# Top **URL:** https://discuss.elastic.co/top.md?page=1313&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1314 --- ## [Does filebeat's logstash output support IPv6?](https://discuss.elastic.co/t/does-filebeats-logstash-output-support-ipv6/174540)
**Author:** [@yongtao](https://discuss.elastic.co/u/yongtao)\ **Replies:** 2\ **Last updated:** [March 29, 2019, 1:50pm UTC](https://discuss.elastic.co/t/does-filebeats-logstash-output-support-ipv6/174540 "2019-03-29T13:50:29Z")
In the filebeat configuration, can I put IPv6 address as logstash.output destination? Like this? output.logstash: hosts: \["\:5044"\] Thanks! Yongtao --- ## [Fast check of ip address list](https://discuss.elastic.co/t/fast-check-of-ip-address-list/157388)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 2\ **Last updated:** [November 21, 2018, 8:58am UTC](https://discuss.elastic.co/t/fast-check-of-ip-address-list/157388 "2018-11-21T08:58:21Z")
I have a many logs from external ip address that connect to my web application. I would like to check this ip address into logs with my list in a text file. How can I check if there is ip address into logs that are als… --- ## ["Did you mean" feature using elasticsearch](https://discuss.elastic.co/t/did-you-mean-feature-using-elasticsearch/150886)
**Author:** [@Nikesh](https://discuss.elastic.co/u/Nikesh)\ **Replies:** 2\ **Last updated:** [October 15, 2018, 10:42am UTC](https://discuss.elastic.co/t/did-you-mean-feature-using-elasticsearch/150886 "2018-10-15T10:42:35Z")
Hi all, I am implementing "did you mean" technology using Elasticsearch. After doing some research I found out, phrase suggesters is designed only for this purpose. But I am facing some issues with it. My mapping doc… --- ## [Visualize the last 5 documents](https://discuss.elastic.co/t/visualize-the-last-5-documents/102711)
**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 6:56am UTC](https://discuss.elastic.co/t/visualize-the-last-5-documents/102711 "2017-10-05T06:56:35Z")
I have an alarm-log from ElastAlert. I've got a nice table in Discovery where I list all alarms with the most recent at the top. Hits in Discovery Now, I want to do a data table visualization in Kibana to show the last… --- ## [New module - fields.yml and filebeat.template.json](https://discuss.elastic.co/t/new-module-fields-yml-and-filebeat-template-json/95352)
**Author:** [@edisuc](https://discuss.elastic.co/u/edisuc)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 10:07am UTC](https://discuss.elastic.co/t/new-module-fields-yml-and-filebeat-template-json/95352 "2017-08-02T10:07:00Z")
Hi. I’m creating a new module to parse proftpd’s xferlog log file. I got the parsing ok, but I’m stuck with Elastic Search mappings. I realized, that the mappings are done by uploading the template file filebeat.templat… --- ## [Marvel 2.0 Uneven measurement times result in odd graphs](https://discuss.elastic.co/t/marvel-2-0-uneven-measurement-times-result-in-odd-graphs/34841)
**Author:** [@Drew\_Town](https://discuss.elastic.co/u/Drew_Town)\ **Replies:** 2\ **Last updated:** [November 18, 2015, 12:31pm UTC](https://discuss.elastic.co/t/marvel-2-0-uneven-measurement-times-result-in-odd-graphs/34841 "2015-11-18T12:31:34Z")
Starting today I started noticing my Marvel acting funny. The measurement times it takes is very uneven. With ever few minutes all of the readings stop and it shows as zero on the graph. If I zoom in to less than 4 ho… --- ## [Ingress configuration to access Kibana from the internet](https://discuss.elastic.co/t/ingress-configuration-to-access-kibana-from-the-internet/328406)
**Author:** [@arazmi](https://discuss.elastic.co/u/arazmi)\ **Replies:** 1\ **Last updated:** [March 27, 2023, 6:33am UTC](https://discuss.elastic.co/t/ingress-configuration-to-access-kibana-from-the-internet/328406 "2023-03-27T06:33:48Z")
I've been following this guide here Deploy a Kibana instance | Elastic Cloud on Kubernetes \[master\] | Elastic, and I have also configured the following ingress: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: … --- ## [How to write DtSearchConverter, NotSpanQuery in elastic?](https://discuss.elastic.co/t/how-to-write-dtsearchconverter-notspanquery-in-elastic/231823)
**Author:** [@Attila816](https://discuss.elastic.co/u/Attila816)\ **Replies:** 1\ **Last updated:** [May 12, 2020, 9:26am UTC](https://discuss.elastic.co/t/how-to-write-dtsearchconverter-notspanquery-in-elastic/231823 "2020-05-12T09:26:22Z")
Hi, how can I write NotSpanQuery which is not the same as SpanNotQuery in Elastic? How can I write a query like this in elastic: QueryA AND NOT QueryB what I want to rewrite it as QueryA NOT W/Integer.MAX\_VALUE QueryB … --- ## [How to set mapping in filebeats?](https://discuss.elastic.co/t/how-to-set-mapping-in-filebeats/117578)
**Author:** [@Feng\_Mi](https://discuss.elastic.co/u/Feng_Mi)\ **Replies:** 1\ **Last updated:** [January 30, 2018, 8:54am UTC](https://discuss.elastic.co/t/how-to-set-mapping-in-filebeats/117578 "2018-01-30T08:54:17Z")
I want set the mapping in filebeat config. For example, there is a field name "use\_id", I want set the field type to text before create the index in es. But I don't know how to set the config. --- ## [Show only time with out date](https://discuss.elastic.co/t/show-only-time-with-out-date/104798)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 1\ **Last updated:** [October 23, 2017, 1:45pm UTC](https://discuss.elastic.co/t/show-only-time-with-out-date/104798 "2017-10-23T13:45:52Z")
Hi, How can I show only the time and not the date? \[image\] Basically to show only what is in a circle and not the Oct. part. Thanks! --- ## [Read ES index snapshot in spark without restore](https://discuss.elastic.co/t/read-es-index-snapshot-in-spark-without-restore/95835)
**Author:** [@prabhushrikant](https://discuss.elastic.co/u/prabhushrikant)\ **Replies:** 1\ **Last updated:** [August 4, 2017, 6:06pm UTC](https://discuss.elastic.co/t/read-es-index-snapshot-in-spark-without-restore/95835 "2017-08-04T18:06:09Z")
I have a large ES index in production cluster which is snapshot daily. For some analytics purpose I want to read all the docs in that index in RDD (ES-Hadoop for apache spark library jars can be useful here) but I don’t … --- ## [Fail to send data from logstash to elasticsearch after installing x-pack](https://discuss.elastic.co/t/fail-to-send-data-from-logstash-to-elasticsearch-after-installing-x-pack/66165)
**Author:** [@mathias](https://discuss.elastic.co/u/mathias)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 5:40pm UTC](https://discuss.elastic.co/t/fail-to-send-data-from-logstash-to-elasticsearch-after-installing-x-pack/66165 "2016-11-16T17:40:59Z")
Hi, I tried to install x-pack to get marvel functionality in ES 5.0.0. Unfortunately did it force me to use security. I am currently having problmes sending data from logstash to elastic search. \[2016-11-15T20:03:15,… --- ## [Elasticsearch node unresponsive, high active\_opens, CLOSE\_WAIT](https://discuss.elastic.co/t/elasticsearch-node-unresponsive-high-active-opens-close-wait/28996)
**Author:** [@sinneduy](https://discuss.elastic.co/u/sinneduy)\ **Replies:** 1\ **Last updated:** [November 11, 2016, 5:25am UTC](https://discuss.elastic.co/t/elasticsearch-node-unresponsive-high-active-opens-close-wait/28996 "2016-11-11T05:25:20Z")
Received an alert saying that one of my nodes was down, when I tried to curl / it just hung. Checked on the health of the cluster and the node and noted something very strange: "network": { "tcp":… --- ## [Product compatibility with version 9.X not available on Support Matrix](https://discuss.elastic.co/t/product-compatibility-with-version-9-x-not-available-on-support-matrix/378306)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 4\ **Last updated:** [May 21, 2025, 4:33am UTC](https://discuss.elastic.co/t/product-compatibility-with-version-9-x-not-available-on-support-matrix/378306 "2025-05-21T04:33:37Z")
Hello, This is a simple question, what are the product compatibility from older versions with the stack on version 9.X? The columns for the compatibility with Beats, Elastic Agent and Logstash in the support matrix pag… --- ## [How to configure apm agent for multiple php sites on one machine](https://discuss.elastic.co/t/how-to-configure-apm-agent-for-multiple-php-sites-on-one-machine/313508)
**Author:** [@lhb6540](https://discuss.elastic.co/u/lhb6540)\ **Replies:** 4\ **Last updated:** [September 9, 2022, 4:34am UTC](https://discuss.elastic.co/t/how-to-configure-apm-agent-for-multiple-php-sites-on-one-machine/313508 "2022-09-09T04:34:12Z")
Follow this page Configuration | APM PHP Agent Reference \[1.x\] | Elastic It is easy to configure apm agent for one php site on the machine by configuring php.ini, but if I have multiple php apps on one machine, how shou… --- ## [Test field type with ruby filter and rename the field](https://discuss.elastic.co/t/test-field-type-with-ruby-filter-and-rename-the-field/308831)
**Author:** [@austin0918](https://discuss.elastic.co/u/austin0918)\ **Replies:** 4\ **Last updated:** [July 6, 2022, 1:03am UTC](https://discuss.elastic.co/t/test-field-type-with-ruby-filter-and-rename-the-field/308831 "2022-07-06T01:03:10Z")
I have a field "identity" that is mapped as a keyword, but some logs received have the field as an object. How do I rename the field? I tried the below config but got a syntax error, unexpected tCONSTANT. Please advise. … --- ## [Detection Rule with query issues](https://discuss.elastic.co/t/detection-rule-with-query-issues/277706)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 4\ **Last updated:** [July 6, 2021, 7:24am UTC](https://discuss.elastic.co/t/detection-rule-with-query-issues/277706 "2021-07-06T07:24:26Z")
Hi All, I've made a custom detection rule to detect windows defender events related to malware or stop based on the below documentation: The query is as bellow: winlog.event\_id: "1002" or "1003" or "1005" or "1006" … --- ## [Synthetic Monitoring currently using elastic super user in run.sh file](https://discuss.elastic.co/t/synthetic-monitoring-currently-using-elastic-super-user-in-run-sh-file/266368)
**Author:** [@shahidraza](https://discuss.elastic.co/u/shahidraza)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 6:14pm UTC](https://discuss.elastic.co/t/synthetic-monitoring-currently-using-elastic-super-user-in-run-sh-file/266368 "2021-03-05T18:14:53Z")
Hi Team, What is the minimum user permission required to run synthetic monitoring. I don't want to provide superuser privilege to users who all deploy the synthetic monitoring using docker. sh run.sh 7.11.0 '-E outpu… --- ## [How do people assert the veracity of their snapshots?](https://discuss.elastic.co/t/how-do-people-assert-the-veracity-of-their-snapshots/198309)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 7:15pm UTC](https://discuss.elastic.co/t/how-do-people-assert-the-veracity-of-their-snapshots/198309 "2019-09-05T19:15:28Z")
We have over 12TB of data in our ES cluster. Most of that is made up of two really massive indices. We take snapshots to an S3 repo - incremental every night, full snapshots once a month. We're starting to wonder how w… --- ## [What will happen if one of the machines in the cluster has full disk](https://discuss.elastic.co/t/what-will-happen-if-one-of-the-machines-in-the-cluster-has-full-disk/37946)
**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\ **Replies:** 4\ **Last updated:** [December 26, 2015, 9:57am UTC](https://discuss.elastic.co/t/what-will-happen-if-one-of-the-machines-in-the-cluster-has-full-disk/37946 "2015-12-26T09:57:05Z")
Hi, I have Heterogeneous machines in my cluster , some of them with smaller disk and some with larger. What will happen if one of the machines will run into situation where no more space left on disk ? Thanks --- ## [Logstash elasticsearch output. How to change mapping?](https://discuss.elastic.co/t/logstash-elasticsearch-output-how-to-change-mapping/97617)
**Author:** [@xkovacikm](https://discuss.elastic.co/u/xkovacikm)\ **Replies:** 0\ **Last updated:** [August 18, 2017, 5:13pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-how-to-change-mapping/97617 "2017-08-18T17:13:34Z")
Hi, Problem 1: I’ve got problem with default mapping which is created by logstash. I’ve created my own mapping. But i cant change it. in blogarticles index is still only the default one created by JDBC. I tried to crea… --- ## [Pagination using Filebeat httpjson how to reference the 'next' link in results](https://discuss.elastic.co/t/pagination-using-filebeat-httpjson-how-to-reference-the-next-link-in-results/353528)
**Author:** [@Jez1](https://discuss.elastic.co/u/Jez1)\ **Replies:** 0\ **Last updated:** [February 18, 2024, 11:23pm UTC](https://discuss.elastic.co/t/pagination-using-filebeat-httpjson-how-to-reference-the-next-link-in-results/353528 "2024-02-18T23:23:23Z")
Hello, I'm pretty new to using filebeat and currently working out how to use the httpjson input to pull data from a REST API. I've worked out how to pull the response based on the time period I need and in the correct t… --- ## [APM .net agent errors](https://discuss.elastic.co/t/apm-net-agent-errors/334095)
**Author:** [@Joao\_Cardoso](https://discuss.elastic.co/u/Joao_Cardoso)\ **Replies:** 0\ **Last updated:** [May 23, 2023, 9:37am UTC](https://discuss.elastic.co/t/apm-net-agent-errors/334095 "2023-05-23T09:37:13Z")
Hello, i have been playing arround with elastic apm .net agent and i have some questions/doubts i was hoping someone could help. Im using .net 6 with "UseAllElasticApm" which works just fine for my HTTP requests. My is… --- ## [Get EventLogFile - Salesforce input plugin](https://discuss.elastic.co/t/get-eventlogfile-salesforce-input-plugin/199401)
**Author:** [@Nelson\_Nunes](https://discuss.elastic.co/u/Nelson_Nunes)\ **Replies:** 0\ **Last updated:** [September 13, 2019, 9:31am UTC](https://discuss.elastic.co/t/get-eventlogfile-salesforce-input-plugin/199401 "2019-09-13T09:31:59Z")
Hi, input { salesforce { client\_id =\> 'XXXXXXXXXXXXXrEIKI89zOgB8e8Uo9PrZk..9jFs' client\_secret =\> '7C4D2BXXXXXXXXXXXXX' username =\> 'XXXXXXXXXXXXX@test-pkxswlXXXXXXXXXXXXX' password =\> 'XXXXXXXXXXXXX' security\_tok… --- ## [Help for intermediate aggregation](https://discuss.elastic.co/t/help-for-intermediate-aggregation/56244)
**Author:** [@sw.jung](https://discuss.elastic.co/u/sw.jung)\ **Replies:** 0\ **Last updated:** [July 24, 2016, 3:47pm UTC](https://discuss.elastic.co/t/help-for-intermediate-aggregation/56244 "2016-07-24T15:47:30Z")
Hello. I want to index time series data for long-term in searchable status over 5 years. Data sampled about half an hour were indexed into 5GB data(1,000,000 documents). I think long-term aggregation based on these… --- ## [Difference between \`terms\` and \`term\` query for a single term?](https://discuss.elastic.co/t/difference-between-terms-and-term-query-for-a-single-term/373248)
**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\ **Replies:** 5\ **Last updated:** [January 17, 2025, 5:00am UTC](https://discuss.elastic.co/t/difference-between-terms-and-term-query-for-a-single-term/373248 "2025-01-17T05:00:39Z")
Is there any significant implementation difference between terms and term query when there is a single term to search? In a situation where I know the number of terms in advance, is it worth it to implement them separat… --- ## [Date range query returns no hits](https://discuss.elastic.co/t/date-range-query-returns-no-hits/293134)
**Author:** [@knwosu](https://discuss.elastic.co/u/knwosu)\ **Replies:** 5\ **Last updated:** [December 29, 2021, 5:59pm UTC](https://discuss.elastic.co/t/date-range-query-returns-no-hits/293134 "2021-12-29T17:59:55Z")
I am trying to get all the hits from a specific index over the past 24 hours. I entered the following command into the kibana dev console, but no hits are being returned. GET /my-index/\_search { "query": { "range"… --- ## [Kibana not showing the correct data while choosing with timestamp & received\_at](https://discuss.elastic.co/t/kibana-not-showing-the-correct-data-while-choosing-with-timestamp-received-at/172181)
**Author:** [@Rocky\_RK](https://discuss.elastic.co/u/Rocky_RK)\ **Replies:** 5\ **Last updated:** [March 14, 2019, 5:45am UTC](https://discuss.elastic.co/t/kibana-not-showing-the-correct-data-while-choosing-with-timestamp-received-at/172181 "2019-03-14T05:45:51Z")
I have Below logstash.conf file, i see the data is processing correctly but today i see very weird issues where indices for apic\_logs are not showing the correct syslog\_timestamp . input { file { path =\> \[ "/scrat… --- ## [Node API is not connecting to ES 5](https://discuss.elastic.co/t/node-api-is-not-connecting-to-es-5/65934)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 5\ **Last updated:** [November 15, 2016, 8:06am UTC](https://discuss.elastic.co/t/node-api-is-not-connecting-to-es-5/65934 "2016-11-15T08:06:18Z")
I am using node v4.5.0 &npm 1.4.21. When I am using ES 2.4.0 my node is connecting fine to ES. After upgrading it to 5 its showing ES is down. In my package.json I am seeing "elasticsearch": "^11.0.1", this version. In t… --- ## [Transform + action](https://discuss.elastic.co/t/transform-action/141589)
**Author:** [@chrillebile](https://discuss.elastic.co/u/chrillebile)\ **Replies:** 3\ **Last updated:** [July 26, 2018, 9:36am UTC](https://discuss.elastic.co/t/transform-action/141589 "2018-07-26T09:36:26Z")
Hey, Is it possible to use the values you get from transform in the action log message? In my transform, I calculate the derivative and want to display it in my log/slack message. --- ## [Cluster Health status is Red](https://discuss.elastic.co/t/cluster-health-status-is-red/284320)
**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\ **Replies:** 3\ **Last updated:** [September 16, 2021, 1:19pm UTC](https://discuss.elastic.co/t/cluster-health-status-is-red/284320 "2021-09-16T13:19:40Z")
I am establishing a cluster: 1 master node + 1 backup node. The cluster health status is red. curl -X GET "localhost:9200/\_cluster/health?pretty" { "cluster\_name" : "Elasticsearch", "status" : "red", "timed\_out" : f… --- ## [Filter issue with logstash beta 2.0](https://discuss.elastic.co/t/filter-issue-with-logstash-beta-2-0/32662)
**Author:** [@boeriksencom](https://discuss.elastic.co/u/boeriksencom)\ **Replies:** 8\ **Last updated:** [October 26, 2015, 12:21pm UTC](https://discuss.elastic.co/t/filter-issue-with-logstash-beta-2-0/32662 "2015-10-26T12:21:42Z")
Hi, I've just installed elaticsearch 2.0.0-rc1, kibana 4.2.0-beta2 and logstash 2.0.0-beta2. I have a logstash config that picks up data from at txt file: Textfile example data: 1;127.0.0.1;2014-06-22T12:32:35 Logs… --- ## [Highlighted query has hits but misses highlighted fragments (for some documents)](https://discuss.elastic.co/t/highlighted-query-has-hits-but-misses-highlighted-fragments-for-some-documents/6910)
**Author:** [@bdonnovan](https://discuss.elastic.co/u/bdonnovan)\ **Replies:** 8\ **Last updated:** [March 20, 2012, 11:33am UTC](https://discuss.elastic.co/t/highlighted-query-has-hits-but-misses-highlighted-fragments-for-some-documents/6910 "2012-03-20T11:33:30Z")
Hey there, i am facing somewhat awkward results when trying to query a highlight search. I query for a simple term and i get a result set, but just some of the results contain a highlighted fragment, which is what i… --- ## [Restarting logstash container sends events again to elastic, despite sincedb](https://discuss.elastic.co/t/restarting-logstash-container-sends-events-again-to-elastic-despite-sincedb/324675)
**Author:** [@paul\_chrlt](https://discuss.elastic.co/u/paul_chrlt)\ **Replies:** 7\ **Last updated:** [February 14, 2023, 6:03pm UTC](https://discuss.elastic.co/t/restarting-logstash-container-sends-events-again-to-elastic-despite-sincedb/324675 "2023-02-14T18:03:09Z")
Hi all, Can you help us ? We use elk 7.17.7 in docker containers hosted on a server with persistent shared volumes for path (read only), file\_completed\_log\_path, sincedb\_path. Each time we stop and start our logstash … --- ## [Geo-bounding box query does not support \`topLeft\` & \`bottomLeft\`](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 7\ **Last updated:** [May 26, 2021, 11:36am UTC](https://discuss.elastic.co/t/geo-bounding-box-query-does-not-support-topleft-bottomleft/273792 "2021-05-26T11:36:55Z")
The documentation states that: More over the names topLeft , bottomRight , topRight and bottomLeft are supported However, using topLeft & bottomRight causes an error: { "error": { "root\_cause": \[ { … --- ## [Elastic Rest-Client date format issues](https://discuss.elastic.co/t/elastic-rest-client-date-format-issues/242209)
**Author:** [@Dede\_Pessu](https://discuss.elastic.co/u/Dede_Pessu)\ **Replies:** 1\ **Last updated:** [July 22, 2020, 10:51pm UTC](https://discuss.elastic.co/t/elastic-rest-client-date-format-issues/242209 "2020-07-22T22:51:39Z")
Sending data to elastic search via Rest client from a java application it it is complaining about the date format below is the stack trace that it being spit out. 1. ElasticsearchStatusException\[Elasticsearch excep… --- ## [Reindex API - Extremely Slow](https://discuss.elastic.co/t/reindex-api-extremely-slow/168670)
**Author:** [@myspacebarisbroken](https://discuss.elastic.co/u/myspacebarisbroken)\ **Replies:** 1\ **Last updated:** [February 16, 2019, 8:19am UTC](https://discuss.elastic.co/t/reindex-api-extremely-slow/168670 "2019-02-16T08:19:44Z")
Hi! My ES Server has 1.4TB of data (6B documents). Reindex API (increasing shard count) is taking forever, in 12 hours it's only done 40GB. Is there anything i can do to speed things up? Things i've done: Set refresh … --- ## [How Kibana Connect to Multiple Coordinating Nodes](https://discuss.elastic.co/t/how-kibana-connect-to-multiple-coordinating-nodes/144392)
**Author:** [@samwzm](https://discuss.elastic.co/u/samwzm)\ **Replies:** 1\ **Last updated:** [August 14, 2018, 7:30pm UTC](https://discuss.elastic.co/t/how-kibana-connect-to-multiple-coordinating-nodes/144392 "2018-08-14T19:30:42Z")
Hi, there, My question is about multiple coordinating nodes and how to connect to kibana in production environment. I believe the best practice would config multiple coordinating nodes for fault tolerance, and also can … --- ## [APM UI in Elastic Cloud Kibana](https://discuss.elastic.co/t/apm-ui-in-elastic-cloud-kibana/132453)
**Author:** [@fejalish](https://discuss.elastic.co/u/fejalish)\ **Replies:** 1\ **Last updated:** [May 18, 2018, 2:04pm UTC](https://discuss.elastic.co/t/apm-ui-in-elastic-cloud-kibana/132453 "2018-05-18T14:04:17Z")
Hi @wa7son, I saw in another thread (APM and AWS Elasticsearch - #2 by wa7son) where you mentioned that: APM Server can send data to AWS ES. You will however not be able to use the APM UI in Kibana as that requires the… --- ## [Elasticsearch ignores jvm.options file not in default folder](https://discuss.elastic.co/t/elasticsearch-ignores-jvm-options-file-not-in-default-folder/98629)
**Author:** [@Bican](https://discuss.elastic.co/u/Bican)\ **Replies:** 1\ **Last updated:** [August 29, 2017, 6:15am UTC](https://discuss.elastic.co/t/elasticsearch-ignores-jvm-options-file-not-in-default-folder/98629 "2017-08-29T06:15:24Z")
Hi, I’m experiencing a problem with jvm.options file. We use Elasticsearch 5.4 . I specify parameter path.conf during startup. Something along lines: nohup $ES\_HOME/bin/elasticsearch -Epath.conf=$CFG\_DIR/$cluster\_n… --- ## [Not all errors/exceptions are reported by the Java APM agent](https://discuss.elastic.co/t/not-all-errors-exceptions-are-reported-by-the-java-apm-agent/260157)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 12:28am UTC](https://discuss.elastic.co/t/not-all-errors-exceptions-are-reported-by-the-java-apm-agent/260157 "2021-01-06T00:28:59Z")
I set up the apm Java agent with Tomcat server, but I notice there are some transactions(Http request) that return 5xx errors but they don't have exception stack traces(I couldn't find them in APM Errors by searching the… --- ## [Split long log into small parts and apply grok in logstash filter](https://discuss.elastic.co/t/split-long-log-into-small-parts-and-apply-grok-in-logstash-filter/103363)
**Author:** [@tharu85](https://discuss.elastic.co/u/tharu85)\ **Replies:** 2\ **Last updated:** [October 11, 2017, 4:05am UTC](https://discuss.elastic.co/t/split-long-log-into-small-parts-and-apply-grok-in-logstash-filter/103363 "2017-10-11T04:05:48Z")
I have a log which cannot directly extract using grok patterns under logstash filter. I have tested full grok pattern for the log in grok debugger and it works fine. But when I run the grok pattern under logstash filter … --- ## [Blocking beats from hosts using Xpack Security IP filtering feature](https://discuss.elastic.co/t/blocking-beats-from-hosts-using-xpack-security-ip-filtering-feature/66509)
**Author:** [@rs\_ela](https://discuss.elastic.co/u/rs_ela)\ **Replies:** 2\ **Last updated:** [November 18, 2016, 10:23am UTC](https://discuss.elastic.co/t/blocking-beats-from-hosts-using-xpack-security-ip-filtering-feature/66509 "2016-11-18T10:23:07Z")
I'm trying to filter ip addresses using Xpack Security (aka Shield). As far as I understand the documentation (https://www.elastic.co/guide/en/x-pack/current/ip-filtering.html), it should block beats from given hosts. Ho… --- ## [Filtered query in Elasticsearch 2](https://discuss.elastic.co/t/filtered-query-in-elasticsearch-2/38430)
**Author:** [@mramaprasad](https://discuss.elastic.co/u/mramaprasad)\ **Replies:** 2\ **Last updated:** [January 5, 2016, 8:14pm UTC](https://discuss.elastic.co/t/filtered-query-in-elasticsearch-2/38430 "2016-01-05T20:14:57Z")
https://www.elastic.co/guide/en/elasticsearch/guide/current/\_combining\_queries\_with\_filters.html#filtered-query tells that a filtered query can be used in Elastic search 2.0. But at https://www.elastic.co/guide/en/elasti… --- ## [Multiline not removing \\n](https://discuss.elastic.co/t/multiline-not-removing-n/28659)
**Author:** [@lookingcloudy](https://discuss.elastic.co/u/lookingcloudy)\ **Replies:** 1\ **Last updated:** [September 5, 2015, 3:40am UTC](https://discuss.elastic.co/t/multiline-not-removing-n/28659 "2015-09-05T03:40:22Z")
My log looks like this: User Name,Transaction,Target,Transaction Time,Total Time PCGennes,POLICY LEVEL To INTEREST,PCG - TBA,01/09/2015 16:13:02:316 - 01/09/2015 16:13:04:100,1.78 ,,,Request Time:,0.39 ,,,Server Time:,… --- ## [Control over writing data to a specific drive](https://discuss.elastic.co/t/control-over-writing-data-to-a-specific-drive/271695)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 6\ **Last updated:** [May 3, 2021, 7:52pm UTC](https://discuss.elastic.co/t/control-over-writing-data-to-a-specific-drive/271695 "2021-05-03T19:52:36Z")
We are planning to use single node Elasticsearch cluster. The node may contain multiple locations for writing indexing data. I would like to know, if it is possible to write the data to a specific indexing location only… --- ## [Cant start ES because too many shards](https://discuss.elastic.co/t/cant-start-es-because-too-many-shards/196792)
**Author:** [@chrism1](https://discuss.elastic.co/u/chrism1)\ **Replies:** 6\ **Last updated:** [August 28, 2019, 10:48am UTC](https://discuss.elastic.co/t/cant-start-es-because-too-many-shards/196792 "2019-08-28T10:48:23Z")
We have an ES installation where we have 4000 indexes and 40,000 shards. Its clear that this is not a good idea, but we cant get Elastic to start to do anything about it. Any ideas how we can get Elastic to start up? We… --- ## [How to do inplace update in elasticsearch alternate to script?](https://discuss.elastic.co/t/how-to-do-inplace-update-in-elasticsearch-alternate-to-script/133377)
**Author:** [@vasanth\_kumar](https://discuss.elastic.co/u/vasanth_kumar)\ **Replies:** 6\ **Last updated:** [May 30, 2018, 5:39pm UTC](https://discuss.elastic.co/t/how-to-do-inplace-update-in-elasticsearch-alternate-to-script/133377 "2018-05-30T17:39:44Z")
How to do inplace update in elasticsearch alternate to script? Use-case is, while indexing we need to do something similar to this, { total: 300\[emp\_1+emp\_2\] emp\_1: 100, emp\_2: 200, } We tried script(ctx.\_source.t… --- ## [How to add custom filed to a existing elastic data source?](https://discuss.elastic.co/t/how-to-add-custom-filed-to-a-existing-elastic-data-source/71686)
**Author:** [@sabyasachi\_mallick](https://discuss.elastic.co/u/sabyasachi_mallick)\ **Replies:** 6\ **Last updated:** [January 16, 2017, 10:50am UTC](https://discuss.elastic.co/t/how-to-add-custom-filed-to-a-existing-elastic-data-source/71686 "2017-01-16T10:50:17Z")
i have an existing elastic data source with around 42000 rows. and also i am updating it daily.I want to add a custom filed , whose value will depend on two other fields . e.g i have 2 existing field P and Q i want to a… --- ## [Regexp in query\_string not returning a matching document](https://discuss.elastic.co/t/regexp-in-query-string-not-returning-a-matching-document/7496)
**Author:** [@Robin\_Boutros](https://discuss.elastic.co/u/Robin_Boutros)\ **Replies:** 6\ **Last updated:** [April 29, 2012, 6:22pm UTC](https://discuss.elastic.co/t/regexp-in-query-string-not-returning-a-matching-document/7496 "2012-04-29T18:22:49Z")
I'm searching with this simple query (autocompletion feature) { query { string "title:#{keywords}\*" } } Let's say I have a document with the title: Eliminate texting while driving. - If keywords is elimin … [Previous page](https://discuss.elastic.co/top.md?page=1312&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1314&per_page=50&period=all)