# Top **URL:** https://discuss.elastic.co/top.md?page=129&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 130 --- ## [Elasticsearch wont start after implementing TLS](https://discuss.elastic.co/t/elasticsearch-wont-start-after-implementing-tls/280306)
**Author:** [@azxqw](https://discuss.elastic.co/u/azxqw)\ **Replies:** 10\ **Last updated:** [August 4, 2021, 8:52am UTC](https://discuss.elastic.co/t/elasticsearch-wont-start-after-implementing-tls/280306 "2021-08-04T08:52:13Z")
Hi all, I have a bit of a problem. I implemented TLS im my stack as per the instructions. Hoewever - now elasticsearch wont start, and it's throwing this exception: java.security.NoSuchAlgorithmException: Algorithm Hm… --- ## [Plz help me! very urgent](https://discuss.elastic.co/t/plz-help-me-very-urgent/12612)
**Author:** [@Puneeth](https://discuss.elastic.co/u/Puneeth)\ **Replies:** 41\ **Last updated:** [July 10, 2013, 5:28am UTC](https://discuss.elastic.co/t/plz-help-me-very-urgent/12612 "2013-07-10T05:28:36Z")
i want to index and search mysql database using elastic search & I followed this tutorial https://github.com/jprante/elasticsearch-river-jdbc/wiki/Quickstart At first i downloaded elastic search and installed … --- ## [Debugging in Elastic Search](https://discuss.elastic.co/t/debugging-in-elastic-search/356651)
**Author:** [@ShubhamSaxena8](https://discuss.elastic.co/u/ShubhamSaxena8)\ **Replies:** 12\ **Last updated:** [April 8, 2024, 10:51am UTC](https://discuss.elastic.co/t/debugging-in-elastic-search/356651 "2024-04-08T10:51:23Z")
Hello Team, I need some suggestion related to debugging in Elasticsearch. I am kind of stuck because I am not getting any errors in Elastic console or dotnet console. I am trying to implement centralized logging system… --- ## [Check file for harvesting: /var/log/syslog.log error again, Filebeat 5.0](https://discuss.elastic.co/t/check-file-for-harvesting-var-log-syslog-log-error-again-filebeat-5-0/66360)
**Author:** [@ndarkness](https://discuss.elastic.co/u/ndarkness)\ **Replies:** 11\ **Last updated:** [November 25, 2016, 10:16am UTC](https://discuss.elastic.co/t/check-file-for-harvesting-var-log-syslog-log-error-again-filebeat-5-0/66360 "2016-11-25T10:16:21Z")
Hello, I am having issues when restarting filebeat 5.0 , since it doesn't seem to see my syslog changes... My config is this lo@lo-VirtualBox:/etc/filebeat$ cat filebeat.yml filebeat.prospectors: - input\_type: log… --- ## [How can i run this query just for find first item in a path with 4 items](https://discuss.elastic.co/t/how-can-i-run-this-query-just-for-find-first-item-in-a-path-with-4-items/101633)
**Author:** [@yaser](https://discuss.elastic.co/u/yaser)\ **Replies:** 9\ **Last updated:** [October 3, 2017, 6:00pm UTC](https://discuss.elastic.co/t/how-can-i-run-this-query-just-for-find-first-item-in-a-path-with-4-items/101633 "2017-10-03T18:00:04Z")
hi , the problem is i want to return range of value of a path that are the same with 4 other items , here is the query: GET composition\_value/composition/\_search { "query": { "nested": { "path": "value", … --- ## [Issue in Controls](https://discuss.elastic.co/t/issue-in-controls/320882)
**Author:** [@moep](https://discuss.elastic.co/u/moep)\ **Replies:** 27\ **Last updated:** [February 2, 2023, 7:06pm UTC](https://discuss.elastic.co/t/issue-in-controls/320882 "2023-02-02T19:06:34Z")
Dear Community, Im running Kibana 8.4.3 and I noticed a deprecation warning. So I used the new way for Controls. I have two fields, where I can add email addresses (sender and recipient). When Im looking for "jira@" th… --- ## [Filebeat error no data coming to kibana](https://discuss.elastic.co/t/filebeat-error-no-data-coming-to-kibana/328034)
**Author:** [@Whazaza](https://discuss.elastic.co/u/Whazaza)\ **Replies:** 13\ **Last updated:** [March 20, 2023, 7:01pm UTC](https://discuss.elastic.co/t/filebeat-error-no-data-coming-to-kibana/328034 "2023-03-20T19:01:04Z")
Configure filebeat as indicated in the kibana integrations with the following steps: curl -L -O https://artifacts.elastic.co/downloads/beats/filebeat/filebeat-8.6.2-amd64.deb sudo dpkg -i filebeat-8.6.2-amd64.deb (modi… --- ## [Index Lifecycle Management Metricbeat](https://discuss.elastic.co/t/index-lifecycle-management-metricbeat/318757)
**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\ **Replies:** 20\ **Last updated:** [December 19, 2022, 8:03am UTC](https://discuss.elastic.co/t/index-lifecycle-management-metricbeat/318757 "2022-12-19T08:03:15Z")
Hi Team, I have metricbeat installed on my servers to send data to ES. I want to have daily indexes for each day. Along with this, I also want to delete the indexes after few days using ILM. I am attaching my metricbea… --- ## [Trouble setting up TLS in Kibana with Docker](https://discuss.elastic.co/t/trouble-setting-up-tls-in-kibana-with-docker/250041)
**Author:** [@Cyberdemic](https://discuss.elastic.co/u/Cyberdemic)\ **Replies:** 15\ **Last updated:** [October 2, 2020, 5:20am UTC](https://discuss.elastic.co/t/trouble-setting-up-tls-in-kibana-with-docker/250041 "2020-10-02T05:20:49Z")
I'm trying to setup ELK stack in Docker Swarm following this guide with some modifications. I've tried a number of different options, and while it's helped me learn more of ELK, I still haven't managed to get it working… --- ## [Stop words and Keyword tokenizer](https://discuss.elastic.co/t/stop-words-and-keyword-tokenizer/19517)
**Author:** [@germap](https://discuss.elastic.co/u/germap)\ **Replies:** 11\ **Last updated:** [August 29, 2014, 2:49pm UTC](https://discuss.elastic.co/t/stop-words-and-keyword-tokenizer/19517 "2014-08-29T14:49:39Z")
Hi all, I'm looking for a way to remove stop words from tokens returned by a keyword tokenizer, i.e., I'd like to obtain the original text without stop words after the analysis process. Sample data looks li… --- ## [Elasticsearch throws a SSLHandshakeException: Client requested protocol TLSv1.2 is not enabled or supported in server context](https://discuss.elastic.co/t/elasticsearch-throws-a-sslhandshakeexception-client-requested-protocol-tlsv1-2-is-not-enabled-or-supported-in-server-context/328294)
**Author:** [@wlktiago70](https://discuss.elastic.co/u/wlktiago70)\ **Replies:** 9\ **Last updated:** [March 29, 2023, 1:09pm UTC](https://discuss.elastic.co/t/elasticsearch-throws-a-sslhandshakeexception-client-requested-protocol-tlsv1-2-is-not-enabled-or-supported-in-server-context/328294 "2023-03-29T13:09:51Z")
Hello there, I am trying to configure Elasticsearch 8.5 to support both TLSv1.3 AND TLSv1.2 communication, but following all documentation available, but it still supports TLSv1.3 only. I did the basic setup following … --- ## [Loadbalance: false - filebeat doesn't take random host to connect to](https://discuss.elastic.co/t/loadbalance-false-filebeat-doesnt-take-random-host-to-connect-to/43451)
**Author:** [@Karol\_Stojek](https://discuss.elastic.co/u/Karol_Stojek)\ **Replies:** 10\ **Last updated:** [March 24, 2016, 9:03am UTC](https://discuss.elastic.co/t/loadbalance-false-filebeat-doesnt-take-random-host-to-connect-to/43451 "2016-03-24T09:03:55Z")
the loadbalance: false option doesn't take random endpoint to connect to. I have a list in hosts that consists of 30 endpoints. I run 18 instances of filebeat with this configuration. They all try to connect to exactly… --- ## [Memory not released upon shutdown](https://discuss.elastic.co/t/memory-not-released-upon-shutdown/9691)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 10\ **Last updated:** [July 18, 2013, 10:19pm UTC](https://discuss.elastic.co/t/memory-not-released-upon-shutdown/9691 "2013-07-18T22:19:23Z")
Question for the memory gurus. Potentially not an ElasticSearch/Lucene issue, but hopefully there are some settings to tweak to help out. Running ES 0.20, default NIO filesystem, on a CentOS VM with 48 gigs. Could n… --- ## [Cross Cluster Search - Intermittant Failures](https://discuss.elastic.co/t/cross-cluster-search-intermittant-failures/218379)
**Author:** [@chris.murray](https://discuss.elastic.co/u/chris.murray)\ **Replies:** 16\ **Last updated:** [February 24, 2020, 5:54pm UTC](https://discuss.elastic.co/t/cross-cluster-search-intermittant-failures/218379 "2020-02-24T17:54:55Z")
I have an Elasticsearch setup at 5 physical sites. Kibana is installed at two of them, and I've configured cross-cluster search to enable searching data at the other locations. Each Kibana instance is separate, with se… --- ## [Добавление новых нод в кластер с настроенным security](https://discuss.elastic.co/t/security/241172)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 10\ **Last updated:** [July 22, 2020, 4:53pm UTC](https://discuss.elastic.co/t/security/241172 "2020-07-22T16:53:35Z")
Добрый день! Есть кластер из 8 нод (5 дата-нод, 3 мастер-ноды). Появилась необходимость добавить еще 5 дата-нод. Security настраивал по инструкции, сертификаты генерил так: elasticsearch-certutil cert ca --pem --in in… --- ## [Provided Grok patterns do not match field value](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-field-value/220051)
**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\ **Replies:** 10\ **Last updated:** [March 16, 2020, 8:33am UTC](https://discuss.elastic.co/t/provided-grok-patterns-do-not-match-field-value/220051 "2020-03-16T08:33:49Z")
Hello, I have an issue for a few days I can resolve. I want to parse "Feb 7 00:23:34 ig1-edge-dc3-01\_re0 rpd\[1524\]: RPD\_BGP\_NEIGHBOR\_STATE\_CHANGED: BGP peer 158.58.176.35 (External AS 200271) changed state from EstabSy… --- ## [Elasticsearch Rest Client throws java.lang.ArrayStoreException](https://discuss.elastic.co/t/elasticsearch-rest-client-throws-java-lang-arraystoreexception/128371)
**Author:** [@arony](https://discuss.elastic.co/u/arony)\ **Replies:** 10\ **Last updated:** [April 27, 2018, 7:04am UTC](https://discuss.elastic.co/t/elasticsearch-rest-client-throws-java-lang-arraystoreexception/128371 "2018-04-27T07:04:41Z")
Hello I am using Elasticsearch Rest Client v5.5.3 and it throws java.lang.ArrayStoreException after a while application start. The application which uses Elasticsearch rest client executes queries intensively. Would it … --- ## [How to visualize new install plugin in kibana](https://discuss.elastic.co/t/how-to-visualize-new-install-plugin-in-kibana/51404)
**Author:** [@sarbjeet](https://discuss.elastic.co/u/sarbjeet)\ **Replies:** 10\ **Last updated:** [June 21, 2016, 4:46pm UTC](https://discuss.elastic.co/t/how-to-visualize-new-install-plugin-in-kibana/51404 "2016-06-21T16:46:33Z")
i copied kbn\_circles\_vis into src/plugins/. when i start kibana. it runs in browser properly. when i see its status it display:- plugin kbn\_circles\_vis=ready but how to use that plugin in visualization.because in vis… --- ## [Manipulate data with grok - logstash](https://discuss.elastic.co/t/manipulate-data-with-grok-logstash/72755)
**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\ **Replies:** 9\ **Last updated:** [January 26, 2017, 10:55am UTC](https://discuss.elastic.co/t/manipulate-data-with-grok-logstash/72755 "2017-01-26T10:55:50Z")
hi, i have log data like this. 2017-01-19T18:08:35+07:00 payment INFO {"user\_id":0,"cart\_id":"81746"} so i want using logstash to input data to elasticsearch. but i want to manipulate the data it self before insert… --- ## [Questions about upgrading from 5.6 to 6.x](https://discuss.elastic.co/t/questions-about-upgrading-from-5-6-to-6-x/134372)
**Author:** [@waynesmallman](https://discuss.elastic.co/u/waynesmallman)\ **Replies:** 13\ **Last updated:** [June 8, 2018, 10:26am UTC](https://discuss.elastic.co/t/questions-about-upgrading-from-5-6-to-6-x/134372 "2018-06-08T10:26:39Z")
Hi! I've created a snapshot following the advice of z0z0, which I found to be simpler to follow and more informative than the official documentation. Having then had a look inside /etc/elasticsearch/backup, I'm assumin… --- ## [Exception when indexing pdf document](https://discuss.elastic.co/t/exception-when-indexing-pdf-document/66738)
**Author:** [@radsan84](https://discuss.elastic.co/u/radsan84)\ **Replies:** 10\ **Last updated:** [December 20, 2016, 6:47pm UTC](https://discuss.elastic.co/t/exception-when-indexing-pdf-document/66738 "2016-12-20T18:47:50Z")
I installed elasicsearch 5.0.1 with ingest attachment and tried indexing pdf in elasticsearch from shell script using below command #!/bin/ksh var=$(base64 sample.pdf | perl -pe 's/\\n/\\\\n/g') var1=$(curl -XPUT 'http:… --- ## [A way to compress large Queries](https://discuss.elastic.co/t/a-way-to-compress-large-queries/9531)
**Author:** [@revdev](https://discuss.elastic.co/u/revdev)\ **Replies:** 10\ **Last updated:** [November 15, 2012, 7:14pm UTC](https://discuss.elastic.co/t/a-way-to-compress-large-queries/9531 "2012-11-15T19:14:15Z")
Hi, I am at a point where some of my search queries are close to 1MB, for example queries where the "terms" filter has around 50k ids. I assume this is putting a lot of network overhead to transfer such big queries … --- ## [3 node ES cluster...one node only holds replicas](https://discuss.elastic.co/t/3-node-es-cluster-one-node-only-holds-replicas/43454)
**Author:** [@ehogan](https://discuss.elastic.co/u/ehogan)\ **Replies:** 9\ **Last updated:** [March 4, 2016, 11:59pm UTC](https://discuss.elastic.co/t/3-node-es-cluster-one-node-only-holds-replicas/43454 "2016-03-04T23:59:24Z")
Today I had to restart my cluster to change some configuration settings. I think I did it the right way... following these instructions: https://www.elastic.co/guide/en/elasticsearch/reference/current/restart-upgra… --- ## [Grok parsing in logstash for Windows DNS Debug Log](https://discuss.elastic.co/t/grok-parsing-in-logstash-for-windows-dns-debug-log/291085)
**Author:** [@craign30](https://discuss.elastic.co/u/craign30)\ **Replies:** 11\ **Last updated:** [December 7, 2021, 3:53am UTC](https://discuss.elastic.co/t/grok-parsing-in-logstash-for-windows-dns-debug-log/291085 "2021-12-07T03:53:17Z")
I'm using grok in Logstash (7.8.0) to parse data from a Windows Server (2019) DNS debug log (sent via filebeat) using the statement below. Most of the time, the data gets parsed correctly and fields are populated and vi… --- ## [ECE Xpack Monitoring Connected but not displaying in Kibana](https://discuss.elastic.co/t/ece-xpack-monitoring-connected-but-not-displaying-in-kibana/191400)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 11\ **Last updated:** [July 19, 2019, 4:27pm UTC](https://discuss.elastic.co/t/ece-xpack-monitoring-connected-but-not-displaying-in-kibana/191400 "2019-07-19T16:27:37Z")
I'm currently trying to setup xpack monitoring on a Metricbeat thats pointing to an ECE cluster. I have been able to get a metricbeat on my desktop with xpack monitoring to connect to an ECE cluster named DevOps. Those… --- ## [When we're writing to the Elasticsearch cluster, Reads are 10000x slower. (Understanding slow term query)](https://discuss.elastic.co/t/when-were-writing-to-the-elasticsearch-cluster-reads-are-10000x-slower-understanding-slow-term-query/255022)
**Author:** [@rex-remind](https://discuss.elastic.co/u/rex-remind)\ **Replies:** 10\ **Last updated:** [November 13, 2020, 9:31pm UTC](https://discuss.elastic.co/t/when-were-writing-to-the-elasticsearch-cluster-reads-are-10000x-slower-understanding-slow-term-query/255022 "2020-11-13T21:31:46Z")
Hello, I have recently indexed 25M docs into 2 nodes (+1 master) of 5 shards x 3 Availability Zones. I'm running in AWS ES, large boxes with with plenty of EBS storage, resource usage is low, average doc size is \< 1KiB.… --- ## [Connect to Elasticsearch remotely](https://discuss.elastic.co/t/connect-to-elasticsearch-remotely/289919)
**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\ **Replies:** 14\ **Last updated:** [November 24, 2021, 9:26am UTC](https://discuss.elastic.co/t/connect-to-elasticsearch-remotely/289919 "2021-11-24T09:26:37Z")
Hello community, I have a problem. I have installed on ubuntu 20.04 an ELK stack 7.15.2. My goal is to connect remotely to Elasticsearch to ingest data from a web form into Elasticsearch and my problem is that I cannot … --- ## [How to combine alerts in one?](https://discuss.elastic.co/t/how-to-combine-alerts-in-one/266046)
**Author:** [@VellayLoket](https://discuss.elastic.co/u/VellayLoket)\ **Replies:** 13\ **Last updated:** [March 4, 2021, 11:09pm UTC](https://discuss.elastic.co/t/how-to-combine-alerts-in-one/266046 "2021-03-04T23:09:57Z")
For example, i have infected PC in my network, and it sends many requests to C2 malware domain. So, i setup detection rule for this C2C domain and now i have got 100500 alerts from only 1 IP of infected PC. How to combin… --- ## [Is there an easy way to get the shard of a document?](https://discuss.elastic.co/t/is-there-an-easy-way-to-get-the-shard-of-a-document/310191)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 16\ **Last updated:** [July 25, 2022, 6:18pm UTC](https://discuss.elastic.co/t/is-there-an-easy-way-to-get-the-shard-of-a-document/310191 "2022-07-25T18:18:51Z")
Hello: I often get a document directly via /index/\_doc/\_id. Is there a way to display the shard number this particular document resides? I can get the shard via "explain":true if I'm using search query. But it doesn'… --- ## [Kibana Dashboard and Discovery ( Left hand panel: List of columns) in one page](https://discuss.elastic.co/t/kibana-dashboard-and-discovery-left-hand-panel-list-of-columns-in-one-page/26771)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 12\ **Last updated:** [October 26, 2016, 7:59am UTC](https://discuss.elastic.co/t/kibana-dashboard-and-discovery-left-hand-panel-list-of-columns-in-one-page/26771 "2016-10-26T07:59:37Z")
Hi All How can i bring Discovery left hand panel: list of column into Kibana Dashboard. Within a Dashboard we should be able to see the list of columns Is there any PHP plugin available to use Kibana components like … --- ## [Filter system logons](https://discuss.elastic.co/t/filter-system-logons/225001)
**Author:** [@kickon](https://discuss.elastic.co/u/kickon)\ **Replies:** 10\ **Last updated:** [April 15, 2020, 10:01am UTC](https://discuss.elastic.co/t/filter-system-logons/225001 "2020-04-15T10:01:50Z")
hello, in new version of 7.6.1 I have issue with filtering system logons which occur in events 4624 and 4634. I tried this one with some modification https://github.com/HASecuritySolutions/Logstash/blob/master/winlogb… --- ## [Index pattern matching all non-system indices](https://discuss.elastic.co/t/index-pattern-matching-all-non-system-indices/110413)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 10\ **Last updated:** [December 6, 2017, 7:38am UTC](https://discuss.elastic.co/t/index-pattern-matching-all-non-system-indices/110413 "2017-12-06T07:38:08Z")
We are running ES6 and have a number of indices: other-%{+YYYY.MM.dd} nginx-%{+YYYY.MM.dd} haproxy-%{+YYYY.MM.dd} We would like to have an index pattern matching all of these, but discovered that \* also matches the sy… --- ## [S3 optimization in elk](https://discuss.elastic.co/t/s3-optimization-in-elk/324298)
**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\ **Replies:** 22\ **Last updated:** [February 3, 2023, 9:03am UTC](https://discuss.elastic.co/t/s3-optimization-in-elk/324298 "2023-02-03T09:03:39Z")
Hi , We have a 8 node cluster in on premise with 3 years data (3 master + 5 data node) one data node out of this being acting as s3 for cold storage. Our s3 is getting space issues and we would like to optimize by mov… --- ## [Java APM Client: transfer transaction information when using BlockingQueue instead of ExecutorService](https://discuss.elastic.co/t/java-apm-client-transfer-transaction-information-when-using-blockingqueue-instead-of-executorservice/191781)
**Author:** [@pfouquet](https://discuss.elastic.co/u/pfouquet)\ **Replies:** 13\ **Last updated:** [August 8, 2019, 6:28am UTC](https://discuss.elastic.co/t/java-apm-client-transfer-transaction-information-when-using-blockingqueue-instead-of-executorservice/191781 "2019-08-08T06:28:05Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: APM Agent language a… --- ## [Config Path](https://discuss.elastic.co/t/config-path/164773)
**Author:** [@mylyo](https://discuss.elastic.co/u/mylyo)\ **Replies:** 13\ **Last updated:** [January 21, 2019, 12:21pm UTC](https://discuss.elastic.co/t/config-path/164773 "2019-01-21T12:21:39Z")
Hi, As begginner at Elastic, iam tryning to install Elastic stack on my machine (Mac IOS). Actually i have a problem with Filebeat. i am trying to add a new index via Filebeat. Config is ok but when i run it i have alw… --- ## [Unable to fetch the indices in Kibana. Option greyed out](https://discuss.elastic.co/t/unable-to-fetch-the-indices-in-kibana-option-greyed-out/69768)
**Author:** [@Sushma](https://discuss.elastic.co/u/Sushma)\ **Replies:** 12\ **Last updated:** [January 3, 2017, 5:33am UTC](https://discuss.elastic.co/t/unable-to-fetch-the-indices-in-kibana-option-greyed-out/69768 "2017-01-03T05:33:33Z")
Hi, I installed Kibana-4.6.1 on windows server std 2012. Also successfully installed elasticsearch,logstash,filebeat,packetbeat. After installation I could open the kibana url through browser but could not fetch the in… --- ## [Heavy Load due file beat service](https://discuss.elastic.co/t/heavy-load-due-file-beat-service/63571)
**Author:** [@kunalpatil3017](https://discuss.elastic.co/u/kunalpatil3017)\ **Replies:** 12\ **Last updated:** [November 9, 2016, 2:32pm UTC](https://discuss.elastic.co/t/heavy-load-due-file-beat-service/63571 "2016-11-09T14:32:02Z")
Hello Im using Filebeat service in my graylog server (Graylog-Sidecar collector) But Due to some reason it is consuming too much resources on my linux server load is not due to data read it is due to filebeat debug mo… --- ## [Groupby servers by custom field in infrastructure Dashboard](https://discuss.elastic.co/t/groupby-servers-by-custom-field-in-infrastructure-dashboard/174663)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 11\ **Last updated:** [April 9, 2019, 4:39pm UTC](https://discuss.elastic.co/t/groupby-servers-by-custom-field-in-infrastructure-dashboard/174663 "2019-04-09T16:39:04Z")
I am able to see servers in Infrastructure dashboard. But I want to categorize(group by) them by a custom field like env name. Is there any configuration in Kibana or Metricbeats configuration where I can configure this. … --- ## [Problem creating transforms](https://discuss.elastic.co/t/problem-creating-transforms/210701)
**Author:** [@JulGor](https://discuss.elastic.co/u/JulGor)\ **Replies:** 12\ **Last updated:** [December 6, 2019, 9:54pm UTC](https://discuss.elastic.co/t/problem-creating-transforms/210701 "2019-12-06T21:54:40Z")
Hi, I upgraded by cluster to version 7.5 and I'm trying the Transforms from Kibana but I'm having some problem that I cannot identify. The big picture is that when I create a continuous transform with more than 4-5 agg… --- ## [Can Anyone tell each and every step of how to use geoIP with logstash and kibana?](https://discuss.elastic.co/t/can-anyone-tell-each-and-every-step-of-how-to-use-geoip-with-logstash-and-kibana/101420)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 11\ **Last updated:** [September 26, 2017, 10:49pm UTC](https://discuss.elastic.co/t/can-anyone-tell-each-and-every-step-of-how-to-use-geoip-with-logstash-and-kibana/101420 "2017-09-26T22:49:07Z")
Hi All I have GeoLite2-City.mmdb and logstash ver 5.4.0. I am trying to use the db but nothing is working out. Can anyone please explain the steps needed to do the loading of IP address in Logstash and transformed it … --- ## [Weird highlighting error ... failed to highlight field ... String index out of range](https://discuss.elastic.co/t/weird-highlighting-error-failed-to-highlight-field-string-index-out-of-range/11394)
**Author:** [@concept47](https://discuss.elastic.co/u/concept47)\ **Replies:** 11\ **Last updated:** [May 1, 2013, 9:27am UTC](https://discuss.elastic.co/t/weird-highlighting-error-failed-to-highlight-field-string-index-out-of-range/11394 "2013-05-01T09:27:52Z")
I cannot make head or tail of this error, and its happening pretty randomly to where I don't even know where to start looking. This is what the full error looks like Tire::Search::SearchRequestFailed: 500 : {"e… --- ## [How to import template for ES 7.12.0?](https://discuss.elastic.co/t/how-to-import-template-for-es-7-12-0/282041)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 13\ **Last updated:** [August 30, 2021, 1:01am UTC](https://discuss.elastic.co/t/how-to-import-template-for-es-7-12-0/282041 "2021-08-30T01:01:14Z")
I am using ES 7.12.0 and APM 7.8.1. Today, I want to upgrade APM to 7.14.0, but APM cannot automatically create a template, so I want to import it manually and encounter some problems. ./apm-server setup --index-managem… --- ## [ISO8601 to epoch seconds](https://discuss.elastic.co/t/iso8601-to-epoch-seconds/219033)
**Author:** [@fim](https://discuss.elastic.co/u/fim)\ **Replies:** 10\ **Last updated:** [February 13, 2020, 2:47pm UTC](https://discuss.elastic.co/t/iso8601-to-epoch-seconds/219033 "2020-02-13T14:47:23Z")
Hi I ingest data from a mysql database and in a specific column there are date/time in ISO8601 format stored, which I would like to convert as @timestamp in elasticsearch. I followed the question here: https://discuss.… --- ## [Storing into Elasticsearch using Apache Pig](https://discuss.elastic.co/t/storing-into-elasticsearch-using-apache-pig/61146)
**Author:** [@cloudxy](https://discuss.elastic.co/u/cloudxy)\ **Replies:** 16\ **Last updated:** [September 27, 2016, 12:09pm UTC](https://discuss.elastic.co/t/storing-into-elasticsearch-using-apache-pig/61146 "2016-09-27T12:09:14Z")
Hello I have the following Json input in second\_mapping\_data.json : {"address":"1.1.1.1","logName":"-","user":"-","time":"07/Mar/2014:16:05:49 -0800","method":"GET","uri":"/twiki/bin/edit/Main/Double\_bounce\_sender?topic… --- ## [Text Categorization in ES](https://discuss.elastic.co/t/text-categorization-in-es/15945)
**Author:** [@Prashant\_Pal](https://discuss.elastic.co/u/Prashant_Pal)\ **Replies:** 9\ **Last updated:** [February 26, 2014, 10:07am UTC](https://discuss.elastic.co/t/text-categorization-in-es/15945 "2014-02-26T10:07:49Z")
Hi, I am looking forward to write queries w.r.t. text categorization in Elasticsearch. So is there any API exists already if not how can I proceed with that? Any help is appreciable. --- ## [JDBC connection not working](https://discuss.elastic.co/t/jdbc-connection-not-working/198175)
**Author:** [@zbawio](https://discuss.elastic.co/u/zbawio)\ **Replies:** 10\ **Last updated:** [September 5, 2019, 3:21pm UTC](https://discuss.elastic.co/t/jdbc-connection-not-working/198175 "2019-09-05T15:21:59Z")
Hi all, I have a database on my MSSQL 2012 server and i am trying to get my database to elasticsearch with logstash. I did I installed jdk 8 I installed sqljdbc 4.2 I Added the java and jdbc to Environment path Iam… --- ## [Async-search keepalive value](https://discuss.elastic.co/t/async-search-keepalive-value/266314)
**Author:** [@alexpanas](https://discuss.elastic.co/u/alexpanas)\ **Replies:** 9\ **Last updated:** [March 5, 2021, 10:04pm UTC](https://discuss.elastic.co/t/async-search-keepalive-value/266314 "2021-03-05T22:04:30Z")
Hi, As far as I can see from https://www.elastic.co/guide/en/elasticsearch/reference/current/async-search.html - the default keep-alive value for async search is 5 days and is regulated on the query side. This results … --- ## [\[Auditbeat\] Memory leak in 7.5.2](https://discuss.elastic.co/t/auditbeat-memory-leak-in-7-5-2/218335)
**Author:** [@nickbabkin](https://discuss.elastic.co/u/nickbabkin)\ **Replies:** 17\ **Last updated:** [April 14, 2020, 8:32am UTC](https://discuss.elastic.co/t/auditbeat-memory-leak-in-7-5-2/218335 "2020-04-14T08:32:38Z")
Hi! It seems like there's a memory leak in latest version of auditbeat (7.5.2) that is running with socket module enabled on high network loaded servers (such as load balancers). We recently upgraded to the newest vers… --- ## [Cluster query to fetch particular label records in carrot2](https://discuss.elastic.co/t/cluster-query-to-fetch-particular-label-records-in-carrot2/16283)
**Author:** [@Prashant\_Pal](https://discuss.elastic.co/u/Prashant_Pal)\ **Replies:** 17\ **Last updated:** [March 19, 2014, 8:25am UTC](https://discuss.elastic.co/t/cluster-query-to-fetch-particular-label-records-in-carrot2/16283 "2014-03-19T08:25:10Z")
Hi ES Users, Is there any specific query which can be used to fetch the records of one particular label. e.g.: Using \_search\_with\_clusters I got response as {id: 3 score: 0.9494177601684511 label: Nok… --- ## [Return ip field from inner\_hit in dot-decimal format](https://discuss.elastic.co/t/return-ip-field-from-inner-hit-in-dot-decimal-format/40452)
**Author:** [@Benjamin\_Gathmann](https://discuss.elastic.co/u/Benjamin_Gathmann)\ **Replies:** 10\ **Last updated:** [February 10, 2016, 9:01am UTC](https://discuss.elastic.co/t/return-ip-field-from-inner-hit-in-dot-decimal-format/40452 "2016-02-10T09:01:10Z")
I have been posting an issue on Github: where I describe the problem of retrieving a field of "ip" from an inner\_hit in the correct format. @jpountz wrote that this is not a bug, but I have found no way of solving … [Previous page](https://discuss.elastic.co/top.md?page=128&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=130&per_page=50&period=all)