between-sharing-dashboard-as-snapshot-and-saved-object/264385 "2021-02-16T12:33:23Z")
Hello All, I use Kibana version 7.9.0. I would like to know the actual difference between sharing/embedding a dashboard URL as a snapshot or a saved object According to the pop-up info : For snapshot, the pop-up says… --- ## [Filter today's date in Kibana Search Bar](https://discuss.elastic.co/t/filter-todays-date-in-kibana-search-bar/168984)
**Author:** [@Moka](https://discuss.elastic.co/u/Moka)\ **Replies:** 1\ **Last updated:** [February 20, 2019, 9:01pm UTC](https://discuss.elastic.co/t/filter-todays-date-in-kibana-search-bar/168984 "2019-02-20T21:01:21Z")
Hello , I'm trying to filter only today's date in kibana . Example of data I use : Number\_of\_customers ................................ update\_date 55 ...................... ................… --- ## [Elastalert plugin throwing 502 - Bad Gateway read ECONNRESET](https://discuss.elastic.co/t/elastalert-plugin-throwing-502-bad-gateway-read-econnreset/148058)
**Author:** [@rehan.pasha](https://discuss.elastic.co/u/rehan.pasha)\ **Replies:** 1\ **Last updated:** [September 11, 2018, 2:15pm UTC](https://discuss.elastic.co/t/elastalert-plugin-throwing-502-bad-gateway-read-econnreset/148058 "2018-09-11T14:15:46Z")
I'm not sure what might be the issue! After configuring elastalert plugin in kibana.. It is showing create rule tab however after few minutes it is showing read ECONNRESET! Is this issue with kibana configuration or so… --- ## [Tokenizer underscore support](https://discuss.elastic.co/t/tokenizer-underscore-support/144195)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 6:05pm UTC](https://discuss.elastic.co/t/tokenizer-underscore-support/144195 "2018-08-13T18:05:46Z")
I am using Elasticsearch 5.1 for logging web logs. Because we use underscore to split the parameters in url, we need the elasticsearch tokenizer to split by underscore too. But default tokenizer of Elasticsearch does no… --- ## [Ingesting CISCO ASA Logs](https://discuss.elastic.co/t/ingesting-cisco-asa-logs/143662)
**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\ **Replies:** 1\ **Last updated:** [August 9, 2018, 10:09am UTC](https://discuss.elastic.co/t/ingesting-cisco-asa-logs/143662 "2018-08-09T10:09:29Z")
Anyone got any good updated links that explains how this can be done? How updated is this one? any takes? --- ## [Running as a different user](https://discuss.elastic.co/t/running-as-a-different-user/113695)
**Author:** [@bspencer](https://discuss.elastic.co/u/bspencer)\ **Replies:** 1\ **Last updated:** [January 3, 2018, 3:03am UTC](https://discuss.elastic.co/t/running-as-a-different-user/113695 "2018-01-03T03:03:08Z")
Are there any constraints or special considerations when running Elasticsearch as a user other than elasticsearch? Any specific considerations when updating? Assumptions/Environment: Installed from RPM (RHEL7) systemd… --- ## [How to get source size using script?](https://discuss.elastic.co/t/how-to-get-source-size-using-script/82038)
**Author:** [@RogerCF](https://discuss.elastic.co/u/RogerCF)\ **Replies:** 1\ **Last updated:** [April 12, 2017, 11:31pm UTC](https://discuss.elastic.co/t/how-to-get-source-size-using-script/82038 "2017-04-12T23:31:14Z")
I'm using Elasticsearch 1.3 and I need to return the source size in a query (I have \_source enabled) I tried with this query: { "query": { "match\_all" : {} }, "script\_fields": { "source\_size": { "… --- ## [How to trouble shoot logstash crashing](https://discuss.elastic.co/t/how-to-trouble-shoot-logstash-crashing/53970)
**Author:** [@AyliD](https://discuss.elastic.co/u/AyliD)\ **Replies:** 1\ **Last updated:** [June 29, 2016, 5:48am UTC](https://discuss.elastic.co/t/how-to-trouble-shoot-logstash-crashing/53970 "2016-06-29T05:48:33Z")
Hi, I have 2 nodes that has the same log stash configuration, one of them keep failing on this error: TypeError: can't convert nil into String Is there a way for me to understand on what message it failed?On what l… --- ## [KIbana no data over FQDN](https://discuss.elastic.co/t/kibana-no-data-over-fqdn/289416)
**Author:** [@yanick](https://discuss.elastic.co/u/yanick)\ **Replies:** 3\ **Last updated:** [December 15, 2021, 11:48pm UTC](https://discuss.elastic.co/t/kibana-no-data-over-fqdn/289416 "2021-12-15T23:48:44Z")
Hey there, Currently, I have a problem with Kibana, which is behind a proxy. If I log in (over the FQDN) to Kibana there is no data shown in the Tab "Analytics - Discover" and in the Tab "Security" (all sub-tabs). If I… --- ## [Ignore a specific or drop a field when using another Grok Pattern](https://discuss.elastic.co/t/ignore-a-specific-or-drop-a-field-when-using-another-grok-pattern/270522)
**Author:** [@Wilks](https://discuss.elastic.co/u/Wilks)\ **Replies:** 3\ **Last updated:** [April 20, 2021, 1:35pm UTC](https://discuss.elastic.co/t/ignore-a-specific-or-drop-a-field-when-using-another-grok-pattern/270522 "2021-04-20T13:35:14Z")
HI, I have a filter that works except for when the log doesn't contains different data for a field that I am using an extra grok pattern on. I am extracting the username from DN (Distinguished Name) from the main log a… --- ## [Elasticsearch Cluster on Docker Stack Fails](https://discuss.elastic.co/t/elasticsearch-cluster-on-docker-stack-fails/220043)
**Author:** [@areller](https://discuss.elastic.co/u/areller)\ **Replies:** 3\ **Last updated:** [February 20, 2020, 3:21pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-on-docker-stack-fails/220043 "2020-02-20T15:21:01Z")
I try to create a 3-node Elasticsearch cluster on docker stack. I started with the docker-stack.yml file from this repository https://github.com/deviantony/docker-elk#how-to-scale-out-the-elasticsearch-cluster And exte… --- ## [PHP agent (custom APM agents)](https://discuss.elastic.co/t/php-agent-custom-apm-agents/168407)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [February 19, 2019, 11:45am UTC](https://discuss.elastic.co/t/php-agent-custom-apm-agents/168407 "2019-02-19T11:45:21Z")
Hi, I'm looking for a PHP agent which would work without modifying the code of the application. Until now, I found that there are two community projects (frankkoornstra and philkra). Frank didn't upgrade his solution in… --- ## [Convert timestamp with am/pm in field to date](https://discuss.elastic.co/t/convert-timestamp-with-am-pm-in-field-to-date/147804)
**Author:** [@sysdradmin](https://discuss.elastic.co/u/sysdradmin)\ **Replies:** 3\ **Last updated:** [September 8, 2018, 10:44am UTC](https://discuss.elastic.co/t/convert-timestamp-with-am-pm-in-field-to-date/147804 "2018-09-08T10:44:01Z")
Hello, we have a field named 'timestamp' with the format : "12/09/2018 01:02:10 AM" or " 01/05/2018 05:04:01 PM" how to convert it to date format ? i don't know how to delete 'AM' or 'PM' to real time... thks for he… --- ## [Is it safe to clear pagecache](https://discuss.elastic.co/t/is-it-safe-to-clear-pagecache/98948)
**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\ **Replies:** 3\ **Last updated:** [September 18, 2017, 7:59am UTC](https://discuss.elastic.co/t/is-it-safe-to-clear-pagecache/98948 "2017-09-18T07:59:41Z")
Hi., to All. Good Evening. Generally elasticsearch occupies a lot of pagecache, does it safe to use the command ’echo 3 \> /proc/sys/vm/drop\_caches’ to clear pagecache? even when data is indexing? Thanks to you all. … --- ## [Winlogbeat vs Syslog-NG](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 2:13pm UTC](https://discuss.elastic.co/t/winlogbeat-vs-syslog-ng/89892 "2017-06-20T14:13:53Z")
Hello. If I just install "Elasticsearch", "Kibana" and "Logstash" then can I use "Winlogbeat" on a Windows OS for forward evetlogs to my elastic box? In Elastic box I configured Syslog-NG. Thank you. --- ## [Installing Kibana on Ubuntu server 14.04](https://discuss.elastic.co/t/installing-kibana-on-ubuntu-server-14-04/25621)
**Author:** [@moriya](https://discuss.elastic.co/u/moriya)\ **Replies:** 3\ **Last updated:** [July 15, 2015, 7:25pm UTC](https://discuss.elastic.co/t/installing-kibana-on-ubuntu-server-14-04/25621 "2015-07-15T19:25:56Z")
Hi I have Installed Elasticsearch and Kibana on Ubuntu Server, this is a VM(vmware) When I go to http://localhost:9200 I receive the webpage. When I go to http://localhost:5601 I get nothing or http://localhost I get the… --- ## [How to avoid duplication of data while indexing](https://discuss.elastic.co/t/how-to-avoid-duplication-of-data-while-indexing/9878)
**Author:** [@divyanshu\_das](https://discuss.elastic.co/u/divyanshu_das)\ **Replies:** 8\ **Last updated:** [November 29, 2012, 2:47pm UTC](https://discuss.elastic.co/t/how-to-avoid-duplication-of-data-while-indexing/9878 "2012-11-29T14:47:22Z")
I need to index data of 4 million users in elasticsearch using JAVA API. for each object these are the fields that are getting indexed:- Name - Address - I need to put a check at the time of indexing. If anot… --- ## [데이터가 있지만 대시보드에 보여지지 않습니다](https://discuss.elastic.co/t/topic/302168)
**Author:** [@inwoo1](https://discuss.elastic.co/u/inwoo1)\ **Replies:** 4\ **Last updated:** [April 25, 2022, 1:20am UTC](https://discuss.elastic.co/t/topic/302168 "2022-04-25T01:20:47Z")
안녕하세요~ 고수님들의 고견을 기다립니다 데이터가 존재하지만 대시보드에 표시되지 않는 현상이 매우 빈번하게 발생합니다. 왜 이런 현상이 발생하는 것인가요?? 제가 뭐 설정을 잘못한걸까요? 혹시 아시는 분 계실까요? --- ## [Hi all, I am trying to create logstash pipeline to ingest data into elasticsearch but getting this error](https://discuss.elastic.co/t/hi-all-i-am-trying-to-create-logstash-pipeline-to-ingest-data-into-elasticsearch-but-getting-this-error/295576)
**Author:** [@Chinmay\_Bhusate](https://discuss.elastic.co/u/Chinmay_Bhusate)\ **Replies:** 4\ **Last updated:** [January 27, 2022, 12:25pm UTC](https://discuss.elastic.co/t/hi-all-i-am-trying-to-create-logstash-pipeline-to-ingest-data-into-elasticsearch-but-getting-this-error/295576 "2022-01-27T12:25:22Z")
\[2022-01-27T17:02:19,895\]\[ERROR\]\[logstash.agent \] An exception happened when converging configuration {:exception=\>LogStash::Error, :message=\>"Don't know how to handle Java::JavaLang::IllegalStateException for P… --- ## [Unable to parse datetime from log message](https://discuss.elastic.co/t/unable-to-parse-datetime-from-log-message/165490)
**Author:** [@cganesan](https://discuss.elastic.co/u/cganesan)\ **Replies:** 4\ **Last updated:** [January 24, 2019, 3:24pm UTC](https://discuss.elastic.co/t/unable-to-parse-datetime-from-log-message/165490 "2019-01-24T15:24:16Z")
I'm unable to extract the datetime field from the log streamed from filebeat to elsaticsearch via logstash. I'm using date filter to extract the timestamp from the log message and set it to @timestamp. Since I already sp… --- ## [Can't create a new index on elastic with logstash](https://discuss.elastic.co/t/cant-create-a-new-index-on-elastic-with-logstash/121865)
**Author:** [@geppo](https://discuss.elastic.co/u/geppo)\ **Replies:** 4\ **Last updated:** [February 28, 2018, 3:04pm UTC](https://discuss.elastic.co/t/cant-create-a-new-index-on-elastic-with-logstash/121865 "2018-02-28T15:04:46Z")
Hi, is the first time for me that I use Logstash. I'm trying to index my apache log on localhost to a server. I can't see any error in /var/log/logstash/logstash-plain.log: \[2018-02-28T14:45:29,984\]\[INFO \]\[logstash.out… --- ## [How to sum fields value (mem used = user used + system used)](https://discuss.elastic.co/t/how-to-sum-fields-value-mem-used-user-used-system-used/43613)
**Author:** [@szcountryboy](https://discuss.elastic.co/u/szcountryboy)\ **Replies:** 4\ **Last updated:** [March 7, 2016, 3:57am UTC](https://discuss.elastic.co/t/how-to-sum-fields-value-mem-used-user-used-system-used/43613 "2016-03-07T03:57:08Z")
How to on line chart display memory usage. The acquisition of the back of the data memory is divided into user and system use, I think the combined display, but inside the metrics and did not provide several fields of … --- ## [Architecture of Github's elasticsearch cluster](https://discuss.elastic.co/t/architecture-of-githubs-elasticsearch-cluster/13397)
**Author:** [@Andrew\_Cholakian](https://discuss.elastic.co/u/Andrew_Cholakian)\ **Replies:** 4\ **Last updated:** [August 30, 2013, 7:15am UTC](https://discuss.elastic.co/t/architecture-of-githubs-elasticsearch-cluster/13397 "2013-08-30T07:15:43Z")
Hey guys, thought members of this list might be interested in this interview I did with the github elasticsearch team. It's an in-depth look at their elasticsearch infrastructure, covering many of the details of th… --- ## [Extract 'Year' from 'new Date()' function in Kibana scripted field](https://discuss.elastic.co/t/extract-year-from-new-date-function-in-kibana-scripted-field/244463)
**Author:** [@Mike\_Smith1](https://discuss.elastic.co/u/Mike_Smith1)\ **Replies:** 2\ **Last updated:** [August 11, 2020, 10:04pm UTC](https://discuss.elastic.co/t/extract-year-from-new-date-function-in-kibana-scripted-field/244463 "2020-08-11T22:04:54Z")
How can I extract only year (2020) from new Date() function in Kibana scripted field? Following is scripted field entry new Date() Preview of above function displays { "\_id": "a38be692-7b1c-4d9b-a8eb-cfedb15e6937", … --- ## [JDBC Input Plugin: "date" input plugin can't apply known timezone to incoming DATETIMEs](https://discuss.elastic.co/t/jdbc-input-plugin-date-input-plugin-cant-apply-known-timezone-to-incoming-datetimes/227409)
**Author:** [@Jonathan\_Rice](https://discuss.elastic.co/u/Jonathan_Rice)\ **Replies:** 2\ **Last updated:** [April 9, 2020, 10:36pm UTC](https://discuss.elastic.co/t/jdbc-input-plugin-date-input-plugin-cant-apply-known-timezone-to-incoming-datetimes/227409 "2020-04-09T22:36:07Z")
Using Logstash 7.6.2 with the JDBC Input Plugin, and a MySQL database, I'm trying to import a DATETIME field, but apply a known timezone to that field on input, using the "date" filter. But "date" is always throwing an e… --- ## [Can't configure search results to show up](https://discuss.elastic.co/t/cant-configure-search-results-to-show-up/207401)
**Author:** [@Cosmin\_Mazilu](https://discuss.elastic.co/u/Cosmin_Mazilu)\ **Replies:** 2\ **Last updated:** [November 13, 2019, 12:44pm UTC](https://discuss.elastic.co/t/cant-configure-search-results-to-show-up/207401 "2019-11-13T12:44:41Z")
Hello, I’m trying to configure site search for our company. I’ve set up the search engine which has crawled the site and seems to work fine (checked the preview and it’s OK). I can’t seem to get the search results to s… --- ## [Настройка модуля nginx](https://discuss.elastic.co/t/nginx/199945)
**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\ **Replies:** 2\ **Last updated:** [September 19, 2019, 2:45pm UTC](https://discuss.elastic.co/t/nginx/199945 "2019-09-19T14:45:10Z")
Добрый день. Имеется кластер из 3х нод ES 7.1, отдельно Kibana 7.1, отдельно Logstash 7.1. Решил добавить логи с серверов с Nginx 1.14 с помощью соответствующего модуля. Поставил filebeat 7.3.2. Включил модуль nginx, … --- ## [Kibana data table with the aggregations only on the latest records](https://discuss.elastic.co/t/kibana-data-table-with-the-aggregations-only-on-the-latest-records/162744)
**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\ **Replies:** 2\ **Last updated:** [January 7, 2019, 12:30pm UTC](https://discuss.elastic.co/t/kibana-data-table-with-the-aggregations-only-on-the-latest-records/162744 "2019-01-07T12:30:41Z")
Hi All, My application is reporting one of the database table status to elasticsearch via logstash in every hour. Example structure of a document on elasticsearch side is as below, { "provider": "Provider 1", "subjec… --- ## [Does kibana support chinese now?](https://discuss.elastic.co/t/does-kibana-support-chinese-now/93299)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 2\ **Last updated:** [July 17, 2017, 7:27am UTC](https://discuss.elastic.co/t/does-kibana-support-chinese-now/93299 "2017-07-17T07:27:54Z")
Some of my colleagues can not read English... --- ## [Cannot log into elastic with default login](https://discuss.elastic.co/t/cannot-log-into-elastic-with-default-login/73740)
**Author:** [@sredne](https://discuss.elastic.co/u/sredne)\ **Replies:** 2\ **Last updated:** [February 3, 2017, 3:34pm UTC](https://discuss.elastic.co/t/cannot-log-into-elastic-with-default-login/73740 "2017-02-03T15:34:39Z")
Hi all, I decided to install X-pack on one of my client nodes to enable monitoring/security on my cluster. I've tried to access it with the default username/password "elastic/changeme" and it refuses to login with tho… --- ## [Shield install for logstash](https://discuss.elastic.co/t/shield-install-for-logstash/43886)
**Author:** [@Rohan\_Jain](https://discuss.elastic.co/u/Rohan_Jain)\ **Replies:** 2\ **Last updated:** [March 10, 2016, 10:35pm UTC](https://discuss.elastic.co/t/shield-install-for-logstash/43886 "2016-03-10T22:35:38Z")
it is required to configure logstash elasticsearch output for shield. For that the command to run is : =\> bin/plugin install logstash-output-elasticsearch-shield After running this command i am getting error " Validat… --- ## [Multiple realms not working](https://discuss.elastic.co/t/multiple-realms-not-working/42433)
**Author:** [@bblank](https://discuss.elastic.co/u/bblank)\ **Replies:** 2\ **Last updated:** [February 22, 2016, 10:25pm UTC](https://discuss.elastic.co/t/multiple-realms-not-working/42433 "2016-02-22T22:25:41Z")
I can use an esuser realm or an active\_directory realm to authenticate my users but I can't use both. When I add the following to my elasticsearch.yml file the service won't start and it dies before writing to the log f… --- ## [Today's Dev Hangout: Jeremy Falling and Shaunak Kashyap on DevOps](https://discuss.elastic.co/t/todays-dev-hangout-jeremy-falling-and-shaunak-kashyap-on-devops/24319)
**Author:** [@Leslie\_Hawthorn](https://discuss.elastic.co/u/Leslie_Hawthorn)\ **Replies:** 2\ **Last updated:** [June 25, 2015, 6:38pm UTC](https://discuss.elastic.co/t/todays-dev-hangout-jeremy-falling-and-shaunak-kashyap-on-devops/24319 "2015-06-25T18:38:41Z")
On today at 1 PM CEST / 11 AM UTC / 12 Noon BST / 9 PM AEST / 8 PM JST & KST For our friends in the US, this may be one for you to watch the video. Please join us for our second Dev Hangout, featuring Jeremy Fallin… --- ## [Metricbeat-Kubernetes startup error when upgrading from version 7.2 to 7.16.1](https://discuss.elastic.co/t/metricbeat-kubernetes-startup-error-when-upgrading-from-version-7-2-to-7-16-1/297276)
**Author:** [@cgnusr01](https://discuss.elastic.co/u/cgnusr01)\ **Replies:** 6\ **Last updated:** [February 18, 2022, 8:42am UTC](https://discuss.elastic.co/t/metricbeat-kubernetes-startup-error-when-upgrading-from-version-7-2-to-7-16-1/297276 "2022-02-18T08:42:28Z")
At a recently upgraded cluster from version 7.2 to 7.16.1, we tried to update Metricbeat for Kubernetes PODs. However on startup we got the following error: ERROR metrics/metrics.go:304 error determining cgroups vers… --- ## [Indexed field to only contain synonyms](https://discuss.elastic.co/t/indexed-field-to-only-contain-synonyms/233797)
**Author:** [@hatoms](https://discuss.elastic.co/u/hatoms)\ **Replies:** 6\ **Last updated:** [May 29, 2020, 2:32pm UTC](https://discuss.elastic.co/t/indexed-field-to-only-contain-synonyms/233797 "2020-05-29T14:32:25Z")
My thinking may be flawed but here is the problem I am attempting to solve. I have a synonym filter/analyzer configured like this: analyzer: { synonym\_analyzer: { tokenizer: 'standard', … --- ## [Index become readonly for unknown reason](https://discuss.elastic.co/t/index-become-readonly-for-unknown-reason/206586)
**Author:** [@tomeri](https://discuss.elastic.co/u/tomeri)\ **Replies:** 6\ **Last updated:** [November 19, 2019, 3:28am UTC](https://discuss.elastic.co/t/index-become-readonly-for-unknown-reason/206586 "2019-11-19T03:28:19Z")
I am using ILM via Logstash to manage my indices I have a new index that was created in 31/10 and for some unknown reason, it has become read-only, I noticed it has block.write=true on it. My ILM policy shouldn't do th… --- ## [Can apmzerolog send every log to link tracking?](https://discuss.elastic.co/t/can-apmzerolog-send-every-log-to-link-tracking/199802)
**Author:** [@EDDYCJY](https://discuss.elastic.co/u/EDDYCJY)\ **Replies:** 6\ **Last updated:** [September 18, 2019, 8:07am UTC](https://discuss.elastic.co/t/can-apmzerolog-send-every-log-to-link-tracking/199802 "2019-09-18T08:07:09Z")
I want to log the log of a specific log level in the application to the link tracking system, but I found that there is no good way, how can I solve it? Thank you. --- ## [How to filter username data from the field of request , using scripted\_field](https://discuss.elastic.co/t/how-to-filter-username-data-from-the-field-of-request-using-scripted-field/148912)
**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\ **Replies:** 6\ **Last updated:** [September 19, 2018, 3:53am UTC](https://discuss.elastic.co/t/how-to-filter-username-data-from-the-field-of-request-using-scripted-field/148912 "2018-09-19T03:53:03Z")
Hi Guys, Can help me solve my concern to filter username data thru scripted\_field username is located in the request\_field of COMBINEAPACHE. Example: /api/v2/members/ y23228020 /wallets/0/balance .... /api/v2/memb… [Previous page](https://discuss.elastic.co/top.md?page=1283&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1285&per_page=50&period=all)