# Top **URL:** https://discuss.elastic.co/top.md?page=1343&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1344 --- ## [Need to Extract field](https://discuss.elastic.co/t/need-to-extract-field/297154)
**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\ **Replies:** 7\ **Last updated:** [February 16, 2022, 6:36pm UTC](https://discuss.elastic.co/t/need-to-extract-field/297154 "2022-02-16T18:36:23Z")
Hi Experts, I am using logstash 7.9.3 and i have written the MongoDb connection with Elasticsearch pipeline. Data's are perfectly pushed into Elasticsearch. In that index I need to split one field. My logstash configu… --- ## [Response session state does not have corresponding state or nonce parameters or redirect URL](https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484)
**Author:** [@soumendra](https://discuss.elastic.co/u/soumendra)\ **Replies:** 1\ **Last updated:** [November 26, 2019, 11:19am UTC](https://discuss.elastic.co/t/response-session-state-does-not-have-corresponding-state-or-nonce-parameters-or-redirect-url/209484 "2019-11-26T11:19:26Z")
ES & KB: 7.3.2 While signing into Kibana with oidc realm, I got the following error out of the blue. {"statusCode":401,"error":"Unauthorized","message":"Response session state does not have corresponding state or nonce… --- ## [How to search exact string in array of string values](https://discuss.elastic.co/t/how-to-search-exact-string-in-array-of-string-values/193564)
**Author:** [@111189](https://discuss.elastic.co/u/111189)\ **Replies:** 1\ **Last updated:** [August 5, 2019, 11:25am UTC](https://discuss.elastic.co/t/how-to-search-exact-string-in-array-of-string-values/193564 "2019-08-05T11:25:30Z")
This is my index { "mappings": { "page": { "properties": { "company-product-skus": { "type": "text", "include\_in\_all": false, "analyzer": "keyword", "index":… --- ## [How to call stored script from another script?](https://discuss.elastic.co/t/how-to-call-stored-script-from-another-script/179920)
**Author:** [@mhmtnlr](https://discuss.elastic.co/u/mhmtnlr)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 2:46pm UTC](https://discuss.elastic.co/t/how-to-call-stored-script-from-another-script/179920 "2019-05-10T14:46:07Z")
Hey, I have a stored script which does some calculation and returns a number. I'm using it to populate a scripted field. And I need to use the pretty much same script for filtering out the results. Firstly, I try to acc… --- ## [Logstash change log directory](https://discuss.elastic.co/t/logstash-change-log-directory/163512)
**Author:** [@sledge13](https://discuss.elastic.co/u/sledge13)\ **Replies:** 1\ **Last updated:** [January 9, 2019, 1:36pm UTC](https://discuss.elastic.co/t/logstash-change-log-directory/163512 "2019-01-09T13:36:38Z")
Hello, i have installed Logstash on Ubuntu Server 16.04, mounted 1 TB harddrive, and i would like to change directory of all saved logs to this harddrive. How can I change it? Do i need to edit some config file? Thanks --- ## [Self-host Elasticsearch VS. Cloud](https://discuss.elastic.co/t/self-host-elasticsearch-vs-cloud/163293)
**Author:** [@Anson1](https://discuss.elastic.co/u/Anson1)\ **Replies:** 1\ **Last updated:** [January 8, 2019, 9:00am UTC](https://discuss.elastic.co/t/self-host-elasticsearch-vs-cloud/163293 "2019-01-08T09:00:23Z")
Hi, I have got a single ELK stack with a single node running in a vagrant virtual box on my machine. It has 3 indexes which are 90mb, 3.6gb, and 38gb. At the same time, I have also got a Javascript application running … --- ## [Jdbc\_streaming filter help](https://discuss.elastic.co/t/jdbc-streaming-filter-help/142499)
**Author:** [@ripopo](https://discuss.elastic.co/u/ripopo)\ **Replies:** 1\ **Last updated:** [August 7, 2018, 3:53pm UTC](https://discuss.elastic.co/t/jdbc-streaming-filter-help/142499 "2018-08-07T15:53:31Z")
Hello, for example i have a database with columns id, a, b, c. here is my config file \< input { stdin { } } filter { jdbc\_streaming { jdbc\_driver\_library =\> "path/to/data.jar" jdbc\_driver\_class =\> "..." jdbc\_co… --- ## [Filebeat doesn't ignore .gz file when harvester file](https://discuss.elastic.co/t/filebeat-doesnt-ignore-gz-file-when-harvester-file/106263)
**Author:** [@vuxuanlai](https://discuss.elastic.co/u/vuxuanlai)\ **Replies:** 1\ **Last updated:** [November 3, 2017, 11:26am UTC](https://discuss.elastic.co/t/filebeat-doesnt-ignore-gz-file-when-harvester-file/106263 "2017-11-03T11:26:12Z")
Hi there, I just want read log from specific file, exclude all .gz files and this is my filebeat.yml: - input\_type: log paths: - /var/log/glusterfs/\* document\_type: glusterfs exclude\_lines: \['^\[\[:blank:\]\]|^… --- ## [Turn off source for search slow logs](https://discuss.elastic.co/t/turn-off-source-for-search-slow-logs/71182)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 1\ **Last updated:** [January 12, 2017, 9:59pm UTC](https://discuss.elastic.co/t/turn-off-source-for-search-slow-logs/71182 "2017-01-12T21:59:22Z")
Two questions: 1) Per documentation, you can turn off source for indexing slow log by index.indexing.slowlog.source: 0 OR index.indexing.slowlog.source: false I was wondering if there is a way to turn off source fo… --- ## [Logstash forwarder cant TLS handshake](https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312)
**Author:** [@xon](https://discuss.elastic.co/u/xon)\ **Replies:** 1\ **Last updated:** [September 25, 2016, 7:26pm UTC](https://discuss.elastic.co/t/logstash-forwarder-cant-tls-handshake/61312 "2016-09-25T19:26:28Z")
Hi there, I am new to ELK. I want to setup an OSSEC monitoring solution (potentially by adding also other sensors such as splunk/etc) but it looks it is a bit complicated... I have followed several links about this err… --- ## [Import Elasticsearch index by copying the folder to a second elasticsearch instance?](https://discuss.elastic.co/t/import-elasticsearch-index-by-copying-the-folder-to-a-second-elasticsearch-instance/21259)
**Author:** [@Grauen](https://discuss.elastic.co/u/Grauen)\ **Replies:** 1\ **Last updated:** [December 15, 2014, 4:24pm UTC](https://discuss.elastic.co/t/import-elasticsearch-index-by-copying-the-folder-to-a-second-elasticsearch-instance/21259 "2014-12-15T16:24:40Z")
I tried to copy a closed index to a backup elasticsearch instance. I just used SCP and copied the Index folder to the same folder of the backup server. When I try to reopen the index on the backup server using '-… --- ## [Metricbeat on Openshift not really supported?](https://discuss.elastic.co/t/metricbeat-on-openshift-not-really-supported/282054)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 5\ **Last updated:** [August 31, 2021, 1:41pm UTC](https://discuss.elastic.co/t/metricbeat-on-openshift-not-really-supported/282054 "2021-08-31T13:41:16Z")
Hi folks, any of you running metricbeat on openshift to collect state metrics? It looks like it is not supported to collect state metrics of DeploymentConfigs and ReplicationContollers. Anyone ran into this issue? How … --- ## [Slow terms aggregations after use of eager\_global\_ordinals](https://discuss.elastic.co/t/slow-terms-aggregations-after-use-of-eager-global-ordinals/250976)
**Author:** [@tarunpvss](https://discuss.elastic.co/u/tarunpvss)\ **Replies:** 5\ **Last updated:** [October 12, 2020, 9:39am UTC](https://discuss.elastic.co/t/slow-terms-aggregations-after-use-of-eager-global-ordinals/250976 "2020-10-12T09:39:31Z")
Hi team, I have a use case where I need to perform aggregations on a keyword field which has high cardinality. As per the blog https://www.elastic.co/blog/improving-the-performance-of-high-cardinality-terms-aggregations… --- ## [ES-5x : JsonGenerationException in slow logs](https://discuss.elastic.co/t/es-5x-jsongenerationexception-in-slow-logs/108510)
**Author:** [@dimalini](https://discuss.elastic.co/u/dimalini)\ **Replies:** 5\ **Last updated:** [November 30, 2017, 10:08am UTC](https://discuss.elastic.co/t/es-5x-jsongenerationexception-in-slow-logs/108510 "2017-11-30T10:08:00Z")
Hi, As part of slow query investigation, we enabled search slow logs in our production environment\[ES version - 5.4.1\]. In few cases, i do see the original slow query getting logged. But there were many occurrences of J… --- ## [Metricbeat - logstash - redis - elasticsearch](https://discuss.elastic.co/t/metricbeat-logstash-redis-elasticsearch/89059)
**Author:** [@abrejuin](https://discuss.elastic.co/u/abrejuin)\ **Replies:** 5\ **Last updated:** [June 14, 2017, 12:47pm UTC](https://discuss.elastic.co/t/metricbeat-logstash-redis-elasticsearch/89059 "2017-06-14T12:47:06Z")
Hello, I am trying to use Metricbeat for a few days ago. I did installed Metricbeat on a windows server with "memory" metricsets only. Metricbeat is sendind logs to a Logstash server and Logstash is sending logs to… --- ## [Number of docs differents between primary shards and replicas](https://discuss.elastic.co/t/number-of-docs-differents-between-primary-shards-and-replicas/76228)
**Author:** [@ericpietro](https://discuss.elastic.co/u/ericpietro)\ **Replies:** 5\ **Last updated:** [February 24, 2017, 11:39am UTC](https://discuss.elastic.co/t/number-of-docs-differents-between-primary-shards-and-replicas/76228 "2017-02-24T11:39:22Z")
hi everybody, i have a 3 nodes 2.3.3 elk cluster. i have one index named "idx\_mys\_pmm\_iis-2017.02". 5 primary shards, 5 replicas shards. Logstash 2.3.3 push the logs in this index. in sense, i do : "GET cat/shards/idxmy… --- ## [Legend Y-Axis too large](https://discuss.elastic.co/t/legend-y-axis-too-large/74904)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 5\ **Last updated:** [February 15, 2017, 10:06am UTC](https://discuss.elastic.co/t/legend-y-axis-too-large/74904 "2017-02-15T10:06:17Z")
Hello, I have a problem with the order of magnitude of the data I have 3 applications who genere data trafic. One of them genere very much trafic. So in visualize i split graph in 3 parts but, the legend does not adap… --- ## [Cluster Status: Red and License Status: Expired](https://discuss.elastic.co/t/cluster-status-red-and-license-status-expired/54341)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 5\ **Last updated:** [July 1, 2016, 12:26am UTC](https://discuss.elastic.co/t/cluster-status-red-and-license-status-expired/54341 "2016-07-01T00:26:19Z")
Forgive my ignormace I am still trying to wrap my brain around all of the idiosyncrasies of ELK. I have tried everything I can thing of to bring my cluster back online. curl -XGET http://p-es-2:9200/\_license { "licen… --- ## [ElasticSearch With Logstash SSL communication error](https://discuss.elastic.co/t/elasticsearch-with-logstash-ssl-communication-error/356856)
**Author:** [@Blaj\_Dragos](https://discuss.elastic.co/u/Blaj_Dragos)\ **Replies:** 4\ **Last updated:** [April 9, 2024, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-with-logstash-ssl-communication-error/356856 "2024-04-09T10:19:29Z")
Hi! (version 8.11.1) I keep hitting a problem with my ELK stack configuration and I need some help with it. I needed to enable Kibana login page and I found out that I need to set the ssl on for the elasticsearch conf… --- ## [Jaro Winkler algorithm in elasticsearch](https://discuss.elastic.co/t/jaro-winkler-algorithm-in-elasticsearch/334505)
**Author:** [@Bakhodur\_Karomatov](https://discuss.elastic.co/u/Bakhodur_Karomatov)\ **Replies:** 4\ **Last updated:** [May 28, 2023, 11:18pm UTC](https://discuss.elastic.co/t/jaro-winkler-algorithm-in-elasticsearch/334505 "2023-05-28T23:18:32Z")
can i use jaro winkler algorithm in elasticsearch? --- ## [Curator failed to connect to local Elasticsearch (on Ubuntu VM)](https://discuss.elastic.co/t/curator-failed-to-connect-to-local-elasticsearch-on-ubuntu-vm/272060)
**Author:** [@111441](https://discuss.elastic.co/u/111441)\ **Replies:** 4\ **Last updated:** [May 5, 2021, 10:56am UTC](https://discuss.elastic.co/t/curator-failed-to-connect-to-local-elasticsearch-on-ubuntu-vm/272060 "2021-05-05T10:56:23Z")
I have Elasticsearch on Ubuntu VM. I installed curator on the hosting windows server and succeeded to connect to elasticsearch, using the VM IP in the config file (and also succeeded to delete indices) But when I insta… --- ## [Dynamic code evaluation using Script](https://discuss.elastic.co/t/dynamic-code-evaluation-using-script/179479)
**Author:** [@sgoel](https://discuss.elastic.co/u/sgoel)\ **Replies:** 4\ **Last updated:** [May 8, 2019, 4:30am UTC](https://discuss.elastic.co/t/dynamic-code-evaluation-using-script/179479 "2019-05-08T04:30:35Z")
I have a field in Elastic search of type 'keyword' with value = "Quantity \<= 10". "hits": \[ { "\_index": "rules1", "\_type": "\_doc", "\_id": "zvMleGoBkFxQI52IVKGV", "\_score": 1, "\_source": { "id": "1", "criteria1":… --- ## [No results found - Kibana](https://discuss.elastic.co/t/no-results-found-kibana/113813)
**Author:** [@wmcgilvery](https://discuss.elastic.co/u/wmcgilvery)\ **Replies:** 4\ **Last updated:** [January 10, 2018, 1:42pm UTC](https://discuss.elastic.co/t/no-results-found-kibana/113813 "2018-01-10T13:42:46Z")
I don't always check this server but have found out today that I am getting no results showing in Kibana. There are no errors. Elasticsearch log \[2018-01-02 11:45:12,114\]\[INFO \]\[env \] \[Justin Ham… --- ## [Accessing a custom vector map from Kibana's connection and not through browser](https://discuss.elastic.co/t/accessing-a-custom-vector-map-from-kibanas-connection-and-not-through-browser/106813)
**Author:** [@mikorym](https://discuss.elastic.co/u/mikorym)\ **Replies:** 4\ **Last updated:** [November 10, 2017, 7:51am UTC](https://discuss.elastic.co/t/accessing-a-custom-vector-map-from-kibanas-connection-and-not-through-browser/106813 "2017-11-10T07:51:58Z")
Hi Kibana users I have the following setup: I can access Kibana within my LAN at a.b.c.d:5601 from my IP at x.y.z.q. I have a custom geojson vector map hosted as CORS enabled at the same server a.b.c.d using superstati… --- ## [Kibana didn't load the data when using ruby filter in logstash](https://discuss.elastic.co/t/kibana-didnt-load-the-data-when-using-ruby-filter-in-logstash/94308)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 4\ **Last updated:** [July 24, 2017, 4:17pm UTC](https://discuss.elastic.co/t/kibana-didnt-load-the-data-when-using-ruby-filter-in-logstash/94308 "2017-07-24T16:17:53Z")
I wrote ruby code in logstash conf file like this mutate { add\_field =\> {"\[location\]" =\> "\[0,0\]"} } ruby{ code =\> 'event.set("\[location\]", \[(event.get("%{\[lt\]\[py\]}").to\_f \* 5.6) / 10), event.get("\[lt\]\[px\]"\])) ' } w… --- ## [Configure an index pattern Loading](https://discuss.elastic.co/t/configure-an-index-pattern-loading/52222)
**Author:** [@bibl2008](https://discuss.elastic.co/u/bibl2008)\ **Replies:** 4\ **Last updated:** [June 9, 2016, 7:32pm UTC](https://discuss.elastic.co/t/configure-an-index-pattern-loading/52222 "2016-06-09T19:32:16Z")
Hello, I cannot configure an index pattern. I type winlogbeat-\* to ipattern field but nothing changing - status "Loading": --- ## [Get Count Using has-child query](https://discuss.elastic.co/t/get-count-using-has-child-query/3763)
**Author:** [@Arulkumar](https://discuss.elastic.co/u/Arulkumar)\ **Replies:** 4\ **Last updated:** [January 13, 2011, 8:38am UTC](https://discuss.elastic.co/t/get-count-using-has-child-query/3763 "2011-01-13T08:38:13Z")
Hi , 1. How to get document count in an index using child query.? I am using the query to get count is...... curl -XGET 'http://localhost:9200/dbtest/parent/\_count' -d '{"has\_child" : {"type" : "ch… --- ## [Cannot configure grok pipeline to processors in the elastic agent](https://discuss.elastic.co/t/cannot-configure-grok-pipeline-to-processors-in-the-elastic-agent/341933)
**Author:** [@vanhaiit90](https://discuss.elastic.co/u/vanhaiit90)\ **Replies:** 8\ **Last updated:** [September 7, 2023, 6:45am UTC](https://discuss.elastic.co/t/cannot-configure-grok-pipeline-to-processors-in-the-elastic-agent/341933 "2023-09-07T06:45:03Z")
Hi everyone! I completed and successful configure grok debuger log format of haproxy. And next I was added code grok pattens to pipeline Finally step I have added pipeline to processors in the elastic agent but … --- ## [Sort on object part that exist](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354)
**Author:** [@MrDeliK](https://discuss.elastic.co/u/MrDeliK)\ **Replies:** 3\ **Last updated:** [January 3, 2022, 5:18pm UTC](https://discuss.elastic.co/t/sort-on-object-part-that-exist/293354 "2022-01-03T17:18:39Z")
Hi guys, sorry i have another question but this time concerning the sorting of a request. Considering this mapping { "sample\_data": { "mappings": { "properties": { "title": { … --- ## [Packetbeat parsing mongodb OP\_MSG](https://discuss.elastic.co/t/packetbeat-parsing-mongodb-op-msg/287535)
**Author:** [@chinaxushi](https://discuss.elastic.co/u/chinaxushi)\ **Replies:** 8\ **Last updated:** [November 2, 2021, 2:25am UTC](https://discuss.elastic.co/t/packetbeat-parsing-mongodb-op-msg/287535 "2021-11-02T02:25:58Z")
Mongodb version 3.6 and later added 'OP'\_ MSG 'message type. When packet beat parses this type, the output field mongodb is empty. In addition, the most important thing is that there is no end time and no overall respons… --- ## [Spring cloud gateway distribute to other service, transaction.id is different](https://discuss.elastic.co/t/spring-cloud-gateway-distribute-to-other-service-transaction-id-is-different/280049)
**Author:** [@black295](https://discuss.elastic.co/u/black295)\ **Replies:** 3\ **Last updated:** [August 3, 2021, 2:56am UTC](https://discuss.elastic.co/t/spring-cloud-gateway-distribute-to-other-service-transaction-id-is-different/280049 "2021-08-03T02:56:01Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Best practice for Engine Lifecycle Management in App Search](https://discuss.elastic.co/t/best-practice-for-engine-lifecycle-management-in-app-search/258179)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 8\ **Last updated:** [December 16, 2020, 3:42pm UTC](https://discuss.elastic.co/t/best-practice-for-engine-lifecycle-management-in-app-search/258179 "2020-12-16T15:42:36Z")
I´m using App Search to create engine, write and read documents. So no direct interaction with Elasticsearch at all. The question is what would be the best practice to define "Engine Lifecycle Management"? I can´t see t… --- ## [How to use aggregation with query?](https://discuss.elastic.co/t/how-to-use-aggregation-with-query/230691)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 3\ **Last updated:** [May 4, 2020, 7:26pm UTC](https://discuss.elastic.co/t/how-to-use-aggregation-with-query/230691 "2020-05-04T19:26:15Z")
Hello, I hope someone can help me. How do I use aggregation (date range) with query? I want to be able to add date range to my query with the option of missing value and a condition (greater than). Thank you in advan… --- ## [CSV data to Elasticsearch using Logstash](https://discuss.elastic.co/t/csv-data-to-elasticsearch-using-logstash/192055)
**Author:** [@Fragan](https://discuss.elastic.co/u/Fragan)\ **Replies:** 8\ **Last updated:** [July 25, 2019, 1:59pm UTC](https://discuss.elastic.co/t/csv-data-to-elasticsearch-using-logstash/192055 "2019-07-25T13:59:27Z")
Hello, im trying to push csv data to Elasticsearch using Logstash, here's my logstash conf file : input{ file{ path =\> "C:\\Users\\zk3i\\Desktop\\ELK\\kpassdemo\_vue\_qsse.CSV" start\_position =\> "beginning" sincedb\_path… --- ## [Es7beta1 error with remote cluster](https://discuss.elastic.co/t/es7beta1-error-with-remote-cluster/171847)
**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\ **Replies:** 3\ **Last updated:** [March 12, 2019, 10:24am UTC](https://discuss.elastic.co/t/es7beta1-error-with-remote-cluster/171847 "2019-03-12T10:24:13Z")
when add the remote cluster in es7 beta1 the monitroing ui can't show the ui with "reason" Not supported status 500 type "unsupported\_operation\_exception" --- ## [DELETE all data feom logstash](https://discuss.elastic.co/t/delete-all-data-feom-logstash/161284)
**Author:** [@saeed](https://discuss.elastic.co/u/saeed)\ **Replies:** 3\ **Last updated:** [December 18, 2018, 8:56am UTC](https://discuss.elastic.co/t/delete-all-data-feom-logstash/161284 "2018-12-18T08:56:34Z")
Hi How can i delete data from an elasticsearch index (just data, not setting) using logstash? I want to reindex data from SQLServer. If GET my\_index/\_count is \> 0 then delete all of them and reload that index from my … --- ## [Syslog output doesn't support dynamic host](https://discuss.elastic.co/t/syslog-output-doesnt-support-dynamic-host/99257)
**Author:** [@admlko](https://discuss.elastic.co/u/admlko)\ **Replies:** 3\ **Last updated:** [September 8, 2017, 1:24pm UTC](https://discuss.elastic.co/t/syslog-output-doesnt-support-dynamic-host/99257 "2017-09-08T13:24:58Z")
Hi, I have to route alerts from remote sites back to their syslog servers. For that, I parse the alert event and based on its’ value, I add metadata field: if \[\_source\]\[site\] == "new york" { mutate { add\_field =\> { "\[… --- ## [Elasticsearch remote server access](https://discuss.elastic.co/t/elasticsearch-remote-server-access/91983)
**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\ **Replies:** 3\ **Last updated:** [July 6, 2017, 12:06am UTC](https://discuss.elastic.co/t/elasticsearch-remote-server-access/91983 "2017-07-06T00:06:31Z")
Can I access ES data from specific remote servers (more than one server) without putting it to public access ? --- ## [Logstash Email throttle not working](https://discuss.elastic.co/t/logstash-email-throttle-not-working/75230)
**Author:** [@amitkashyap](https://discuss.elastic.co/u/amitkashyap)\ **Replies:** 3\ **Last updated:** [February 15, 2017, 7:00pm UTC](https://discuss.elastic.co/t/logstash-email-throttle-not-working/75230 "2017-02-15T19:00:41Z")
I am able to generate mails based on events in log file but I am not able to throttle it. below is my config file. ============================================ input { beats { port =\> 5044 } } filter { … --- ## [Unexpected highlighted words matching with value of index.query.default\_field](https://discuss.elastic.co/t/unexpected-highlighted-words-matching-with-value-of-index-query-default-field/41857)
**Author:** [@terramexx](https://discuss.elastic.co/u/terramexx)\ **Replies:** 3\ **Last updated:** [December 15, 2016, 8:03am UTC](https://discuss.elastic.co/t/unexpected-highlighted-words-matching-with-value-of-index-query-default-field/41857 "2016-12-15T08:03:30Z")
The results in our Discovery tab have by default highlights of the "message" word. In my opinion it is caused by specifying default\_field settings for our logstash indexes { "template": "logstash-\*", "settings":… --- ## [\[Hadoop\] java.lang.IncompatibleClassChangeError: Found interface org.apache.hadoop.mapreduce.JobContext, but class was expected](https://discuss.elastic.co/t/hadoop-java-lang-incompatibleclasschangeerror-found-interface-org-apache-hadoop-mapreduce-jobcontext-but-class-was-expected/17018)
**Author:** [@Shaun\_Campbell](https://discuss.elastic.co/u/Shaun_Campbell)\ **Replies:** 3\ **Last updated:** [April 15, 2014, 8:36am UTC](https://discuss.elastic.co/t/hadoop-java-lang-incompatibleclasschangeerror-found-interface-org-apache-hadoop-mapreduce-jobcontext-but-class-was-expected/17018 "2014-04-15T08:36:12Z")
Hi there, I'm having a bit of trouble using the Maven published version of elasticsearch-hadoop 1.3.0M3. According to the docs, it should be compatible with both Hadoop 1.x and 2.x, although I'm seeing an error i… --- ## [Question about elasticsearch shard zone](https://discuss.elastic.co/t/question-about-elasticsearch-shard-zone/9441)
**Author:** [@tt1](https://discuss.elastic.co/u/tt1)\ **Replies:** 8\ **Last updated:** [October 26, 2012, 7:23pm UTC](https://discuss.elastic.co/t/question-about-elasticsearch-shard-zone/9441 "2012-10-26T19:23:29Z")
Hi there, I'm trying to shard the elasticsearch cluster, and I came across this documentation: http://www.elasticsearch.org/guide/reference/modules/cluster.html I understand most of the explanation, the example i… --- ## [Logstash retrying failed action ... "reason"=\>"action \[indices:admin/create\] is unauthorized for user logstash\_writer](https://discuss.elastic.co/t/logstash-retrying-failed-action-reason-action-indices-admin-create-is-unauthorized-for-user-logstash-writer/211469)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 0\ **Last updated:** [December 11, 2019, 1:22pm UTC](https://discuss.elastic.co/t/logstash-retrying-failed-action-reason-action-indices-admin-create-is-unauthorized-for-user-logstash-writer/211469 "2019-12-11T13:22:30Z")
Hi, I have the following lines in my logstash logs: Dec 11 14:09:01 EAGLEEYE-A3001 logstash: \[2019-12-11T14:09:01,149\]\[INFO \]\[logstash.outputs.elasticsearch\] retrying failed action with response code: 403 ({"type"=\>"se… --- ## [Logstash jdbc-input plugin recording sql last run time incorrectly](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-recording-sql-last-run-time-incorrectly/146514)
**Author:** [@RishikeshDarandale](https://discuss.elastic.co/u/RishikeshDarandale)\ **Replies:** 0\ **Last updated:** [August 29, 2018, 10:50am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-recording-sql-last-run-time-incorrectly/146514 "2018-08-29T10:50:04Z")
Here, I have MySQL server running in timezone America/Chicago (CDT/CST). I have verified this with following sql query SELECT @@global.time\_zone, @@session.time\_zone; My simple table looks like below: SELECT \* FROM br… --- ## [Translation missing](https://discuss.elastic.co/t/translation-missing/42435)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 0\ **Last updated:** [February 22, 2016, 10:29pm UTC](https://discuss.elastic.co/t/translation-missing/42435 "2016-02-22T22:29:47Z")
Hello, When I run the help for logstash (logstash 2.2.0) i notice a few parameters have translation missing. Was hoping for an opinion on the matter. -w, --pipeline-workers COUNT translation missing: en.logstash.run… --- ## [Vega - Multi-level Sankey in Kibana](https://discuss.elastic.co/t/vega-multi-level-sankey-in-kibana/269145)
**Author:** [@cpu](https://discuss.elastic.co/u/cpu)\ **Replies:** 2\ **Last updated:** [April 23, 2021, 10:12am UTC](https://discuss.elastic.co/t/vega-multi-level-sankey-in-kibana/269145 "2021-04-23T10:12:30Z")
Hi All, Trying to achieve multi-level sankey in kibana, and I found the thread below: The user @dhruv477 reported his success... Please @dhruv477 could you share your solution? Or does anyone has a solution to share… --- ## [Kibana visualisation from SQL query](https://discuss.elastic.co/t/kibana-visualisation-from-sql-query/244013)
**Author:** [@Mkapustin](https://discuss.elastic.co/u/Mkapustin)\ **Replies:** 2\ **Last updated:** [August 17, 2020, 10:45am UTC](https://discuss.elastic.co/t/kibana-visualisation-from-sql-query/244013 "2020-08-17T10:45:44Z")
Hello friends! Need help with visualisation in Kibana from sql query: I have the same table from sql query: I need to group results values by columns of actions values and by Mail ID. In splunk I realise it with cha… --- ## [Can't get document by id](https://discuss.elastic.co/t/cant-get-document-by-id/131759)
**Author:** [@fabiocatalao](https://discuss.elastic.co/u/fabiocatalao)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 3:12pm UTC](https://discuss.elastic.co/t/cant-get-document-by-id/131759 "2018-05-14T15:12:08Z")
Hi, I'm being unable to get documents that I index using Java API from the index by id. I'm using the following code to prepare the index: IndexRequest indexRequest = new IndexRequest(myindex, mytype, myid) … --- ## [Issue with GROK parsing of IIS NXLOG data](https://discuss.elastic.co/t/issue-with-grok-parsing-of-iis-nxlog-data/62535)
**Author:** [@mcasa](https://discuss.elastic.co/u/mcasa)\ **Replies:** 2\ **Last updated:** [October 10, 2016, 2:49pm UTC](https://discuss.elastic.co/t/issue-with-grok-parsing-of-iis-nxlog-data/62535 "2016-10-10T14:49:58Z")
I'm using NXLOG to send my IIS logs to my ELK server. Everything is fine except for one part of the message. The port identified in the IIS Message is getting changed. See Bellow Logstash Filter: filter { if \[ty… --- ## [Geo\_shape query return empty set](https://discuss.elastic.co/t/geo-shape-query-return-empty-set/33860)
**Author:** [@LCap](https://discuss.elastic.co/u/LCap)\ **Replies:** 2\ **Last updated:** [November 6, 2015, 7:35am UTC](https://discuss.elastic.co/t/geo-shape-query-return-empty-set/33860 "2015-11-06T07:35:06Z")
Hello, I'm using a fresh install of ES 2.0 with this mapping { "mappings": { "poi": { "properties": { "id": { "type": "string", "index": "… [Previous page](https://discuss.elastic.co/top.md?page=1342&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1344&per_page=50&period=all)