# Top **URL:** https://discuss.elastic.co/top.md?page=1312&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1313 --- ## [How to compare two fields of two or more documents](https://discuss.elastic.co/t/how-to-compare-two-fields-of-two-or-more-documents/269190)
**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 5:53pm UTC](https://discuss.elastic.co/t/how-to-compare-two-fields-of-two-or-more-documents/269190 "2021-04-05T17:53:07Z")
Hi, I have 500 documents and half of them contains "IP.keyword" and half contains "Pim\_IP".keyword. Now I want to filter to get all the document which will have Pim\_IP(from one docuement) == IP.keyword( from other docum… --- ## [Journalbeat can't open a log file](https://discuss.elastic.co/t/journalbeat-cant-open-a-log-file/246116)
**Author:** [@DenProg](https://discuss.elastic.co/u/DenProg)\ **Replies:** 3\ **Last updated:** [August 25, 2020, 10:42am UTC](https://discuss.elastic.co/t/journalbeat-cant-open-a-log-file/246116 "2020-08-25T10:42:50Z")
Hi. I describe specific log file in the config as it's written in the docs: journalbeat.inputs: - paths: - "/var/log/syslog" This file is present, but Journalbeat can't open it for some reason: авг 24 15:53:29 com… --- ## [Unable to overwrite dataframe when documents have parent](https://discuss.elastic.co/t/unable-to-overwrite-dataframe-when-documents-have-parent/95283)
**Author:** [@Brendan\_Kerrison](https://discuss.elastic.co/u/Brendan_Kerrison)\ **Replies:** 3\ **Last updated:** [August 1, 2017, 10:42pm UTC](https://discuss.elastic.co/t/unable-to-overwrite-dataframe-when-documents-have-parent/95283 "2017-08-01T22:42:40Z")
I am trying to write a dataframe to Elasticsearch from Spark using ES-Hadoop 5.5.1. The documents are being written as children of pre-existing parent documents. Everything is working correctly the first time the DF is s… --- ## [Logstash output zabbix](https://discuss.elastic.co/t/logstash-output-zabbix/92278)
**Author:** [@fredprod](https://discuss.elastic.co/u/fredprod)\ **Replies:** 3\ **Last updated:** [July 10, 2017, 1:47pm UTC](https://discuss.elastic.co/t/logstash-output-zabbix/92278 "2017-07-10T13:47:08Z")
I'm trying to use this to count http error code to begin using this plugin. But I got some error, so have you some good example ? I have this kind of errors in logstash logs: \[2017-07-06T15:30:48,394\]\[WARN \]\[logstash.out… --- ## [Scripted field considers the last updated value for calculation](https://discuss.elastic.co/t/scripted-field-considers-the-last-updated-value-for-calculation/77105)
**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\ **Replies:** 3\ **Last updated:** [March 7, 2017, 10:38pm UTC](https://discuss.elastic.co/t/scripted-field-considers-the-last-updated-value-for-calculation/77105 "2017-03-07T22:38:20Z")
Consider my log example: Nov 30,15:02:42.080 Start playback Nov 30,15:02:42.082 Song 1 played Nov 30,15:02:42.085 Song 2 played Nov 30,15:02:42.089 Song 3 played Nov 30,15:02:42.090 End playback Nov 30,15:02:43.06… --- ## [Elasticsearch Multitenancy Support](https://discuss.elastic.co/t/elasticsearch-multitenancy-support/62383)
**Author:** [@josh\_es](https://discuss.elastic.co/u/josh_es)\ **Replies:** 3\ **Last updated:** [October 11, 2016, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-multitenancy-support/62383 "2016-10-11T09:16:05Z")
Hi All, I am trying to build an elasticsearch cluster(3 master nodes, 2 data nodes to start with, but can be expanded up to 20 data nodes) capable of hosting a large number(4000-4500) of tenants who will index document… --- ## [Kibana sorting](https://discuss.elastic.co/t/kibana-sorting/36388)
**Author:** [@terje](https://discuss.elastic.co/u/terje)\ **Replies:** 3\ **Last updated:** [December 8, 2015, 3:37am UTC](https://discuss.elastic.co/t/kibana-sorting/36388 "2015-12-08T03:37:05Z")
If I in Kibana (4.3.0) do a search that have results from several indices, the index the result is from seems to have sort priority over the time field. Is there a way to sort this result chronological? When I do a sim… --- ## [How does Elasticsearch indexes non-text fields](https://discuss.elastic.co/t/how-does-elasticsearch-indexes-non-text-fields/313072)
**Author:** [@ImranArif](https://discuss.elastic.co/u/ImranArif)\ **Replies:** 4\ **Last updated:** [August 28, 2022, 7:32am UTC](https://discuss.elastic.co/t/how-does-elasticsearch-indexes-non-text-fields/313072 "2022-08-28T07:32:21Z")
Hi, I understand that Elasticsearch analyzes text fields and saves the resulting tokens in an inverted index data structure. But I am a bit confused regarding how does Elasticsearch stores other fields, like integer, fl… --- ## [Display only most recent log per host - Complete Newb](https://discuss.elastic.co/t/display-only-most-recent-log-per-host-complete-newb/269712)
**Author:** [@Jspang01](https://discuss.elastic.co/u/Jspang01)\ **Replies:** 4\ **Last updated:** [April 12, 2021, 7:18pm UTC](https://discuss.elastic.co/t/display-only-most-recent-log-per-host-complete-newb/269712 "2021-04-12T19:18:54Z")
Hello There All, This is my first post. I fully admit that I am a total newb to Kibana. Up until this past month I was only using it to view data that we have. But I am slowly starting to be tasked with making up new v… --- ## [Logstash: Weblogic: Filebeat : Issues while starting the Logstash](https://discuss.elastic.co/t/logstash-weblogic-filebeat-issues-while-starting-the-logstash/154041)
**Author:** [@Shashidhar\_Wl](https://discuss.elastic.co/u/Shashidhar_Wl)\ **Replies:** 4\ **Last updated:** [October 30, 2018, 5:55pm UTC](https://discuss.elastic.co/t/logstash-weblogic-filebeat-issues-while-starting-the-logstash/154041 "2018-10-30T17:55:11Z")
Hi, I am trying to configure ELK with Weblogic logs. where i am getting the plug in registering issues. when i do config test it returns configuration looks good but when i start it is not starting. ./logstash --config… --- ## [GB/m transferred over time between hosts (internal & external)](https://discuss.elastic.co/t/gb-m-transferred-over-time-between-hosts-internal-external/110434)
**Author:** [@learner](https://discuss.elastic.co/u/learner)\ **Replies:** 4\ **Last updated:** [December 6, 2017, 12:30am UTC](https://discuss.elastic.co/t/gb-m-transferred-over-time-between-hosts-internal-external/110434 "2017-12-06T00:30:40Z")
I tried using Packetbeat to make a dashboard to show how much GB/m or TB/h transferred between various hosts in LAN and other hosts in and out, whether between internal hosts or between internal and external hosts. When… --- ## [Adding X-Pack to the existing elasticsearch cluster](https://discuss.elastic.co/t/adding-x-pack-to-the-existing-elasticsearch-cluster/95119)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [July 31, 2017, 8:14am UTC](https://discuss.elastic.co/t/adding-x-pack-to-the-existing-elasticsearch-cluster/95119 "2017-07-31T08:14:11Z")
We have a multi node elasticsearch cluster with Hot and warm data nodes, master nodes and coordinating nodes. Wanted to know whether X-Pack can been added to the cluster nodes with rolling restart? --- ## [Java basics not working for me](https://discuss.elastic.co/t/java-basics-not-working-for-me/51273)
**Author:** [@daveyx](https://discuss.elastic.co/u/daveyx)\ **Replies:** 4\ **Last updated:** [May 30, 2016, 7:44am UTC](https://discuss.elastic.co/t/java-basics-not-working-for-me/51273 "2016-05-30T07:44:01Z")
Hi, i am trying out elasticsearch with the java api, but i dont get it to work. I can index documents, but searching for them does not work. I tried termQuery(), termsQuery() and matchQuery(). But documents are never r… --- ## [Is it beneficial to use ES-Hadoop over ES when you are not an hadoop user already?](https://discuss.elastic.co/t/is-it-beneficial-to-use-es-hadoop-over-es-when-you-are-not-an-hadoop-user-already/18951)
**Author:** [@im\_khosravi](https://discuss.elastic.co/u/im_khosravi)\ **Replies:** 4\ **Last updated:** [December 9, 2015, 5:24pm UTC](https://discuss.elastic.co/t/is-it-beneficial-to-use-es-hadoop-over-es-when-you-are-not-an-hadoop-user-already/18951 "2015-12-09T17:24:57Z")
Dear all I have a question in my mind about es-hadoop and it's benefits over running ES lonely. The question is if we are not a hadoop user already, is this a good idea to use es-hadoop? In other words is the… --- ## [Logstash Output Plugin Batch Events / De-Register Method](https://discuss.elastic.co/t/logstash-output-plugin-batch-events-de-register-method/27291)
**Author:** [@rishi](https://discuss.elastic.co/u/rishi)\ **Replies:** 4\ **Last updated:** [August 13, 2015, 8:35pm UTC](https://discuss.elastic.co/t/logstash-output-plugin-batch-events-de-register-method/27291 "2015-08-13T20:35:23Z")
I'm working on an output plugin for logstash and was wondering if the events that the ruby script receives can be batched (multiple events in place of the receive(event) method that gives a single event)? --- ## [Elastic Agent excessive cpu / log output in kubernetes](https://discuss.elastic.co/t/elastic-agent-excessive-cpu-log-output-in-kubernetes/330554)
**Author:** [@jlucas](https://discuss.elastic.co/u/jlucas)\ **Replies:** 2\ **Last updated:** [May 8, 2023, 3:24pm UTC](https://discuss.elastic.co/t/elastic-agent-excessive-cpu-log-output-in-kubernetes/330554 "2023-05-08T15:24:23Z")
Hello, I am noticing some undesirable behavior when using elastic agent within kubernetes on-prem. I have a fleet managed elastic agent running in kubernetes with APM, System, and Kubernetes integrations turned on. I wa… --- ## [How to show missing data in elasticsearch kibana visualization](https://discuss.elastic.co/t/how-to-show-missing-data-in-elasticsearch-kibana-visualization/260335)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 4:22pm UTC](https://discuss.elastic.co/t/how-to-show-missing-data-in-elasticsearch-kibana-visualization/260335 "2021-01-06T16:22:26Z")
I have few devices which are uploading below json data to elasticsearch. { "\_index": "logs", "\_type": "\_doc", "\_id": "122", "\_version": 7, "\_score": null, "\_source": { "Data": { "FacTotal": 6270126… --- ## [CSV Export fails after size exceeds threshold](https://discuss.elastic.co/t/csv-export-fails-after-size-exceeds-threshold/150869)
**Author:** [@georgeRD](https://discuss.elastic.co/u/georgeRD)\ **Replies:** 2\ **Last updated:** [October 3, 2018, 4:43pm UTC](https://discuss.elastic.co/t/csv-export-fails-after-size-exceeds-threshold/150869 "2018-10-03T16:43:14Z")
Hi all, We're running an Elasticsearch/Kibana installation v. 6.2.3, with x-pack basic license activated. CSV exports are executed successfully up to a certain file size (~800KB). If the columns or rows are increased in… --- ## [Time interval for sending logs using Winlogbeat](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822)
**Author:** [@Hari\_Baskar](https://discuss.elastic.co/u/Hari_Baskar)\ **Replies:** 2\ **Last updated:** [February 28, 2018, 5:54am UTC](https://discuss.elastic.co/t/time-interval-for-sending-logs-using-winlogbeat/120822 "2018-02-28T05:54:44Z")
Hi, I'm using the Winlogbeat for log shipping into elasticsearch. But I don't want to send the logs continuously into elasticsearch. I need to send only every half hour once. So, Please suggest me How to do that. Than… --- ## [Installation of Kibana x-pack 5.2.0 failed on Ubuntu 16.04. & CentOS 7.2](https://discuss.elastic.co/t/installation-of-kibana-x-pack-5-2-0-failed-on-ubuntu-16-04-centos-7-2/74747)
**Author:** [@schneidermatic](https://discuss.elastic.co/u/schneidermatic)\ **Replies:** 2\ **Last updated:** [February 12, 2017, 7:30am UTC](https://discuss.elastic.co/t/installation-of-kibana-x-pack-5-2-0-failed-on-ubuntu-16-04-centos-7-2/74747 "2017-02-12T07:30:19Z")
Hi folks, I have some trouble to install X-Pack 5.2.0 for Kibana 5.2.0 on Ubuntu 16.04. & CentOS 7.2 The following Error occurs when I try to install it: ./kibana-plugin install x-pack Attempting to transfer from x-p… --- ## [How much Java Heap Space for Client Nodes](https://discuss.elastic.co/t/how-much-java-heap-space-for-client-nodes/56719)
**Author:** [@drjz](https://discuss.elastic.co/u/drjz)\ **Replies:** 2\ **Last updated:** [July 31, 2016, 12:06am UTC](https://discuss.elastic.co/t/how-much-java-heap-space-for-client-nodes/56719 "2016-07-31T00:06:40Z")
It is recommended to use less than half of your OS memory to Lucene, see https://www.elastic.co/guide/en/elasticsearch/guide/current/heap-sizing.html I wonder whether this is also true for the Client nodes. Do ES Clien… --- ## [Beats Overhead Topbeat and Packetbeat](https://discuss.elastic.co/t/beats-overhead-topbeat-and-packetbeat/51903)
**Author:** [@talk2cshah](https://discuss.elastic.co/u/talk2cshah)\ **Replies:** 2\ **Last updated:** [June 7, 2016, 3:52am UTC](https://discuss.elastic.co/t/beats-overhead-topbeat-and-packetbeat/51903 "2016-06-07T03:52:00Z")
Dear Team, May I request you to help me understand what is the resource overhead of deploying topbeat and packetbeat with respect to default configurations.. impact on Storage space CPU utilization Memory utilizatio… --- ## [Percolate existing document using query from another index](https://discuss.elastic.co/t/percolate-existing-document-using-query-from-another-index/17111)
**Author:** [@Poomrat\_Boonyawong](https://discuss.elastic.co/u/Poomrat_Boonyawong)\ **Replies:** 2\ **Last updated:** [April 22, 2014, 3:58am UTC](https://discuss.elastic.co/t/percolate-existing-document-using-query-from-another-index/17111 "2014-04-22T03:58:34Z")
Hi, I am trying to follow advice in Elasticsearch Platform — Find real-time answers at scale | Elastic but percolating on existing document. This for some reason doesn't work for me in ES 1.1.0. The same percolator w… --- ## [Capture method arguments and return value](https://discuss.elastic.co/t/capture-method-arguments-and-return-value/204360)
**Author:** [@gopikrishnan](https://discuss.elastic.co/u/gopikrishnan)\ **Replies:** 5\ **Last updated:** [October 22, 2019, 1:00pm UTC](https://discuss.elastic.co/t/capture-method-arguments-and-return-value/204360 "2019-10-22T13:00:05Z")
Hi All, Am totally new to elastic apm as well as elastic search and am trying to evaluate elastic apm and hence subscribed to trail version of elastic cloud. I want to understand whether i can capture any method argumen… --- ## [Setting up Multi-node Architecture of ELK for log monitoring](https://discuss.elastic.co/t/setting-up-multi-node-architecture-of-elk-for-log-monitoring/180707)
**Author:** [@Abhishek\_Dwivedi](https://discuss.elastic.co/u/Abhishek_Dwivedi)\ **Replies:** 5\ **Last updated:** [May 13, 2019, 5:34am UTC](https://discuss.elastic.co/t/setting-up-multi-node-architecture-of-elk-for-log-monitoring/180707 "2019-05-13T05:34:06Z")
Hi all, I have been taking care of ELK project for the last 2 years in my organization and had been running elasticsearch( version 6.x.x) and kibana as a part of our monitoring system. Recently we have to planned to … --- ## [Can a watch search over two different Indexes](https://discuss.elastic.co/t/can-a-watch-search-over-two-different-indexes/137649)
**Author:** [@robrang558](https://discuss.elastic.co/u/robrang558)\ **Replies:** 5\ **Last updated:** [July 13, 2018, 6:38pm UTC](https://discuss.elastic.co/t/can-a-watch-search-over-two-different-indexes/137649 "2018-07-13T18:38:28Z")
I have a watch set up to send an email anytime that the metricbeat index's field "mysql.status.connections" shows nothing over 5 minutes. It works great with the only exception that when the pipeline bottlenecks, all me… --- ## [Not able to create indeces in kibana](https://discuss.elastic.co/t/not-able-to-create-indeces-in-kibana/107658)
**Author:** [@mayank.gaur](https://discuss.elastic.co/u/mayank.gaur)\ **Replies:** 5\ **Last updated:** [November 15, 2017, 8:14am UTC](https://discuss.elastic.co/t/not-able-to-create-indeces-in-kibana/107658 "2017-11-15T08:14:59Z")
\[Kibana\] I have installed logstash properly, but still I am not able to access in Kibana can you please help me out. --- ## [33000 datapoints per second in a graph flowing from right to left](https://discuss.elastic.co/t/33000-datapoints-per-second-in-a-graph-flowing-from-right-to-left/56706)
**Author:** [@yesyesdhar](https://discuss.elastic.co/u/yesyesdhar)\ **Replies:** 5\ **Last updated:** [August 1, 2016, 2:07pm UTC](https://discuss.elastic.co/t/33000-datapoints-per-second-in-a-graph-flowing-from-right-to-left/56706 "2016-08-01T14:07:41Z")
We have 10 million records of data stored in a Comma Separated CSV file and files like these are generated every 5 minutes.If we divide 10 million/5 minutes(300 seconds), its about 33000 records or data points for a s… --- ## [Folder hierarchy in elasticsearch](https://discuss.elastic.co/t/folder-hierarchy-in-elasticsearch/34588)
**Author:** [@vikas.saini](https://discuss.elastic.co/u/vikas.saini)\ **Replies:** 5\ **Last updated:** [November 16, 2015, 2:18am UTC](https://discuss.elastic.co/t/folder-hierarchy-in-elasticsearch/34588 "2015-11-16T02:18:25Z")
Actually in my use case i set permissions on folder and the subfolder will inherit those permission from its parent . So the thing i want to know is that is there any way that properties from grandparent and from further… --- ## [Search and bulk transport tasks stuck running for days on ES 7.17.5](https://discuss.elastic.co/t/search-and-bulk-transport-tasks-stuck-running-for-days-on-es-7-17-5/321437)
**Author:** [@joannas\_q](https://discuss.elastic.co/u/joannas_q)\ **Replies:** 8\ **Last updated:** [December 19, 2022, 10:37pm UTC](https://discuss.elastic.co/t/search-and-bulk-transport-tasks-stuck-running-for-days-on-es-7-17-5/321437 "2022-12-19T22:37:27Z")
elasticsearch version: 7.17.5 lucene\_version: 8.11.1 Hi, we have two elasticsearch clusters that have had degraded search and ingestion performance over the past two+ weeks. We have search/scroll/count/bulk client reque… --- ## [Issue with Custom Plugin Causing "Elastic did not load properly"](https://discuss.elastic.co/t/issue-with-custom-plugin-causing-elastic-did-not-load-properly/361714)
**Author:** [@Antim\_K](https://discuss.elastic.co/u/Antim_K)\ **Replies:** 7\ **Last updated:** [September 16, 2025, 10:15am UTC](https://discuss.elastic.co/t/issue-with-custom-plugin-causing-elastic-did-not-load-properly/361714 "2025-09-16T10:15:31Z")
Issue with Custom Plugin Causing "Elastic did not load properly" Error in Kibana 8.14.0 Hi everyone, Greetings of the day! I have successfully cloned the Kibana repository and set up everything for local development. … --- ## ["Estimating Resources for an Elasticsearch Cluster with 10,000 EPS Log Ingestion"](https://discuss.elastic.co/t/estimating-resources-for-an-elasticsearch-cluster-with-10-000-eps-log-ingestion/374487)
**Author:** [@MH\_D](https://discuss.elastic.co/u/MH_D)\ **Replies:** 7\ **Last updated:** [February 15, 2025, 7:03pm UTC](https://discuss.elastic.co/t/estimating-resources-for-an-elasticsearch-cluster-with-10-000-eps-log-ingestion/374487 "2025-02-15T19:03:51Z")
I have a system that includes Elasticsearch, Logstash, and Kibana, with the following architecture: Logs are collected using Beats (Filebeat, Packetbeat, etc.) and sent to Elasticsearch via Logstash. I want to run Elast… --- ## [Logstash on Fargate - Cannot assign requested address](https://discuss.elastic.co/t/logstash-on-fargate-cannot-assign-requested-address/202589)
**Author:** [@davewolf](https://discuss.elastic.co/u/davewolf)\ **Replies:** 1\ **Last updated:** [October 8, 2019, 7:12pm UTC](https://discuss.elastic.co/t/logstash-on-fargate-cannot-assign-requested-address/202589 "2019-10-08T19:12:57Z")
Version: 7.4.0 Deployment: AWS ECS Fargate I'm getting this error: EADDRNOTAVAIL: Cannot assign requested address - bind - Cannot assign requested address Since I'm deploying to Fargate, I can't in advance know (or e… --- ## [Support for handling rotated files as .gz files in filebeat](https://discuss.elastic.co/t/support-for-handling-rotated-files-as-gz-files-in-filebeat/104858)
**Author:** [@an.secure](https://discuss.elastic.co/u/an.secure)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 1:15pm UTC](https://discuss.elastic.co/t/support-for-handling-rotated-files-as-gz-files-in-filebeat/104858 "2017-10-23T13:15:29Z")
Does filebeat support compressed files? Our java application is writing the logs to log.json file using logback RollingFileAppender. After 5MB the file is rotated like below : arch\_2017-10-23.1.gz arch\_2017-10-23.2.g… --- ## [Listener timeout after waiting for 30000](https://discuss.elastic.co/t/listener-timeout-after-waiting-for-30000/97094)
**Author:** [@prakash024](https://discuss.elastic.co/u/prakash024)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 2:03pm UTC](https://discuss.elastic.co/t/listener-timeout-after-waiting-for-30000/97094 "2017-08-15T14:03:20Z")
Hi , I am continuously getting this exception while fetching data from elastic search. Below is the exception java.io.IOException: listener timeout after waiting for \[30000\] ms at org.elasticsearch.client.RestClient$S… --- ## [ElasticSearch StartUp Error](https://discuss.elastic.co/t/elasticsearch-startup-error/63865)
**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\ **Replies:** 1\ **Last updated:** [October 25, 2016, 12:22pm UTC](https://discuss.elastic.co/t/elasticsearch-startup-error/63865 "2016-10-25T12:22:06Z")
Hi All, I have Elasticsearch installed on RedHat machine. I get the below error when i run the start command: elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; disa… --- ## [Lowercase a field's value](https://discuss.elastic.co/t/lowercase-a-fields-value/41025)
**Author:** [@Kartik\_Ramachandran](https://discuss.elastic.co/u/Kartik_Ramachandran)\ **Replies:** 1\ **Last updated:** [February 5, 2016, 8:00am UTC](https://discuss.elastic.co/t/lowercase-a-fields-value/41025 "2016-02-05T08:00:19Z")
I am trying to lowercase the value of only 1 filed in logstash. From the old threads, i see that the lowercase filter does not help. So, i tried using ruby { code =\> "event.to\_hash.each{|k, v| v.downcase! if v.… --- ## [Logstash1.5 Working on HP-Unix?](https://discuss.elastic.co/t/logstash1-5-working-on-hp-unix/1621)
**Author:** [@ankit](https://discuss.elastic.co/u/ankit)\ **Replies:** 1\ **Last updated:** [June 1, 2015, 8:11am UTC](https://discuss.elastic.co/t/logstash1-5-working-on-hp-unix/1621 "2015-06-01T08:11:40Z")
Hi All, I was using logstash 1.4 on multiple operating system like windows, RHEL and HP-Unix. I did some change in filewatch plugin for running on HP-Unix box and due to those change sincedb feature stop working. My … --- ## [Splunk eval Command Equivalent](https://discuss.elastic.co/t/splunk-eval-command-equivalent/314810)
**Author:** [@hi\_xavier](https://discuss.elastic.co/u/hi_xavier)\ **Replies:** 3\ **Last updated:** [October 5, 2022, 1:17pm UTC](https://discuss.elastic.co/t/splunk-eval-command-equivalent/314810 "2022-10-05T13:17:30Z")
Hi, My team is in process of moving from Splunk to Elk. Does Elk have an equivalent to Splunk's eval command? Thanks ! --- ## [Upgrade Elasticserch single node cluster](https://discuss.elastic.co/t/upgrade-elasticserch-single-node-cluster/292858)
**Author:** [@Naga\_Prudhvi](https://discuss.elastic.co/u/Naga_Prudhvi)\ **Replies:** 3\ **Last updated:** [December 29, 2021, 3:33pm UTC](https://discuss.elastic.co/t/upgrade-elasticserch-single-node-cluster/292858 "2021-12-29T15:33:11Z")
How to upgrade a single node elasticserch cluster with out data loss --- ## [Programmatically rename (re-title) Kibana index patterns](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 3\ **Last updated:** [July 1, 2021, 1:40pm UTC](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398 "2021-07-01T13:40:38Z")
I've developed a set of Kibana dashboards that use about a dozen index patterns with the following structure: product\_x-table\_name-\* where product\_x is a fixed string and table\_name has a dozen or so values. Example in… --- ## [How does the setup of filebeat on kubernetes work?](https://discuss.elastic.co/t/how-does-the-setup-of-filebeat-on-kubernetes-work/272575)
**Author:** [@wifi](https://discuss.elastic.co/u/wifi)\ **Replies:** 3\ **Last updated:** [May 19, 2021, 3:35pm UTC](https://discuss.elastic.co/t/how-does-the-setup-of-filebeat-on-kubernetes-work/272575 "2021-05-19T15:35:46Z")
I'm using the elastic operator "docker.elastic.co/eck/eck-operator:1.5.0" and trying to get a working filebeat running. Somehow I don't get index templates properly set up and also ilm. My deployment looks like this: … --- ## [logstashのERRORとWARNのログの出力先について](https://discuss.elastic.co/t/logstash-error-warn/240486)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 8:05am UTC](https://discuss.elastic.co/t/logstash-error-warn/240486 "2020-07-09T08:05:13Z")
logstashのログは、/var/log/messagesとlogstash-plain.logの2か所になると認識しています。 メッセージによっては、messagesには出力されてlogstash-plain.logには出力されないケースがあるように見受けられるのですが、逆にlogstash-plain.logにのみ出力されてmessagesには出力されないERRORもしくはWARNメッセージは存在しますでしょうか？ メッセージ… --- ## [Difference between Max timestamp and Minimum timstamp in kibana](https://discuss.elastic.co/t/difference-between-max-timestamp-and-minimum-timstamp-in-kibana/84751)
**Author:** [@abhi1](https://discuss.elastic.co/u/abhi1)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 2:41pm UTC](https://discuss.elastic.co/t/difference-between-max-timestamp-and-minimum-timstamp-in-kibana/84751 "2017-05-09T14:41:08Z")
I have a log data where I have user activity getting logged in for a particular user on a particular timestamp. Now I was able to create a min and max of timestamp field for a particular user in a particular day. I wan t… --- ## [Attachments from ECM to Elastic Search using Java API](https://discuss.elastic.co/t/attachments-from-ecm-to-elastic-search-using-java-api/76505)
**Author:** [@PARAG\_BHAGWAT](https://discuss.elastic.co/u/PARAG_BHAGWAT)\ **Replies:** 3\ **Last updated:** [February 26, 2017, 12:13am UTC](https://discuss.elastic.co/t/attachments-from-ecm-to-elastic-search-using-java-api/76505 "2017-02-26T00:13:54Z")
Hello, I have done basic indexing in Elastic search using the JAVA api. I am using Elastic Search 5.1.1. I am really new to this so sorry if this is a basic question but this is what i am trying to do 1) I installed … --- ## [Curl to elasticsearch ELK cluster doesn't bring back current data whereas Kibana does](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782)
**Author:** [@Stuart\_Cracraft1](https://discuss.elastic.co/u/Stuart_Cracraft1)\ **Replies:** 3\ **Last updated:** [February 26, 2016, 8:31am UTC](https://discuss.elastic.co/t/curl-to-elasticsearch-elk-cluster-doesnt-bring-back-current-data-whereas-kibana-does/42782 "2016-02-26T08:31:55Z")
On Kibana, I see all current data all the time. But when I do a curl -XGET 'http://elkcluster:9200/logstash-YYYY.MM.DD/\_search?host=somehost&type=heartbeat' it shows me out of date logstash heartbeats. I go b… --- ## [What happens when you decommission a node and bring it back online?](https://discuss.elastic.co/t/what-happens-when-you-decommission-a-node-and-bring-it-back-online/26763)
**Author:** [@discord](https://discuss.elastic.co/u/discord)\ **Replies:** 3\ **Last updated:** [August 4, 2015, 6:03pm UTC](https://discuss.elastic.co/t/what-happens-when-you-decommission-a-node-and-bring-it-back-online/26763 "2015-08-04T18:03:31Z")
I've tried asking on irc but can't get anybody to respond. I'm curious what happens when you decomission a node and later bring it back online. For example, say you had a node and you decommission it, allowing all the… --- ## [Limited read and write speed using Elasticsearch Hadoop](https://discuss.elastic.co/t/limited-read-and-write-speed-using-elasticsearch-hadoop/314180)
**Author:** [@Thijsvdp](https://discuss.elastic.co/u/Thijsvdp)\ **Replies:** 6\ **Last updated:** [September 13, 2022, 8:27am UTC](https://discuss.elastic.co/t/limited-read-and-write-speed-using-elasticsearch-hadoop/314180 "2022-09-13T08:27:25Z")
Hi all, We are experiencing unexpectedly low read and write speed on our ES cluster using the Elasticsearch-Hadoop connector. We have been reading a lot about the different configurations in the connector and tested aro… --- ## [Migrate AWS ElasticSearch data from one domain to Another - Different versions](https://discuss.elastic.co/t/migrate-aws-elasticsearch-data-from-one-domain-to-another-different-versions/231601)
**Author:** [@mehak](https://discuss.elastic.co/u/mehak)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 11:56pm UTC](https://discuss.elastic.co/t/migrate-aws-elasticsearch-data-from-one-domain-to-another-different-versions/231601 "2020-05-07T23:56:38Z")
Hi Everyone, I need to migrate AWS ElasticSearch data from one domain to another within same account, but both the domains have different versions of Elasticsearch i.e. migrate from 6.3 in one domain to 7.4 in another d… --- ## [How to extract data from filename using logstash?](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371)
**Author:** [@reillye](https://discuss.elastic.co/u/reillye)\ **Replies:** 2\ **Last updated:** [December 2, 2020, 4:46pm UTC](https://discuss.elastic.co/t/how-to-extract-data-from-filename-using-logstash/257371 "2020-12-02T16:46:30Z")
I am using filebeat to monitor a directory for new files that get dropped in every hour. The files are then sent to logstash to be parsed before being sent to ES. The filenames are in this format aldb-E6-20201015232941.… [Previous page](https://discuss.elastic.co/top.md?page=1311&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1313&per_page=50&period=all)