# Top **URL:** https://discuss.elastic.co/top.md?page=1323&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1324 --- ## [Kubernetes istio](https://discuss.elastic.co/t/kubernetes-istio/182757)
**Author:** [@suikast42](https://discuss.elastic.co/u/suikast42)\ **Replies:** 2\ **Last updated:** [May 29, 2019, 2:23pm UTC](https://discuss.elastic.co/t/kubernetes-istio/182757 "2019-05-29T14:23:07Z")
Does elastic apm supports out of box trace a service mesh with istio in kubernetes environment? --- ## [Using MB Inbound Traffic vis for Netflow](https://discuss.elastic.co/t/using-mb-inbound-traffic-vis-for-netflow/126241)
**Author:** [@DSM](https://discuss.elastic.co/u/DSM)\ **Replies:** 2\ **Last updated:** [April 3, 2018, 2:05pm UTC](https://discuss.elastic.co/t/using-mb-inbound-traffic-vis-for-netflow/126241 "2018-04-03T14:05:51Z")
HI, looking for some help getting over the last hurdle.... I'd like to amend the MB Inbound/Outbound Traffic visualization (the real-time data rate metric) and use it on my netflow data (coming in via ELKs logstash netf… --- ## [Metricbeat loading wrong type in elasticsearch index mapping for pct fields if first document of an index has a 0](https://discuss.elastic.co/t/metricbeat-loading-wrong-type-in-elasticsearch-index-mapping-for-pct-fields-if-first-document-of-an-index-has-a-0/118915)
**Author:** [@nickoh](https://discuss.elastic.co/u/nickoh)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 7:19pm UTC](https://discuss.elastic.co/t/metricbeat-loading-wrong-type-in-elasticsearch-index-mapping-for-pct-fields-if-first-document-of-an-index-has-a-0/118915 "2018-02-20T19:19:14Z")
Hey Elastic Folks: I'm using metricbeat to collect cpu utilization data from a number of linux hosts, publishing directly to elasticsearch. I'm seeing cases where pct type fields are getting mapped in elasticsearch as l… --- ## [Help, I'm blocked, LOADERROR](https://discuss.elastic.co/t/help-im-blocked-loaderror/81066)
**Author:** [@The\_Juke\_Box\_Hero](https://discuss.elastic.co/u/The_Juke_Box_Hero)\ **Replies:** 2\ **Last updated:** [April 4, 2017, 5:48am UTC](https://discuss.elastic.co/t/help-im-blocked-loaderror/81066 "2017-04-04T05:48:44Z")
Sorry to bother, but I'm new to logstash, well to the whole elastic stack. I'm trying to connect to to my wordpress database using jdbc, my configuration seems ok, I was getting some config errors but I managed to sort s… --- ## [TCP : Error: closed stream](https://discuss.elastic.co/t/tcp-error-closed-stream/64431)
**Author:** [@Towser](https://discuss.elastic.co/u/Towser)\ **Replies:** 2\ **Last updated:** [November 14, 2016, 2:36am UTC](https://discuss.elastic.co/t/tcp-error-closed-stream/64431 "2016-11-14T02:36:45Z")
Hello everybody, I have been looking for a solution at my problem for days but without any success. I tried upgrading to the newly 5.0 stack, setting up 1 VM for every level ( logstash, elastic, kibana), tried to chan… --- ## [How to get rid of extra double quote](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820)
**Author:** [@trondhindenes](https://discuss.elastic.co/u/trondhindenes)\ **Replies:** 2\ **Last updated:** [October 13, 2016, 12:07pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-extra-double-quote/62820 "2016-10-13T12:07:49Z")
I have this logstash filter I'm struggling with. Right now it comes out like this in rubydebug: { "type" =\> "log", "host" =\> "CY-C0D6E-006", "Date" =\> "2016-10-12", … --- ## [Query boosting vs function score query](https://discuss.elastic.co/t/query-boosting-vs-function-score-query/43597)
**Author:** [@WilliamRoma](https://discuss.elastic.co/u/WilliamRoma)\ **Replies:** 2\ **Last updated:** [March 7, 2016, 1:10am UTC](https://discuss.elastic.co/t/query-boosting-vs-function-score-query/43597 "2016-03-07T01:10:20Z")
I have the following query: get all the documents that its field field1 contains a specific value, but I want to give more priority to the documents that its another field field2 contains a specific value. I came up … --- ## [Adding fields to data read by the file plugin](https://discuss.elastic.co/t/adding-fields-to-data-read-by-the-file-plugin/40302)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 2\ **Last updated:** [February 3, 2016, 10:08pm UTC](https://discuss.elastic.co/t/adding-fields-to-data-read-by-the-file-plugin/40302 "2016-02-03T22:08:52Z")
Using Filebeat, I can add a field that ends up looking like: "fields": { "fieldname": "value" }, So far I can't figure out how to do the same with Logstash's file input plugin. I can't do: add\_field =\> { "fields… --- ## [Mapping definition help (copy\_to, dates)](https://discuss.elastic.co/t/mapping-definition-help-copy-to-dates/20804)
**Author:** [@Jeff\_Fogarty](https://discuss.elastic.co/u/Jeff_Fogarty)\ **Replies:** 2\ **Last updated:** [December 6, 2014, 3:24pm UTC](https://discuss.elastic.co/t/mapping-definition-help-copy-to-dates/20804 "2014-12-06T15:24:18Z")
I'm looking to analyze network utilization data supplied by our vendor. One challenge is the observed data and time are in separate fields. I like to combine the fields date\_observed and cst\_observed into a dat… --- ## [IndexShardGatewayRecoveryException](https://discuss.elastic.co/t/indexshardgatewayrecoveryexception/13317)
**Author:** [@Benedict\_Liang](https://discuss.elastic.co/u/Benedict_Liang)\ **Replies:** 2\ **Last updated:** [August 28, 2013, 8:10am UTC](https://discuss.elastic.co/t/indexshardgatewayrecoveryexception/13317 "2013-08-28T08:10:58Z")
I have followed the instructions stated in the this wiki, and the versions are as follows: ES: 0.90.2 Mongodb: 2.4.5 River: 1.6.11 ES was set up using Homebrew. The error log: \[2013-08-24 17:21:29,791\]\[I… --- ## [Is it possible to remove node from ES 6.8?](https://discuss.elastic.co/t/is-it-possible-to-remove-node-from-es-6-8/245583)
**Author:** [@tarkhil](https://discuss.elastic.co/u/tarkhil)\ **Replies:** 4\ **Last updated:** [August 22, 2020, 5:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-node-from-es-6-8/245583 "2020-08-22T05:35:44Z")
Hello I've set up a server, started a ES 6.8 instance, run it for a while in cluster and found an error in disk setup requiring me to reinstall everything starting from OS. As far as I can understand, I have only one o… --- ## [For a cluster with only one master-eligible node, what happens when you set the quorum setting to 2?](https://discuss.elastic.co/t/for-a-cluster-with-only-one-master-eligible-node-what-happens-when-you-set-the-quorum-setting-to-2/149693)
**Author:** [@elastico](https://discuss.elastic.co/u/elastico)\ **Replies:** 1\ **Last updated:** [September 24, 2018, 5:27pm UTC](https://discuss.elastic.co/t/for-a-cluster-with-only-one-master-eligible-node-what-happens-when-you-set-the-quorum-setting-to-2/149693 "2018-09-24T17:27:51Z")
Elasticsearch docs state: The discovery.zen.minimum\_master\_nodes sets the minimum number of master eligible nodes a node should "see" in order to win a master election. So for a cluster with only one master-eligible … --- ## [How to change sub field type in logstash](https://discuss.elastic.co/t/how-to-change-sub-field-type-in-logstash/61836)
**Author:** [@srikanth\_ramineni](https://discuss.elastic.co/u/srikanth_ramineni)\ **Replies:** 4\ **Last updated:** [September 29, 2016, 8:55pm UTC](https://discuss.elastic.co/t/how-to-change-sub-field-type-in-logstash/61836 "2016-09-29T20:55:33Z")
Hi, I have one property is coming from filebeat. fields{ properties{ ID:String } } i am trying to change the ID field to integer but it is giving error. I tried mutate with fields.ID and "\[fields\]\[ID\]" b… --- ## [Problem with beats logstash plugins](https://discuss.elastic.co/t/problem-with-beats-logstash-plugins/55555)
**Author:** [@orsa](https://discuss.elastic.co/u/orsa)\ **Replies:** 4\ **Last updated:** [July 21, 2016, 9:27pm UTC](https://discuss.elastic.co/t/problem-with-beats-logstash-plugins/55555 "2016-07-21T21:27:55Z")
Hi i have a problem with beat logstash plugin. He dosen\`t send windows event log to ES. My Schema Winlogbeat =\> Logstash =\> ES if i send log directly to ES - all work. TCP packages to LS is come. logstash 2.3.4 logst… --- ## [How to decide an optimal settings for workers?](https://discuss.elastic.co/t/how-to-decide-an-optimal-settings-for-workers/45061)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 4\ **Last updated:** [March 22, 2016, 7:28am UTC](https://discuss.elastic.co/t/how-to-decide-an-optimal-settings-for-workers/45061 "2016-03-22T07:28:39Z")
For logstash ElasticSearch output plugin, how to determine the proper number of workers to use? If I play around the settings, is there a way to know whether the performance is getting better (or worse?) --- ## [How to set "timeout" value of cursor in elasticsearch SQL syntax](https://discuss.elastic.co/t/how-to-set-timeout-value-of-cursor-in-elasticsearch-sql-syntax/182542)
**Author:** [@lunatic](https://discuss.elastic.co/u/lunatic)\ **Replies:** 1\ **Last updated:** [May 31, 2019, 1:15pm UTC](https://discuss.elastic.co/t/how-to-set-timeout-value-of-cursor-in-elasticsearch-sql-syntax/182542 "2019-05-31T13:15:40Z")
I had a query return large results with SQL syntax, and I use the 'cursor' to fetch results. But I found there is no way to set 'timeout' value therefore my cursor would be expired after some default value. So how can I… --- ## [Filebeat read only one folder](https://discuss.elastic.co/t/filebeat-read-only-one-folder/121748)
**Author:** [@Romain\_Pelissier](https://discuss.elastic.co/u/Romain_Pelissier)\ **Replies:** 1\ **Last updated:** [February 28, 2018, 8:15am UTC](https://discuss.elastic.co/t/filebeat-read-only-one-folder/121748 "2018-02-28T08:15:48Z")
Hi, I got filebeat running on a pfsense box (using pkgadd beat package): filebeat version 5.4.3 (amd64), libbeat 5.4.3 I have configured my filebeat agent to grab logs from a path where logs from 2 snort interfaces ar… --- ## [Nested arrays in hive from MongoDB](https://discuss.elastic.co/t/nested-arrays-in-hive-from-mongodb/79353)
**Author:** [@capcha](https://discuss.elastic.co/u/capcha)\ **Replies:** 1\ **Last updated:** [March 23, 2017, 10:30pm UTC](https://discuss.elastic.co/t/nested-arrays-in-hive-from-mongodb/79353 "2017-03-23T22:30:45Z")
Hi, I am really hoping there is a genius in here that can help me, I've been stuck on this for 3 days now. I have a MongoDB collection, sample of a document is: { "\_id" : "58c879787f4fd6a4982f3039", "Action… --- ## [Kibana index pattern, matching index, how to match more than 100](https://discuss.elastic.co/t/kibana-index-pattern-matching-index-how-to-match-more-than-100/256296)
**Author:** [@yt\_h](https://discuss.elastic.co/u/yt_h)\ **Replies:** 5\ **Last updated:** [November 23, 2020, 10:02am UTC](https://discuss.elastic.co/t/kibana-index-pattern-matching-index-how-to-match-more-than-100/256296 "2020-11-23T10:02:49Z")
elasticsearch version: 7.5.1 kibana version: 7.5.1 I have more than 300 indexes. How to use one index pattern to match all of them? When I enter the "pro" index pattern, it shows that 100 indexes are matched, but 300 i… --- ## [Per dashboard user access?](https://discuss.elastic.co/t/per-dashboard-user-access/141073)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [July 24, 2018, 3:04am UTC](https://discuss.elastic.co/t/per-dashboard-user-access/141073 "2018-07-24T03:04:17Z")
Hi, I want to try and push management to move to Elastic cloud (again) so we can use the X-pack features but is it possible to set up fine grained access to dashboards on a user level? E.g. User A can access Dashboard A… --- ## [Insertion en masse dans ES](https://discuss.elastic.co/t/insertion-en-masse-dans-es/86713)
**Author:** [@RSTMAN](https://discuss.elastic.co/u/RSTMAN)\ **Replies:** 5\ **Last updated:** [May 23, 2017, 1:04pm UTC](https://discuss.elastic.co/t/insertion-en-masse-dans-es/86713 "2017-05-23T13:04:04Z")
Bonjour, J'ai besoin d'insere dans ES 5go de données. J'ai défini le mapping de mon index à sa création et je fais l insertion par bloc de 1000 objets. Je trouve que l insertion prend beaucoup de temps. La configuration… --- ## [ElasticSearch ProfileAPI](https://discuss.elastic.co/t/elasticsearch-profileapi/75817)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 5\ **Last updated:** [March 2, 2017, 4:38am UTC](https://discuss.elastic.co/t/elasticsearch-profileapi/75817 "2017-03-02T04:38:12Z")
Hi, I am using the Profile API to understand the query behavior at the back-end. I see, when we fire a query there is a normal search response time 'took', which is lesser than the time than what is observed in the prof… --- ## [Head and remote connections via browser after 1.5 to 2.0 upgrade](https://discuss.elastic.co/t/head-and-remote-connections-via-browser-after-1-5-to-2-0-upgrade/34438)
**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\ **Replies:** 5\ **Last updated:** [November 12, 2015, 5:26pm UTC](https://discuss.elastic.co/t/head-and-remote-connections-via-browser-after-1-5-to-2-0-upgrade/34438 "2015-11-12T17:26:19Z")
Hi, I've upgraded from 1.5 to 2.0 by adding the new repo and performing a yum update. After the upgrade I had to cleanup the plugins folder, then installed head plugin again and elasticsearch started just fine. Local q… --- ## [Logstash error -"Could not load '.aprc' from ENV\['HOME'\]: couldn't find HOME environment -- expanding \`~"](https://discuss.elastic.co/t/logstash-error-could-not-load-aprc-from-env-home-couldnt-find-home-environment-expanding/328318)
**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\ **Replies:** 0\ **Last updated:** [March 23, 2023, 7:36am UTC](https://discuss.elastic.co/t/logstash-error-could-not-load-aprc-from-env-home-couldnt-find-home-environment-expanding/328318 "2023-03-23T07:36:38Z")
Hi Folks, I have a log file that logstash(8.6.2) is successfully parse, but has this error . i'm not sure whats causing it ? Could have a look ? , the data doesnt appear in kibana either Could not load '.aprc' from EN… --- ## [Kibana 8.19.7, 9.1.7, 9.2.1 Security Update (ESA-2025-25)](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-9-2-1-security-update-esa-2025-25/383379)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [November 12, 2025, 9:33am UTC](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-9-2-1-security-update-esa-2025-25/383379 "2025-11-12T09:33:52Z")
Kibana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (ESA-2025-25) Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Kibana can lead to DOM-ba… --- ## [Tshark output to ElasticSearch](https://discuss.elastic.co/t/tshark-output-to-elasticsearch/186736)
**Author:** [@cks](https://discuss.elastic.co/u/cks)\ **Replies:** 0\ **Last updated:** [June 20, 2019, 5:25pm UTC](https://discuss.elastic.co/t/tshark-output-to-elasticsearch/186736 "2019-06-20T17:25:35Z")
ES 7.1.1/centos7, Tshark 2.6 I am trying to ingest tshark data (json format) into Elastic using logstash. I am using tshark 2.6.6. however I understand version 3.0 has ability to generate mapping for elastic search Trie… --- ## [Splitting logs to custom format](https://discuss.elastic.co/t/splitting-logs-to-custom-format/89824)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 3\ **Last updated:** [June 20, 2017, 8:33am UTC](https://discuss.elastic.co/t/splitting-logs-to-custom-format/89824 "2017-06-20T08:33:15Z")
Hi I have logs that in general looks like: UID A\_TS B\_TS C\_TS D\_TS X Y Z index: (UID = unique Id , TS = time Stamp , X etc = other values ) I want to create from those logs tables ("logs") that will be in the follo… --- ## [Unique ID](https://discuss.elastic.co/t/unique-id/60568)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 3\ **Last updated:** [September 15, 2016, 6:57am UTC](https://discuss.elastic.co/t/unique-id/60568 "2016-09-15T06:57:46Z")
How to create a unique id for all events using logstash? This is something like incremental unique ID used in a normal database. --- ## [User authentication in kibana](https://discuss.elastic.co/t/user-authentication-in-kibana/28008)
**Author:** [@bmbost](https://discuss.elastic.co/u/bmbost)\ **Replies:** 3\ **Last updated:** [August 25, 2015, 12:52pm UTC](https://discuss.elastic.co/t/user-authentication-in-kibana/28008 "2015-08-25T12:52:06Z")
I know there is the shield product which provides high levels of security for the ELK suite. I do not need that level of security for the environment. Are there any other options which I could implement to provide some… --- ## [Filebeat sends malformed logs](https://discuss.elastic.co/t/filebeat-sends-malformed-logs/342078)
**Author:** [@MheniMerz](https://discuss.elastic.co/u/MheniMerz)\ **Replies:** 6\ **Last updated:** [September 3, 2023, 9:59pm UTC](https://discuss.elastic.co/t/filebeat-sends-malformed-logs/342078 "2023-09-03T21:59:07Z")
Hi, i'm using filebeat to receive logs from a Juniper firewall and forward them to logstash which then sends them to elasticsearch. i configured my juniper firewall to use the required log format structured-data + brie… --- ## [Logstash Ruby not handling float value correctly](https://discuss.elastic.co/t/logstash-ruby-not-handling-float-value-correctly/253150)
**Author:** [@mastersmit](https://discuss.elastic.co/u/mastersmit)\ **Replies:** 6\ **Last updated:** [October 25, 2020, 3:31pm UTC](https://discuss.elastic.co/t/logstash-ruby-not-handling-float-value-correctly/253150 "2020-10-25T15:31:07Z")
I have Kafak \<\> Logstash (then Ruby) \<\> Elastic Kafak Input: {"customerid":"smit","last\_name":"shah","age":10,"height":10,"weight":100,"automated\_email":false, "header": { "endpoint":"/pay"}, "transaction": { "amount":… --- ## [Issues with multiple categories of tag aggregations](https://discuss.elastic.co/t/issues-with-multiple-categories-of-tag-aggregations/185630)
**Author:** [@Sodium](https://discuss.elastic.co/u/Sodium)\ **Replies:** 6\ **Last updated:** [June 14, 2019, 1:48pm UTC](https://discuss.elastic.co/t/issues-with-multiple-categories-of-tag-aggregations/185630 "2019-06-14T13:48:57Z")
Hello, I have an issues managing aggregations in a products based search engine and was hoping someone could give me some pointers about a specific issue. My product have different categories of tags (brand, packaging,… --- ## [Will Elasticsearch 7.10 allow me to remain under Apache 2.0 license?](https://discuss.elastic.co/t/will-elasticsearch-7-10-allow-me-to-remain-under-apache-2-0-license/288898)
**Author:** [@truth\_is](https://discuss.elastic.co/u/truth_is)\ **Replies:** 1\ **Last updated:** [November 10, 2021, 7:13pm UTC](https://discuss.elastic.co/t/will-elasticsearch-7-10-allow-me-to-remain-under-apache-2-0-license/288898 "2021-11-10T19:13:47Z")
My Firm has built client products using \< Elasticsearch 5.0 version. We are planning for an upgrade. If I upgrade Elasticsearch to 7.10 version, will I remain under Apache 2.0 license? Thank you --- ## [Kubernetes metadata through Serilog.Sinks.Elasticsearch](https://discuss.elastic.co/t/kubernetes-metadata-through-serilog-sinks-elasticsearch/260891)
**Author:** [@xacobecm](https://discuss.elastic.co/u/xacobecm)\ **Replies:** 1\ **Last updated:** [January 14, 2021, 8:13pm UTC](https://discuss.elastic.co/t/kubernetes-metadata-through-serilog-sinks-elasticsearch/260891 "2021-01-14T20:13:18Z")
I'm using APM on all my microservices and sending logs to ES through Serilog (.NET microservices). In the APM transaction view page there are two options: Container logs and Pod logs which filters by the container/pod ui… --- ## [Stuck at Successfully started Logstash API endpoint {:port=\>9600} (can't load data in Kibana/ElasticSearch)](https://discuss.elastic.co/t/stuck-at-successfully-started-logstash-api-endpoint-port-9600-cant-load-data-in-kibana-elasticsearch/189822)
**Author:** [@luc1](https://discuss.elastic.co/u/luc1)\ **Replies:** 1\ **Last updated:** [July 10, 2019, 4:13pm UTC](https://discuss.elastic.co/t/stuck-at-successfully-started-logstash-api-endpoint-port-9600-cant-load-data-in-kibana-elasticsearch/189822 "2019-07-10T16:13:26Z")
Hello, I'm new to ELK and I'm having an issue to load my data Here is my imput file (it's just to test, it won't remain that empty) input { file { codec =\> json path =\> "/home/Json\_Data/\*.json" start\_position =\> "… --- ## [Besoin d'aide pour appréhender le mapping](https://discuss.elastic.co/t/besoin-daide-pour-apprehender-le-mapping/150230)
**Author:** [@thibaut\_owczarz1](https://discuss.elastic.co/u/thibaut_owczarz1)\ **Replies:** 7\ **Last updated:** [September 28, 2018, 2:30pm UTC](https://discuss.elastic.co/t/besoin-daide-pour-apprehender-le-mapping/150230 "2018-09-28T14:30:20Z")
Bonjour a tous, je suis nouveau et je cherche a me former sur Elasticsearch et toute sa stack. J'ai vu que pour un moteur de recherche, c'est tres performant, du coup je voudrais passer mon forum sur ce modele. Je ren… --- ## [Upgrade from 5.6.6 to 6.2.4, elastic failed to start](https://discuss.elastic.co/t/upgrade-from-5-6-6-to-6-2-4-elastic-failed-to-start/128741)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 1\ **Last updated:** [April 20, 2018, 10:04am UTC](https://discuss.elastic.co/t/upgrade-from-5-6-6-to-6-2-4-elastic-failed-to-start/128741 "2018-04-20T10:04:45Z")
Continuing the discussion from Elasticsearch Service won't start after full cluster upgrade from 5.4 to 6.0: I'm mid upgrade from 5.6.6. to 6.2.4 and haivng an issue getting elastic to start, if I look in /usr/lib/syst… --- ## [Visualize multiple field sums in the same graph](https://discuss.elastic.co/t/visualize-multiple-field-sums-in-the-same-graph/122770)
**Author:** [@ghivert](https://discuss.elastic.co/u/ghivert)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 5:18pm UTC](https://discuss.elastic.co/t/visualize-multiple-field-sums-in-the-same-graph/122770 "2018-03-07T17:18:53Z")
Is this possible? I have Field A, Field B and Field C. I want a graph (bar graph, maybe pie chart too) where I can compare all 3 of those sums, not on a time scale or anything, just for the time queried. Thanks for an… --- ## [Setting index.uuid on ES 5](https://discuss.elastic.co/t/setting-index-uuid-on-es-5/76778)
**Author:** [@bevans88](https://discuss.elastic.co/u/bevans88)\ **Replies:** 1\ **Last updated:** [February 28, 2017, 3:25pm UTC](https://discuss.elastic.co/t/setting-index-uuid-on-es-5/76778 "2017-02-28T15:25:43Z")
Hi, I was wondering if there's any reason/objections to not allowing the index.uuid to be set when creating an index? I understand that this would mean that the user would need to to guarantee index uuid uniqueness a… --- ## [Filebeat custom scripts](https://discuss.elastic.co/t/filebeat-custom-scripts/61679)
**Author:** [@n1k](https://discuss.elastic.co/u/n1k)\ **Replies:** 1\ **Last updated:** [September 29, 2016, 9:53am UTC](https://discuss.elastic.co/t/filebeat-custom-scripts/61679 "2016-09-29T09:53:57Z")
Is there way to have some custom script running on beat server which will generate some data/logs and that we can ship to elasticsearch or logstash? --- ## [Where can i get the old version of logstash?](https://discuss.elastic.co/t/where-can-i-get-the-old-version-of-logstash/55369)
**Author:** [@kk\_op](https://discuss.elastic.co/u/kk_op)\ **Replies:** 1\ **Last updated:** [July 13, 2016, 5:30am UTC](https://discuss.elastic.co/t/where-can-i-get-the-old-version-of-logstash/55369 "2016-07-13T05:30:18Z")
where can i get the old version of logstash, because my redhat has only java1.6 installed. --- ## [Где сохраняется индекс при использовании elastic-hadoop?](https://discuss.elastic.co/t/elastic-hadoop/37653)
**Author:** [@RobertRT](https://discuss.elastic.co/u/RobertRT)\ **Replies:** 1\ **Last updated:** [January 4, 2016, 4:40pm UTC](https://discuss.elastic.co/t/elastic-hadoop/37653 "2016-01-04T16:40:12Z")
Добрый вечер. Установил elastic в hdfs и yarn по инструкции https://goo.gl/2tfywY. Далее добавил в индекс некоторое количество документов. Документы добавились без проблем и доступны для поиска. Вопрос заключается в том,… --- ## [There were no results because no indices were found that match your selected time span](https://discuss.elastic.co/t/there-were-no-results-because-no-indices-were-found-that-match-your-selected-time-span/15454)
**Author:** [@Thomas\_Ardal](https://discuss.elastic.co/u/Thomas_Ardal)\ **Replies:** 7\ **Last updated:** [January 29, 2014, 6:17pm UTC](https://discuss.elastic.co/t/there-were-no-results-because-no-indices-were-found-that-match-your-selected-time-span/15454 "2014-01-29T18:17:57Z")
When trying out Marvel on my Elasticsearch installation, I get the error "There were no results because no indices were found that match your selected time span" in the top of the page. If I understand the documen… --- ## [Elastic search considers date field send by java service as string](https://discuss.elastic.co/t/elastic-search-considers-date-field-send-by-java-service-as-string/251924)
**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\ **Replies:** 2\ **Last updated:** [October 15, 2020, 5:56am UTC](https://discuss.elastic.co/t/elastic-search-considers-date-field-send-by-java-service-as-string/251924 "2020-10-15T05:56:46Z")
Hi I have created a java service and i am indexing the response into elasticseaarch i am sending a date value but elasticsearch considers it as string. Code is already deployed in production. How to change the incoming f… --- ## [Error with .csv parsing from Nessus scanner to Logstash / CSV::MalformedCSVError: Illegal quoting in line 1](https://discuss.elastic.co/t/error-with-csv-parsing-from-nessus-scanner-to-logstash-csv-illegal-quoting-in-line-1/222957)
**Author:** [@denisatanasov](https://discuss.elastic.co/u/denisatanasov)\ **Replies:** 2\ **Last updated:** [March 10, 2020, 3:08pm UTC](https://discuss.elastic.co/t/error-with-csv-parsing-from-nessus-scanner-to-logstash-csv-illegal-quoting-in-line-1/222957 "2020-03-10T15:08:49Z")
Hello All, I am trying to index into Logstash, a .csv (comma delimited) file generated from my Nessus scanner. However, I am receiving error related most probably to parsing problems, because in the Excel file, there ar… --- ## [Kibana : plugin:xpack\_main@5.6.6 status Red](https://discuss.elastic.co/t/kibana-plugin-xpack-main-5-6-6-status-red/133713)
**Author:** [@IT\_DBA](https://discuss.elastic.co/u/IT_DBA)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 1:33pm UTC](https://discuss.elastic.co/t/kibana-plugin-xpack-main-5-6-6-status-red/133713 "2018-06-01T13:33:58Z")
Bonjour, J'ai installé Kibana et Xpack (monitoring). Lors du démarrage de Kibana, j'obtiens les erreurs suivantes : root@lnxbiportailrecbdd001:/home/kibana/kibana-5.6.6-linux-x86\_64/bin# ./kibana log \[15:05:39.272\]… --- ## [Kv filter plugin trim\_key option seems stopped working](https://discuss.elastic.co/t/kv-filter-plugin-trim-key-option-seems-stopped-working/110161)
**Author:** [@Nikolay\_Shushkin](https://discuss.elastic.co/u/Nikolay_Shushkin)\ **Replies:** 2\ **Last updated:** [December 5, 2017, 7:22pm UTC](https://discuss.elastic.co/t/kv-filter-plugin-trim-key-option-seems-stopped-working/110161 "2017-12-05T19:22:25Z")
Hello experts, After upgrade logstash from 1.5 to 5.6 we started having field names after kv with leading spaces. Configuration in 1.5: kv { source =\> "headers" field\_split =\> "\[\\r\\n\]+" value\_split =\> "… --- ## [Date filter offsetting timestamp from log file by 1 hr](https://discuss.elastic.co/t/date-filter-offsetting-timestamp-from-log-file-by-1-hr/90980)
**Author:** [@taweisse](https://discuss.elastic.co/u/taweisse)\ **Replies:** 2\ **Last updated:** [June 27, 2017, 4:07pm UTC](https://discuss.elastic.co/t/date-filter-offsetting-timestamp-from-log-file-by-1-hr/90980 "2017-06-27T16:07:07Z")
I just started using Logstash along with Elasticsearch and Kibana to visualize some log data coming from a database, and I am running into an issue with what I believe to be the date filter. Currently I am parsing the lo… --- ## [Conditional for @timestamp](https://discuss.elastic.co/t/conditional-for-timestamp/70351)
**Author:** [@elvarb](https://discuss.elastic.co/u/elvarb)\ **Replies:** 2\ **Last updated:** [January 2, 2017, 11:37am UTC](https://discuss.elastic.co/t/conditional-for-timestamp/70351 "2017-01-02T11:37:15Z")
Is it possible to create a conditional for the @timestamp field, so for example if I get a message with a timestamp older than 1h then do something? --- ## [Firewalld prevents ES nodes from communicating](https://discuss.elastic.co/t/firewalld-prevents-es-nodes-from-communicating/42219)
**Author:** [@Python\_Coder](https://discuss.elastic.co/u/Python_Coder)\ **Replies:** 2\ **Last updated:** [February 19, 2016, 2:17pm UTC](https://discuss.elastic.co/t/firewalld-prevents-es-nodes-from-communicating/42219 "2016-02-19T14:17:53Z")
Hello, I have 2 servers with CENTOS 7 installed, i have configured ElasticSearch cluster accordingly but after starting the ES instance with firewalld enabled, both nodes couldn't communicate with each other (unicast), h… [Previous page](https://discuss.elastic.co/top.md?page=1322&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1324&per_page=50&period=all)