# Top

**URL:** https://discuss.elastic.co/top.md?page=1367&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1368

---

## [Changing Linux bash startup files and history files. Beats](https://discuss.elastic.co/t/changing-linux-bash-startup-files-and-history-files-beats/75013)

<div class="topic-metadata">

**Author:** [@Rajasekaran\_Mari](https://discuss.elastic.co/u/Rajasekaran_Mari)\
**Replies:** 3\
**Last updated:** [February 14, 2017, 2:15pm UTC](https://discuss.elastic.co/t/changing-linux-bash-startup-files-and-history-files-beats/75013 "2017-02-14T14:15:09Z")

</div>

Hi, kindly help me how to write a watcher script (json Script) for Changing Linux bash startup files and history files. Beats. send to alert mail to administrator when some one changing bash startup files and histo…

---

## [Logstash: parsing snmp traps ( continue...)](https://discuss.elastic.co/t/logstash-parsing-snmp-traps-continue/109204)

<div class="topic-metadata">

**Author:** [@Robert.I](https://discuss.elastic.co/u/Robert.I)\
**Replies:** 1\
**Last updated:** [November 27, 2017, 11:33am UTC](https://discuss.elastic.co/t/logstash-parsing-snmp-traps-continue/109204 "2017-11-27T11:33:17Z")

</div>

Hello all, I would like to share my solution with my problem parsing traps. I my problem is described in this topic: https://discuss.elastic.co/t/logstash-parsing-snmp-traps/103208. The solution was : List item Cha…

---

## [Intermittent proxy errors in Kibana 7.9.3 stack monitoring through Apache httpd](https://discuss.elastic.co/t/intermittent-proxy-errors-in-kibana-7-9-3-stack-monitoring-through-apache-httpd/254073)

<div class="topic-metadata">

**Author:** [@retzkek](https://discuss.elastic.co/u/retzkek)\
**Replies:** 2\
**Last updated:** [November 3, 2020, 11:29pm UTC](https://discuss.elastic.co/t/intermittent-proxy-errors-in-kibana-7-9-3-stack-monitoring-through-apache-httpd/254073 "2020-11-03T23:29:24Z")

</div>

We recently upgraded one of our clusters to 7.9.3 (from 6.8.12), and I'm now seeing frequent, but intermittent, proxy errors while in stack monitoring. For instance here is a screenshot of a minute or so in the monitorin…

---

## [Pipeline is being aborted due to logstash\_jdbc\_last\_run File Not Found](https://discuss.elastic.co/t/pipeline-is-being-aborted-due-to-logstash-jdbc-last-run-file-not-found/240029)

<div class="topic-metadata">

**Author:** [@anurag397](https://discuss.elastic.co/u/anurag397)\
**Replies:** 2\
**Last updated:** [July 7, 2020, 11:27am UTC](https://discuss.elastic.co/t/pipeline-is-being-aborted-due-to-logstash-jdbc-last-run-file-not-found/240029 "2020-07-07T11:27:52Z")

</div>

I have two pipelines which sync data from different tables in a postgresql database. - pipeline.id: logstash\_test\_user\_table path.config: "/usr/share/logstash/pipeline/logstash.conf" pipeline.workers: 1 - pipeline.i…

---

## [Create visualisation with alias as index](https://discuss.elastic.co/t/create-visualisation-with-alias-as-index/155874)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 2\
**Last updated:** [November 10, 2018, 11:52pm UTC](https://discuss.elastic.co/t/create-visualisation-with-alias-as-index/155874 "2018-11-10T23:52:43Z")

</div>

Is it possible to create visualisation in Kibana using alias instead of index?

---

## [The best way to achieve CSV imports?](https://discuss.elastic.co/t/the-best-way-to-achieve-csv-imports/153417)

<div class="topic-metadata">

**Author:** [@Nick\_Harper](https://discuss.elastic.co/u/Nick_Harper)\
**Replies:** 2\
**Last updated:** [October 25, 2018, 5:52am UTC](https://discuss.elastic.co/t/the-best-way-to-achieve-csv-imports/153417 "2018-10-25T05:52:14Z")

</div>

Hi I currently use Sphinx and import hundreds of product feeds into this. I am just trying to get this working with Elastic Search but I need to figure out the best way to: I have mapped the product ID to the Elastic…

---

## [Is it possible to update a document in watcher](https://discuss.elastic.co/t/is-it-possible-to-update-a-document-in-watcher/147136)

<div class="topic-metadata">

**Author:** [@yeruvavasavi](https://discuss.elastic.co/u/yeruvavasavi)\
**Replies:** 2\
**Last updated:** [September 4, 2018, 7:51am UTC](https://discuss.elastic.co/t/is-it-possible-to-update-a-document-in-watcher/147136 "2018-09-04T07:51:02Z")

</div>

I want to update a value in the document when a condition is met. By using Transform script can i update a value of the document.

---

## [Elasticsearch Ngram sort by the nearest results](https://discuss.elastic.co/t/elasticsearch-ngram-sort-by-the-nearest-results/142777)

<div class="topic-metadata">

**Author:** [@aymenkn](https://discuss.elastic.co/u/aymenkn)\
**Replies:** 2\
**Last updated:** [August 16, 2018, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-ngram-sort-by-the-nearest-results/142777 "2018-08-16T12:57:48Z")

</div>

I have the following settings and analyzer: { "settings":{ "analysis":{ "filter":{ "nGram\_filter":{ "type":"nGram", "min\_gram":1, "max\_gram":200…

---

## [How to connect Filebeat to Datapower?](https://discuss.elastic.co/t/how-to-connect-filebeat-to-datapower/56712)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 2\
**Last updated:** [July 29, 2016, 11:58am UTC](https://discuss.elastic.co/t/how-to-connect-filebeat-to-datapower/56712 "2016-07-29T11:58:34Z")

</div>

Hi, I want to send some logs to Shipper strictly through datapower. However in FB i have only 2 outputs, Logstash and Elasticsearch. How can I transport logs to LS-Shipper through datapower? br, Sunil

---

## [Document Clustering](https://discuss.elastic.co/t/document-clustering/5934)

<div class="topic-metadata">

**Author:** [@Michael\_Shapiro](https://discuss.elastic.co/u/Michael_Shapiro)\
**Replies:** 2\
**Last updated:** [November 23, 2011, 8:02am UTC](https://discuss.elastic.co/t/document-clustering/5934 "2011-11-23T08:02:51Z")

</div>

Hi Folks, I've been mulling over ES' docs in order to determine if it'd fit my document clustering needs. It doesn't particularly look like it, but I just wanted to throw out the question in case I'm missing somethi…

---

## [Filebeat logs are not being send to logstash](https://discuss.elastic.co/t/filebeat-logs-are-not-being-send-to-logstash/358022)

<div class="topic-metadata">

**Author:** [@Andre172](https://discuss.elastic.co/u/Andre172)\
**Replies:** 5\
**Last updated:** [April 23, 2024, 1:24pm UTC](https://discuss.elastic.co/t/filebeat-logs-are-not-being-send-to-logstash/358022 "2024-04-23T13:24:53Z")

</div>

Hello, I'm new to Elastic Stack and I'm trying to send logs from Filebeat to logstash to Elasticsearch. But I'm not seeing an Index pattern in Opensearch and when I run filebeat i get Errors. My filebeat.yml looks like …

---

## [Elastic Licence](https://discuss.elastic.co/t/elastic-licence/345923)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 5\
**Last updated:** [October 27, 2023, 5:08pm UTC](https://discuss.elastic.co/t/elastic-licence/345923 "2023-10-27T17:08:24Z")

</div>

Hello, I have some questions about Elastic licenses: 1- Do we not pay for the Elastic license in the Test environment, and do we only pay for the other environments? 2- If I purchase a Production license, can I test it…

---

## [Filebeat push event in very slow rate](https://discuss.elastic.co/t/filebeat-push-event-in-very-slow-rate/291013)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 5\
**Last updated:** [December 9, 2021, 7:01am UTC](https://discuss.elastic.co/t/filebeat-push-event-in-very-slow-rate/291013 "2021-12-09T07:01:51Z")

</div>

Hi all I have a problems with one of my filebeat installed server. That server is config to get f5 log. then i install filebeat to get log from that server to Elasticsearch. But back before that setup working fine and…

---

## [Single node, large database index performance](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865)

<div class="topic-metadata">

**Author:** [@twbarr](https://discuss.elastic.co/u/twbarr)\
**Replies:** 8\
**Last updated:** [May 26, 2021, 12:34am UTC](https://discuss.elastic.co/t/single-node-large-database-index-performance/273865 "2021-05-26T00:34:12Z")

</div>

I have a set of documents that I'm trying to load into a single large index on a single node. About seven million documents, about 400gb of text. The fields are in different files, so I'm just using a script that loads e…

---

## [ElasticSearch fail to start with error java.lang.NullPointerException](https://discuss.elastic.co/t/elasticsearch-fail-to-start-with-error-java-lang-nullpointerexception/184017)

<div class="topic-metadata">

**Author:** [@Balaji](https://discuss.elastic.co/u/Balaji)\
**Replies:** 0\
**Last updated:** [June 3, 2019, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-fail-to-start-with-error-java-lang-nullpointerexception/184017 "2019-06-03T15:35:12Z")

</div>

Hi, I have downloaded ElasticSearch 7.0 tar file and installed (by untar-ing) on RHEL v7.5. When I start by ./bin/elasticsearch I get NullPointerException. I pointed my Java home to the JDK that is shipped with Elastics…

---

## [Custom routing, how to prepare new custom routing formula? or get to know the hashing in detail](https://discuss.elastic.co/t/custom-routing-how-to-prepare-new-custom-routing-formula-or-get-to-know-the-hashing-in-detail/164544)

<div class="topic-metadata">

**Author:** [@kshi\_yelpale000](https://discuss.elastic.co/u/kshi_yelpale000)\
**Replies:** 8\
**Last updated:** [January 23, 2019, 11:57am UTC](https://discuss.elastic.co/t/custom-routing-how-to-prepare-new-custom-routing-formula-or-get-to-know-the-hashing-in-detail/164544 "2019-01-23T11:57:10Z")

</div>

In my data model i store data based on language, so i am thinking to distribute documents based on one language per shard. Let say if i have product with id 10, and have fields for product like Label, cost or color So i…

---

## [Searching term in subdocuments with elasticsearch](https://discuss.elastic.co/t/searching-term-in-subdocuments-with-elasticsearch/9524)

<div class="topic-metadata">

**Author:** [@cubuzoa](https://discuss.elastic.co/u/cubuzoa)\
**Replies:** 8\
**Last updated:** [November 4, 2012, 11:51am UTC](https://discuss.elastic.co/t/searching-term-in-subdocuments-with-elasticsearch/9524 "2012-11-04T11:51:43Z")

</div>

I have a index document structure like below; { "term":"some term", "inlang":"some lang" "translations" : { { "translation":"some translation", "outlang":"some lang", …

---

## [Watcher with Json body](https://discuss.elastic.co/t/watcher-with-json-body/318847)

<div class="topic-metadata">

**Author:** [@sudheendra](https://discuss.elastic.co/u/sudheendra)\
**Replies:** 0\
**Last updated:** [November 14, 2022, 9:47am UTC](https://discuss.elastic.co/t/watcher-with-json-body/318847 "2022-11-14T09:47:01Z")

</div>

I am using the watcher to send post request to webhook listener ,but I am failing to convert output array into json object . "actions": { "send\_alert\_to\_jumpstart\_server": { "webhook": { "scheme": "http", "host": "\*\*\*\*\*…

---

## [Tuning number of workers](https://discuss.elastic.co/t/tuning-number-of-workers/296748)

<div class="topic-metadata">

**Author:** [@Sonia1](https://discuss.elastic.co/u/Sonia1)\
**Replies:** 0\
**Last updated:** [February 9, 2022, 3:39pm UTC](https://discuss.elastic.co/t/tuning-number-of-workers/296748 "2022-02-09T15:39:24Z")

</div>

Hello, Currently our logstash consists of 7 pipelines that launch queries against a DB accessed by JDBC. With logstash we enrich and normalize this data and index it directly to Elasticsearch. In total 20 jdbc queries a…

---

## [APM capture body is broken after upgrading from 7.14.0 to 7.15.0](https://discuss.elastic.co/t/apm-capture-body-is-broken-after-upgrading-from-7-14-0-to-7-15-0/285300)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 6\
**Last updated:** [September 28, 2021, 2:45pm UTC](https://discuss.elastic.co/t/apm-capture-body-is-broken-after-upgrading-from-7-14-0-to-7-15-0/285300 "2021-09-28T14:45:56Z")

</div>

Since I have upgraded to APM server 7.15.0 (on Elastic cloud) when capture\_body is enabled JSON body is stored in a single field. This is not different from the older versions. However, the value of JSON message stored i…

---

## [Wrong event start time with Fortinet module](https://discuss.elastic.co/t/wrong-event-start-time-with-fortinet-module/246599)

<div class="topic-metadata">

**Author:** [@anon56147639](https://discuss.elastic.co/u/anon56147639)\
**Replies:** 6\
**Last updated:** [September 16, 2020, 3:30pm UTC](https://discuss.elastic.co/t/wrong-event-start-time-with-fortinet-module/246599 "2020-09-16T15:30:55Z")

</div>

Hi everyone, I'm using Filebeat with its Fortinet module. In Kibana, I noticed that the fields event.start is completely wrong. It contains values such as "1970-01-19T12:01:51.846Z ". I guess there is some parsing prob…

---

## [Index time boosting in Elastic search version 2](https://discuss.elastic.co/t/index-time-boosting-in-elastic-search-version-2/34486)

<div class="topic-metadata">

**Author:** [@mramaprasad](https://discuss.elastic.co/u/mramaprasad)\
**Replies:** 6\
**Last updated:** [November 17, 2015, 4:10pm UTC](https://discuss.elastic.co/t/index-time-boosting-in-elastic-search-version-2/34486 "2015-11-17T16:10:56Z")

</div>

I have a index time boost for a filed as follows in my mapping. "titlefield": { "type":"multi\_field", "fields":{ "title":{"type":"string","index":"analyzed", "store" : true}, "titleunto…

---

## [Azure Plugin - Error 403 can not get list of azure nodes](https://discuss.elastic.co/t/azure-plugin-error-403-can-not-get-list-of-azure-nodes/17733)

<div class="topic-metadata">

**Author:** [@Nikojiro](https://discuss.elastic.co/u/Nikojiro)\
**Replies:** 6\
**Last updated:** [May 27, 2014, 10:20pm UTC](https://discuss.elastic.co/t/azure-plugin-error-403-can-not-get-list-of-azure-nodes/17733 "2014-05-27T22:20:08Z")

</div>

Hi, I've deployed a two nodes ElasticSearch cluster on Windows Azure. My setup is the following : - I use OpenSSL 1.0.1c (as recommended on the plugin's GitHub pahe, other versions gave me trouble) to gen…

---

## [Read from the beginning filebeat](https://discuss.elastic.co/t/read-from-the-beginning-filebeat/288904)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 4\
**Last updated:** [November 11, 2021, 3:37pm UTC](https://discuss.elastic.co/t/read-from-the-beginning-filebeat/288904 "2021-11-11T15:37:02Z")

</div>

hello! Is there any parameter to tell an input in filebeat to read from the beginning of the document? like the start\_position =\> beginnig of logstash Thank you!

---

## [Kibana Datatable - Filters and Url links](https://discuss.elastic.co/t/kibana-datatable-filters-and-url-links/243487)

<div class="topic-metadata">

**Author:** [@nshrestha](https://discuss.elastic.co/u/nshrestha)\
**Replies:** 4\
**Last updated:** [August 4, 2020, 12:08am UTC](https://discuss.elastic.co/t/kibana-datatable-filters-and-url-links/243487 "2020-08-04T00:08:12Z")

</div>

Hi, Am creating a Datatable in Kibana. Have edited a field format as Url and supplied the relevant link in Url template. It is working as expected when I click on the field. But when I use filters on that field in datat…

---

## [Elasticsearch filter plugin not working](https://discuss.elastic.co/t/elasticsearch-filter-plugin-not-working/210532)

<div class="topic-metadata">

**Author:** [@namali](https://discuss.elastic.co/u/namali)\
**Replies:** 4\
**Last updated:** [December 10, 2019, 3:19am UTC](https://discuss.elastic.co/t/elasticsearch-filter-plugin-not-working/210532 "2019-12-10T03:19:16Z")

</div>

running multiple configs in logstash server. Last config, querying the previous logs in elasticsearch which have transferred by other config files in logstash server. filter{ ... elasticsearch { hosts =\> \["XXXXXX/"\] …

---

## [How to get status of Zombie process in mertricbeat metrics?](https://discuss.elastic.co/t/how-to-get-status-of-zombie-process-in-mertricbeat-metrics/150845)

<div class="topic-metadata">

**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\
**Replies:** 4\
**Last updated:** [October 4, 2018, 9:10am UTC](https://discuss.elastic.co/t/how-to-get-status-of-zombie-process-in-mertricbeat-metrics/150845 "2018-10-04T09:10:13Z")

</div>

Dear Team, I tried many times to get the status of zombies process, I did not get a zombie process, I followed the steps, please help me.

---

## [Module processor being cached?](https://discuss.elastic.co/t/module-processor-being-cached/99604)

<div class="topic-metadata">

**Author:** [@danimaiochi](https://discuss.elastic.co/u/danimaiochi)\
**Replies:** 4\
**Last updated:** [September 8, 2017, 10:13am UTC](https://discuss.elastic.co/t/module-processor-being-cached/99604 "2017-09-08T10:13:44Z")

</div>

Hi! I’m developing a new module for filebeat that I’m calling ruby. I noticed that my pipeline keeps using the same processor pattern it was configured on the first version. this is the first version of my module: "p…

---

## [【query】multi\_match question in ES 5.5.0](https://discuss.elastic.co/t/query-multi-match-question-in-es-5-5-0/96709)

<div class="topic-metadata">

**Author:** [@felayman](https://discuss.elastic.co/u/felayman)\
**Replies:** 4\
**Last updated:** [August 11, 2017, 8:18am UTC](https://discuss.elastic.co/t/query-multi-match-question-in-es-5-5-0/96709 "2017-08-11T08:18:45Z")

</div>

When i try to use “multi\_match” in my project. I find a question what is not in line with my expectations. first,i post some data to the es cluster as follow: POST /blogs/blog/1 { "title":"elasticsearch match query"…

---

## [Logstash Netflow translate and convert a field](https://discuss.elastic.co/t/logstash-netflow-translate-and-convert-a-field/90173)

<div class="topic-metadata">

**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\
**Replies:** 4\
**Last updated:** [June 21, 2017, 1:22am UTC](https://discuss.elastic.co/t/logstash-netflow-translate-and-convert-a-field/90173 "2017-06-21T01:22:12Z")

</div>

Hi there, I'm trying to add extra information to my netflow field, more specifically netflow.direction Currently it uses number format but I would like it to be a string as I'm adding a string I've ended up doing thi…

---

## [Curator config properties](https://discuss.elastic.co/t/curator-config-properties/59081)

<div class="topic-metadata">

**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\
**Replies:** 4\
**Last updated:** [September 7, 2016, 6:35pm UTC](https://discuss.elastic.co/t/curator-config-properties/59081 "2016-09-07T18:35:28Z")

</div>

Is there a way to specify curator properties on command line instead of in the yaml? For example curator --host ... etc.. Also, what is does the hosts property signify? To provide more context... In my case, we have 3…

---

## [User Based access for Kibana](https://discuss.elastic.co/t/user-based-access-for-kibana/1743)

<div class="topic-metadata">

**Author:** [@Kumaravel](https://discuss.elastic.co/u/Kumaravel)\
**Replies:** 4\
**Last updated:** [June 24, 2015, 5:10pm UTC](https://discuss.elastic.co/t/user-based-access-for-kibana/1743 "2015-06-24T17:10:55Z")

</div>

I am trying to use Kibana for viewing the logs from multiple application. But the user should be able to see only the logs from his own application. Can the view be customized based on the user access? Or can we have…

---

## [MLT using the Java API](https://discuss.elastic.co/t/mlt-using-the-java-api/12242)

<div class="topic-metadata">

**Author:** [@dantuff](https://discuss.elastic.co/u/dantuff)\
**Replies:** 4\
**Last updated:** [June 17, 2013, 7:35pm UTC](https://discuss.elastic.co/t/mlt-using-the-java-api/12242 "2013-06-17T19:35:52Z")

</div>

I'm trying to get the MLT feature working via the Java API, here is my request: SearchResponse searchResponse = client.moreLikeThis(moreLikeThisRequest(index).type(type) .id(1) .fields("…

---

## [Custom API integration](https://discuss.elastic.co/t/custom-api-integration/314538)

<div class="topic-metadata">

**Author:** [@alextg](https://discuss.elastic.co/u/alextg)\
**Replies:** 1\
**Last updated:** [September 16, 2022, 11:51am UTC](https://discuss.elastic.co/t/custom-api-integration/314538 "2022-09-16T11:51:19Z")

</div>

Hello, I'm running into issues while implementing the Custom API integration which sends API get requests. I have setup successfully other integrations using the Custom Logs integration, however, the Custom API integrat…

---

## [Fatal error enoent no such file or directory mkdtemp - KIBANA](https://discuss.elastic.co/t/fatal-error-enoent-no-such-file-or-directory-mkdtemp-kibana/236214)

<div class="topic-metadata">

**Author:** [@Athiq\_Ahmed](https://discuss.elastic.co/u/Athiq_Ahmed)\
**Replies:** 1\
**Last updated:** [June 11, 2020, 5:50pm UTC](https://discuss.elastic.co/t/fatal-error-enoent-no-such-file-or-directory-mkdtemp-kibana/236214 "2020-06-11T17:50:36Z")

</div>

Hi, when ever I run the batch file of Kibana (Elastic search is already running at the backend), I am getting the following error, please advise ASAP. "Fatal Error: ENOCENT: no such file or directory, mkdtemp; \\chromiu…

---

## [Not all pie label showing up](https://discuss.elastic.co/t/not-all-pie-label-showing-up/217461)

<div class="topic-metadata">

**Author:** [@aayushg](https://discuss.elastic.co/u/aayushg)\
**Replies:** 1\
**Last updated:** [January 31, 2020, 9:23pm UTC](https://discuss.elastic.co/t/not-all-pie-label-showing-up/217461 "2020-01-31T21:23:58Z")

</div>

Hi Team - Not all labels are showing up on the pie dashboard. I tried expanding the visualization but still not all labels are showing up. Could anyone guide on how to show all labels. Also, is it possible to show coun…

---

## [Differerences between Portuguese and Brazilian stemmer](https://discuss.elastic.co/t/differerences-between-portuguese-and-brazilian-stemmer/153364)

<div class="topic-metadata">

**Author:** [@rmchugh](https://discuss.elastic.co/u/rmchugh)\
**Replies:** 1\
**Last updated:** [October 22, 2018, 10:26am UTC](https://discuss.elastic.co/t/differerences-between-portuguese-and-brazilian-stemmer/153364 "2018-10-22T10:26:38Z")

</div>

What are the main differences between the Portuguese and Brazilian language analyzers in 6.x? I've run into some rather strange behaviour when implementing Brazilian and I'm wondering is there any benefit to using the Br…

---

## [Kibana Dashboards using regular expressions](https://discuss.elastic.co/t/kibana-dashboards-using-regular-expressions/62245)

<div class="topic-metadata">

**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\
**Replies:** 1\
**Last updated:** [October 5, 2016, 9:14pm UTC](https://discuss.elastic.co/t/kibana-dashboards-using-regular-expressions/62245 "2016-10-05T21:14:49Z")

</div>

We want make Dashboards using some dashboard/visuvalization using the Regular expression values of some fields but results are not populating in Kibana. Ex: pri\_acc\_name : /\\b((?i)administrator(?-i))\\b/ public\_ip : /^1…

---

## [Multiple elasticsearch output configuration](https://discuss.elastic.co/t/multiple-elasticsearch-output-configuration/55698)

<div class="topic-metadata">

**Author:** [@sahas](https://discuss.elastic.co/u/sahas)\
**Replies:** 1\
**Last updated:** [July 17, 2016, 9:17pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-output-configuration/55698 "2016-07-17T21:17:33Z")

</div>

Hi, I have a persistent volume where logs from multiple docker container processes will get dropped. Those logs are potentially from multiple applications (related to each other with respect to their domain context). F…

---

## [ArgumentError: comparison of Time with nil failed](https://discuss.elastic.co/t/argumenterror-comparison-of-time-with-nil-failed/45239)

<div class="topic-metadata">

**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\
**Replies:** 1\
**Last updated:** [March 25, 2016, 1:42pm UTC](https://discuss.elastic.co/t/argumenterror-comparison-of-time-with-nil-failed/45239 "2016-03-25T13:42:56Z")

</div>

hello, I got this error in logstash. ArgumentError: comparison of Time with nil failed \>= at org/jruby/RubyComparable.java:155 \>= at org/jruby/RubyTime.java:511 filter at /opt/logst…

---

## [Siebel log monitoring via ELK stack](https://discuss.elastic.co/t/siebel-log-monitoring-via-elk-stack/991)

<div class="topic-metadata">

**Author:** [@KC\_arena](https://discuss.elastic.co/u/KC_arena)\
**Replies:** 1\
**Last updated:** [May 20, 2015, 11:37pm UTC](https://discuss.elastic.co/t/siebel-log-monitoring-via-elk-stack/991 "2015-05-20T23:37:04Z")

</div>

Hi Team, Is it possible to monitor siebel env.application logs via ELKstack . We already doing SOA part , want to integrate siebel as well. Let me know asap.

---

## [Grok parse issue parsing previously parsed string](https://discuss.elastic.co/t/grok-parse-issue-parsing-previously-parsed-string/130246)

<div class="topic-metadata">

**Author:** [@No\_Executable](https://discuss.elastic.co/u/No_Executable)\
**Replies:** 5\
**Last updated:** [May 3, 2018, 11:18am UTC](https://discuss.elastic.co/t/grok-parse-issue-parsing-previously-parsed-string/130246 "2018-05-03T11:18:45Z")

</div>

Hi. We are having issues with our syntax writing, where we try to extract a length of numbers from a long string that continues on both ends of the wanted piece of numbers. Our theory is that the problem lies within our…

---

## [How to run elasticsearch when installed from source?](https://discuss.elastic.co/t/how-to-run-elasticsearch-when-installed-from-source/285047)

<div class="topic-metadata">

**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\
**Replies:** 3\
**Last updated:** [September 24, 2021, 7:19am UTC](https://discuss.elastic.co/t/how-to-run-elasticsearch-when-installed-from-source/285047 "2021-09-24T07:19:04Z")

</div>

Hi, so I want to install Elasticsearch from archieve (Install Elasticsearch from archive on Linux or MacOS | Elasticsearch Guide \[7.15\] | Elastic). Why? Because I need to install them on custom path (by default Elasticse…

---

## [Implementing ECS with custom fields](https://discuss.elastic.co/t/implementing-ecs-with-custom-fields/204184)

<div class="topic-metadata">

**Author:** [@widhalmt](https://discuss.elastic.co/u/widhalmt)\
**Replies:** 3\
**Last updated:** [November 6, 2019, 2:29pm UTC](https://discuss.elastic.co/t/implementing-ecs-with-custom-fields/204184 "2019-11-06T14:29:38Z")

</div>

Hi, We contributed the icinga module for Filebeat and started developing a Logstash pipeline for parsing Icinga logs: https://github.com/Icinga/icinga-logstash-pipeline. It seems like there are far too many different ru…

---

## [Question on Compile Elasticsearch into a JAR like how it was done in the Maven repository](https://discuss.elastic.co/t/question-on-compile-elasticsearch-into-a-jar-like-how-it-was-done-in-the-maven-repository/196439)

<div class="topic-metadata">

**Author:** [@Extended\_Range](https://discuss.elastic.co/u/Extended_Range)\
**Replies:** 3\
**Last updated:** [September 4, 2019, 1:04am UTC](https://discuss.elastic.co/t/question-on-compile-elasticsearch-into-a-jar-like-how-it-was-done-in-the-maven-repository/196439 "2019-09-04T01:04:23Z")

</div>

Greetings there I have a Maven project where I have utilized a lot of functionalities from Elasticsearch. More specifically, it was imported in this way: \<dependency\> \<groupId\>org.elasticsearch\</gro…

---

## [Many indices and slow cluster state updates](https://discuss.elastic.co/t/many-indices-and-slow-cluster-state-updates/104721)

<div class="topic-metadata">

**Author:** [@rkrombho](https://discuss.elastic.co/u/rkrombho)\
**Replies:** 3\
**Last updated:** [October 20, 2017, 3:50pm UTC](https://discuss.elastic.co/t/many-indices-and-slow-cluster-state-updates/104721 "2017-10-20T15:50:01Z")

</div>

Hi All, we are about to learn (the hard way) that the index-per-user model is the wrong way to go. Initially we planned for one index per user but with the announcement that types are going to be removed in ES6 we now …

---

## [Async \_forcemerge API?](https://discuss.elastic.co/t/async--forcemerge-api/69723)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 3\
**Last updated:** [December 22, 2016, 12:41am UTC](https://discuss.elastic.co/t/async--forcemerge-api/69723 "2016-12-22T00:41:48Z")

</div>

I used \_forcemerge?max\_num\_segments=1 to optimize my index, it often took very long time to complete. So , is there is asynchronous \_forcemerge API? After calling the API, I can then check the status regularly?

---

## [Issue on Letsencrypt SSL kibana](https://discuss.elastic.co/t/issue-on-letsencrypt-ssl-kibana/260005)

<div class="topic-metadata">

**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\
**Replies:** 2\
**Last updated:** [January 8, 2021, 11:02pm UTC](https://discuss.elastic.co/t/issue-on-letsencrypt-ssl-kibana/260005 "2021-01-08T23:02:17Z")

</div>

Hi currently trying to install SSL letsencrypt on Wazuh, i got the certificates though DNS cloudflare, but i changed the part in kibana but it wont seem to start root@wazuh:~# cat /etc/kibana/kibana.yml server.host: 0.…

---

## [Winlogbeat gives unathorized error when using keystore](https://discuss.elastic.co/t/winlogbeat-gives-unathorized-error-when-using-keystore/238891)

<div class="topic-metadata">

**Author:** [@kaushas](https://discuss.elastic.co/u/kaushas)\
**Replies:** 2\
**Last updated:** [June 30, 2020, 1:00pm UTC](https://discuss.elastic.co/t/winlogbeat-gives-unathorized-error-when-using-keystore/238891 "2020-06-30T13:00:28Z")

</div>

When using winlogbeat Keystore for PWD, I get 401 unauthorized error. Just passing elastic password value itself in the config file works. I have looked at few of these issues raised by others already but none of the so…

---

## [Kibana's AngularJS upgrade date? Migration to React?](https://discuss.elastic.co/t/kibanas-angularjs-upgrade-date-migration-to-react/185308)

<div class="topic-metadata">

**Author:** [@abth](https://discuss.elastic.co/u/abth)\
**Replies:** 2\
**Last updated:** [June 12, 2019, 6:37pm UTC](https://discuss.elastic.co/t/kibanas-angularjs-upgrade-date-migration-to-react/185308 "2019-06-12T18:37:10Z")

</div>

Hello! From what I've seen in the release notes, the last AngularJS upgrade was made in the Kibana version 6.3.0 as Angular was upgraded to version 1.6.9. Do you have plans to upgrade AngularJS to a later version, as 1…

[Previous page](https://discuss.elastic.co/top.md?page=1366&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1368&per_page=50&period=all)
