# Top **URL:** https://discuss.elastic.co/top.md?page=1321&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1322 --- ## [Context Suggester 'No mapping defined for"](https://discuss.elastic.co/t/context-suggester-no-mapping-defined-for/34195)
**Author:** [@Joao\_Pedro\_Goncalves](https://discuss.elastic.co/u/Joao_Pedro_Goncalves)\ **Replies:** 2\ **Last updated:** [November 9, 2015, 8:17pm UTC](https://discuss.elastic.co/t/context-suggester-no-mapping-defined-for/34195 "2015-11-09T20:17:50Z")
NEW ERROR: Hi again. Im updating the main post, to be more visible the problem. Im trying to do context suggest, and in all shard i get the following error: { "\_shards": { "total": 5, "successful": 0, "fa… --- ## [Kibana 4.1.2 Small dashboard issues](https://discuss.elastic.co/t/kibana-4-1-2-small-dashboard-issues/33397)
**Author:** [@jaminvp](https://discuss.elastic.co/u/jaminvp)\ **Replies:** 2\ **Last updated:** [November 5, 2015, 7:42am UTC](https://discuss.elastic.co/t/kibana-4-1-2-small-dashboard-issues/33397 "2015-11-05T07:42:24Z")
Greetings, I'm currently struggling with two issues: 1) Scrollbars. I want to avoid extra scrollbars at all costs. I currently have a search query placed below the visualization panels in my dashboard. This allows me… --- ## [Logstash TCP Zero Window - Palo Alto logs](https://discuss.elastic.co/t/logstash-tcp-zero-window-palo-alto-logs/295396)
**Author:** [@groth](https://discuss.elastic.co/u/groth)\ **Replies:** 3\ **Last updated:** [January 25, 2022, 10:36pm UTC](https://discuss.elastic.co/t/logstash-tcp-zero-window-palo-alto-logs/295396 "2022-01-25T22:36:06Z")
New to troubleshooting Logstash performance issues. I have a cluster of 3 load balanced virtual servers running Logstash that forward on to Elasticsearch in the cloud. We've noticed that we're not getting all of our logs… --- ## [Filebeat for logs that send once every couple days](https://discuss.elastic.co/t/filebeat-for-logs-that-send-once-every-couple-days/209370)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 3\ **Last updated:** [November 27, 2019, 2:08pm UTC](https://discuss.elastic.co/t/filebeat-for-logs-that-send-once-every-couple-days/209370 "2019-11-27T14:08:35Z")
Hi, I'm running into some issues with logs I'm shipping with filebeat to logstash. I'm not quite sure what the issue is, but the file with the logs only refreshes once a day or once every two days with one or two lines … --- ## [Capturing and Visualizing Threaded HTTP Requests](https://discuss.elastic.co/t/capturing-and-visualizing-threaded-http-requests/196200)
**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\ **Replies:** 3\ **Last updated:** [September 5, 2019, 12:29pm UTC](https://discuss.elastic.co/t/capturing-and-visualizing-threaded-http-requests/196200 "2019-09-05T12:29:23Z")
I'm using the APM Python Flask agent and visualizing results on Kibana. HTTP requests made on the main thread are captured but It looks like threaded HTTP requests are not captured. I'm wondering if capturing threaded … --- ## [Logstash 6.7 and Java 11 with .deb or .rpm repositories not working](https://discuss.elastic.co/t/logstash-6-7-and-java-11-with-deb-or-rpm-repositories-not-working/174505)
**Author:** [@arviaja](https://discuss.elastic.co/u/arviaja)\ **Replies:** 3\ **Last updated:** [April 3, 2019, 6:58am UTC](https://discuss.elastic.co/t/logstash-6-7-and-java-11-with-deb-or-rpm-repositories-not-working/174505 "2019-04-03T06:58:45Z")
Hi there, I've been trying to install Logstash 6.7 from the repositories which Elastic provides (based on these guides RPM and DEB and Java 11 from Oracle and alternatively with OpenJDK 11. I've tried both on Ubuntu 18… --- ## [How to add submenu for plugin on left side](https://discuss.elastic.co/t/how-to-add-submenu-for-plugin-on-left-side/52678)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 3\ **Last updated:** [August 3, 2016, 5:25am UTC](https://discuss.elastic.co/t/how-to-add-submenu-for-plugin-on-left-side/52678 "2016-08-03T05:25:47Z")
how to add submenu for plugin on left side? --- ## [How exactly Elastic search stores the data?](https://discuss.elastic.co/t/how-exactly-elastic-search-stores-the-data/14082)
**Author:** [@stalin3443](https://discuss.elastic.co/u/stalin3443)\ **Replies:** 3\ **Last updated:** [October 24, 2013, 6:48am UTC](https://discuss.elastic.co/t/how-exactly-elastic-search-stores-the-data/14082 "2013-10-24T06:48:07Z")
Hi All, I'm newbie to Elastic search from RDBMS background. In Relational databases, the indexing part stores only indexed column data, and physical address of the exact block on the disk. while coming to ES, … --- ## [Drop documents with empty field](https://discuss.elastic.co/t/drop-documents-with-empty-field/215161)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 5\ **Last updated:** [January 15, 2020, 6:07pm UTC](https://discuss.elastic.co/t/drop-documents-with-empty-field/215161 "2020-01-15T18:07:06Z")
I'm having difficulty finding the right syntax to drop a document with an empty field. I'm using aggregate maps. Here is my code.... filter { aggregate { task\_id =\> "%{asset\_id}%{vulnerability\_id}" code =\> … --- ## [Logstach Aggregation filter not working. Data is not displayed in nested columns](https://discuss.elastic.co/t/logstach-aggregation-filter-not-working-data-is-not-displayed-in-nested-columns/177525)
**Author:** [@aldol](https://discuss.elastic.co/u/aldol)\ **Replies:** 5\ **Last updated:** [April 21, 2019, 11:01pm UTC](https://discuss.elastic.co/t/logstach-aggregation-filter-not-working-data-is-not-displayed-in-nested-columns/177525 "2019-04-21T23:01:46Z")
I have created the following aggregation in logstach. The data is not aggregated and is displayed next to the parent columns whereas they are supposed to be displayed in the nested columns: Here is the mapping before ru… --- ## [Selecting documents in elasticsearch](https://discuss.elastic.co/t/selecting-documents-in-elasticsearch/74652)
**Author:** [@daaakeee](https://discuss.elastic.co/u/daaakeee)\ **Replies:** 5\ **Last updated:** [February 11, 2017, 6:46am UTC](https://discuss.elastic.co/t/selecting-documents-in-elasticsearch/74652 "2017-02-11T06:46:47Z")
I am trying to select documents that contain another document in elasticsearch grouped by id field.. I think it is more understable by the next example: "doc1": { "id": "firstid" "my\_field":"1" } "doc2": { … --- ## [ERROR co.elastic.apm.agent.bci.IndyBootstrap - Advice threw an exception, this should never happen! java.lang.NoSuchMethodError](https://discuss.elastic.co/t/error-co-elastic-apm-agent-bci-indybootstrap-advice-threw-an-exception-this-should-never-happen-java-lang-nosuchmethoderror/348150)
**Author:** [@miguel.longo](https://discuss.elastic.co/u/miguel.longo)\ **Replies:** 4\ **Last updated:** [November 29, 2023, 11:28am UTC](https://discuss.elastic.co/t/error-co-elastic-apm-agent-bci-indybootstrap-advice-threw-an-exception-this-should-never-happen-java-lang-nosuchmethoderror/348150 "2023-11-29T11:28:09Z")
Kibana version: 8.6.2 Elasticsearch version: 8.6.2 APM Server version: 8.6.2 APM Agent language and version: java/1.43.0 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Docker s… --- ## [Visualize List files from logs](https://discuss.elastic.co/t/visualize-list-files-from-logs/327944)
**Author:** [@Oniriel](https://discuss.elastic.co/u/Oniriel)\ **Replies:** 4\ **Last updated:** [April 17, 2023, 3:38pm UTC](https://discuss.elastic.co/t/visualize-list-files-from-logs/327944 "2023-04-17T15:38:46Z")
Hi, I have an index that I try to create visualization on for monitoring. Some of the logs have the following structure TEXT - path of a file - TEXT the same file can appear multiple time in the logs I can successful… --- ## [Field added by Logstash Grok can't be used in Kibana filters](https://discuss.elastic.co/t/field-added-by-logstash-grok-cant-be-used-in-kibana-filters/267122)
**Author:** [@b133](https://discuss.elastic.co/u/b133)\ **Replies:** 4\ **Last updated:** [March 15, 2021, 7:46pm UTC](https://discuss.elastic.co/t/field-added-by-logstash-grok-cant-be-used-in-kibana-filters/267122 "2021-03-15T19:46:48Z")
I added a hostname field to my index using Logstash Grok: grok { match =\> { "originsicname" =\> "CN=%{HOSTNAME:hostname}," } ... For some reason I cannot use this hostname field as a filter on my dashboards. … --- ## [How to apply different filters based on particular name of files without using Filebeat](https://discuss.elastic.co/t/how-to-apply-different-filters-based-on-particular-name-of-files-without-using-filebeat/186272)
**Author:** [@dundundundun](https://discuss.elastic.co/u/dundundundun)\ **Replies:** 4\ **Last updated:** [June 18, 2019, 7:00pm UTC](https://discuss.elastic.co/t/how-to-apply-different-filters-based-on-particular-name-of-files-without-using-filebeat/186272 "2019-06-18T19:00:19Z")
I want to perform a unique grok filter per log. So let's say for 1.log I want to perform filter A, 2.log I want filter B, and so on. I've copied my input section in the logstash configuration file with psuedo code in the… --- ## [Discover tab shows a different date than the indexed date](https://discuss.elastic.co/t/discover-tab-shows-a-different-date-than-the-indexed-date/150469)
**Author:** [@rohini\_basu](https://discuss.elastic.co/u/rohini_basu)\ **Replies:** 4\ **Last updated:** [September 30, 2018, 1:56pm UTC](https://discuss.elastic.co/t/discover-tab-shows-a-different-date-than-the-indexed-date/150469 "2018-09-30T13:56:32Z")
I am using ELK 6.4.1. I am indexing a date field ExecutionDate. The filter block in logstash config file looks like below: date { match =\> \["ExecutionDate","ISO8601", "dd/MM/yyyy HH:mm:ss.SSS"\] target =\> "ExecutionDa… --- ## [TSL Transport layer "valid certification path to requested target"](https://discuss.elastic.co/t/tsl-transport-layer-valid-certification-path-to-requested-target/137865)
**Author:** [@jordo1138](https://discuss.elastic.co/u/jordo1138)\ **Replies:** 4\ **Last updated:** [June 29, 2018, 9:06pm UTC](https://discuss.elastic.co/t/tsl-transport-layer-valid-certification-path-to-requested-target/137865 "2018-06-29T21:06:25Z")
There are many topics around transport layer tls and fixes etc but the issue I"m running into is on a 3 node cluster ES 6.3 where I have placed the my root ca cert, wild card cert and key in to the /etc/elasticsearch fol… --- ## [Need help Flattening the json array](https://discuss.elastic.co/t/need-help-flattening-the-json-array/128625)
**Author:** [@karnamonkster](https://discuss.elastic.co/u/karnamonkster)\ **Replies:** 4\ **Last updated:** [April 23, 2018, 10:23am UTC](https://discuss.elastic.co/t/need-help-flattening-the-json-array/128625 "2018-04-23T10:23:36Z")
Hi, I am trying to flatten the following json: { "beans" : \[ { "name" : "Hadoop:service=NameNode,name=NameNodeInfo", "modelerType" : "org.apache.hadoop.hdfs.server.namenode.FSNamesystem", "Total" : 976194928640, "Upg… --- ## [Elasticsearch cluster fails to stabilize](https://discuss.elastic.co/t/elasticsearch-cluster-fails-to-stabilize/14926)
**Author:** [@maf](https://discuss.elastic.co/u/maf)\ **Replies:** 4\ **Last updated:** [December 18, 2013, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-fails-to-stabilize/14926 "2013-12-18T10:19:40Z")
I recently built a new Elasticsearch cluster. 3 nodes running ES 0.90.7 and Java 7u45. Each node has 60G of memory and 2T SSD disk. I loaded 3T of data into an index with 128 shards on this cluster. So far so good. … --- ## [Es instance unusable](https://discuss.elastic.co/t/es-instance-unusable/247768)
**Author:** [@lizhu](https://discuss.elastic.co/u/lizhu)\ **Replies:** 6\ **Last updated:** [September 14, 2020, 2:39pm UTC](https://discuss.elastic.co/t/es-instance-unusable/247768 "2020-09-14T14:39:45Z")
Hi I have an es(version 6.8.0) cluster with 5 nodes which have 261 shards that max size is 40G and min size is 700M，vm nodes：16 cpu and 32 G. It became unusable sometimes and print such logs how to trouble shoot? … --- ## [Problem creating dynamic index from filename (filebeat)](https://discuss.elastic.co/t/problem-creating-dynamic-index-from-filename-filebeat/220315)
**Author:** [@Amine\_Maalfi](https://discuss.elastic.co/u/Amine_Maalfi)\ **Replies:** 6\ **Last updated:** [February 24, 2020, 9:31am UTC](https://discuss.elastic.co/t/problem-creating-dynamic-index-from-filename-filebeat/220315 "2020-02-24T09:31:12Z")
Hello, i am trying to create index name same as filename from source but it doesn't seem to work, here's my logstash config file : input { beats{ port=\> 5044 } } filter { grok { … --- ## [Number format exception for geo\_point field](https://discuss.elastic.co/t/number-format-exception-for-geo-point-field/201759)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 6\ **Last updated:** [October 10, 2019, 12:45pm UTC](https://discuss.elastic.co/t/number-format-exception-for-geo-point-field/201759 "2019-10-10T12:45:11Z")
Hi, in elasticsearch log file, we often see this \[2019-10-01 09:39:10,694\]\[INFO \]\[rest.suppressed \] /my\_index/my\_type/1569915520584.1689070526/\_update Params: {version\_type=force, doc\_as\_upsert=true, index=my\_i… --- ## [InvalidFrameProtocolException and Connection reset by peer error](https://discuss.elastic.co/t/invalidframeprotocolexception-and-connection-reset-by-peer-error/181753)
**Author:** [@Eva](https://discuss.elastic.co/u/Eva)\ **Replies:** 6\ **Last updated:** [May 22, 2019, 7:05am UTC](https://discuss.elastic.co/t/invalidframeprotocolexception-and-connection-reset-by-peer-error/181753 "2019-05-22T07:05:26Z")
Hi there I have been trying to use Filebeat to push the logs to logstash and then output it to AWS ES domain. The logs are shown up on AWS Elasticsearch domain when I do not use SSL authentication between Filebeat and L… --- ## [Elasticsearch primary and replica shards not sync after bulk load](https://discuss.elastic.co/t/elasticsearch-primary-and-replica-shards-not-sync-after-bulk-load/140302)
**Author:** [@yanwang](https://discuss.elastic.co/u/yanwang)\ **Replies:** 6\ **Last updated:** [July 19, 2018, 9:17pm UTC](https://discuss.elastic.co/t/elasticsearch-primary-and-replica-shards-not-sync-after-bulk-load/140302 "2018-07-19T21:17:04Z")
Hi Guys, My team has been using the elasticsearch on aws ec2 for searching for about 2 years. We are always bothered by the out-of-sync issue between primary and replica shards. In our elasticsearch cluster we have main… --- ## [Number is being changed](https://discuss.elastic.co/t/number-is-being-changed/99042)
**Author:** [@mmangold](https://discuss.elastic.co/u/mmangold)\ **Replies:** 6\ **Last updated:** [September 5, 2017, 12:26pm UTC](https://discuss.elastic.co/t/number-is-being-changed/99042 "2017-09-05T12:26:07Z")
Hello! I’m having some problems with large numbers in my database. They’re large, but well within the limit for the long type. Here’s a simple example that shows it 100% of the time: POST numbertest/bleh/ { "bleh" … --- ## [Can Elasticsearch automatically normalize vectors for dot\_product?](https://discuss.elastic.co/t/can-elasticsearch-automatically-normalize-vectors-for-dot-product/349151)
**Author:** [@mmaccou](https://discuss.elastic.co/u/mmaccou)\ **Replies:** 7\ **Last updated:** [December 19, 2023, 10:01pm UTC](https://discuss.elastic.co/t/can-elasticsearch-automatically-normalize-vectors-for-dot-product/349151 "2023-12-19T22:01:28Z")
Can Elasticsearch automatically normalize vectors for dot\_product? I haven't found it the docs yet, but wanted to double check here before I manually add the step in my code. --- ## [Using certificates with ElasticSearch Nest client?](https://discuss.elastic.co/t/using-certificates-with-elasticsearch-nest-client/284656)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 1\ **Last updated:** [September 21, 2021, 12:14pm UTC](https://discuss.elastic.co/t/using-certificates-with-elasticsearch-nest-client/284656 "2021-09-21T12:14:20Z")
I am attempting to connect to an ElasticSearch cluster using a set of certificates given to me and a username + password. I have ca-chain public certificate private key I started my code out like this: var settings … --- ## [Need Help Parsing PS command Output using logstash](https://discuss.elastic.co/t/need-help-parsing-ps-command-output-using-logstash/244145)
**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\ **Replies:** 7\ **Last updated:** [August 25, 2020, 6:17pm UTC](https://discuss.elastic.co/t/need-help-parsing-ps-command-output-using-logstash/244145 "2020-08-25T18:17:36Z")
Need Help Parsing PS command Output using logstash. My input file looks like below. Linux VM Ubuntu zzz \*\*\*Thu Jul 23 13:00:11 UTC 2020 USER PID PPID PRI %CPU %MEM VSZ RSS WCHAN S STARTED … --- ## [Why i am not ablle to select my available fields in Percentiles Aggregation Field option in kibana visualization](https://discuss.elastic.co/t/why-i-am-not-ablle-to-select-my-available-fields-in-percentiles-aggregation-field-option-in-kibana-visualization/227900)
**Author:** [@Pacha\_Gopi](https://discuss.elastic.co/u/Pacha_Gopi)\ **Replies:** 7\ **Last updated:** [April 14, 2020, 2:27pm UTC](https://discuss.elastic.co/t/why-i-am-not-ablle-to-select-my-available-fields-in-percentiles-aggregation-field-option-in-kibana-visualization/227900 "2020-04-14T14:27:04Z")
Hi all, I am using latest version of kibana and my task is visualize the API responce time (upstream\_responce\_time in nginx) in kibana dash board on the values of p50,p90,p99.when i select Percentiles Aggregation opit… --- ## [Error sending data to APM server](https://discuss.elastic.co/t/error-sending-data-to-apm-server/183278)
**Author:** [@Gidi\_Kalef](https://discuss.elastic.co/u/Gidi_Kalef)\ **Replies:** 1\ **Last updated:** [May 29, 2019, 10:27am UTC](https://discuss.elastic.co/t/error-sending-data-to-apm-server/183278 "2019-05-29T10:27:55Z")
Hi Guys , im using APM server 6.6 Kibana 6.6 Elastic 6.6 And elastic java apm agent: elastic-apm-agent-1.6.1.jar I Added the following parameters to my entrypoint when i run java application in docker: java -javaag… --- ## [How do I aggregate across subsearches?](https://discuss.elastic.co/t/how-do-i-aggregate-across-subsearches/130825)
**Author:** [@Joshua\_Fox](https://discuss.elastic.co/u/Joshua_Fox)\ **Replies:** 7\ **Last updated:** [May 17, 2018, 3:16pm UTC](https://discuss.elastic.co/t/how-do-i-aggregate-across-subsearches/130825 "2018-05-17T15:16:15Z")
A certain periodic task is supposed to happen once a minute. I send an alert when this is hanging using the following condition in a Threshold Alert. WHEN count() GROUPED OVER top 1 'myPeriodicTaskLog' IS BELOW 1 FO… --- ## [Syslog stream](https://discuss.elastic.co/t/syslog-stream/131425)
**Author:** [@asalma](https://discuss.elastic.co/u/asalma)\ **Replies:** 7\ **Last updated:** [May 11, 2018, 12:51pm UTC](https://discuss.elastic.co/t/syslog-stream/131425 "2018-05-11T12:51:00Z")
Hi, I want to know, please, how can I configure Logstash to retrieve a syslog stream directly. --- ## [Trigger logstash JDBC input plugin](https://discuss.elastic.co/t/trigger-logstash-jdbc-input-plugin/54278)
**Author:** [@lnx](https://discuss.elastic.co/u/lnx)\ **Replies:** 1\ **Last updated:** [June 29, 2016, 12:54pm UTC](https://discuss.elastic.co/t/trigger-logstash-jdbc-input-plugin/54278 "2016-06-29T12:54:23Z")
If I have logstash running with a JDBC input plugin in the configuration, is it possible to send a call to logstash to run that input plugin again? i.e. I have a database which is periodically updated by scripts, I wan… --- ## [Possible to disable session timeout for users in Elastic Cloud?](https://discuss.elastic.co/t/possible-to-disable-session-timeout-for-users-in-elastic-cloud/330149)
**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\ **Replies:** 2\ **Last updated:** [April 18, 2023, 2:27pm UTC](https://discuss.elastic.co/t/possible-to-disable-session-timeout-for-users-in-elastic-cloud/330149 "2023-04-18T14:27:24Z")
We have a dashboard that we display on a TV in the office 24/7 and it seems to get logged out after ~2 weeks. The dashboard graphs are setup to automatically refresh every 10 minutes. We'd prefer if it never logged out b… --- ## [How to set auto-reloading conf files in logstash.yml or pipeline.yml](https://discuss.elastic.co/t/how-to-set-auto-reloading-conf-files-in-logstash-yml-or-pipeline-yml/327425)
**Author:** [@terrymu](https://discuss.elastic.co/u/terrymu)\ **Replies:** 2\ **Last updated:** [March 14, 2023, 9:39am UTC](https://discuss.elastic.co/t/how-to-set-auto-reloading-conf-files-in-logstash-yml-or-pipeline-yml/327425 "2023-03-14T09:39:51Z")
Hi All, I know here is a feature that can auto-reloading conf files without logstash restart action. So my question is easy, how to turn on auto-reloading function in logstash.yml or pipeline.yml ? I need an workin… --- ## [How to create email connector in Kibana to alert a log?](https://discuss.elastic.co/t/how-to-create-email-connector-in-kibana-to-alert-a-log/288104)
**Author:** [@nhattanmai](https://discuss.elastic.co/u/nhattanmai)\ **Replies:** 2\ **Last updated:** [November 2, 2021, 7:11am UTC](https://discuss.elastic.co/t/how-to-create-email-connector-in-kibana-to-alert-a-log/288104 "2021-11-02T07:11:02Z")
Dear all, I need create email connector to send email when a log has message match with keyword. Alert worked well, but I don't know how to setting email connector when following the guide: Preconfigured connector typ… --- ## [REST API, http\_poller and ruby code](https://discuss.elastic.co/t/rest-api-http-poller-and-ruby-code/176447)
**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\ **Replies:** 2\ **Last updated:** [April 11, 2019, 4:18pm UTC](https://discuss.elastic.co/t/rest-api-http-poller-and-ruby-code/176447 "2019-04-11T16:18:27Z")
I wonder if the following functionality, which I've successfully implemented in the form of a client-side Python script, can be completely replaced by server-side Logstash configuration, using a combination of http\_polle… --- ## [Issue in using xpath in xml filter](https://discuss.elastic.co/t/issue-in-using-xpath-in-xml-filter/166295)
**Author:** [@vivek14](https://discuss.elastic.co/u/vivek14)\ **Replies:** 2\ **Last updated:** [January 31, 2019, 2:09am UTC](https://discuss.elastic.co/t/issue-in-using-xpath-in-xml-filter/166295 "2019-01-31T02:09:14Z")
Hi, I am just beginning to learn ELK, Grok etc. I recently installed Elastic Stack (ELK and Filebeat) to monitor RedHat JBoss Fuse log files. My goal is to create new fields by applying Grok's xml filter and extract i… --- ## [Unable to import CSV to elasticsearch via logstash](https://discuss.elastic.co/t/unable-to-import-csv-to-elasticsearch-via-logstash/108726)
**Author:** [@JoelJoy](https://discuss.elastic.co/u/JoelJoy)\ **Replies:** 2\ **Last updated:** [November 23, 2017, 5:22am UTC](https://discuss.elastic.co/t/unable-to-import-csv-to-elasticsearch-via-logstash/108726 "2017-11-23T05:22:37Z")
Hi the Created the Config as below. usecase.config: input { file { path =\> "C:\\ElasticStack\\UseCase\_Karthi.csv" start\_position =\> "beginning" } } filter { csv { separator =\> "," columns =\> \["Use case number"… --- ## [Monitoring - error 400](https://discuss.elastic.co/t/monitoring-error-400/105066)
**Author:** [@knights](https://discuss.elastic.co/u/knights)\ **Replies:** 2\ **Last updated:** [October 25, 2017, 7:20am UTC](https://discuss.elastic.co/t/monitoring-error-400/105066 "2017-10-25T07:20:00Z")
Hello, I'm currently testing the monitoring options given by x-pack. In my development environment, I set up 2 clusters, sending their monitoring data into a 3rd cluster. When I try to visualize the monitoring data vi… --- ## [Date filter not working for timestamps](https://discuss.elastic.co/t/date-filter-not-working-for-timestamps/87147)
**Author:** [@munotshubham](https://discuss.elastic.co/u/munotshubham)\ **Replies:** 2\ **Last updated:** [May 31, 2017, 3:49pm UTC](https://discuss.elastic.co/t/date-filter-not-working-for-timestamps/87147 "2017-05-31T15:49:49Z")
Logs seems to be fine, yet date filter is not working. If i remove the date filter, it takes the timestamp as string, so grok pattern is fine. Input format: 2017-04-03 11:40:59 2017-04-04 12:40:59 2017-04-05 13:40:5… --- ## [Groovy Client - Closure Issue](https://discuss.elastic.co/t/groovy-client-closure-issue/49333)
**Author:** [@saielastic](https://discuss.elastic.co/u/saielastic)\ **Replies:** 2\ **Last updated:** [May 6, 2016, 5:51pm UTC](https://discuss.elastic.co/t/groovy-client-closure-issue/49333 "2016-05-06T17:51:58Z")
Hi all, I am trying to use Groovy Client through Grails application, and getting the error below, any help would be appreciated. if using without closure it works (the Java client way). Grails version - 2.3.11 ES … --- ## [PairRDD.saveToEsWithMeta Object not found](https://discuss.elastic.co/t/pairrdd-savetoeswithmeta-object-not-found/44486)
**Author:** [@jhendric98](https://discuss.elastic.co/u/jhendric98)\ **Replies:** 2\ **Last updated:** [March 21, 2016, 10:21am UTC](https://discuss.elastic.co/t/pairrdd-savetoeswithmeta-object-not-found/44486 "2016-03-21T10:21:10Z")
I am attempting your example in the Spark support for Elasticsearch document page. https://www.elastic.co/guide/en/elasticsearch/hadoop/master/spark.html import org.elasticsearch.spark.rdd.Metadata.\_ val … --- ## [Index HDFS data](https://discuss.elastic.co/t/index-hdfs-data/28651)
**Author:** [@logic4fun](https://discuss.elastic.co/u/logic4fun)\ **Replies:** 2\ **Last updated:** [September 4, 2015, 4:08pm UTC](https://discuss.elastic.co/t/index-hdfs-data/28651 "2015-09-04T16:08:45Z")
Sorry if this is a gross repeat of the question but I am trying to get my answers straight. I have CSV files coming into hadoop/hdfs. I would like to create an index for this data (incremental index) One option is Cre… --- ## [Generate http certificate non-interactive](https://discuss.elastic.co/t/generate-http-certificate-non-interactive/263685)
**Author:** [@mysil](https://discuss.elastic.co/u/mysil)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 11:09am UTC](https://discuss.elastic.co/t/generate-http-certificate-non-interactive/263685 "2021-02-09T11:09:20Z")
Hi, I need to script generation of a certificate using 'elasticsearch-certutil http'. Is that even possible? I managed to do this with 'elasticsearch-certutil ca'. I need this to enable Alerts in my Kibana. Running on … --- ## [Time intervals on x-axis](https://discuss.elastic.co/t/time-intervals-on-x-axis/312001)
**Author:** [@Sayali\_Gangodak](https://discuss.elastic.co/u/Sayali_Gangodak)\ **Replies:** 3\ **Last updated:** [August 24, 2022, 4:42pm UTC](https://discuss.elastic.co/t/time-intervals-on-x-axis/312001 "2022-08-24T16:42:53Z")
Hi, I am using elastic ui charts to plot a custom timeline graph. On x-axis I want to display time range which will change dynamically according to to timepicker selected by user on dashboard . I am able to plot time fo… --- ## [Logstash new install: response code '403' contacting Elasticsearch](https://discuss.elastic.co/t/logstash-new-install-response-code-403-contacting-elasticsearch/267862)
**Author:** [@kmp](https://discuss.elastic.co/u/kmp)\ **Replies:** 0\ **Last updated:** [March 19, 2021, 8:45pm UTC](https://discuss.elastic.co/t/logstash-new-install-response-code-403-contacting-elasticsearch/267862 "2021-03-19T20:45:20Z")
Posting this for the record, should anyone else run into the same problem... LogStash::Outputs::ElasticSearch::HttpClient::Pool::BadResponseCodeError: Got response code '403' contacting Elasticsearch at URL 'https://es0… --- ## [Elastic Search snapshot backup with multi node and multiple indices](https://discuss.elastic.co/t/elastic-search-snapshot-backup-with-multi-node-and-multiple-indices/193556)
**Author:** [@Sony\_Anuja](https://discuss.elastic.co/u/Sony_Anuja)\ **Replies:** 3\ **Last updated:** [August 2, 2019, 3:19pm UTC](https://discuss.elastic.co/t/elastic-search-snapshot-backup-with-multi-node-and-multiple-indices/193556 "2019-08-02T15:19:19Z")
I have a set up with 6 elasticsearch nodes in production , my question is... if I take a snapshot, does that snapshot contain data from all nodes? , can anyone suggest me how to take backup on elasticsearch cluster and w… --- ## [Logstash translate filter for multiple fields](https://discuss.elastic.co/t/logstash-translate-filter-for-multiple-fields/156812)
**Author:** [@bijay](https://discuss.elastic.co/u/bijay)\ **Replies:** 3\ **Last updated:** [November 16, 2018, 7:52pm UTC](https://discuss.elastic.co/t/logstash-translate-filter-for-multiple-fields/156812 "2018-11-16T19:52:21Z")
Hi, I want to drop the logs based on multiple fields. Below is the content of drop.yml logstash : '{"info": "drop"}' e.g. I want to drop the loglines which has contain the "component" : "logstash" and "severity": "in… --- ## [\[FATAL\] 2018-05-16 09:39:07.354 \[LogStash::Runner\] runner - The given configuration is invalid. Reason: Expected one of #, =\> at line 15, column 10 (byte 170) after](https://discuss.elastic.co/t/fatal-2018-05-16-09-39-07-354-logstash-runner-runner-the-given-configuration-is-invalid-reason-expected-one-of-at-line-15-column-10-byte-170-after/132051)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 3\ **Last updated:** [May 16, 2018, 10:08am UTC](https://discuss.elastic.co/t/fatal-2018-05-16-09-39-07-354-logstash-runner-runner-the-given-configuration-is-invalid-reason-expected-one-of-at-line-15-column-10-byte-170-after/132051 "2018-05-16T10:08:54Z")
Hello, i've an error in my syslog pipeline but i'm unable to find it ! Can someone help me ? Error : \[FATAL\] 2018-05-16 09:39:07.354 \[LogStash::Runner\] runner - The given configuration is invalid. Reason: Expected one… [Previous page](https://discuss.elastic.co/top.md?page=1320&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1322&per_page=50&period=all)