# Top **URL:** https://discuss.elastic.co/top.md?page=1337&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1338 --- ## [Idea: rate limit Filebeat published events by a percentage](https://discuss.elastic.co/t/idea-rate-limit-filebeat-published-events-by-a-percentage/149333)
**Author:** [@lucas.at.section.io](https://discuss.elastic.co/u/lucas.at.section.io)\ **Replies:** 2\ **Last updated:** [September 25, 2018, 3:53pm UTC](https://discuss.elastic.co/t/idea-rate-limit-filebeat-published-events-by-a-percentage/149333 "2018-09-25T15:53:49Z")
This is a new feature which I'd like to contribute, but wanted to get some feedback. The idea is to limit the amount of events published, essentially scaling back the output, and thereby the pressure put on downstream c… --- ## [How to filter out a specific data in a panel?](https://discuss.elastic.co/t/how-to-filter-out-a-specific-data-in-a-panel/286799)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 3\ **Last updated:** [October 15, 2021, 2:26pm UTC](https://discuss.elastic.co/t/how-to-filter-out-a-specific-data-in-a-panel/286799 "2021-10-15T14:26:55Z")
Hey there! Have a question about kibana / dashboard / panel. How can i exclude a given information in a panel? Say i have a graph reporting cities my customers are from, how can i exclude one of the cities? Best! --- ## [Analyzers at search/query time vs at index time](https://discuss.elastic.co/t/analyzers-at-search-query-time-vs-at-index-time/258175)
**Author:** [@John\_McAfee1](https://discuss.elastic.co/u/John_McAfee1)\ **Replies:** 3\ **Last updated:** [December 14, 2020, 3:24pm UTC](https://discuss.elastic.co/t/analyzers-at-search-query-time-vs-at-index-time/258175 "2020-12-14T15:24:50Z")
Hello! My team and I are using analyzers both at search/query and when data is indexed. After revewing the Elastic documentation and a few web searches, I have not found a conclusive answerto my questions. I have two q… --- ## [SiteSearch Jquery results](https://discuss.elastic.co/t/sitesearch-jquery-results/246819)
**Author:** [@ssmith](https://discuss.elastic.co/u/ssmith)\ **Replies:** 3\ **Last updated:** [September 2, 2020, 9:43pm UTC](https://discuss.elastic.co/t/sitesearch-jquery-results/246819 "2020-09-02T21:43:50Z")
I'm trying to use the jquery plugin to load different views of a search, e.g. A search for apples populates view 1 with regular results, and view 2 only with results tagged with 'featured'. I have gotten this working loc… --- ## [Metricbeat Jolokia Module Not Capturing all data](https://discuss.elastic.co/t/metricbeat-jolokia-module-not-capturing-all-data/225333)
**Author:** [@jason\_0](https://discuss.elastic.co/u/jason_0)\ **Replies:** 3\ **Last updated:** [March 31, 2020, 10:30pm UTC](https://discuss.elastic.co/t/metricbeat-jolokia-module-not-capturing-all-data/225333 "2020-03-31T22:30:17Z")
I have a RedHat AMQ setup with some dummy data in it that I'm trying to capture with Metricbeat. I'm able to capture standard MBean attributes such as java.lang:type=Runtime's 'Uptime'. I'm also able to capture some AMQ … --- ## [Group by not working with other column](https://discuss.elastic.co/t/group-by-not-working-with-other-column/207829)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 3\ **Last updated:** [November 19, 2019, 1:16pm UTC](https://discuss.elastic.co/t/group-by-not-working-with-other-column/207829 "2019-11-19T13:16:41Z")
Hi Support, Below query is not working for me. POST \_sql/format=txt { "query":"""SELECT count(\*) as matched,col1,col2 FROM index WHERE col0 = 1 group by col1""" } Error : { "error": { "root\_cause": \[ { "type":… --- ## [Query issue](https://discuss.elastic.co/t/query-issue/162790)
**Author:** [@inandi](https://discuss.elastic.co/u/inandi)\ **Replies:** 3\ **Last updated:** [January 3, 2019, 1:29pm UTC](https://discuss.elastic.co/t/query-issue/162790 "2019-01-03T13:29:22Z")
i have this document { "createTime" =\> "2018-01-05T05:49:14.050Z", "reviewId" =\> "AIe9\_BGErQpX2pRNZrXBy5NOsH0eH9QFkVat2vH-a3aJ-Crxe\_ifrVuMokjr1zist4BFWRGP70uG38nMXJ1Fuv1zWSNJD7e6y03lAFbMvHFVpt1\_ew-puWA", "loc… --- ## [Logstash service don't work](https://discuss.elastic.co/t/logstash-service-dont-work/91645)
**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\ **Replies:** 3\ **Last updated:** [July 5, 2017, 7:23am UTC](https://discuss.elastic.co/t/logstash-service-dont-work/91645 "2017-07-05T07:23:26Z")
Hello, I have installed logstash as a service (rpm). But when I start the logstash service he doesn't send me anything to elasticsearch. I try to lauch logstash in /usr/share/logstash/bin and it works fine. What … --- ## [MapperParsingException is logged at DEBUG?](https://discuss.elastic.co/t/mapperparsingexception-is-logged-at-debug/55496)
**Author:** [@memelet](https://discuss.elastic.co/u/memelet)\ **Replies:** 3\ **Last updated:** [July 15, 2016, 1:34am UTC](https://discuss.elastic.co/t/mapperparsingexception-is-logged-at-debug/55496 "2016-07-15T01:34:03Z")
While doing some bulk indexing we see MapperParsingException in the logs. But these are logged at DEBUG level. Is that on purpose? Shouldn't these be ERROR? (From our application's perspective a mapping failure is indeed… --- ## [It was found that users could not generate a report CSV or download logs from the dashboard](https://discuss.elastic.co/t/it-was-found-that-users-could-not-generate-a-report-csv-or-download-logs-from-the-dashboard/298174)
**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\ **Replies:** 2\ **Last updated:** [March 22, 2022, 7:53am UTC](https://discuss.elastic.co/t/it-was-found-that-users-could-not-generate-a-report-csv-or-download-logs-from-the-dashboard/298174 "2022-03-22T07:53:25Z")
HI Team, It was found that users could not generate a report CSV or download logs from the dashboard, teps to Reproduce Search for logs in Kibana Discover dashboard Attempt to download those logs: Click 'Save' to s… --- ## [Need help in configuring TLS/SSL for ELK with 3rd party certificates (comodo)](https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745)
**Author:** [@Suddhasil\_Sarkar](https://discuss.elastic.co/u/Suddhasil_Sarkar)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 3:04pm UTC](https://discuss.elastic.co/t/need-help-in-configuring-tls-ssl-for-elk-with-3rd-party-certificates-comodo/259745 "2021-01-18T15:04:47Z")
Hi Team, Need your help, I was successfully able to manage/configure TLS/SSL with self signed pk12 certs. Now I purchased cert(pem) single pem file with SAN ( having 43 hosts DNS and ips) .I have pem format cert, cert f… --- ## [Creating Certificate using Certutil](https://discuss.elastic.co/t/creating-certificate-using-certutil/234502)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 2\ **Last updated:** [May 30, 2020, 5:39am UTC](https://discuss.elastic.co/t/creating-certificate-using-certutil/234502 "2020-05-30T05:39:34Z")
Hi, I've used this commands to generate CA and Cert: bin/elasticsearch-certutil ca bin/elasticsearch-certutil cert --ca elastic-stack-ca.p12 But in logstash and beats a p12 is not supported and I MUST use ssl.certifi… --- ## [Howto change indices in def. ML jobs](https://discuss.elastic.co/t/howto-change-indices-in-def-ml-jobs/211620)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 2\ **Last updated:** [December 20, 2019, 10:06am UTC](https://discuss.elastic.co/t/howto-change-indices-in-def-ml-jobs/211620 "2019-12-20T10:06:19Z")
Attempting to deploy std. SIEM ML jobs, only to find that they fail as they are meant for std. index naming. Issue is that we're using a custom named indices prefixed for a SIEM PoC. So question is how may we change the… --- ## [How to catch an error in logstash](https://discuss.elastic.co/t/how-to-catch-an-error-in-logstash/154499)
**Author:** [@zahodi](https://discuss.elastic.co/u/zahodi)\ **Replies:** 2\ **Last updated:** [November 1, 2018, 4:20am UTC](https://discuss.elastic.co/t/how-to-catch-an-error-in-logstash/154499 "2018-11-01T04:20:28Z")
Hello, my logstash json filter seems be throwing errors on certain messages and I'm nut sure how to debug it. Is there a way to figure what messages or what is source of the message that threw this exception. I have mul… --- ## [Logstash - Keep it running](https://discuss.elastic.co/t/logstash-keep-it-running/129427)
**Author:** [@Amol\_Hegana](https://discuss.elastic.co/u/Amol_Hegana)\ **Replies:** 2\ **Last updated:** [April 25, 2018, 1:33pm UTC](https://discuss.elastic.co/t/logstash-keep-it-running/129427 "2018-04-25T13:33:42Z")
I have created environment where logstash is taking data from MS SQL server and feeding (output ) it to Elastic. Main reason to use logstash is to keep these both DB in sync. But now as soon as it feeds data into elastic… --- ## [Logstash date filter not work](https://discuss.elastic.co/t/logstash-date-filter-not-work/118454)
**Author:** [@uvali](https://discuss.elastic.co/u/uvali)\ **Replies:** 2\ **Last updated:** [February 5, 2018, 1:56pm UTC](https://discuss.elastic.co/t/logstash-date-filter-not-work/118454 "2018-02-05T13:56:27Z")
I try to use logstash date filter but it not work. My conf is: input { stdin{} } filter { date { match =\> \["when", "YYYY-MM-dd HH:mm:ss,SSS"\] } grok { match =\> { "message" =\> "\\ATID:%{SPACE}\[%{INT:id}\]%{SPACE}\[… --- ## [Current year in to the date filter](https://discuss.elastic.co/t/current-year-in-to-the-date-filter/89394)
**Author:** [@Raghu19](https://discuss.elastic.co/u/Raghu19)\ **Replies:** 2\ **Last updated:** [June 14, 2017, 3:22pm UTC](https://discuss.elastic.co/t/current-year-in-to-the-date-filter/89394 "2017-06-14T15:22:36Z")
Dear experts, I am generating a config file to parse a log file, which has date in the form of only MON dd. e.g., Jun 11, Aug 01 etc if i use the date filter, is there a way i can assign current year (2017) to this date? … --- ## [Exception in pipeline worker and Java Out of Memory Errors](https://discuss.elastic.co/t/exception-in-pipeline-worker-and-java-out-of-memory-errors/169916)
**Author:** [@deepaknadig](https://discuss.elastic.co/u/deepaknadig)\ **Replies:** 1\ **Last updated:** [February 25, 2019, 11:52pm UTC](https://discuss.elastic.co/t/exception-in-pipeline-worker-and-java-out-of-memory-errors/169916 "2019-02-25T23:52:49Z")
Hello, I'm runnung ELK 6.6 and I'm trying to index about 2,000 json files and I'm getting the following error: java.lang.OutOfMemoryError: Java heap space Dumping heap to java\_pid6685.hprof ... Heap dump file created \[… --- ## [Elasticsearch APM agent for Angular application](https://discuss.elastic.co/t/elasticsearch-apm-agent-for-angular-application/166287)
**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 2:08pm UTC](https://discuss.elastic.co/t/elasticsearch-apm-agent-for-angular-application/166287 "2019-02-01T14:08:41Z")
I would like to integrate APM with my Angular application. When tried with Nodejs agent and Javascript agent, I couldn't found it working. Please help. --- ## [Kibana server is not yet ready after adding basic licensed x-pack security](https://discuss.elastic.co/t/kibana-server-is-not-yet-ready-after-adding-basic-licensed-x-pack-security/298572)
**Author:** [@edk](https://discuss.elastic.co/u/edk)\ **Replies:** 4\ **Last updated:** [March 4, 2022, 2:53pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-yet-ready-after-adding-basic-licensed-x-pack-security/298572 "2022-03-04T14:53:44Z")
I'm trying to setup minimal security for Elasticsearch and kibana on an existing test instance running 6.8.23 on a single server running both Elasticsearch and kibana, deployed on windows. I've gotten Elasticsearch to … --- ## [Logstash, syslog, ECS and Kibana Logs / SIEM](https://discuss.elastic.co/t/logstash-syslog-ecs-and-kibana-logs-siem/274789)
**Author:** [@egli](https://discuss.elastic.co/u/egli)\ **Replies:** 4\ **Last updated:** [June 2, 2021, 11:08pm UTC](https://discuss.elastic.co/t/logstash-syslog-ecs-and-kibana-logs-siem/274789 "2021-06-02T23:08:42Z")
Hi, I have logstash working as a central syslog server using syslog\_pri plugin and sending the events to elasticsearch. I would like to ingest those syslog events and adhere to ECS so it is possible to use Kibana Logs o… --- ## [No support for PercolateQueryBuilder in High Level Rest](https://discuss.elastic.co/t/no-support-for-percolatequerybuilder-in-high-level-rest/186140)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 4\ **Last updated:** [July 12, 2019, 12:53pm UTC](https://discuss.elastic.co/t/no-support-for-percolatequerybuilder-in-high-level-rest/186140 "2019-07-12T12:53:30Z")
I cannot find support for the Percolator query in the HighLevelrest client. Is there a reason for that? Or am I missing something? I created a WrapperQuery with the the percolator query as a string. But would like to ha… --- ## [Filebeat holding old files in Centos 6.5](https://discuss.elastic.co/t/filebeat-holding-old-files-in-centos-6-5/100571)
**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 3:03pm UTC](https://discuss.elastic.co/t/filebeat-holding-old-files-in-centos-6-5/100571 "2017-10-05T15:03:46Z")
Hi not sure it bug but filebeat is killing space on filesystem one I do restart filebeat system get back to normal can some one please why filebeat stuck to old files I'm running 5.5.2 version ? --- ## [Do I tell the world to hit one node? Or many? Or load balance?](https://discuss.elastic.co/t/do-i-tell-the-world-to-hit-one-node-or-many-or-load-balance/21067)
**Author:** [@Christopher\_Ambler\_2](https://discuss.elastic.co/u/Christopher_Ambler_2)\ **Replies:** 4\ **Last updated:** [December 4, 2014, 6:57pm UTC](https://discuss.elastic.co/t/do-i-tell-the-world-to-hit-one-node-or-many-or-load-balance/21067 "2014-12-04T18:57:07Z")
I have a nice, performant cluster of 5 nodes. They're all on separate machines on the same switch. Life is good. Now... Do I tell the consumers of my Elasticsearch cluster to hit any of the five nodes as suits … --- ## [Indexing large number of documents](https://discuss.elastic.co/t/indexing-large-number-of-documents/15838)
**Author:** [@Petr\_Jansky](https://discuss.elastic.co/u/Petr_Jansky)\ **Replies:** 4\ **Last updated:** [February 17, 2014, 5:32pm UTC](https://discuss.elastic.co/t/indexing-large-number-of-documents/15838 "2014-02-17T17:32:15Z")
Hello, I'm trying to index \>300k docs using Java API. \*public class Fetcher {\* \* public static String server = "localhost"; \* \* public static Integer port = 9300;\* \* public static String index = "default";\* \* p… --- ## [How to extend i18n translations?](https://discuss.elastic.co/t/how-to-extend-i18n-translations/176784)
**Author:** [@Hamed\_Jml](https://discuss.elastic.co/u/Hamed_Jml)\ **Replies:** 3\ **Last updated:** [April 15, 2019, 5:41pm UTC](https://discuss.elastic.co/t/how-to-extend-i18n-translations/176784 "2019-04-15T17:41:53Z")
Hi As I realized, elk 6.7 and 7 supports simplified chinese, and for each plugin it is possible to have translation files. I need to translate kibana core to another language and I don't know chinese. Is there an engl… --- ## [Starting logstash error: No log4j2 configuration file found. Using default configuration: logging only errors to the console](https://discuss.elastic.co/t/starting-logstash-error-no-log4j2-configuration-file-found-using-default-configuration-logging-only-errors-to-the-console/95655)
**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\ **Replies:** 0\ **Last updated:** [August 3, 2017, 7:23am UTC](https://discuss.elastic.co/t/starting-logstash-error-no-log4j2-configuration-file-found-using-default-configuration-logging-only-errors-to-the-console/95655 "2017-08-03T07:23:57Z")
$ ./logstash -f …/first-pipeline.conf --config.reload.automatic ERROR StatusLogger No log4j2 configuration file found. Using default configuration: logging only errors to the console. Sending Logstash’s logs to /home/m… --- ## [Caused by: java.lang.NoClassDefFoundError: com/carrotsearch/hppc/BitMixer](https://discuss.elastic.co/t/caused-by-java-lang-noclassdeffounderror-com-carrotsearch-hppc-bitmixer/37530)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 0\ **Last updated:** [December 18, 2015, 3:36am UTC](https://discuss.elastic.co/t/caused-by-java-lang-noclassdeffounderror-com-carrotsearch-hppc-bitmixer/37530 "2015-12-18T03:36:23Z")
Hi All, Recently I upgraded my ES to 2.2.1. But I am getting below exception when I try to connect using java client. Did anyone come across same scenario? Caused by: java.lang.NoClassDefFoundError: com/carrotsearch/… --- ## [Docker, ES 7.8.0, and the localhost snapshot repository](https://discuss.elastic.co/t/docker-es-7-8-0-and-the-localhost-snapshot-repository/240619)
**Author:** [@Jasper\_Showers](https://discuss.elastic.co/u/Jasper_Showers)\ **Replies:** 5\ **Last updated:** [July 11, 2020, 3:49am UTC](https://discuss.elastic.co/t/docker-es-7-8-0-and-the-localhost-snapshot-repository/240619 "2020-07-11T03:49:20Z")
I'm trying to execute a Dockerfile from elasticsearch:7.8.0 that will: Add a backup.tar.gz file to the image and extract it to a backup location. Change ownership of that folder so that ES has permission to read it. Ac… --- ## [Search UI is not suupoting hashing in url](https://discuss.elastic.co/t/search-ui-is-not-suupoting-hashing-in-url/240519)
**Author:** [@ranjeet.tiwari](https://discuss.elastic.co/u/ranjeet.tiwari)\ **Replies:** 5\ **Last updated:** [July 10, 2020, 5:56am UTC](https://discuss.elastic.co/t/search-ui-is-not-suupoting-hashing-in-url/240519 "2020-07-10T05:56:59Z")
We are using search ui library that allows to quickly implement search experience leveraging Elasticsearch. We have used hashing in the url routing (which generate the url like this http://www.example.com/#/Search, it i… --- ## [Use azure fileshare as data storage for Multiple ES Clusters running on K8s](https://discuss.elastic.co/t/use-azure-fileshare-as-data-storage-for-multiple-es-clusters-running-on-k8s/217155)
**Author:** [@biswarup1290dass](https://discuss.elastic.co/u/biswarup1290dass)\ **Replies:** 5\ **Last updated:** [January 30, 2020, 8:24pm UTC](https://discuss.elastic.co/t/use-azure-fileshare-as-data-storage-for-multiple-es-clusters-running-on-k8s/217155 "2020-01-30T20:24:20Z")
Is it possible to use an Azure File Share(similar to NFS) for data storage of multiple ES Clusters running on K8s? So that both the clusters can write/read from a common location. Can think of it as a cross-geo HA soluti… --- ## [Is it possible to make a ingest-plugin which processor is able to make an HTTP request](https://discuss.elastic.co/t/is-it-possible-to-make-a-ingest-plugin-which-processor-is-able-to-make-an-http-request/178311)
**Author:** [@Borwick\_5576](https://discuss.elastic.co/u/Borwick_5576)\ **Replies:** 7\ **Last updated:** [May 6, 2019, 10:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-a-ingest-plugin-which-processor-is-able-to-make-an-http-request/178311 "2019-05-06T22:25:39Z")
The goal here is being able to send the data of documents to a service my companie has and then index the response as an anotation. Im having trouble opening a connection from the processor. --- ## [Extract time hour with runtime field](https://discuss.elastic.co/t/extract-time-hour-with-runtime-field/297122)
**Author:** [@ima](https://discuss.elastic.co/u/ima)\ **Replies:** 1\ **Last updated:** [February 14, 2022, 10:48am UTC](https://discuss.elastic.co/t/extract-time-hour-with-runtime-field/297122 "2022-02-14T10:48:27Z")
Hello everyone, I wanna extract the time hour from the @timestamp field in winlogbeat using runtime field. is there any way to do that. thank you in advance for your help. --- ## [Logstash is not processing logs](https://discuss.elastic.co/t/logstash-is-not-processing-logs/269084)
**Author:** [@James\_P](https://discuss.elastic.co/u/James_P)\ **Replies:** 1\ **Last updated:** [April 3, 2021, 7:49am UTC](https://discuss.elastic.co/t/logstash-is-not-processing-logs/269084 "2021-04-03T07:49:10Z")
Hi, Logstash was installed and was receiving logs from filebeat and syslog file stream. Currently logstash starts up successfully but no logs are being processed. \[2021-04-02T08:48:29,269\]\[INFO \]\[logstash.runner … --- ## [Logstashの「LEAK: ByteBuf」に関するエラーについて](https://discuss.elastic.co/t/logstash-leak-bytebuf/256045)
**Author:** [@ueba-dev-i](https://discuss.elastic.co/u/ueba-dev-i)\ **Replies:** 1\ **Last updated:** [November 24, 2020, 2:26am UTC](https://discuss.elastic.co/t/logstash-leak-bytebuf/256045 "2020-11-24T02:26:47Z")
Logstashにおいて、高負荷な状態が継続し、以下アラートが発出致しました。 \[ERROR\]\[io.netty.util.ResourceLeakDetector\] LEAK: ByteBuf.release() was not called before it's garbage-collected. See http://netty.io/wiki/reference-counted-objects.html for more… --- ## [Your query is taking a while run beyond timeout and error in visualization](https://discuss.elastic.co/t/your-query-is-taking-a-while-run-beyond-timeout-and-error-in-visualization/237071)
**Author:** [@suresh123](https://discuss.elastic.co/u/suresh123)\ **Replies:** 1\ **Last updated:** [June 15, 2020, 6:48pm UTC](https://discuss.elastic.co/t/your-query-is-taking-a-while-run-beyond-timeout-and-error-in-visualization/237071 "2020-06-15T18:48:12Z")
Hi Team, I am getting below error when i change the time frame for last 3 days and another change last 7 days your query is taking a while run beyond timeout and error in visualization Note: Also changed to 60000ms fr… --- ## [Is there way to keep track of logstash progress when a file is being parsed?](https://discuss.elastic.co/t/is-there-way-to-keep-track-of-logstash-progress-when-a-file-is-being-parsed/128681)
**Author:** [@Mayank\_Agrawal](https://discuss.elastic.co/u/Mayank_Agrawal)\ **Replies:** 1\ **Last updated:** [April 19, 2018, 11:23am UTC](https://discuss.elastic.co/t/is-there-way-to-keep-track-of-logstash-progress-when-a-file-is-being-parsed/128681 "2018-04-19T11:23:50Z")
Hi, I am using logstash to read fixed set of log files (parallely) and through .sincedb file, I am figuring it out its progress. I noticed that logstash updates .sincedb file only when it has completely read a file i.e.… --- ## [Machine Learning / Decision Tree Learning with Elasticsearch](https://discuss.elastic.co/t/machine-learning-decision-tree-learning-with-elasticsearch/22637)
**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\ **Replies:** 1\ **Last updated:** [March 12, 2015, 4:10pm UTC](https://discuss.elastic.co/t/machine-learning-decision-tree-learning-with-elasticsearch/22637 "2015-03-12T16:10:26Z")
Hi All, Has anyone tried putting advanced decision tree analysis on top of Elasticsearch? I've seen others users Naive Bayes on top of Elasticsearch, which is really great, but I want to try to move past … --- ## [Filebeat: Kafka Input doesn't push the topic offset](https://discuss.elastic.co/t/filebeat-kafka-input-doesnt-push-the-topic-offset/292436)
**Author:** [@Giero](https://discuss.elastic.co/u/Giero)\ **Replies:** 6\ **Last updated:** [January 24, 2022, 12:54pm UTC](https://discuss.elastic.co/t/filebeat-kafka-input-doesnt-push-the-topic-offset/292436 "2022-01-24T12:54:07Z")
I'm using Filebeat 7.16.0 with Kafka Input and Elasticsearch Output. Previously I had java application to take care of this flow. I'm using the same consumer group as previous java application and messages appear in El… --- ## [Elastic replication after reboot](https://discuss.elastic.co/t/elastic-replication-after-reboot/113155)
**Author:** [@Serg](https://discuss.elastic.co/u/Serg)\ **Replies:** 6\ **Last updated:** [December 26, 2017, 9:49am UTC](https://discuss.elastic.co/t/elastic-replication-after-reboot/113155 "2017-12-26T09:49:28Z")
I have 2 nodes with replica factor 1. it's mean that I should have not less than 1 copy of indexes. I had problems with 1 server and I stooped it and added new clean volume. after sync I found that not all indexes was … --- ## [ElasticSearch and RabbitMQ: disconnected after inactivity](https://discuss.elastic.co/t/elasticsearch-and-rabbitmq-disconnected-after-inactivity/12695)
**Author:** [@11124](https://discuss.elastic.co/u/11124)\ **Replies:** 6\ **Last updated:** [July 9, 2013, 6:13am UTC](https://discuss.elastic.co/t/elasticsearch-and-rabbitmq-disconnected-after-inactivity/12695 "2013-07-09T06:13:09Z")
Hi all, I have a setup with two node RabbitMQ cluster and ElasticSearch server with RabbitMQ river that acts as consumer of RabbitMQ queue. I use it proof of concept purposes to test if this configuration works, … --- ## [Use Environment Variables in properties File](https://discuss.elastic.co/t/use-environment-variables-in-properties-file/180758)
**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\ **Replies:** 8\ **Last updated:** [May 21, 2019, 12:13pm UTC](https://discuss.elastic.co/t/use-environment-variables-in-properties-file/180758 "2019-05-21T12:13:11Z")
Is it possible to use Windows Environment Variables in the config file. eg. service\_name=Servicename\_%Hostname% Thx --- ## [Significant Term aggregation](https://discuss.elastic.co/t/significant-term-aggregation/17289)
**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\ **Replies:** 8\ **Last updated:** [May 6, 2014, 10:18am UTC](https://discuss.elastic.co/t/significant-term-aggregation/17289 "2014-05-06T10:18:52Z")
Hi: I have been trying to use (and successfully did) the Significant terms aggregations in release 1.1.0. The blog posts about this feature http://www.elasticsearch.org/blog/significant-terms-aggregation/ was ex… --- ## [Finding message length](https://discuss.elastic.co/t/finding-message-length/296604)
**Author:** [@makudu](https://discuss.elastic.co/u/makudu)\ **Replies:** 3\ **Last updated:** [February 14, 2022, 6:32pm UTC](https://discuss.elastic.co/t/finding-message-length/296604 "2022-02-14T18:32:16Z")
this giving runtime error. Please advice. GET logstash-2022.01.25/\_doc/\_search { "query": { "match\_all": {} }, "script\_fields": { "log\_size": { "script": { "lang": "painless", "source": "doc\['message.keyword'\].… --- ## [Trace custom header injected through filter in transaction details](https://discuss.elastic.co/t/trace-custom-header-injected-through-filter-in-transaction-details/252373)
**Author:** [@Alain\_Bod](https://discuss.elastic.co/u/Alain_Bod)\ **Replies:** 3\ **Last updated:** [October 19, 2020, 9:23am UTC](https://discuss.elastic.co/t/trace-custom-header-injected-through-filter-in-transaction-details/252373 "2020-10-19T09:23:27Z")
Kibana version: 7.4.2 Elasticsearch version: 7.4.2 APM Server version: 7.4.2 APM Agent language and version: java 1.18.1 (Manual setup with -javaagent flag) We have plugged the java APM agent to our dropwizard appl… --- ## [Filebeat 5.2.2 'pipelining' option causes (?) event duplication when sending to logstash](https://discuss.elastic.co/t/filebeat-5-2-2-pipelining-option-causes-event-duplication-when-sending-to-logstash/80820)
**Author:** [@msoltyspl](https://discuss.elastic.co/u/msoltyspl)\ **Replies:** 3\ **Last updated:** [April 6, 2017, 5:59am UTC](https://discuss.elastic.co/t/filebeat-5-2-2-pipelining-option-causes-event-duplication-when-sending-to-logstash/80820 "2017-04-06T05:59:06Z")
With the following config file: name: "filebeat log harvester" logging.level: debug filebeat.prospectors: - input\_type: log paths: - /var/log/nginx/access\_log.json encoding: utf-8 document\_type: acc… --- ## [Is it possible to create aliases on a monthly basis using index templates?](https://discuss.elastic.co/t/is-it-possible-to-create-aliases-on-a-monthly-basis-using-index-templates/80850)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 3\ **Last updated:** [April 1, 2017, 8:27am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-aliases-on-a-monthly-basis-using-index-templates/80850 "2017-04-01T08:27:35Z")
HI, My data comes daily and i want to store in monthly based aliases. Template 1(It have to run for jan month(i.e 31days) after that automatically it have to use Template 2 { "template" : "data-\*", "aliases" : { … --- ## [How to use \_mget in elasticserach-hadoop](https://discuss.elastic.co/t/how-to-use--mget-in-elasticserach-hadoop/54481)
**Author:** [@jspooner](https://discuss.elastic.co/u/jspooner)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 8:43pm UTC](https://discuss.elastic.co/t/how-to-use--mget-in-elasticserach-hadoop/54481 "2016-07-01T20:43:50Z")
Is it possible to use the \_mget function from the EsSpark class? I need to update a large amount of documents in ElasticSearch and I'm thinking the best method is collect every document with \_mget. Example POST /dev… --- ## [Topbeat immediately exiting](https://discuss.elastic.co/t/topbeat-immediately-exiting/53706)
**Author:** [@apomerenk](https://discuss.elastic.co/u/apomerenk)\ **Replies:** 3\ **Last updated:** [June 23, 2016, 2:50pm UTC](https://discuss.elastic.co/t/topbeat-immediately-exiting/53706 "2016-06-23T14:50:19Z")
I am trying to send topbeat logs from a Centos7 on virtualbox to an ELK stack running on the local machine. When I run sudo /etc/init.d/topbeat start from the terminal, I get the message: Starting topbeat (via systemct… --- ## [Spark - How to find the Index ID for a search request](https://discuss.elastic.co/t/spark-how-to-find-the-index-id-for-a-search-request/38896)
**Author:** [@Yasanka\_Horawalavith](https://discuss.elastic.co/u/Yasanka_Horawalavith)\ **Replies:** 3\ **Last updated:** [January 12, 2016, 3:33pm UTC](https://discuss.elastic.co/t/spark-how-to-find-the-index-id-for-a-search-request/38896 "2016-01-12T15:33:55Z")
Hi, I have multiple indices (automatically created as application requirement) created at ES with different types. With spark support, I can query and find the relevant document but can not find the index id attached wit… [Previous page](https://discuss.elastic.co/top.md?page=1336&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1338&per_page=50&period=all)