# Top **URL:** https://discuss.elastic.co/top.md?page=1297&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1298 --- ## [Hive to elasticsearch Parsing exception](https://discuss.elastic.co/t/hive-to-elasticsearch-parsing-exception/22641)
**Author:** [@P\_lva](https://discuss.elastic.co/u/P_lva)\ **Replies:** 2\ **Last updated:** [March 13, 2015, 2:51pm UTC](https://discuss.elastic.co/t/hive-to-elasticsearch-parsing-exception/22641 "2015-03-13T14:51:15Z")
Hello Everyone, I'm loading data from a a hive table (0.13) in to elasticsearch (1.4.4). With the auto create index option turned on , I don't face any problems and I can see all the data in ES. However, I get th… --- ## [DNS Lookup](https://discuss.elastic.co/t/dns-lookup/15496)
**Author:** [@Daniel\_Mack](https://discuss.elastic.co/u/Daniel_Mack)\ **Replies:** 2\ **Last updated:** [January 30, 2014, 11:25am UTC](https://discuss.elastic.co/t/dns-lookup/15496 "2014-01-30T11:25:43Z")
Hello, i have installed Elasticsearch, Kibana and Fluentd on Debian 7.0 with rsyslog for Logging Network devices like Switches and Firewalls. I get from the Firewall the hostname and see it in Kibana but from the Swi… --- ## [2 Node Cluster, 1 node being passive](https://discuss.elastic.co/t/2-node-cluster-1-node-being-passive/12533)
**Author:** [@David\_Charle](https://discuss.elastic.co/u/David_Charle)\ **Replies:** 2\ **Last updated:** [November 13, 2013, 11:37pm UTC](https://discuss.elastic.co/t/2-node-cluster-1-node-being-passive/12533 "2013-11-13T23:37:36Z")
Hi I am newbie to ES, and wanted to get simple 2 node cluster (1 in one DC and another one in another DC) .. think as simple master-\>slave; where one being the primary for all activities; and another being just a … --- ## [Integrate Elasticsearch with PostGres in nodejs app](https://discuss.elastic.co/t/integrate-elasticsearch-with-postgres-in-nodejs-app/359316)
**Author:** [@DubStep](https://discuss.elastic.co/u/DubStep)\ **Replies:** 5\ **Last updated:** [January 21, 2025, 6:23pm UTC](https://discuss.elastic.co/t/integrate-elasticsearch-with-postgres-in-nodejs-app/359316 "2025-01-21T18:23:31Z")
Hello! I'm kinda new to Elastic Search(I'm a noob in this particular technology) and I would like learn more about Elastic from the community. I'm building a nodejs app using PostGreSQL as the database and I want Elast… --- ## [Need to send data from .log file to AWS opensearch](https://discuss.elastic.co/t/need-to-send-data-from-log-file-to-aws-opensearch/348555)
**Author:** [@anupvtr](https://discuss.elastic.co/u/anupvtr)\ **Replies:** 5\ **Last updated:** [December 4, 2023, 2:43pm UTC](https://discuss.elastic.co/t/need-to-send-data-from-log-file-to-aws-opensearch/348555 "2023-12-04T14:43:32Z")
Hello all, Could you please help me on this. I am quite new to the Elasticsearch ocean. My requirement is, I need to send data from .log file to AWS opensearch. Whether the below option will work for me. Download t… --- ## [Dev console: max string length - 1996 characters?](https://discuss.elastic.co/t/dev-console-max-string-length-1996-characters/198304)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 5\ **Last updated:** [September 6, 2019, 5:56am UTC](https://discuss.elastic.co/t/dev-console-max-string-length-1996-characters/198304 "2019-09-06T05:56:14Z")
I just encountered a weird issue - the length of the string you can submit on the dev console is limited: PUT my\_index/\_doc/1 { "text": """..............\.............""" } If the text le… --- ## [How many connection can Logstash handle:](https://discuss.elastic.co/t/how-many-connection-can-logstash-handle/154827)
**Author:** [@somu\_p](https://discuss.elastic.co/u/somu_p)\ **Replies:** 5\ **Last updated:** [November 13, 2018, 1:15pm UTC](https://discuss.elastic.co/t/how-many-connection-can-logstash-handle/154827 "2018-11-13T13:15:34Z")
in my environment i want to know how many connection can one logstash handle. i will have 25000 machine running on beats. can all those 25000 contact logstash for processing then store data to elastic search. --- ## [JSON Payload to Elastic.py](https://discuss.elastic.co/t/json-payload-to-elastic-py/145394)
**Author:** [@Matthew\_Butler](https://discuss.elastic.co/u/Matthew_Butler)\ **Replies:** 5\ **Last updated:** [August 21, 2018, 5:36pm UTC](https://discuss.elastic.co/t/json-payload-to-elastic-py/145394 "2018-08-21T17:36:07Z")
Here is my JSON payload: {"device":"368640","deviceType":"Sigfox-Tracker","version":3,"time":"Tue Aug 21 2018 02:33:05 GMT+0000 (UTC)","rssi":"-120.00","battery":3.28,"temp":20.87,"soil":1915,"xAxis":59,"yAxis":-38,"zAx… --- ## [Time range filter](https://discuss.elastic.co/t/time-range-filter/18518)
**Author:** [@Tom\_Miller](https://discuss.elastic.co/u/Tom_Miller)\ **Replies:** 5\ **Last updated:** [July 8, 2014, 11:03pm UTC](https://discuss.elastic.co/t/time-range-filter/18518 "2014-07-08T23:03:56Z")
All of the examples I can find on the web relate to date-range filtering. What I need is a time-range filter: i,e 19:00 - 23:30. So, in this example, I want all hits between 7PM and 11:30, regardless of the day..… --- ## [Parent and children have to be in the same index?](https://discuss.elastic.co/t/parent-and-children-have-to-be-in-the-same-index/11650)
**Author:** [@Robin\_Boutros](https://discuss.elastic.co/u/Robin_Boutros)\ **Replies:** 5\ **Last updated:** [April 21, 2013, 5:40pm UTC](https://discuss.elastic.co/t/parent-and-children-have-to-be-in-the-same-index/11650 "2013-04-21T17:40:23Z")
I read this somewhere: By limiting itself to parent/child type relationships elasticsearch makes life easier for itself: a child is always indexed in the same shard as its parent, so has\_child doesn’t have to do a… --- ## [Unfollowing indices when leader is gone](https://discuss.elastic.co/t/unfollowing-indices-when-leader-is-gone/221701)
**Author:** [@javierE](https://discuss.elastic.co/u/javierE)\ **Replies:** 4\ **Last updated:** [March 9, 2020, 1:10pm UTC](https://discuss.elastic.co/t/unfollowing-indices-when-leader-is-gone/221701 "2020-03-09T13:10:37Z")
Hello, I am currently testing ccr, and staging a particular scenario where my primary site is lost. I need to script a procedure to change all my followers to R/W and resume the operations on the secondary site. To a… --- ## [Question on multiple date fields in an event and time range](https://discuss.elastic.co/t/question-on-multiple-date-fields-in-an-event-and-time-range/176090)
**Author:** [@Sudhakar\_Madeti](https://discuss.elastic.co/u/Sudhakar_Madeti)\ **Replies:** 4\ **Last updated:** [April 13, 2019, 10:28am UTC](https://discuss.elastic.co/t/question-on-multiple-date-fields-in-an-event-and-time-range/176090 "2019-04-13T10:28:22Z")
I am trying to push all our team's tickets into ELK. The tickets have 5 date fields and I have 2 questions in this regard. I have all the data in the same index. The 5 different date fields: Planned\_Start\_Time Planned\_… --- ## [Separate of read and write indices](https://discuss.elastic.co/t/separate-of-read-and-write-indices/148608)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 4\ **Last updated:** [September 18, 2018, 9:14am UTC](https://discuss.elastic.co/t/separate-of-read-and-write-indices/148608 "2018-09-18T09:14:09Z")
is there any way to setup separate readonly schema and write schema. --- ## [Field Cache or best approach for selecting on a single value](https://discuss.elastic.co/t/field-cache-or-best-approach-for-selecting-on-a-single-value/52868)
**Author:** [@es1024](https://discuss.elastic.co/u/es1024)\ **Replies:** 4\ **Last updated:** [June 15, 2016, 3:36pm UTC](https://discuss.elastic.co/t/field-cache-or-best-approach-for-selecting-on-a-single-value/52868 "2016-06-15T15:36:55Z")
I have a 10 node ElasticSeach cluster where I have about 150 million records per day in a daily index. I utilize an alias to point to the last 2 weeks of data (A couple weeks worth of data close to 2 billion records). … --- ## [How to compare data based on different dates Using Kibana3](https://discuss.elastic.co/t/how-to-compare-data-based-on-different-dates-using-kibana3/21424)
**Author:** [@Ramakrishna\_N](https://discuss.elastic.co/u/Ramakrishna_N)\ **Replies:** 4\ **Last updated:** [January 2, 2015, 4:03am UTC](https://discuss.elastic.co/t/how-to-compare-data-based-on-different-dates-using-kibana3/21424 "2015-01-02T04:03:12Z")
Hi, I have a question regarding the ElasticSearch and Kibana. My goal is I have to compare two different dates of data by hour/min/sec. All my data is indexed and everything in single type. Regards, Ramakris… --- ## [Examples using search-ui in Angular?](https://discuss.elastic.co/t/examples-using-search-ui-in-angular/298081)
**Author:** [@ksuren](https://discuss.elastic.co/u/ksuren)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 4:49pm UTC](https://discuss.elastic.co/t/examples-using-search-ui-in-angular/298081 "2022-02-25T16:49:21Z")
Are there any examples on using Search UI in an Angular project? The docs on using Search UI as headless core does not have examples other than React. --- ## [Elasticsearch latest version support for win 2019](https://discuss.elastic.co/t/elasticsearch-latest-version-support-for-win-2019/198240)
**Author:** [@elitzur\_e](https://discuss.elastic.co/u/elitzur_e)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-latest-version-support-for-win-2019/198240 "2019-09-05T14:11:09Z")
Hi i have seen other (locked) post about this with no official answer. is there any known issue running es or kibana on windows server 2019? (its not on support matix) thanks --- ## [Log Parsing](https://discuss.elastic.co/t/log-parsing/159098)
**Author:** [@Vineeth\_Ananthula](https://discuss.elastic.co/u/Vineeth_Ananthula)\ **Replies:** 7\ **Last updated:** [December 17, 2018, 3:44am UTC](https://discuss.elastic.co/t/log-parsing/159098 "2018-12-17T03:44:12Z")
I am collecting hundred types of router logs from a syslog server . I was able to write grok pattern for few of them and feed them into elasticsearch and kibana. But its becoming a tedious job to write for each type of l… --- ## [Getting Exception in thread "main" java.nio.file.AccessDeniedException:](https://discuss.elastic.co/t/getting-exception-in-thread-main-java-nio-file-accessdeniedexception/144134)
**Author:** [@Kaustav\_Gupta](https://discuss.elastic.co/u/Kaustav_Gupta)\ **Replies:** 1\ **Last updated:** [August 13, 2018, 11:20am UTC](https://discuss.elastic.co/t/getting-exception-in-thread-main-java-nio-file-accessdeniedexception/144134 "2018-08-13T11:20:10Z")
I installed elasticsearch in ubuntu elk@elk-virtual-machine:~/Downloads/elasticsearch-6.3.2/bin$ ls elasticsearch elasticsearch-keystore.bat elasticsearch-setup-passwords.bat jdk-10.0.2\_linux-x64\_b… --- ## [Image in Data Table](https://discuss.elastic.co/t/image-in-data-table/122650)
**Author:** [@Vishal\_Gupta](https://discuss.elastic.co/u/Vishal_Gupta)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 3:37pm UTC](https://discuss.elastic.co/t/image-in-data-table/122650 "2018-03-07T15:37:14Z")
How to add image in Data Table. I have image path in my data, so how to show this image in Data Table. --- ## [Duplicate Field Aggregate crashes system](https://discuss.elastic.co/t/duplicate-field-aggregate-crashes-system/84025)
**Author:** [@Erik\_Miller](https://discuss.elastic.co/u/Erik_Miller)\ **Replies:** 1\ **Last updated:** [April 30, 2017, 8:36am UTC](https://discuss.elastic.co/t/duplicate-field-aggregate-crashes-system/84025 "2017-04-30T08:36:00Z")
I am trying to run a simple aggregation that returns all documents that have a duplicate field. The use case is that the field is considered an ID field and there should never be more than one specific field value acros… --- ## [Add extra timestamp field for local time](https://discuss.elastic.co/t/add-extra-timestamp-field-for-local-time/83510)
**Author:** [@kernelpanic](https://discuss.elastic.co/u/kernelpanic)\ **Replies:** 1\ **Last updated:** [April 25, 2017, 5:14pm UTC](https://discuss.elastic.co/t/add-extra-timestamp-field-for-local-time/83510 "2017-04-25T17:14:40Z")
Hello, I understand that Elasticsearch stores timestamp in UTC format internally, which are an hour behind my local time (UK time). I would like to add a field that shows the correct local time, am I right in thinking I … --- ## [Read files from another machine](https://discuss.elastic.co/t/read-files-from-another-machine/50922)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 1\ **Last updated:** [May 25, 2016, 10:33am UTC](https://discuss.elastic.co/t/read-files-from-another-machine/50922 "2016-05-25T10:33:08Z")
I have created a logstash, i.e. file.conf, to read through a file in local machine (172.16.1.135). input{ stdin{} file{ type =\> "txt" path =\> "C:\\Job\\Code.txt" start\_position =\> "beginning" } } filter{ grok{ … --- ## [QueryStringQuery Search with Comma](https://discuss.elastic.co/t/querystringquery-search-with-comma/5108)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 1\ **Last updated:** [August 11, 2011, 6:53am UTC](https://discuss.elastic.co/t/querystringquery-search-with-comma/5108 "2011-08-11T06:53:39Z")
Hi, I'm trying to make a query like this: steel\* OR (tokenizedCusAttrIdValue:29,steel\*) OR (tokenizedCusAttrIdValue:33,steel\*) OR (tokenizedCusAttrIdValue: 34,steel\*) OR (tokenizedCusAttrIdValue:65000088,steel\*)… --- ## [Kibana / ajout données csv à un index existant](https://discuss.elastic.co/t/kibana-ajout-donnees-csv-a-un-index-existant/314970)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 6\ **Last updated:** [September 24, 2022, 4:46pm UTC](https://discuss.elastic.co/t/kibana-ajout-donnees-csv-a-un-index-existant/314970 "2022-09-24T16:46:55Z")
Bonjour, Je suis sans doute stupide mais je ne trouve pas le moyen d'ajouter des données (un fichier csv) à un index existant et mappé grâce à l'import via Kibana d'un fichier CSV équivalent. En gros le premier fichier … --- ## [Hot-Warm Architecture with ILM: Cluster health turns yellow](https://discuss.elastic.co/t/hot-warm-architecture-with-ilm-cluster-health-turns-yellow/260244)
**Author:** [@Eduardo\_Iglesias](https://discuss.elastic.co/u/Eduardo_Iglesias)\ **Replies:** 6\ **Last updated:** [January 5, 2021, 5:47pm UTC](https://discuss.elastic.co/t/hot-warm-architecture-with-ilm-cluster-health-turns-yellow/260244 "2021-01-05T17:47:37Z")
Hello community, I'm trying to implement a hot warm architecture but I can't make it work, the cluster health turns yellow. Below are the details of my cluster and some outputs: GET \_cat/indices yellow open test-0000… --- ## [Why install metricbeat 6.4.0, can't find the modules.d folder?](https://discuss.elastic.co/t/why-install-metricbeat-6-4-0-cant-find-the-modules-d-folder/145828)
**Author:** [@jerrywang1974](https://discuss.elastic.co/u/jerrywang1974)\ **Replies:** 6\ **Last updated:** [August 27, 2018, 9:56am UTC](https://discuss.elastic.co/t/why-install-metricbeat-6-4-0-cant-find-the-modules-d-folder/145828 "2018-08-27T09:56:44Z")
Hi, I'd has issue about metricbeat 6.4.0, I installed and that's missing modules.d folder and as 6.3.x is worked. does anyone report that? Jerry --- ## [.keyword conversion fails](https://discuss.elastic.co/t/keyword-conversion-fails/102508)
**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\ **Replies:** 6\ **Last updated:** [October 13, 2017, 11:02am UTC](https://discuss.elastic.co/t/keyword-conversion-fails/102508 "2017-10-13T11:02:05Z")
I am monitoring a bunch of servers using the ELK stack. I want to monitor custom Java processes that are being run from jars on those servers. I am trying to split the line graph using the system.process.cmdline.keywor… --- ## [Kibana List API Questions](https://discuss.elastic.co/t/kibana-list-api-questions/280530)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [August 23, 2021, 5:16pm UTC](https://discuss.elastic.co/t/kibana-list-api-questions/280530 "2021-08-23T17:16:01Z")
Hello all, We really like the Kibana List API. it enables us to make black and whitelists we can use in Elastic detection rules. For example a list of developers, compromised accounts, vpn users, etc. We also really lik… --- ## [Getting Elasticsearch exception while indexing using Python script](https://discuss.elastic.co/t/getting-elasticsearch-exception-while-indexing-using-python-script/276299)
**Author:** [@ravi-shanker](https://discuss.elastic.co/u/ravi-shanker)\ **Replies:** 2\ **Last updated:** [June 21, 2021, 8:35am UTC](https://discuss.elastic.co/t/getting-elasticsearch-exception-while-indexing-using-python-script/276299 "2021-06-21T08:35:20Z")
Hello All I am trying read, parse and index a html file using the below python script. from elasticsearch import Elasticsearch from bs4 import BeautifulSoup import glob es=Elasticsearch(\[{'host':'ip-address','port':9… --- ## [Question on logstash removing field from json string and saving back to same field](https://discuss.elastic.co/t/question-on-logstash-removing-field-from-json-string-and-saving-back-to-same-field/267677)
**Author:** [@rgreen](https://discuss.elastic.co/u/rgreen)\ **Replies:** 2\ **Last updated:** [March 18, 2021, 6:57pm UTC](https://discuss.elastic.co/t/question-on-logstash-removing-field-from-json-string-and-saving-back-to-same-field/267677 "2021-03-18T18:57:39Z")
Is it possible to read a json string, remove specified fields then have that json string saved back into a single field with-ought parsing the json data into separate fields. So i would be reading a field from a databas… --- ## [How to display json keys in Search UI query response](https://discuss.elastic.co/t/how-to-display-json-keys-in-search-ui-query-response/205772)
**Author:** [@cerro](https://discuss.elastic.co/u/cerro)\ **Replies:** 2\ **Last updated:** [November 1, 2019, 11:14am UTC](https://discuss.elastic.co/t/how-to-display-json-keys-in-search-ui-query-response/205772 "2019-11-01T11:14:07Z")
I have json docs that contain one field "content" (and ID) with many nested json key:value objects. In addition, there can be many of the same keys int the document. An example would look something like this: { "conte… --- ## [Error while load logstash config](https://discuss.elastic.co/t/error-while-load-logstash-config/203967)
**Author:** [@dean92](https://discuss.elastic.co/u/dean92)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 2:36am UTC](https://discuss.elastic.co/t/error-while-load-logstash-config/203967 "2019-10-21T02:36:10Z")
hi expert, I'm still newbie in ES. I have problem with my logstash where there are some failed that no index in my ES after load the config. Below is my log file and show the failed to execute action. Please advice furt… --- ## [Parse mix of String, JSON and KeyValue](https://discuss.elastic.co/t/parse-mix-of-string-json-and-keyvalue/164791)
**Author:** [@Mohammed\_Farhan\_Ejaz](https://discuss.elastic.co/u/Mohammed_Farhan_Ejaz)\ **Replies:** 2\ **Last updated:** [February 4, 2019, 5:49am UTC](https://discuss.elastic.co/t/parse-mix-of-string-json-and-keyvalue/164791 "2019-02-04T05:49:59Z")
2019-01-18T11:33:40,011 WXXX11100111L 43992 CM http-nio-8080-exec-8 MY-TEST POST configurations {a=b} {c=d, x=y} { "x": "abc", "country":"india", "lang":"EN", "project":"my-project"} 200 4266 I have the above log entry … --- ## [Running a local kibana in a container](https://discuss.elastic.co/t/running-a-local-kibana-in-a-container/122387)
**Author:** [@stam585](https://discuss.elastic.co/u/stam585)\ **Replies:** 2\ **Last updated:** [March 4, 2018, 2:22pm UTC](https://discuss.elastic.co/t/running-a-local-kibana-in-a-container/122387 "2018-03-04T14:22:31Z")
I am trying to run use kibana console with my local elasticsearch (container) In the ElasticSearch documentation I see docker run -p 9200:9200 -p 9300:9300 -e "discovery.type=single-node" docker.elastic.co/elasticsearc… --- ## [Fresh install - high CPU load](https://discuss.elastic.co/t/fresh-install-high-cpu-load/114552)
**Author:** [@dmnc](https://discuss.elastic.co/u/dmnc)\ **Replies:** 2\ **Last updated:** [January 11, 2018, 5:01pm UTC](https://discuss.elastic.co/t/fresh-install-high-cpu-load/114552 "2018-01-11T17:01:45Z")
Hi, I'm completely new in Elastic Search. I've installed E+L+K (logstash 6.0.1) on the officially supported Debian 9.3 following the official documentation. After installation I let it be and did nothing with it, today I… --- ## [Help newcomer: Payloads received but no output](https://discuss.elastic.co/t/help-newcomer-payloads-received-but-no-output/108178)
**Author:** [@tehowe](https://discuss.elastic.co/u/tehowe)\ **Replies:** 2\ **Last updated:** [November 18, 2017, 6:47am UTC](https://discuss.elastic.co/t/help-newcomer-payloads-received-but-no-output/108178 "2017-11-18T06:47:06Z")
Hello! I'm trying to get a single filebeat to logstash test connection up and running in my environment and have been for some time. I'd been struggling with what I thought was an encryption problem for a while on 5.6 u… --- ## [Date histogram in Kibana is very slow](https://discuss.elastic.co/t/date-histogram-in-kibana-is-very-slow/77981)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 2\ **Last updated:** [March 9, 2017, 1:23pm UTC](https://discuss.elastic.co/t/date-histogram-in-kibana-is-very-slow/77981 "2017-03-09T13:23:46Z")
Hello, (re-posting to ES forum per suggestion at https://discuss.elastic.co/t/discovery-very-slow-data-visualisation/77956) I am storing my application's log files in ES (5.2.0). About 15k-30k rps depending on the ti… --- ## [Remote Reindexing](https://discuss.elastic.co/t/remote-reindexing/61926)
**Author:** [@sarala.muralikrishna](https://discuss.elastic.co/u/sarala.muralikrishna)\ **Replies:** 2\ **Last updated:** [October 1, 2016, 11:48am UTC](https://discuss.elastic.co/t/remote-reindexing/61926 "2016-10-01T11:48:46Z")
When I try remote reindexing i get below error, Using ES 2.4.1 and also whitelisted. { "error": { "root\_cause": \[ { "type": "index\_not\_found\_exception", "reason": "no such inde… --- ## [Dynamic Template not applying](https://discuss.elastic.co/t/dynamic-template-not-applying/51905)
**Author:** [@James\_Tighe](https://discuss.elastic.co/u/James_Tighe)\ **Replies:** 2\ **Last updated:** [June 6, 2016, 7:41am UTC](https://discuss.elastic.co/t/dynamic-template-not-applying/51905 "2016-06-06T07:41:11Z")
Hi Guys, I have an issue with my index template not working as I would expect. I have an index being created from my Filebeats input. This index is called "testlogs" and a type of "testlog". As I have set a specifi… --- ## [Filter(dropdown) at individual visualization using Vega-lite](https://discuss.elastic.co/t/filter-dropdown-at-individual-visualization-using-vega-lite/278376)
**Author:** [@soviek](https://discuss.elastic.co/u/soviek)\ **Replies:** 3\ **Last updated:** [July 13, 2021, 2:23pm UTC](https://discuss.elastic.co/t/filter-dropdown-at-individual-visualization-using-vega-lite/278376 "2021-07-13T14:23:04Z")
How to create filter or dropdown at individual visualization level using Vega-lite. Our current Elasticsearch and Kibana version is 7.9.3. We are aware of Kibana's Control-Visualization at Dashboard level. But wanted t… --- ## [Using filebeat modules with custom fields](https://discuss.elastic.co/t/using-filebeat-modules-with-custom-fields/228909)
**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 11:11pm UTC](https://discuss.elastic.co/t/using-filebeat-modules-with-custom-fields/228909 "2020-04-20T23:11:30Z")
Hi guys , I'm wondering , can I enable module and use fields in filebeat.yml file? I just configured filebeat input filebeat.inputs: - type: log paths: - /var/log/messages document\_type: syslog fields: … --- ## [How to Import the Github Repository , Issues into the Elastic search. I want to connect to github from Elastic search using JDBC or any other option](https://discuss.elastic.co/t/how-to-import-the-github-repository-issues-into-the-elastic-search-i-want-to-connect-to-github-from-elastic-search-using-jdbc-or-any-other-option/204424)
**Author:** [@manu4387](https://discuss.elastic.co/u/manu4387)\ **Replies:** 3\ **Last updated:** [October 22, 2019, 1:19pm UTC](https://discuss.elastic.co/t/how-to-import-the-github-repository-issues-into-the-elastic-search-i-want-to-connect-to-github-from-elastic-search-using-jdbc-or-any-other-option/204424 "2019-10-22T13:19:17Z")
How to Import the Github Repository , Issues into the Elastic search. I want to connect to github from Elastic search using JDBC or any other option. --- ## [Cloudtrailbeat](https://discuss.elastic.co/t/cloudtrailbeat/104252)
**Author:** [@ArjunSISA](https://discuss.elastic.co/u/ArjunSISA)\ **Replies:** 3\ **Last updated:** [October 18, 2017, 9:20am UTC](https://discuss.elastic.co/t/cloudtrailbeat/104252 "2017-10-18T09:20:56Z")
Hi everyone, Can anyone help me with Cloudtrail beat installation? Anyone got any experience with cloudtrail beat for AWS? Any help at all would much appreciated. Thanks --- ## [Document all possible event\_data.\* fields?](https://discuss.elastic.co/t/document-all-possible-event-data-fields/63301)
**Author:** [@rivaanbechan](https://discuss.elastic.co/u/rivaanbechan)\ **Replies:** 3\ **Last updated:** [October 18, 2016, 3:04pm UTC](https://discuss.elastic.co/t/document-all-possible-event-data-fields/63301 "2016-10-18T15:04:26Z")
Hi, Is there any list out there with all the current fields that is possible to receive within "event\_data". I would like to further filter the subfields. Although I need the list to get a baseline. Please assist m… --- ## [Out of memory error while installing logstash-filter-elasticsearch plugin](https://discuss.elastic.co/t/out-of-memory-error-while-installing-logstash-filter-elasticsearch-plugin/130746)
**Author:** [@nadeemaon](https://discuss.elastic.co/u/nadeemaon)\ **Replies:** 1\ **Last updated:** [May 7, 2018, 6:47am UTC](https://discuss.elastic.co/t/out-of-memory-error-while-installing-logstash-filter-elasticsearch-plugin/130746 "2018-05-07T06:47:01Z")
I am installing logstash-filter-elasticsearch plugin using the command bin/logstash-plugin install logstash-filter-elasticsearch And during the installation getting below error logstash-5.6.2\\bin\\logstash-plugin insta… --- ## [Ingesting leef formatted log into logstash from other sources](https://discuss.elastic.co/t/ingesting-leef-formatted-log-into-logstash-from-other-sources/115937)
**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\ **Replies:** 1\ **Last updated:** [January 17, 2018, 8:04pm UTC](https://discuss.elastic.co/t/ingesting-leef-formatted-log-into-logstash-from-other-sources/115937 "2018-01-17T20:04:17Z")
Hi All, I'd like to ship specific event logs from my Siem to ElasticSearch for further processing. However the output from the Siem is in the leef format and can not be changed. Has anyone on the lists done this? If … --- ## [How can I parse this date format into @timestamp?](https://discuss.elastic.co/t/how-can-i-parse-this-date-format-into-timestamp/316261)
**Author:** [@Roger\_Huang](https://discuss.elastic.co/u/Roger_Huang)\ **Replies:** 5\ **Last updated:** [October 20, 2022, 7:51pm UTC](https://discuss.elastic.co/t/how-can-i-parse-this-date-format-into-timestamp/316261 "2022-10-20T19:51:04Z")
Hi everyone, I am new to ELK and I cannot seems to get this right. Keep getting date parse error. I also wanted to put the \_time to @timestamp. For your kind advise please. 2022-06-30T13:14:40.558 Edgar.conf inpu… --- ## [Filebeat System module not sending process name when using Logstash as a output](https://discuss.elastic.co/t/filebeat-system-module-not-sending-process-name-when-using-logstash-as-a-output/262844)
**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\ **Replies:** 5\ **Last updated:** [February 2, 2021, 8:13am UTC](https://discuss.elastic.co/t/filebeat-system-module-not-sending-process-name-when-using-logstash-as-a-output/262844 "2021-02-02T08:13:40Z")
I am using filebeat system module to send syslog data to Elasticsearch and it is working fine, even the default dashboard is also working fine. However, while I use Logstash as the output, it is not sending few fields su… --- ## [SIEM error unexpected token \ **Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 5\ **Last updated:** [October 20, 2020, 10:44pm UTC](https://discuss.elastic.co/t/siem-error-unexpected-token-in-json-at-position-0/252327 "2020-10-20T22:44:59Z") Hi all I currently have a very anoying problems Everytime i went to SIEM app, they load for sometime and then the system popup a error unexpected token \