# Top **URL:** https://discuss.elastic.co/top.md?page=1309&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1310 --- ## [Logstash filter not working, when all the filters are applied at once, but working when applied only one filter](https://discuss.elastic.co/t/logstash-filter-not-working-when-all-the-filters-are-applied-at-once-but-working-when-applied-only-one-filter/310186)
**Author:** [@djrshn2346](https://discuss.elastic.co/u/djrshn2346)\ **Replies:** 7\ **Last updated:** [July 22, 2022, 5:15am UTC](https://discuss.elastic.co/t/logstash-filter-not-working-when-all-the-filters-are-applied-at-once-but-working-when-applied-only-one-filter/310186 "2022-07-22T05:15:23Z")
I have added 3 filters in Logstash but at a time only 2 are working, but all the three are not working at the same time. One of the filter is throwing error. When I applied single filter that is working fine, when 2 that… --- ## [How to add http response header in Elasticsearch](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981)
**Author:** [@yupengj](https://discuss.elastic.co/u/yupengj)\ **Replies:** 1\ **Last updated:** [July 19, 2021, 9:12am UTC](https://discuss.elastic.co/t/how-to-add-http-response-header-in-elasticsearch/278981 "2021-07-19T09:12:23Z")
I encountered three security-related issues when using elasticserrch version 7.6.1. Thank you for your help. How does elasticserrch configure http response headers, such as X-Content-Type-Options, X-XSS-Protection, Con… --- ## [Constant Unassigned Shards](https://discuss.elastic.co/t/constant-unassigned-shards/275486)
**Author:** [@Oleksandr.Tedikov](https://discuss.elastic.co/u/Oleksandr.Tedikov)\ **Replies:** 7\ **Last updated:** [June 10, 2021, 4:21am UTC](https://discuss.elastic.co/t/constant-unassigned-shards/275486 "2021-06-10T04:21:05Z")
Hello, I have Elastic Cluster with the following Configuration: 3 Master Nodes (JVM Heap Ram 4 GB, 1 CPU, 1 GB Disk) 10 Data/Ingest Nodes (JVM Heap Ram 8 GB, 2 CPU, 500 GB Disk) ~200 Indexes Each Index has 2 Replica… --- ## [What unit is Storage Size under Index Management?](https://discuss.elastic.co/t/what-unit-is-storage-size-under-index-management/182224)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [June 13, 2019, 7:09pm UTC](https://discuss.elastic.co/t/what-unit-is-storage-size-under-index-management/182224 "2019-06-13T19:09:11Z")
Hi all, I was wondering if someone could help me out. I am wondering what unit Storage Size is under Index management in Kibana. I am confused if it is bits or bytes. Instinct tells me that it is bytes as that is what d… --- ## [Install 2 differents versions on the same server](https://discuss.elastic.co/t/install-2-differents-versions-on-the-same-server/145138)
**Author:** [@khl3o](https://discuss.elastic.co/u/khl3o)\ **Replies:** 1\ **Last updated:** [August 20, 2018, 10:43am UTC](https://discuss.elastic.co/t/install-2-differents-versions-on-the-same-server/145138 "2018-08-20T10:43:57Z")
Hi, I have an installed version 2.4.2 on my server and I want to install elastic 6 on this server but keep the 2.4.2 running. Can I install a new version on a different port (9201) ? I'm using Debian 8 Thx --- ## [How to use log4jplus with logstash?](https://discuss.elastic.co/t/how-to-use-log4jplus-with-logstash/118869)
**Author:** [@durgeshtanuku](https://discuss.elastic.co/u/durgeshtanuku)\ **Replies:** 1\ **Last updated:** [February 8, 2018, 8:24pm UTC](https://discuss.elastic.co/t/how-to-use-log4jplus-with-logstash/118869 "2018-02-08T20:24:14Z")
I'm new to logstash. I'm trying to send logs of my C++ application to logstash using log4cplus library. I need to send some json data from my application to logstash. To start with I have written some piece of code tha… --- ## [Elastics mapping](https://discuss.elastic.co/t/elastics-mapping/106379)
**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\ **Replies:** 7\ **Last updated:** [November 5, 2017, 2:02am UTC](https://discuss.elastic.co/t/elastics-mapping/106379 "2017-11-05T02:02:12Z")
I want to create mapping but can anyone clear me what is "search\_result\_data" and "search\_data". So it will be best way to define mapping or not. Thank you. --- ## [No log file created while debugging logs with filebeat 5](https://discuss.elastic.co/t/no-log-file-created-while-debugging-logs-with-filebeat-5/77036)
**Author:** [@Saurabh\_Gupta1](https://discuss.elastic.co/u/Saurabh_Gupta1)\ **Replies:** 1\ **Last updated:** [March 1, 2017, 10:19pm UTC](https://discuss.elastic.co/t/no-log-file-created-while-debugging-logs-with-filebeat-5/77036 "2017-03-01T22:19:38Z")
Hi Filebeat team , For filebeat 5 debugging logs file is not creating in define path. I m using OS linux. logging.level: info logging.to\_files: true logging.to\_syslog: false logging.files: path: /var/log name: m… --- ## [How to remove a data node from the cluster?](https://discuss.elastic.co/t/how-to-remove-a-data-node-from-the-cluster/57016)
**Author:** [@whzcl](https://discuss.elastic.co/u/whzcl)\ **Replies:** 1\ **Last updated:** [August 2, 2016, 10:02pm UTC](https://discuss.elastic.co/t/how-to-remove-a-data-node-from-the-cluster/57016 "2016-08-02T22:02:23Z")
Hi, We have 30 data nodes and 3 master nodes in our cluster. If one data node is in trouble, for example, the hardware is broken, the overall search performance will be affected. My current solution is that: I manual… --- ## [Eclude times outside of business hours?](https://discuss.elastic.co/t/eclude-times-outside-of-business-hours/54306)
**Author:** [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\ **Replies:** 1\ **Last updated:** [June 29, 2016, 10:54pm UTC](https://discuss.elastic.co/t/eclude-times-outside-of-business-hours/54306 "2016-06-29T22:54:43Z")
Is it possible to exclude certain hours or only include certain hours over multiple days? Say we wanted to only search for events that happened between 9-5 every day but exclude those that happened at 5:30 for this par… --- ## [How to create a numeric not equals filter/query?](https://discuss.elastic.co/t/how-to-create-a-numeric-not-equals-filter-query/9429)
**Author:** [@T\_Vinod\_Gupta](https://discuss.elastic.co/u/T_Vinod_Gupta)\ **Replies:** 1\ **Last updated:** [October 20, 2012, 5:04pm UTC](https://discuss.elastic.co/t/how-to-create-a-numeric-not-equals-filter-query/9429 "2012-10-20T17:04:04Z")
in the documentation, i see numeric range filters.. but i want to check for a double field not equal to given value. currently im using not filter with term filter.. it works but is that the most efficient way? than… --- ## [Creating a single huge index or multiple indexes rolled out with a date](https://discuss.elastic.co/t/creating-a-single-huge-index-or-multiple-indexes-rolled-out-with-a-date/71210)
**Author:** [@sari.reach](https://discuss.elastic.co/u/sari.reach)\ **Replies:** 5\ **Last updated:** [January 12, 2017, 5:29am UTC](https://discuss.elastic.co/t/creating-a-single-huge-index-or-multiple-indexes-rolled-out-with-a-date/71210 "2017-01-12T05:29:48Z")
I am using Elastic Search Java APIs to create the index, write to index and search for data from these indexes. To attain high availability and archiving. My index may acquire a size of 10mb on daily basis. Is it advisab… --- ## [Visualizing Winlogdata on the Kibana](https://discuss.elastic.co/t/visualizing-winlogdata-on-the-kibana/69977)
**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\ **Replies:** 5\ **Last updated:** [December 26, 2016, 5:10pm UTC](https://discuss.elastic.co/t/visualizing-winlogdata-on-the-kibana/69977 "2016-12-26T17:10:28Z")
Hi- Am able to run the Winlogbeat script successfully and able to publish it to the Elastcsearch (localhost:9020). But, I couldn't see any of that data on the Kibana dashboard. Am able to add the Index, but shows no re… --- ## [Single node elasticsearch installation with podman and IPv6](https://discuss.elastic.co/t/single-node-elasticsearch-installation-with-podman-and-ipv6/351086)
**Author:** [@hitchalon](https://discuss.elastic.co/u/hitchalon)\ **Replies:** 2\ **Last updated:** [January 16, 2024, 8:40am UTC](https://discuss.elastic.co/t/single-node-elasticsearch-installation-with-podman-and-ipv6/351086 "2024-01-16T08:40:02Z")
Hi all, I am trying to install Elasticsearch by using podman on a IPv6 only host (RHEL 9.3, podman 4.6.3). Here is my run commands for elasticsearch and kibana podman run --name es01 --net elastic-v6 -p \[1000:1400:240… --- ## [Daily index and monthly index query performance difference](https://discuss.elastic.co/t/daily-index-and-monthly-index-query-performance-difference/256522)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 2\ **Last updated:** [November 24, 2020, 2:54pm UTC](https://discuss.elastic.co/t/daily-index-and-monthly-index-query-performance-difference/256522 "2020-11-24T14:54:36Z")
Hi, I'm wondering the performance difference between daily monthly indices. Lets say i have an index named test and logstash output is configured like this: output { elasticsearch { hosts =\> \["esnode1:9200… --- ## [Filebeat - Date processor - Log file content without date](https://discuss.elastic.co/t/filebeat-date-processor-log-file-content-without-date/229489)
**Author:** [@pjo](https://discuss.elastic.co/u/pjo)\ **Replies:** 2\ **Last updated:** [April 24, 2020, 7:49am UTC](https://discuss.elastic.co/t/filebeat-date-processor-log-file-content-without-date/229489 "2020-04-24T07:49:32Z")
Hello there, I'm new on this product. here is my question I use filebeat to crawl log file and send content to logstash frontend. Usually my logs files contains on each row a full date format. File is able to read to… --- ## [Entire File as "one line"](https://discuss.elastic.co/t/entire-file-as-one-line/197192)
**Author:** [@paiz1556](https://discuss.elastic.co/u/paiz1556)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 7:47pm UTC](https://discuss.elastic.co/t/entire-file-as-one-line/197192 "2019-08-28T19:47:58Z")
Is there a good strategy to read an entire file as the "message" value you would send to ElasticSearch? I see "read" mode as part of file input plugin but that wants me to write the input to a different file. I want… --- ## [How to collecting all elasticsearch clusters monitoring data to one elasticsearch using logstash or metricBeat](https://discuss.elastic.co/t/how-to-collecting-all-elasticsearch-clusters-monitoring-data-to-one-elasticsearch-using-logstash-or-metricbeat/174025)
**Author:** [@Kevins\_Si](https://discuss.elastic.co/u/Kevins_Si)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 2:25pm UTC](https://discuss.elastic.co/t/how-to-collecting-all-elasticsearch-clusters-monitoring-data-to-one-elasticsearch-using-logstash-or-metricbeat/174025 "2019-03-28T14:25:37Z")
is there any info that collecting all elasticsearch clusters monitoring data to one elasticsearch using logstash or metricBeat?? we want to collecting many clusters monitoring log data to one. and keep as normal view as… --- ## [Alerting - publish to aws SNS](https://discuss.elastic.co/t/alerting-publish-to-aws-sns/86499)
**Author:** [@Gude.ravi](https://discuss.elastic.co/u/Gude.ravi)\ **Replies:** 2\ **Last updated:** [May 22, 2017, 3:20pm UTC](https://discuss.elastic.co/t/alerting-publish-to-aws-sns/86499 "2017-05-22T15:20:59Z")
For X-pack Alerting I dont see "publish to SNS" as one of the out of box actions. Is there plan to add AWS SNS as one of the "Actions" ? Right now work around is to use logstash sns output plugin. It works but there is a… --- ## [Pulling topic metadata from kafka 0.9](https://discuss.elastic.co/t/pulling-topic-metadata-from-kafka-0-9/55440)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 2\ **Last updated:** [July 16, 2016, 7:53am UTC](https://discuss.elastic.co/t/pulling-topic-metadata-from-kafka-0-9/55440 "2016-07-16T07:53:49Z")
I am using logstash-input-kafka 3.0.x and logstash-output-kafka 3.0.x with logstash 2.2.2 How can I pull topic metadata from it. I could with zk\_connect with plugin 2.x, but not with the plugin upgrade. --- ## [How to change similarity settings runtime?](https://discuss.elastic.co/t/how-to-change-similarity-settings-runtime/18639)
**Author:** [@spancer\_ray](https://discuss.elastic.co/u/spancer_ray)\ **Replies:** 2\ **Last updated:** [July 14, 2014, 6:17pm UTC](https://discuss.elastic.co/t/how-to-change-similarity-settings-runtime/18639 "2014-07-14T18:17:41Z")
Hi Guys, I set my similarity type to 'BM25' in elasticsearch.yml , using index.similarity.default.type: BM25. But in my search case(searching across some indices), I have to use the default similarity type. Can … --- ## [Term lookup filter](https://discuss.elastic.co/t/term-lookup-filter/16321)
**Author:** [@slushi](https://discuss.elastic.co/u/slushi)\ **Replies:** 2\ **Last updated:** [March 12, 2014, 9:20pm UTC](https://discuss.elastic.co/t/term-lookup-filter/16321 "2014-03-12T21:20:58Z")
I have a couple questions about the term look filter: 1. Using the twitter examplefrom the documentation, let's say a user is a "star" on twitter. He could have 1 million followers and add thousands daily. Wou… --- ## [SQL interface to Elasticsearch & Aggregation functions](https://discuss.elastic.co/t/sql-interface-to-elasticsearch-aggregation-functions/13563)
**Author:** [@pranav\_amin](https://discuss.elastic.co/u/pranav_amin)\ **Replies:** 2\ **Last updated:** [September 12, 2013, 7:42am UTC](https://discuss.elastic.co/t/sql-interface-to-elasticsearch-aggregation-functions/13563 "2013-09-12T07:42:16Z")
Hey guys, Is there any SQL interface to Elasticsearch? Or if there is any code written in Perl or python where i can just input my query and it can provide me the results would be great too. The output can be in … --- ## [Certificate renewal and Fleet](https://discuss.elastic.co/t/certificate-renewal-and-fleet/348828)
**Author:** [@slash24](https://discuss.elastic.co/u/slash24)\ **Replies:** 4\ **Last updated:** [December 8, 2023, 1:06pm UTC](https://discuss.elastic.co/t/certificate-renewal-and-fleet/348828 "2023-12-08T13:06:55Z")
My designated fleet-server (windows) has a internal Enterprise-certificate that is gonna expire soon. I know how to request the new CSR and issue the CER/PEM from my elastic -nodes, but I can't figure out where the Flee… --- ## [Cannot setup cluster of ES with Docker of 2 EC2 machines on 3 nodes](https://discuss.elastic.co/t/cannot-setup-cluster-of-es-with-docker-of-2-ec2-machines-on-3-nodes/286890)
**Author:** [@vitaly1233](https://discuss.elastic.co/u/vitaly1233)\ **Replies:** 4\ **Last updated:** [October 16, 2021, 6:29pm UTC](https://discuss.elastic.co/t/cannot-setup-cluster-of-es-with-docker-of-2-ec2-machines-on-3-nodes/286890 "2021-10-16T18:29:53Z")
Im trying to setup 3 nodes on 2 machines as the following configuration. following the doc - Install Elasticsearch with Docker | Elasticsearch Guide \[7.15\] | Elastic (run this script on each machine) services: es01:… --- ## [No More Logs After Enabling SSL and X-Pack](https://discuss.elastic.co/t/no-more-logs-after-enabling-ssl-and-x-pack/149161)
**Author:** [@tvoll](https://discuss.elastic.co/u/tvoll)\ **Replies:** 4\ **Last updated:** [September 20, 2018, 4:40pm UTC](https://discuss.elastic.co/t/no-more-logs-after-enabling-ssl-and-x-pack/149161 "2018-09-20T16:40:51Z")
Running the Elastic Stack on v6.3.2, recently got X-Pack, but am now having issues with authenticating logstash/filebeat with SSL. I've created a username and password for each of the services, but nothing is appearing i… --- ## [Not able to send multiple date fields in logstash](https://discuss.elastic.co/t/not-able-to-send-multiple-date-fields-in-logstash/83359)
**Author:** [@SanC](https://discuss.elastic.co/u/SanC)\ **Replies:** 4\ **Last updated:** [April 24, 2017, 11:11am UTC](https://discuss.elastic.co/t/not-able-to-send-multiple-date-fields-in-logstash/83359 "2017-04-24T11:11:45Z")
My Log file- MachineName|FeedName|Version|InputFileName|LoadType|StartTime|NumOfRecordsinCEMP|NumOfRecordsinStage|Status|Message|EndTime|EventSeverity|Action|time\_taken\_ms EDTD-LYNXSQL01|Falcon|2017-04-13\_180858\_7480000|… --- ## [Opinions on using different client nodes for indexing and searching](https://discuss.elastic.co/t/opinions-on-using-different-client-nodes-for-indexing-and-searching/45913)
**Author:** [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\ **Replies:** 4\ **Last updated:** [April 28, 2016, 5:41am UTC](https://discuss.elastic.co/t/opinions-on-using-different-client-nodes-for-indexing-and-searching/45913 "2016-04-28T05:41:43Z")
Hi, our client nodes are experiencing heavy GC loads recently. We are still trying to pinpoint the problem. In the meantime I was thinking about using a different set of client nodes for indexing and searching. My… --- ## [Client refresh in unit tests not always fast enough](https://discuss.elastic.co/t/client-refresh-in-unit-tests-not-always-fast-enough/3438)
**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\ **Replies:** 4\ **Last updated:** [February 11, 2014, 8:26pm UTC](https://discuss.elastic.co/t/client-refresh-in-unit-tests-not-always-fast-enough/3438 "2014-02-11T20:26:44Z")
I am running unit tests with a local cluster. They are generally very reliable, but every once in a while one of them fails because a test (A) indexes something, (B) then calls refresh for the client, (C) and then tries… --- ## [Average count over time to render gauge visualization (RPS meter)](https://discuss.elastic.co/t/average-count-over-time-to-render-gauge-visualization-rps-meter/296981)
**Author:** [@slavafomin](https://discuss.elastic.co/u/slavafomin)\ **Replies:** 3\ **Last updated:** [February 12, 2022, 7:33pm UTC](https://discuss.elastic.co/t/average-count-over-time-to-render-gauge-visualization-rps-meter/296981 "2022-02-12T19:33:02Z")
Hello! Consider I'm sending events to Elasticsearch for each request to my application. Now, I want to display an RPS gauge to show how many requests my application is getting per second. However, showing immediate numb… --- ## [Fresh install of 7.4 Kibana - Kibana does not start listening on expected interface](https://discuss.elastic.co/t/fresh-install-of-7-4-kibana-kibana-does-not-start-listening-on-expected-interface/206055)
**Author:** [@David.CIS](https://discuss.elastic.co/u/David.CIS)\ **Replies:** 3\ **Last updated:** [November 1, 2019, 6:40pm UTC](https://discuss.elastic.co/t/fresh-install-of-7-4-kibana-kibana-does-not-start-listening-on-expected-interface/206055 "2019-11-01T18:40:57Z")
Hello, I installed Elasticsearch and Kibana 7.4 on a VM running Ubuntu 18.04. Following the instructions in the guide for that version. After finishing I set this single option in kibana.yml server.host:0.0.0.0 From… --- ## [Auditbeat on windows for FIM](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 3\ **Last updated:** [October 29, 2018, 1:21pm UTC](https://discuss.elastic.co/t/auditbeat-on-windows-for-fim/154255 "2018-10-29T13:21:15Z")
Hi There, Is it possible use auditbeat to monitor ( FIM ) for windows for network file shares or windows file shares for GDPR , if we have some confidential data, is it possible to mention the path of the shared folders… --- ## [Email on alert](https://discuss.elastic.co/t/email-on-alert/92353)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 3\ **Last updated:** [July 11, 2017, 5:59pm UTC](https://discuss.elastic.co/t/email-on-alert/92353 "2017-07-11T17:59:36Z")
I am using logstash 5.3.I am taking records from oracle database as a cron job. I need to send a email to sort problem which arises when logstash is loading data or elasticsearch server is down Can someone help me with… --- ## [Как остановить логи? How to stop slowlog](https://discuss.elastic.co/t/how-to-stop-slowlog/84601)
**Author:** [@klara\_gogi](https://discuss.elastic.co/u/klara_gogi)\ **Replies:** 3\ **Last updated:** [May 5, 2017, 11:52am UTC](https://discuss.elastic.co/t/how-to-stop-slowlog/84601 "2017-05-05T11:52:49Z")
Не могу найти в документации возможность остановить slowlog и deprecated, которые стали дико расти, но не по важному делу. Сейчас это стало критически важно для системы --- ## [Elastic Search -\> Ingest Node -\> processor -\> grok](https://discuss.elastic.co/t/elastic-search-ingest-node-processor-grok/64316)
**Author:** [@lupolo](https://discuss.elastic.co/u/lupolo)\ **Replies:** 3\ **Last updated:** [December 10, 2016, 3:18am UTC](https://discuss.elastic.co/t/elastic-search-ingest-node-processor-grok/64316 "2016-12-10T03:18:24Z")
Hi, I set up the following pipeline in ES 5.0. PUT \_ingest/pipeline/ngb { "description" : "NGB PIPELINE", "processors" : \[ {"set" : {"field": "\_index","value": "ngb"}}, {"grok": {"field": "message", … --- ## [Multiple beats input ports](https://discuss.elastic.co/t/multiple-beats-input-ports/48589)
**Author:** [@tbernhardson](https://discuss.elastic.co/u/tbernhardson)\ **Replies:** 3\ **Last updated:** [April 27, 2016, 9:31pm UTC](https://discuss.elastic.co/t/multiple-beats-input-ports/48589 "2016-04-27T21:31:00Z")
due to needing to support some old systems that do not support TLS 1.1 or 1.2, I would like to have 2 separate Ports defined for beats (1 for SSL/TLS, 1 with no encryption). I have tried a couple of things (2 inputs de… --- ## [File input in Windows](https://discuss.elastic.co/t/file-input-in-windows/31969)
**Author:** [@Amir\_Gabay](https://discuss.elastic.co/u/Amir_Gabay)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 4:32am UTC](https://discuss.elastic.co/t/file-input-in-windows/31969 "2016-04-01T04:32:15Z")
Hi, I'm using logstash file input in windows which locks the folder the file resides in. I've configured 'stat\_interval =\> 60' so it wouldn't sample the file every second but the folder is still being locked. Is there an… --- ## [Convert simple JSON Query to Nest C#](https://discuss.elastic.co/t/convert-simple-json-query-to-nest-c/42650)
**Author:** [@devhero](https://discuss.elastic.co/u/devhero)\ **Replies:** 0\ **Last updated:** [February 24, 2016, 10:56pm UTC](https://discuss.elastic.co/t/convert-simple-json-query-to-nest-c/42650 "2016-02-24T22:56:16Z")
Hello Everyone, Can someone please help me here. I spent many hours trying to convert this simple JSON query to C# NEST (v2.0.2) syntax with no luck . { "fields": \[\], "query": { "match": { "file.content… --- ## [Highlight property not appearing in hits](https://discuss.elastic.co/t/highlight-property-not-appearing-in-hits/42345)
**Author:** [@radar](https://discuss.elastic.co/u/radar)\ **Replies:** 3\ **Last updated:** [February 23, 2016, 2:54am UTC](https://discuss.elastic.co/t/highlight-property-not-appearing-in-hits/42345 "2016-02-23T02:54:05Z")
I'm trying to get highlights returned in results when I do a query with some highlights. I'm using Elasticsearch 2.2. Here's the query + results that I've tried so far: curl -X GET http://localhost:9200/teg\_test\_news… --- ## [Logstash.log gets flooded?](https://discuss.elastic.co/t/logstash-log-gets-flooded/28771)
**Author:** [@mathiasa](https://discuss.elastic.co/u/mathiasa)\ **Replies:** 3\ **Last updated:** [September 8, 2015, 1:11pm UTC](https://discuss.elastic.co/t/logstash-log-gets-flooded/28771 "2015-09-08T13:11:45Z")
Hi All, Can't understand why logstash suddenly writes all input to logstash.log? Is that some new feature in logstash 1.5? My output config look like this: output { elasticsearch { host =\> "X.X.X.X" … --- ## [Status changed from yellow to red - Elasticsearch plugin is red](https://discuss.elastic.co/t/status-changed-from-yellow-to-red-elasticsearch-plugin-is-red/147320)
**Author:** [@maithreyi](https://discuss.elastic.co/u/maithreyi)\ **Replies:** 1\ **Last updated:** [September 5, 2018, 12:49pm UTC](https://discuss.elastic.co/t/status-changed-from-yellow-to-red-elasticsearch-plugin-is-red/147320 "2018-09-05T12:49:21Z")
Hi, I tried to upgrade elasticsearch from 2.2 to 5.6. The indices are showing yellow state. the index .kibana is also showing yellow state. IWhile i was using 2.4 elasticsearch, I was using 4.4 Kibana version. After up… --- ## [SQLSyntaxErrorException](https://discuss.elastic.co/t/sqlsyntaxerrorexception/102967)
**Author:** [@Harald\_Hodl](https://discuss.elastic.co/u/Harald_Hodl)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 9:11am UTC](https://discuss.elastic.co/t/sqlsyntaxerrorexception/102967 "2017-10-06T09:11:46Z")
Hi, im facing an issue while running logstash in combination with mariadb. I have already figured out that the statement without quotation marks is working. logstash 5.6.2 Now my Question how can i remove the "", m… --- ## [Running-multiple-instance-of-elk-on-same-machine](https://discuss.elastic.co/t/running-multiple-instance-of-elk-on-same-machine/89165)
**Author:** [@vishalkin](https://discuss.elastic.co/u/vishalkin)\ **Replies:** 1\ **Last updated:** [June 13, 2017, 9:59am UTC](https://discuss.elastic.co/t/running-multiple-instance-of-elk-on-same-machine/89165 "2017-06-13T09:59:56Z")
I have an ELK Stack 5.1.1 running on one machine and at the same time I am installing another instance of ELK (5.2.2) on the same machine running 5.1.1. I have made following changes to elasticsearch.yml http.port: 9… --- ## [Efficient and scalable way of constructing a word cloud](https://discuss.elastic.co/t/efficient-and-scalable-way-of-constructing-a-word-cloud/9376)
**Author:** [@l00l](https://discuss.elastic.co/u/l00l)\ **Replies:** 1\ **Last updated:** [April 26, 2017, 8:30pm UTC](https://discuss.elastic.co/t/efficient-and-scalable-way-of-constructing-a-word-cloud/9376 "2017-04-26T20:30:39Z")
Hi I am trying to build a word cloud(1,2,3 - gram words) cloud using Shingle token filter. I have around 1 million records and the word cloud is generated by doing a facets operation on 7 fields(all of them co… --- ## [Is there any option to turn on groovy script in kibana?](https://discuss.elastic.co/t/is-there-any-option-to-turn-on-groovy-script-in-kibana/58304)
**Author:** [@daye\_Jeong](https://discuss.elastic.co/u/daye_Jeong)\ **Replies:** 1\ **Last updated:** [August 18, 2016, 5:59am UTC](https://discuss.elastic.co/t/is-there-any-option-to-turn-on-groovy-script-in-kibana/58304 "2016-08-18T05:59:45Z")
First, sorry for my poor english. I want to use groovy script in kibana.(scripted field in index, or JSON input in visualization) My kibana version is 4.5.3 And my es setting like this: script.engine.groovy.indexed… --- ## [Custom Shield realm (CAS) with Kibana - redirect to login page](https://discuss.elastic.co/t/custom-shield-realm-cas-with-kibana-redirect-to-login-page/51349)
**Author:** [@andsav](https://discuss.elastic.co/u/andsav)\ **Replies:** 1\ **Last updated:** [July 20, 2016, 7:33am UTC](https://discuss.elastic.co/t/custom-shield-realm-cas-with-kibana-redirect-to-login-page/51349 "2016-07-20T07:33:26Z")
I am currently writing a custom realm to implement CAS authentication. The goal is to redirect the user to a login page (https://cas.server.com) if he doesn't have an authentication token. When catching the missingToken… --- ## [Logstash + shield giving authentication error \[401\]](https://discuss.elastic.co/t/logstash-shield-giving-authentication-error-401/29453)
**Author:** [@codinguari](https://discuss.elastic.co/u/codinguari)\ **Replies:** 1\ **Last updated:** [September 19, 2015, 1:10am UTC](https://discuss.elastic.co/t/logstash-shield-giving-authentication-error-401/29453 "2015-09-19T01:10:55Z")
I'm getting the following error while trying to output data to elasticsearch from logstash: Failed to install template: \[401\] {"error":"AuthenticationException\[unable to authenticate user \[es\_admin\] for REST request \[/\_… --- ## [Filebeat encodes harvested content before shipping](https://discuss.elastic.co/t/filebeat-encodes-harvested-content-before-shipping/153976)
**Author:** [@CyberSeppi](https://discuss.elastic.co/u/CyberSeppi)\ **Replies:** 6\ **Last updated:** [October 27, 2018, 8:06pm UTC](https://discuss.elastic.co/t/filebeat-encodes-harvested-content-before-shipping/153976 "2018-10-27T20:06:31Z")
Hi guys, first the problem I´m running filebeat on an apache webserver and want to ship the access logs to logstash. I ran into problems with the content of shipment and already narrowed it down to filebeat: The outp… --- ## [How to extract \_ttl field value on documents](https://discuss.elastic.co/t/how-to-extract-ttl-field-value-on-documents/148893)
**Author:** [@pbathala](https://discuss.elastic.co/u/pbathala)\ **Replies:** 6\ **Last updated:** [September 19, 2018, 10:49pm UTC](https://discuss.elastic.co/t/how-to-extract-ttl-field-value-on-documents/148893 "2018-09-19T22:49:10Z")
Hello, I am migrating my 2.x indices to 6.x (to time based indices). My 2.x index has \_ttl on them and no created timestamp, for me to migrate the index to 6.x cluster, I need to know the timestamp when the document is … --- ## [Mismatch in field type](https://discuss.elastic.co/t/mismatch-in-field-type/140199)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 6\ **Last updated:** [July 22, 2018, 10:39am UTC](https://discuss.elastic.co/t/mismatch-in-field-type/140199 "2018-07-22T10:39:21Z")
Hi Team, I am new to ELK stack and i have completed setting up all ELKStack components such as filebeat ,logstash, Elastic and kibana on a single server and was successful in all my trails attempts, however when trying … [Previous page](https://discuss.elastic.co/top.md?page=1308&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1310&per_page=50&period=all)