# Top **URL:** https://discuss.elastic.co/top.md?page=1317&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1318 --- ## [Elasticsearch 7.5.1 RPM update prevents restart of service](https://discuss.elastic.co/t/elasticsearch-7-5-1-rpm-update-prevents-restart-of-service/213636)
**Author:** [@erempel](https://discuss.elastic.co/u/erempel)\ **Replies:** 3\ **Last updated:** [January 6, 2020, 10:17pm UTC](https://discuss.elastic.co/t/elasticsearch-7-5-1-rpm-update-prevents-restart-of-service/213636 "2020-01-06T22:17:44Z")
Updating an existing install of elasticsearch 7.x with the RPM package provided for ES 7.5.1-1 removes the group permissions on /etc/elasticsearch which results in an error when trying to start elasticsearch. rpm -qlv e… --- ## [APM Catch Java Exception](https://discuss.elastic.co/t/apm-catch-java-exception/147513)
**Author:** [@Terry\_Xia](https://discuss.elastic.co/u/Terry_Xia)\ **Replies:** 3\ **Last updated:** [September 6, 2018, 1:03pm UTC](https://discuss.elastic.co/t/apm-catch-java-exception/147513 "2018-09-06T13:03:16Z")
Hi Elastic Team: I successfully built my Elastic APM system, the versions of each module are as follows: Tomcat : 8.5.32 Java: 1.8.0\_161 APM Server : 6.3 APM Agent : 0.6 Elastic :6.3 Kibana:6.3 I made a code that… --- ## [Unable to parse a simple log file using logstash](https://discuss.elastic.co/t/unable-to-parse-a-simple-log-file-using-logstash/82582)
**Author:** [@ItsMeSurajR](https://discuss.elastic.co/u/ItsMeSurajR)\ **Replies:** 3\ **Last updated:** [April 18, 2017, 10:10pm UTC](https://discuss.elastic.co/t/unable-to-parse-a-simple-log-file-using-logstash/82582 "2017-04-18T22:10:46Z")
I'm a beginner and I could able to parse a log file successfully before. But all after a sudden, even a simple conf isn't working. Can anyone tell me what's wrong here? There are no errors, everything looks ok for me but… --- ## [Shard Failed - Too many levels of symbolic links](https://discuss.elastic.co/t/shard-failed-too-many-levels-of-symbolic-links/82006)
**Author:** [@Gon180](https://discuss.elastic.co/u/Gon180)\ **Replies:** 3\ **Last updated:** [April 18, 2017, 8:58am UTC](https://discuss.elastic.co/t/shard-failed-too-many-levels-of-symbolic-links/82006 "2017-04-18T08:58:14Z")
Hello everybody!! It´s my first post here. I´ve been looking for and answer to my problem but i didn´t find anything, so there it goes. I have a cluster with three nodes whit version 5.1.1. As you can see there and s… --- ## [GC increase avg query time!](https://discuss.elastic.co/t/gc-increase-avg-query-time/55036)
**Author:** [@eprst](https://discuss.elastic.co/u/eprst)\ **Replies:** 3\ **Last updated:** [July 29, 2016, 11:53am UTC](https://discuss.elastic.co/t/gc-increase-avg-query-time/55036 "2016-07-29T11:53:42Z")
we have several nodes in our elasticsearch cluster( each shard have only 1 replica though ), but even if one of them call gc i see that qtime is increasing and our web app responce time as well. i think we use default g… --- ## [How to create geo-point fields from longitude / latitude](https://discuss.elastic.co/t/how-to-create-geo-point-fields-from-longitude-latitude/267179)
**Author:** [@lostsoul352](https://discuss.elastic.co/u/lostsoul352)\ **Replies:** 7\ **Last updated:** [March 14, 2021, 2:33pm UTC](https://discuss.elastic.co/t/how-to-create-geo-point-fields-from-longitude-latitude/267179 "2021-03-14T14:33:25Z")
ELK 7.10. I've used the geoip filter in logstash to get geo data from a remote IP Address. Now I have geo data appearing in elastic. I want to be able to map these on a map chart and I don't understand how to do the … --- ## [Update\_by\_query/delete\_by\_query conflicts=proceed doesn't actually perform the operation?](https://discuss.elastic.co/t/update-by-query-delete-by-query-conflicts-proceed-doesnt-actually-perform-the-operation/255907)
**Author:** [@redec](https://discuss.elastic.co/u/redec)\ **Replies:** 1\ **Last updated:** [November 18, 2020, 10:28pm UTC](https://discuss.elastic.co/t/update-by-query-delete-by-query-conflicts-proceed-doesnt-actually-perform-the-operation/255907 "2020-11-18T22:28:08Z")
I just discovered that conflicts=proceed doesn't mean "proceed with the requested operation when a conflict occurs"...instead it apparently means "just skip doing the requested operation on that document". I really wish… --- ## [How to get .gz files using Gzip\_lines codec plugin from a pipeline?](https://discuss.elastic.co/t/how-to-get-gz-files-using-gzip-lines-codec-plugin-from-a-pipeline/185746)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 7\ **Last updated:** [June 17, 2019, 2:22am UTC](https://discuss.elastic.co/t/how-to-get-gz-files-using-gzip-lines-codec-plugin-from-a-pipeline/185746 "2019-06-17T02:22:32Z")
How to get .gz files using Gzip\_lines codec plugin from a pipeline? input { pipeline { address =\> testgz #has been configured to send .gz files into this pipe codec =\> gzip\_lines } } output { st… --- ## [Does elastic search store the data and logs permanently?](https://discuss.elastic.co/t/does-elastic-search-store-the-data-and-logs-permanently/55655)
**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\ **Replies:** 1\ **Last updated:** [July 15, 2016, 8:37pm UTC](https://discuss.elastic.co/t/does-elastic-search-store-the-data-and-logs-permanently/55655 "2016-07-15T20:37:47Z")
I'm very curious to know whether elastic search stores the data and logs permannetly or deletes the old filess. I'm trying to store the logs and data of few machines permanently, for other servers say for 30 days or up… --- ## [Outputing syslogs to OpenNMS](https://discuss.elastic.co/t/outputing-syslogs-to-opennms/31455)
**Author:** [@hughesr9](https://discuss.elastic.co/u/hughesr9)\ **Replies:** 1\ **Last updated:** [October 1, 2015, 9:19am UTC](https://discuss.elastic.co/t/outputing-syslogs-to-opennms/31455 "2015-10-01T09:19:44Z")
I am trying to send syslogs to OpenNMS which is listening for syslogs on port 10514. This is the config I have currently. output { stdout { } elasticsearch { host =\> "192.168.218.2" } syslog { type =\> syslog … --- ## [Multiline pattern with grok filter](https://discuss.elastic.co/t/multiline-pattern-with-grok-filter/24056)
**Author:** [@Keshav\_Agarwal](https://discuss.elastic.co/u/Keshav_Agarwal)\ **Replies:** 1\ **Last updated:** [June 22, 2015, 5:58pm UTC](https://discuss.elastic.co/t/multiline-pattern-with-grok-filter/24056 "2015-06-22T17:58:02Z")
I am trying to use grok filter for getting multiline patterns in logstash. I've tried using the GRREDYDATA but it doesn't seem to work. Any other method I can opt for doing the multiline pattern match? --- ## [Advice on writing ES plugin](https://discuss.elastic.co/t/advice-on-writing-es-plugin/9253)
**Author:** [@wires](https://discuss.elastic.co/u/wires)\ **Replies:** 7\ **Last updated:** [October 17, 2012, 12:33pm UTC](https://discuss.elastic.co/t/advice-on-writing-es-plugin/9253 "2012-10-17T12:33:49Z")
Hello, I have developed a solution for a customer (http://vpro.nl) to consistently denormalize data while indexing it. The system allows you to extract graph structure and compute attributes based on walks on the… --- ## [How to connect cluster with configured TLS?](https://discuss.elastic.co/t/how-to-connect-cluster-with-configured-tls/287773)
**Author:** [@Mamol27](https://discuss.elastic.co/u/Mamol27)\ **Replies:** 6\ **Last updated:** [October 27, 2021, 8:50pm UTC](https://discuss.elastic.co/t/how-to-connect-cluster-with-configured-tls/287773 "2021-10-27T20:50:37Z")
I have two similar clusters with TLS configured on each. What I need to do to connect to each other as remote cluster? Need I add ca to keystore on each node or what? What to do with secured HTTPS traffic? cluster.na… --- ## [Unable to setup built user password for elastic search 6.2.2](https://discuss.elastic.co/t/unable-to-setup-built-user-password-for-elastic-search-6-2-2/221370)
**Author:** [@ajit519](https://discuss.elastic.co/u/ajit519)\ **Replies:** 6\ **Last updated:** [February 28, 2020, 2:00pm UTC](https://discuss.elastic.co/t/unable-to-setup-built-user-password-for-elastic-search-6-2-2/221370 "2020-02-28T14:00:32Z")
Hi I am running single node elasticsearch and try to run elasticsearch in https. I was following the url https://www.elastic.co/blog/how-to-setup-tls-for-elasticsearch-kibana-logstash-filebeat-with-offline-install-in-li… --- ## [Where should I add Analyzer?](https://discuss.elastic.co/t/where-should-i-add-analyzer/48291)
**Author:** [@loez1](https://discuss.elastic.co/u/loez1)\ **Replies:** 6\ **Last updated:** [April 26, 2016, 2:52pm UTC](https://discuss.elastic.co/t/where-should-i-add-analyzer/48291 "2016-04-26T14:52:12Z")
Hi, I'm a beginner and I want to use some analyzer in my code to add synonym and to eliminate stopwords but I don't know where I must add it exactly ! (after first query ? or after second query ? ...) my code look li… --- ## [Remove fields based on a regex in the ingest pipeline](https://discuss.elastic.co/t/remove-fields-based-on-a-regex-in-the-ingest-pipeline/304447)
**Author:** [@Althea\_Vestrit](https://discuss.elastic.co/u/Althea_Vestrit)\ **Replies:** 2\ **Last updated:** [May 18, 2022, 11:23am UTC](https://discuss.elastic.co/t/remove-fields-based-on-a-regex-in-the-ingest-pipeline/304447 "2022-05-18T11:23:23Z")
Hello, I use elastic-agents to save docker logs by using the "Custom logs" integration. When uploading logs, fields are added according to the labels of the different containers from which the logs are retrieved. Howe… --- ## [Sample data (kibana\_sample\_data\_ecommerce) Question](https://discuss.elastic.co/t/sample-data-kibana-sample-data-ecommerce-question/215411)
**Author:** [@sung\_il\_Kim](https://discuss.elastic.co/u/sung_il_Kim)\ **Replies:** 2\ **Last updated:** [January 21, 2020, 10:22am UTC](https://discuss.elastic.co/t/sample-data-kibana-sample-data-ecommerce-question/215411 "2020-01-21T10:22:13Z")
Hello everyone. I'm a newbie in Korea. I've some questions about nested objects. Oh, I already know that Kibana doesn't support nested objects yet. But I'm curious about sample data - 'kibana\_sample\_data\_ecommerce' o… --- ## [Enable logging in the plugin ruby script](https://discuss.elastic.co/t/enable-logging-in-the-plugin-ruby-script/27335)
**Author:** [@rishi](https://discuss.elastic.co/u/rishi)\ **Replies:** 2\ **Last updated:** [June 10, 2016, 2:36pm UTC](https://discuss.elastic.co/t/enable-logging-in-the-plugin-ruby-script/27335 "2016-06-10T14:36:14Z")
I wanted to enable logging in my plugin ruby script and added the following line in the register method: LogStash::Logger.setup\_log4j(@logger) I have the log4j and the slf4j jars in my runtime dependencies. When I … --- ## [Date format on Logstash](https://discuss.elastic.co/t/date-format-on-logstash/38364)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 2\ **Last updated:** [January 5, 2016, 8:10am UTC](https://discuss.elastic.co/t/date-format-on-logstash/38364 "2016-01-05T08:10:27Z")
I using logstash 2.1.1 and i create format indices on Output Elasticsearch with config \[image\] Before i using format "Name-Indices-YYYY-MM-dd", now i change to weekly format (above image) "Name-Indices-GGGG-WW" but i g… --- ## [Can ES plugin talk to requests coming from port 9300?](https://discuss.elastic.co/t/can-es-plugin-talk-to-requests-coming-from-port-9300/27070)
**Author:** [@ayushsangani](https://discuss.elastic.co/u/ayushsangani)\ **Replies:** 2\ **Last updated:** [August 10, 2015, 3:16pm UTC](https://discuss.elastic.co/t/can-es-plugin-talk-to-requests-coming-from-port-9300/27070 "2015-08-10T15:16:07Z")
Hi All, I am writing a ES plugin which will intercept all the requests from a API before going to Elasticsearch i.e. technically all the ES requests will be intercepted by this plugin. Requests from port 9200 is interc… --- ## [Using analyzers based on language detection](https://discuss.elastic.co/t/using-analyzers-based-on-language-detection/19503)
**Author:** [@Nitin\_Maheshwari](https://discuss.elastic.co/u/Nitin_Maheshwari)\ **Replies:** 2\ **Last updated:** [August 28, 2014, 8:54am UTC](https://discuss.elastic.co/t/using-analyzers-based-on-language-detection/19503 "2014-08-28T08:54:56Z")
Hi, I am using langdetect plugin to dynamically assign the analyzer at index time. PUT test POST test/article/\_mapping { "article" : { "\_analyzer" : { "path" : "description.lang" }, … --- ## [Abort requested query](https://discuss.elastic.co/t/abort-requested-query/12649)
**Author:** [@Robin\_Verlangen](https://discuss.elastic.co/u/Robin_Verlangen)\ **Replies:** 2\ **Last updated:** [July 5, 2013, 8:14am UTC](https://discuss.elastic.co/t/abort-requested-query/12649 "2013-07-05T08:14:46Z")
Hi there, Is it possible with the java client to abort an already started query? This would look like this: 1. Prepare query 2. Execute 3. Wait a while (maybe 1-2 seconds) 4. Notice that the query result isn't … --- ## [Export data to pdf](https://discuss.elastic.co/t/export-data-to-pdf/356191)
**Author:** [@Fatiha](https://discuss.elastic.co/u/Fatiha)\ **Replies:** 5\ **Last updated:** [March 28, 2024, 4:52pm UTC](https://discuss.elastic.co/t/export-data-to-pdf/356191 "2024-03-28T16:52:00Z")
HI I want to export my charts that I visualize in kibana to pdf I can't find this option in my dashboard hwo can I export my charts to pdf ?? --- ## [Elastic-agent loading default Dashboards](https://discuss.elastic.co/t/elastic-agent-loading-default-dashboards/309556)
**Author:** [@Muhammed\_Ashique](https://discuss.elastic.co/u/Muhammed_Ashique)\ **Replies:** 5\ **Last updated:** [July 15, 2022, 5:50am UTC](https://discuss.elastic.co/t/elastic-agent-loading-default-dashboards/309556 "2022-07-15T05:50:36Z")
I am upgrading beats to elastic-agents for shipping the logs. How can i load default dashboards using elastic beats. what are the communication port i need to enable to achieve this requirements --- ## [Kibana drill down fields](https://discuss.elastic.co/t/kibana-drill-down-fields/300970)
**Author:** [@bianca6](https://discuss.elastic.co/u/bianca6)\ **Replies:** 5\ **Last updated:** [March 30, 2022, 8:09am UTC](https://discuss.elastic.co/t/kibana-drill-down-fields/300970 "2022-03-30T08:09:11Z")
Hi, I have some logs like this: country = France, city = Paris, value = 6 country = France, city = Marseille, value = 2 country = Italy, city = Roma, value = 8 In a Kibana dashboards, I can display the countries and s… --- ## [Index pre-analyzed text by sending the actual terms/tokens?](https://discuss.elastic.co/t/index-pre-analyzed-text-by-sending-the-actual-terms-tokens/254989)
**Author:** [@johann-petrak](https://discuss.elastic.co/u/johann-petrak)\ **Replies:** 5\ **Last updated:** [November 12, 2020, 2:17pm UTC](https://discuss.elastic.co/t/index-pre-analyzed-text-by-sending-the-actual-terms-tokens/254989 "2020-11-12T14:17:52Z")
Is it possible to somehow pass on an already pre-analyzed stream of terms/tokens to an index for a field? I already have my text broken up into tokens, I have the offsets, I can produce everything an analyzer could prod… --- ## [Failure in create-index operation doesn't create error](https://discuss.elastic.co/t/failure-in-create-index-operation-doesnt-create-error/213115)
**Author:** [@nickcanz](https://discuss.elastic.co/u/nickcanz)\ **Replies:** 5\ **Last updated:** [January 2, 2020, 1:12pm UTC](https://discuss.elastic.co/t/failure-in-create-index-operation-doesnt-create-error/213115 "2020-01-02T13:12:02Z")
Hi! I was creating a custom track and accidentally specified invalid index settings. My problem is that esrally happily continued on and didn't produce any output that alerted me to this fact and I was just confused tha… --- ## [Multiline Codec logstash for log level](https://discuss.elastic.co/t/multiline-codec-logstash-for-log-level/193094)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 5\ **Last updated:** [August 1, 2019, 11:23am UTC](https://discuss.elastic.co/t/multiline-codec-logstash-for-log-level/193094 "2019-08-01T11:23:48Z")
Hi I have a log entry sample as below. every line starts with i.e., log level. Few log entries would be on the same line but few would be in multiple lines. Can you please suggest the logstash file input multiline cod… --- ## [Unable install logstash-output-email plugin on logstash 5.5.2](https://discuss.elastic.co/t/unable-install-logstash-output-email-plugin-on-logstash-5-5-2/113808)
**Author:** [@govinda.rao](https://discuss.elastic.co/u/govinda.rao)\ **Replies:** 5\ **Last updated:** [January 5, 2018, 9:16pm UTC](https://discuss.elastic.co/t/unable-install-logstash-output-email-plugin-on-logstash-5-5-2/113808 "2018-01-05T21:16:19Z")
Hi, I have logstash 5.5.2 and when installing email plugin "logstash-output-email" all the time i am getting below error. please help ERROR: Something went wrong when installing logstash-output-email, message: 403 "Forb… --- ## [Yet another multiline plea for help please](https://discuss.elastic.co/t/yet-another-multiline-plea-for-help-please/65536)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 5\ **Last updated:** [November 10, 2016, 2:38pm UTC](https://discuss.elastic.co/t/yet-another-multiline-plea-for-help-please/65536 "2016-11-10T14:38:06Z")
I've looked over multiple posts including this one on how to parse multiline log patterns like I have below. Seems like I'm following the solutions given, but Kibana still shows my logs into multiple documents. Here's … --- ## [Probem of restitution with a "-"](https://discuss.elastic.co/t/probem-of-restitution-with-a/59325)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 5\ **Last updated:** [September 16, 2016, 8:50pm UTC](https://discuss.elastic.co/t/probem-of-restitution-with-a/59325 "2016-09-16T20:50:31Z")
Hello, When I import data in ElasticSearch , I have a problem on a string that contains "-". Ex: TEST-1 this value (type is string in Indices) appears in Discover "TEST-1" , but when I want to make a visualize table, … --- ## [Can I use map if I only have country name?](https://discuss.elastic.co/t/can-i-use-map-if-i-only-have-country-name/225025)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 1\ **Last updated:** [March 26, 2020, 3:41am UTC](https://discuss.elastic.co/t/can-i-use-map-if-i-only-have-country-name/225025 "2020-03-26T03:41:53Z")
Hello, In the documents I have only the country name is there a way I can use the map app with that? Regards, Peter --- ## [Scroll api performance is very slow](https://discuss.elastic.co/t/scroll-api-performance-is-very-slow/110482)
**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\ **Replies:** 1\ **Last updated:** [December 6, 2017, 10:46am UTC](https://discuss.elastic.co/t/scroll-api-performance-is-very-slow/110482 "2017-12-06T10:46:18Z")
Hi Team, I used scroll api to get records more than 10000.I am trying to fetch approx 4 lack records and size parameter set to 50 thousand. but the performance is very slow.could you let me know any other api or any oth… --- ## [Index not created](https://discuss.elastic.co/t/index-not-created/107562)
**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\ **Replies:** 1\ **Last updated:** [November 14, 2017, 5:44pm UTC](https://discuss.elastic.co/t/index-not-created/107562 "2017-11-14T17:44:06Z")
Hi, My Config file is following: input { jdbc { jdbc\_driver\_library =\> "/app/sqljdbc4-2.0.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc\_connection\_string =\> "jdbc:sqlserver://10.124.… --- ## [Script vs Document for partial update](https://discuss.elastic.co/t/script-vs-document-for-partial-update/64494)
**Author:** [@vijai.natarajan](https://discuss.elastic.co/u/vijai.natarajan)\ **Replies:** 1\ **Last updated:** [November 1, 2016, 5:37am UTC](https://discuss.elastic.co/t/script-vs-document-for-partial-update/64494 "2016-11-01T05:37:31Z")
I saw there are two ways to do partial update. One is via doc parameter and one via scripts. https://www.elastic.co/guide/en/elasticsearch/guide/master/partial-updates.html I like to know which one is better. What are … --- ## [Machine Learning tools on Elasticsearch](https://discuss.elastic.co/t/machine-learning-tools-on-elasticsearch/44398)
**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\ **Replies:** 1\ **Last updated:** [March 16, 2016, 8:44pm UTC](https://discuss.elastic.co/t/machine-learning-tools-on-elasticsearch/44398 "2016-03-16T20:44:23Z")
Hello! As part of my project at college, I've now been asked to move on from ELK and perform Machine Learning analytics on the data I have. Is there a suitable tool for doing this over the Elasticsearch indices? --- ## [Connecting to ElasticSearch using Java API](https://discuss.elastic.co/t/connecting-to-elasticsearch-using-java-api/43649)
**Author:** [@pinky](https://discuss.elastic.co/u/pinky)\ **Replies:** 1\ **Last updated:** [March 7, 2016, 6:29pm UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-using-java-api/43649 "2016-03-07T18:29:58Z")
We are trying to connect to elastic search 2.1.1 version , by creating a client class in spring . Added the required dependencies as folows, org.elasticsearch elasticsearch 2.1.1 \ \ **Author:** [@RJ\_Militante](https://discuss.elastic.co/u/RJ_Militante)\ **Replies:** 1\ **Last updated:** [February 8, 2016, 7:16pm UTC](https://discuss.elastic.co/t/scripting-dynamic-elasticsearch-queries-inside-kibana-visualization/40761 "2016-02-08T19:16:39Z") Hi I'm new to the ELK stack. I'm using Kibana 4.1. I've managed to use the Elasticsearch Query DSL to run searches within Kibana's Discover interface to capture a data set, then used that saved search to create a new V… --- ## [I want to delete my account here. How do I remove or disable my account?](https://discuss.elastic.co/t/i-want-to-delete-my-account-here-how-do-i-remove-or-disable-my-account/317218)
**Author:** [@anon65617794](https://discuss.elastic.co/u/anon65617794)\ **Replies:** 3\ **Last updated:** [October 22, 2022, 1:39am UTC](https://discuss.elastic.co/t/i-want-to-delete-my-account-here-how-do-i-remove-or-disable-my-account/317218 "2022-10-22T01:39:19Z")
I want to delete my account here. How do I remove or disable my account? --- ## [Output to json saving only specific fields](https://discuss.elastic.co/t/output-to-json-saving-only-specific-fields/280098)
**Author:** [@Hamza\_El\_Aouane](https://discuss.elastic.co/u/Hamza_El_Aouane)\ **Replies:** 3\ **Last updated:** [July 30, 2021, 7:57pm UTC](https://discuss.elastic.co/t/output-to-json-saving-only-specific-fields/280098 "2021-07-30T19:57:42Z")
Hello everyone I am new logstash and I am sorry if the question is so basic. I have been saving my syslog into a csv file, as follow: csv { path =\> "C:\\path\\Desktop\\Adib\\adib-syslogs-%{+yyyy.MM.dd}.csv" csv\_o… --- ## [Ruby exception occurred: undefined method \`\[\]' for #\ **Author:** [@sujeetjha](https://discuss.elastic.co/u/sujeetjha)\ **Replies:** 3\ **Last updated:** [November 21, 2020, 2:02pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-logstash/256131 "2020-11-21T14:02:51Z") filter { ## Ignore the comments that IIS will add to the start of the W3C logs # if \[message\] =~ "^#" { drop {} } grok { ## Very helpful site for building these statements: # http://grokdebug.her… --- ## [What happens if output (redis, kafka, logstash, ...) is not available?](https://discuss.elastic.co/t/what-happens-if-output-redis-kafka-logstash-is-not-available/198716)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 3\ **Last updated:** [September 11, 2019, 3:27pm UTC](https://discuss.elastic.co/t/what-happens-if-output-redis-kafka-logstash-is-not-available/198716 "2019-09-11T15:27:34Z")
Hi, currently I am using metricbeat with file output. Then filebeat is fetching the log and delivering to redis. I know that metricbeat has redis output capability like filebeat. So I would like to understand what hap… --- ## [ES 6.3.2 Rollup avg metric does a sum instead?](https://discuss.elastic.co/t/es-6-3-2-rollup-avg-metric-does-a-sum-instead/146875)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 3\ **Last updated:** [August 31, 2018, 9:04pm UTC](https://discuss.elastic.co/t/es-6-3-2-rollup-avg-metric-does-a-sum-instead/146875 "2018-08-31T21:04:33Z")
Hi Team, I think either there is a bug or I'm doing something silly. This is my rollup job GET /\_xpack/rollup/job/my-job/?pretty: { "jobs" : \[ { "config" : { "id" : "my-job", "index\_pattern… --- ## [Search for Facet/Aggregation value](https://discuss.elastic.co/t/search-for-facet-aggregation-value/123816)
**Author:** [@Mindtech](https://discuss.elastic.co/u/Mindtech)\ **Replies:** 3\ **Last updated:** [March 14, 2018, 1:53pm UTC](https://discuss.elastic.co/t/search-for-facet-aggregation-value/123816 "2018-03-14T13:53:22Z")
The main reasons we switched to Algolia was the speed and ability to search within Facet values (https://blog.algolia.com/search-for-facet-values/) Now that Elasticsearch supports index time sorting, we might consider c… --- ## [High Availability ES](https://discuss.elastic.co/t/high-availability-es/120793)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 3\ **Last updated:** [February 22, 2018, 8:14am UTC](https://discuss.elastic.co/t/high-availability-es/120793 "2018-02-22T08:14:48Z")
Hi, Moving the Elastic Search to the Production, Would like to have the High Availability, if Master Elastic Search server stops abruptly for some reason, Secondary server should come up and make the indices available o… --- ## [Widget Border + Reloading](https://discuss.elastic.co/t/widget-border-reloading/64863)
**Author:** [@cerias](https://discuss.elastic.co/u/cerias)\ **Replies:** 3\ **Last updated:** [November 4, 2016, 5:38pm UTC](https://discuss.elastic.co/t/widget-border-reloading/64863 "2016-11-04T17:38:08Z")
Hello! :slight\_smile: Today i switched from elk stack \<5 to 5. There are many great new thinks, but: Is there a way to get the widget borders back? In the current layout it is really hard for me to get the right d… --- ## [How to get query time?](https://discuss.elastic.co/t/how-to-get-query-time/4472)
**Author:** [@maho](https://discuss.elastic.co/u/maho)\ **Replies:** 3\ **Last updated:** [May 25, 2011, 1:25pm UTC](https://discuss.elastic.co/t/how-to-get-query-time/4472 "2011-05-25T13:25:16Z")
Hi, is it possible to get the query time for searching and indexing? One year ago it was discussed: In http://elasticsearch-users.115913.n3.nabble.com/Elapsed-query-time-td428663.html --- ## [Curl indices.memory.index\_buffer\_size?](https://discuss.elastic.co/t/curl-indices-memory-index-buffer-size/18781)
**Author:** [@Chris\_Berry\_2](https://discuss.elastic.co/u/Chris_Berry_2)\ **Replies:** 0\ **Last updated:** [July 22, 2014, 5:24am UTC](https://discuss.elastic.co/t/curl-indices-memory-index-buffer-size/18781 "2014-07-22T05:24:11Z")
Hello, I am trying to set indices.memory.index\_buffer\_size to 30% using curl to my running cluster And I am not able to make it "stick" I am doing this: $ curl -XPUT http://foo:9200/\_cluster/settings -d '{ … --- ## [Elapsed time between consecutive logs](https://discuss.elastic.co/t/elapsed-time-between-consecutive-logs/97216)
**Author:** [@Robert\_Kovacs](https://discuss.elastic.co/u/Robert_Kovacs)\ **Replies:** 4\ **Last updated:** [August 17, 2017, 9:23am UTC](https://discuss.elastic.co/t/elapsed-time-between-consecutive-logs/97216 "2017-08-17T09:23:09Z")
I know a quite similar question was raised in Time between timestamp but a clear answer wasn’t given there. I would like to calculate the difference between every consecutive logs timestamp and insert the result as a ne… --- ## [How can split kibana discovery log in column permanently?](https://discuss.elastic.co/t/how-can-split-kibana-discovery-log-in-column-permanently/95474)
**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\ **Replies:** 4\ **Last updated:** [August 9, 2017, 6:00am UTC](https://discuss.elastic.co/t/how-can-split-kibana-discovery-log-in-column-permanently/95474 "2017-08-09T06:00:06Z")
Kibana Discovery logs format: host:VM\_5 source:/home/user/user.log message:smsStatus : \[SENT\] But I wish log format: host: source: message: VM\_5 /home/user/user.log smsStatus : \[SENT\] [Previous page](https://discuss.elastic.co/top.md?page=1316&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1318&per_page=50&period=all)