# Top **URL:** https://discuss.elastic.co/top.md?page=1383&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1384 --- ## [Logstash JSON codec](https://discuss.elastic.co/t/logstash-json-codec/56553)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 2\ **Last updated:** [July 30, 2016, 9:22am UTC](https://discuss.elastic.co/t/logstash-json-codec/56553 "2016-07-30T09:22:24Z")
Dear Team, I am working on processing a JSON file and need some clarification. I read earlier threads and tried using codecs (json, json\_lines and json as filter too) but as output i am getting individual lines of the fi… --- ## [2.2.0 ESIntegTestCase: ensureYellow() results in "timed out waiting for yellow" - "unavailable\_shards\_exception"](https://discuss.elastic.co/t/2-2-0-esintegtestcase-ensureyellow-results-in-timed-out-waiting-for-yellow-unavailable-shards-exception/43835)
**Author:** [@Olafur\_Gauti\_Gudmund](https://discuss.elastic.co/u/Olafur_Gauti_Gudmund)\ **Replies:** 2\ **Last updated:** [March 9, 2016, 1:09pm UTC](https://discuss.elastic.co/t/2-2-0-esintegtestcase-ensureyellow-results-in-timed-out-waiting-for-yellow-unavailable-shards-exception/43835 "2016-03-09T13:09:59Z")
I am in the process of rewriting our integration tests to work with Elasticsearch 2.2.0. I have an abstract test case class which extends org.elasticsearch.test.ESIntegTestCase: @ESIntegTestCase.ClusterScope(scope = ES… --- ## [Normalized Histograms](https://discuss.elastic.co/t/normalized-histograms/211450)
**Author:** [@Aravinda\_Kolla](https://discuss.elastic.co/u/Aravinda_Kolla)\ **Replies:** 3\ **Last updated:** [January 28, 2020, 11:56am UTC](https://discuss.elastic.co/t/normalized-histograms/211450 "2020-01-28T11:56:32Z")
Say you are plotting a bar plot of top n items occurring in index 'A'. Additional information about these items, such as length of the item, is present in index 'B'. Plot a normalized histogram of count/length. --- ## [Should I force merge after resetting refresh interval after indexing](https://discuss.elastic.co/t/should-i-force-merge-after-resetting-refresh-interval-after-indexing/142590)
**Author:** [@srikrishna](https://discuss.elastic.co/u/srikrishna)\ **Replies:** 3\ **Last updated:** [August 3, 2018, 7:07am UTC](https://discuss.elastic.co/t/should-i-force-merge-after-resetting-refresh-interval-after-indexing/142590 "2018-08-03T07:07:58Z")
I am doing bulk indexing and as an optimization I set the refresh\_interval of the indices to -1. I am going to set it back to the default after I am done. In one of the ES documents (perhaps old) I read I have to forceme… --- ## [Number is equal to Query?](https://discuss.elastic.co/t/number-is-equal-to-query/120666)
**Author:** [@Yair\_Halberstadt](https://discuss.elastic.co/u/Yair_Halberstadt)\ **Replies:** 0\ **Last updated:** [February 20, 2018, 2:38pm UTC](https://discuss.elastic.co/t/number-is-equal-to-query/120666 "2018-02-20T14:38:37Z")
I want to check if a number is equal to some other in my query. Let's put in some test data: PUT newindex/test/123 { "num":20 } PUT newindex/test/12 { "num":20.0 } Now I want to return all cases where num is 20 - … --- ## [Comparing standard vs folding analyzer](https://discuss.elastic.co/t/comparing-standard-vs-folding-analyzer/106475)
**Author:** [@Atul\_Harsha](https://discuss.elastic.co/u/Atul_Harsha)\ **Replies:** 3\ **Last updated:** [November 6, 2017, 7:39am UTC](https://discuss.elastic.co/t/comparing-standard-vs-folding-analyzer/106475 "2017-11-06T07:39:33Z")
Mapping PUT /my\_index/\_mapping/my\_type { "properties": { "title": { "type": "string", "analyzer": "standard", "fields": { "folded": { "type": "string", … --- ## [Multi-index, multi-type field comparison query](https://discuss.elastic.co/t/multi-index-multi-type-field-comparison-query/95579)
**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\ **Replies:** 3\ **Last updated:** [August 2, 2017, 8:44pm UTC](https://discuss.elastic.co/t/multi-index-multi-type-field-comparison-query/95579 "2017-08-02T20:44:45Z")
I'm trying to do a join-esque type of query, where I want to find results where fieldA == fieldB, where fieldA is of typeA and is in indexA, and fieldB is of typeB and is in indexB. The consensus on how to perform this … --- ## [Logstash don't send data to elastic, but send it to stdout](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739)
**Author:** [@SirEdvin](https://discuss.elastic.co/u/SirEdvin)\ **Replies:** 3\ **Last updated:** [May 24, 2016, 10:00am UTC](https://discuss.elastic.co/t/logstash-dont-send-data-to-elastic-but-send-it-to-stdout/50739 "2016-05-24T10:00:33Z")
Hello, I have some problem with logstash configuration. Here is my logstash configuration input { beats { port =\> 5044 } } filter { } output { elasticsearch { hosts =\> \["loc… --- ## [Index time boosting can be more than 5?](https://discuss.elastic.co/t/index-time-boosting-can-be-more-than-5/27128)
**Author:** [@anusha6](https://discuss.elastic.co/u/anusha6)\ **Replies:** 3\ **Last updated:** [August 11, 2015, 5:55pm UTC](https://discuss.elastic.co/t/index-time-boosting-can-be-more-than-5/27128 "2015-08-11T17:55:31Z")
Hi, I would like to give boosting to different fields at index time, for that we can give boost: 1,2,3,4,5 any of those values. example for index time boost: "Model": { "type": "string", … --- ## [Pfsense suricata fails to process alerts in elasticsearch via filebeat module](https://discuss.elastic.co/t/pfsense-suricata-fails-to-process-alerts-in-elasticsearch-via-filebeat-module/205349)
**Author:** [@Pedestrian](https://discuss.elastic.co/u/Pedestrian)\ **Replies:** 1\ **Last updated:** [October 27, 2019, 8:00am UTC](https://discuss.elastic.co/t/pfsense-suricata-fails-to-process-alerts-in-elasticsearch-via-filebeat-module/205349 "2019-10-27T08:00:48Z")
Using suricata 4.1.5 (eve json) from pfsense to redis -\> file -\> filebeat -\> logstash -\> elasticsearch The alerts and some other event types are not showing up in the filebeat index. logstash is also 7.3.2 in this case… --- ## [Normal line with Percentage](https://discuss.elastic.co/t/normal-line-with-percentage/105922)
**Author:** [@P\_Charpentier](https://discuss.elastic.co/u/P_Charpentier)\ **Replies:** 1\ **Last updated:** [October 31, 2017, 6:45pm UTC](https://discuss.elastic.co/t/normal-line-with-percentage/105922 "2017-10-31T18:45:25Z")
Hello, I don't know why I have the same graphic with normal line and stacked line when I use percentage. With normal line : \[image\] With stacked line : \[image\] Why it doesn't work like bar : \[image\] \[image\] --- ## [How to update integer like click count efficiently for ranking](https://discuss.elastic.co/t/how-to-update-integer-like-click-count-efficiently-for-ranking/63863)
**Author:** [@fancyerii](https://discuss.elastic.co/u/fancyerii)\ **Replies:** 1\ **Last updated:** [October 25, 2016, 12:04pm UTC](https://discuss.elastic.co/t/how-to-update-integer-like-click-count-efficiently-for-ranking/63863 "2016-10-25T12:04:19Z")
I want to use a field to record the number of click of a document. it's not searched but only used to calculate the score. But it's updated frequently. How should I define the mapping of this field and how can I use this… --- ## [Elasticsearch query retrieve fetch expecting result in top 25 results](https://discuss.elastic.co/t/elasticsearch-query-retrieve-fetch-expecting-result-in-top-25-results/63474)
**Author:** [@banu](https://discuss.elastic.co/u/banu)\ **Replies:** 1\ **Last updated:** [October 22, 2016, 5:23am UTC](https://discuss.elastic.co/t/elasticsearch-query-retrieve-fetch-expecting-result-in-top-25-results/63474 "2016-10-22T05:23:51Z")
I have 200K records and trying to fetch records based on certain match criteria ex: company\_name: "test" If i give size:250 expecting record is not available in search results. size:500 the expecting document is fetched … --- ## [Terms aggregation not working for nested fields](https://discuss.elastic.co/t/terms-aggregation-not-working-for-nested-fields/62799)
**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\ **Replies:** 1\ **Last updated:** [October 14, 2016, 2:29pm UTC](https://discuss.elastic.co/t/terms-aggregation-not-working-for-nested-fields/62799 "2016-10-14T14:29:19Z")
I have created an index with the mapping like "mappings": { "event":{ "properties": { "payload":{ "type":"nested", "properties":{ "serviceName": { "type": "string", … --- ## [Is there a way to simulate slow queries in Elasticsearch?](https://discuss.elastic.co/t/is-there-a-way-to-simulate-slow-queries-in-elasticsearch/51381)
**Author:** [@aalexgabi](https://discuss.elastic.co/u/aalexgabi)\ **Replies:** 1\ **Last updated:** [May 31, 2016, 10:17am UTC](https://discuss.elastic.co/t/is-there-a-way-to-simulate-slow-queries-in-elasticsearch/51381 "2016-05-31T10:17:23Z")
Hello, Is there a way to simulate slow queries? I want to test an application and I would like to simulate queries that would take up space in queue and will mark a thread as active for couple of minutes to see how the… --- ## [Java API - SearchHit.getVersion() method returns -1](https://discuss.elastic.co/t/java-api-searchhit-getversion-method-returns-1/5663)
**Author:** [@Mauri](https://discuss.elastic.co/u/Mauri)\ **Replies:** 1\ **Last updated:** [October 23, 2011, 3:12am UTC](https://discuss.elastic.co/t/java-api-searchhit-getversion-method-returns-1/5663 "2011-10-23T03:12:12Z")
I want to use the ES Java API from a Servlet and want to leverage ES version numbers. The test class below tests the basic indexing, get and search operations from Java. The index and get operations return the expecte… --- ## [Error on transformation software.amazon.awssdk.core.internal.handler.BaseAsyncClientHandler](https://discuss.elastic.co/t/error-on-transformation-software-amazon-awssdk-core-internal-handler-baseasyncclienthandler/345278)
**Author:** [@IngoStrauch2020](https://discuss.elastic.co/u/IngoStrauch2020)\ **Replies:** 4\ **Last updated:** [November 13, 2023, 1:37pm UTC](https://discuss.elastic.co/t/error-on-transformation-software-amazon-awssdk-core-internal-handler-baseasyncclienthandler/345278 "2023-11-13T13:37:36Z")
APM Agent language and version: Java 1.43.0 Description of the problem including expected versus actual behavior. After upgrading the AWS SDK v2 in our spring boot service from 2.20.162 to 2.21.0 we see the following … --- ## [Hide a document from the searching](https://discuss.elastic.co/t/hide-a-document-from-the-searching/236313)
**Author:** [@gitterhh](https://discuss.elastic.co/u/gitterhh)\ **Replies:** 4\ **Last updated:** [June 9, 2020, 1:03pm UTC](https://discuss.elastic.co/t/hide-a-document-from-the-searching/236313 "2020-06-09T13:03:41Z")
We want to use Elasticsearch as primary data source, and we also want to keep track of changes of document, so we want to store all the versions of a document. As a solution will be to hide previous document versions fr… --- ## [How can we set hosts dynamicaly in elasticsearch plugin in logstash conf file ? I am setting document\_type =\> "%{type}" and type is substitued here. so cant we substitute %{host} ? for hosts parameter?](https://discuss.elastic.co/t/how-can-we-set-hosts-dynamicaly-in-elasticsearch-plugin-in-logstash-conf-file-i-am-setting-document-type-type-and-type-is-substitued-here-so-cant-we-substitute-host-for-hosts-parameter/52731)
**Author:** [@rupal](https://discuss.elastic.co/u/rupal)\ **Replies:** 4\ **Last updated:** [June 15, 2016, 6:18am UTC](https://discuss.elastic.co/t/how-can-we-set-hosts-dynamicaly-in-elasticsearch-plugin-in-logstash-conf-file-i-am-setting-document-type-type-and-type-is-substitued-here-so-cant-we-substitute-host-for-hosts-parameter/52731 "2016-06-15T06:18:06Z")
How can we set hosts dynamicaly in elasticsearch plugin in logstash conf file ? I am setting document\_type =\> "%{type}" and type is substitued here. so cant we substitute %{host} ? for hosts parameter?? --- ## [Python 2.6 compatibility with elasticsearch lib?](https://discuss.elastic.co/t/python-2-6-compatibility-with-elasticsearch-lib/15426)
**Author:** [@John\_Stanford](https://discuss.elastic.co/u/John_Stanford)\ **Replies:** 4\ **Last updated:** [January 27, 2014, 3:07pm UTC](https://discuss.elastic.co/t/python-2-6-compatibility-with-elasticsearch-lib/15426 "2014-01-27T15:07:39Z")
Hi, Just wanted to check on the state of py26 compatibility for the elasticsearch python library. I only ask because I just got bit by the latest version of pyes after upgrading my dev lab to ES 0.90.10 and pyes … --- ## [Performance Comparison between Terms Query and Constant Score Query](https://discuss.elastic.co/t/performance-comparison-between-terms-query-and-constant-score-query/151349)
**Author:** [@Gaurav\_Kumar1](https://discuss.elastic.co/u/Gaurav_Kumar1)\ **Replies:** 1\ **Last updated:** [October 12, 2018, 11:36am UTC](https://discuss.elastic.co/t/performance-comparison-between-terms-query-and-constant-score-query/151349 "2018-10-12T11:36:03Z")
Hi All, We need to just fetch the records by putting a filter condition. Score of query is not relevant to us. Currently we are using terms query as mentioned below:- GET test/\_search {"query": {"terms": { "userId": … --- ## [GC time monitoring with apm java agent and machine learning](https://discuss.elastic.co/t/gc-time-monitoring-with-apm-java-agent-and-machine-learning/344393)
**Author:** [@Gaston\_Beltramelli](https://discuss.elastic.co/u/Gaston_Beltramelli)\ **Replies:** 5\ **Last updated:** [October 5, 2023, 12:12pm UTC](https://discuss.elastic.co/t/gc-time-monitoring-with-apm-java-agent-and-machine-learning/344393 "2023-10-05T12:12:58Z")
Hello Community, I hope this message finds you well. I have been working with Elastic APM to monitor the performance of my Java application, and I'm particularly interested in tracking the time spend in Garbage Collecto… --- ## [Filebeat run at startup](https://discuss.elastic.co/t/filebeat-run-at-startup/304802)
**Author:** [@Bigboy0706](https://discuss.elastic.co/u/Bigboy0706)\ **Replies:** 5\ **Last updated:** [May 20, 2022, 1:52am UTC](https://discuss.elastic.co/t/filebeat-run-at-startup/304802 "2022-05-20T01:52:20Z")
Hi, I am trying to set up a Filebeat to collect the MacOS endpoint logs. May I know any command or general setting I could set to autostart the Filebeat after rebooting the MacOS? Thanks. Best Regards, Leo Yeung --- ## [Automating Filebeat](https://discuss.elastic.co/t/automating-filebeat/283816)
**Author:** [@peter\_murphy](https://discuss.elastic.co/u/peter_murphy)\ **Replies:** 5\ **Last updated:** [September 14, 2021, 9:53pm UTC](https://discuss.elastic.co/t/automating-filebeat/283816 "2021-09-14T21:53:31Z")
Hello, I am using Filebeat to send my local device's Osquery log to my self-hosted Elasticsearch via Logstash. The pipeline is working correctly, but only if I trigger Filebeat manually. I'm sure the answer is simple, b… --- ## [How to migrate old index from Old Server to New Server](https://discuss.elastic.co/t/how-to-migrate-old-index-from-old-server-to-new-server/232460)
**Author:** [@dattack13](https://discuss.elastic.co/u/dattack13)\ **Replies:** 5\ **Last updated:** [May 14, 2020, 1:24am UTC](https://discuss.elastic.co/t/how-to-migrate-old-index-from-old-server-to-new-server/232460 "2020-05-14T01:24:03Z")
Hi, I have one index in old elasticsearch server in 6.2.0 version (windows server) and now I am trying to move it to new server (Linux) on 7.6.2 version of elasticsearch. I tried below command to migrate my index from o… --- ## [Curator APT repository error](https://discuss.elastic.co/t/curator-apt-repository-error/83780)
**Author:** [@hmoffatt](https://discuss.elastic.co/u/hmoffatt)\ **Replies:** 5\ **Last updated:** [April 27, 2017, 7:21am UTC](https://discuss.elastic.co/t/curator-apt-repository-error/83780 "2017-04-27T07:21:28Z")
Since last week I'm getting the following error from "apt-get update" from the Curator repository: W: Failed to fetch http://packages.elastic.co/curator/5/debian/dists/stable/InRelease Unable to find expected entry 'm… --- ## [Trying curl xput, receiving http 301, nothing putted :(](https://discuss.elastic.co/t/trying-curl-xput-receiving-http-301-nothing-putted/10946)
**Author:** [@michaelbahr](https://discuss.elastic.co/u/michaelbahr)\ **Replies:** 0\ **Last updated:** [February 28, 2013, 8:42am UTC](https://discuss.elastic.co/t/trying-curl-xput-receiving-http-301-nothing-putted/10946 "2013-02-28T08:42:04Z")
Hey guys, im new to Elasticsearch and tried the guide http://www.elasticsearchtutorial.com/elasticsearch-in-5-minutes.html Everything went fine until i tried this command curl -XPUT 'http://localhost:9200/blog/user/di… --- ## [S3 Intelligent-Tiering class with Deep Archive Access tier for snapshots is working?](https://discuss.elastic.co/t/s3-intelligent-tiering-class-with-deep-archive-access-tier-for-snapshots-is-working/342122)
**Author:** [@mihai1](https://discuss.elastic.co/u/mihai1)\ **Replies:** 6\ **Last updated:** [September 8, 2023, 12:41pm UTC](https://discuss.elastic.co/t/s3-intelligent-tiering-class-with-deep-archive-access-tier-for-snapshots-is-working/342122 "2023-09-08T12:41:56Z")
We're currently utilizing Elasticsearch version 8.8.1 and storing our daily snapshots in S3 using the 'Intelligent\_Tiering' storage class. In an effort to optimize costs, based on AWS's documentation on Intelligent Tieri… --- ## [Phrase query with collate with Elastic Java Client 8.4](https://discuss.elastic.co/t/phrase-query-with-collate-with-elastic-java-client-8-4/315218)
**Author:** [@Peter\_Strasser](https://discuss.elastic.co/u/Peter_Strasser)\ **Replies:** 6\ **Last updated:** [September 27, 2022, 8:59am UTC](https://discuss.elastic.co/t/phrase-query-with-collate-with-elastic-java-client-8-4/315218 "2022-09-27T08:59:51Z")
Hi Elastic Community, I am looking to run a phrase suggestion with the collate parameter in the Elastic Java Client Version 8.4., but I can not get any working example running. I currently encounter 2 problems: The … --- ## [Is it possible to enrich windows integration logs ?!](https://discuss.elastic.co/t/is-it-possible-to-enrich-windows-integration-logs/295143)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 6\ **Last updated:** [February 8, 2022, 8:58pm UTC](https://discuss.elastic.co/t/is-it-possible-to-enrich-windows-integration-logs/295143 "2022-02-08T20:58:42Z")
Hi, I'm using windows integration to collect windows event logs, the integration settings offer a field to specify processor, but when try to use enrich processor I stop receiving new logs and i got the following error … --- ## [Automatic dashboards are not getting created when I change index name in filebeat.yml](https://discuss.elastic.co/t/automatic-dashboards-are-not-getting-created-when-i-change-index-name-in-filebeat-yml/271086)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 6\ **Last updated:** [April 24, 2021, 11:39am UTC](https://discuss.elastic.co/t/automatic-dashboards-are-not-getting-created-when-i-change-index-name-in-filebeat-yml/271086 "2021-04-24T11:39:08Z")
Hii.I am ingesting netflow data using filebeat netflow module.I have configured "filebeat.yml" file for automatic creation of dashboards.Filebeat creates index with name "filebeat-\*" and it also creates dashboards auto… --- ## [Index rolling window of data](https://discuss.elastic.co/t/index-rolling-window-of-data/8187)
**Author:** [@Ashish\_Nigam](https://discuss.elastic.co/u/Ashish_Nigam)\ **Replies:** 6\ **Last updated:** [June 25, 2012, 3:43pm UTC](https://discuss.elastic.co/t/index-rolling-window-of-data/8187 "2012-06-25T15:43:27Z")
HI, I need help/suggestions in defining the right indexing/data migration strategy. I have to create tenant based index storage. My use case covers around 100 tenants. I need to allow user to search data for last 30 … --- ## [Push notification from Elasticsearch to Microsoft teams via Logstash pipeline](https://discuss.elastic.co/t/push-notification-from-elasticsearch-to-microsoft-teams-via-logstash-pipeline/320159)
**Author:** [@niveditakathal](https://discuss.elastic.co/u/niveditakathal)\ **Replies:** 2\ **Last updated:** [December 8, 2022, 1:40pm UTC](https://discuss.elastic.co/t/push-notification-from-elasticsearch-to-microsoft-teams-via-logstash-pipeline/320159 "2022-12-08T13:40:16Z")
Hi All, I want to send some notifications from Elasticsearch to Microsoft teams via logstash pipeline. Based on my knowledge, I should use http output plugin to connect to Microsoft teams and push notification under me… --- ## [Canvas bar chart not sorting](https://discuss.elastic.co/t/canvas-bar-chart-not-sorting/251708)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 2\ **Last updated:** [October 12, 2020, 10:11pm UTC](https://discuss.elastic.co/t/canvas-bar-chart-not-sorting/251708 "2020-10-12T22:11:24Z")
Hello, I am running an ESQL to visualise a bar chart. Sort by is not working for me. The same query on a table works as expected. Am I missing anything? Bug? Feature? Version 7.9.2 filters "timefilterControl" | ess… --- ## [Metricbeat and MySQL doesnt show results](https://discuss.elastic.co/t/metricbeat-and-mysql-doesnt-show-results/132009)
**Author:** [@Fernando\_Ramirez](https://discuss.elastic.co/u/Fernando_Ramirez)\ **Replies:** 2\ **Last updated:** [May 21, 2018, 9:25pm UTC](https://discuss.elastic.co/t/metricbeat-and-mysql-doesnt-show-results/132009 "2018-05-21T21:25:01Z")
Hi I run ELK in serverA. Kibana 5.6 Elasticsearch 5.6 Logstash 5.6 And, in a second serverB I have installed metricbeat 5.6 version to monitoring the MySQL database. metricbeat 5.6 mysql 5,7 The configuration fi… --- ## [Elasticsearch issues on Maven 3.3.3 docker image](https://discuss.elastic.co/t/elasticsearch-issues-on-maven-3-3-3-docker-image/59971)
**Author:** [@Rajind\_Ruparathna](https://discuss.elastic.co/u/Rajind_Ruparathna)\ **Replies:** 2\ **Last updated:** [September 10, 2016, 4:14pm UTC](https://discuss.elastic.co/t/elasticsearch-issues-on-maven-3-3-3-docker-image/59971 "2016-09-10T16:14:37Z")
I am using embedded ElasticSearch server to publish some statistics and query them. When I am running this locally everything works fine. Then I tried with BitBucket pipelines using docker image maven 3.3.3 and I get fol… --- ## [Issue with grok and timestamp field in apache logs](https://discuss.elastic.co/t/issue-with-grok-and-timestamp-field-in-apache-logs/51566)
**Author:** [@Alexander\_Trumper](https://discuss.elastic.co/u/Alexander_Trumper)\ **Replies:** 2\ **Last updated:** [June 1, 2016, 2:32pm UTC](https://discuss.elastic.co/t/issue-with-grok-and-timestamp-field-in-apache-logs/51566 "2016-06-01T14:32:20Z")
I've been going through this example: And I used the whole config from the example (beside removing the geoip data) input { file { path =\> "/home/trueal/elk/support\_scripts/\*.log" start\_position =\> beginning ign… --- ## [What's the difference between Watcher and the Changes API](https://discuss.elastic.co/t/whats-the-difference-between-watcher-and-the-changes-api/1203)
**Author:** [@bobbyrenwick](https://discuss.elastic.co/u/bobbyrenwick)\ **Replies:** 2\ **Last updated:** [May 28, 2015, 2:47pm UTC](https://discuss.elastic.co/t/whats-the-difference-between-watcher-and-the-changes-api/1203 "2015-05-28T14:47:04Z")
I was at an Elastic.co hosted morning several months ago and there was discussions about a Changes API that would be part of Elasticsearch v2.0. As far as I can tell the use cases that were being discussed for the Change… --- ## [Cluster health goes green to yellow](https://discuss.elastic.co/t/cluster-health-goes-green-to-yellow/1300)
**Author:** [@mudgilgaurav](https://discuss.elastic.co/u/mudgilgaurav)\ **Replies:** 2\ **Last updated:** [May 27, 2015, 12:34am UTC](https://discuss.elastic.co/t/cluster-health-goes-green-to-yellow/1300 "2015-05-27T00:34:48Z")
my cluster state was green and after restart of service one shard remains UNASSIGNED and status goes to yellow. I have 2 machines with 5 shard and 1 replica set settings. I am using default config with multicast off and … --- ## [Are bulk operations supported via sense?](https://discuss.elastic.co/t/are-bulk-operations-supported-via-sense/411)
**Author:** [@Douglas\_McQuilken](https://discuss.elastic.co/u/Douglas_McQuilken)\ **Replies:** 2\ **Last updated:** [May 9, 2015, 12:03am UTC](https://discuss.elastic.co/t/are-bulk-operations-supported-via-sense/411 "2015-05-09T00:03:37Z")
Hi, I'm just getting getting started with elasticsearch and like what I see so far. I would like to execute a series of indexings and another series of queries. The queries wound be various permutations/combinations of s… --- ## [Elasticsearch-hadoop-hive exception when writing array\\> column](https://discuss.elastic.co/t/elasticsearch-hadoop-hive-exception-when-writing-array-map-string-string-column/22647)
**Author:** [@Chen\_Wang](https://discuss.elastic.co/u/Chen_Wang)\ **Replies:** 2\ **Last updated:** [March 13, 2015, 4:54am UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-hive-exception-when-writing-array-map-string-string-column/22647 "2015-03-13T04:54:00Z")
Folks, I am using elasticsearch-hadoop-hive-2.1.0.Beta3.jar I defined the external table as:. CREATE EXTERNAL TABLE IF NOT EXISTS ${staging\_table}( customer\_id STRING, store\_purchase array\>) ROW FORMAT SERDE 'or… --- ## [How to replace field values from json external file?](https://discuss.elastic.co/t/how-to-replace-field-values-from-json-external-file/286475)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 7\ **Last updated:** [October 12, 2021, 12:01pm UTC](https://discuss.elastic.co/t/how-to-replace-field-values-from-json-external-file/286475 "2021-10-12T12:01:36Z")
I am getting messages from RabbitMQ with field name ResponseCode. Response code consist of short codes like , 00, 01, 02 and so on. I want to replace those values will full form. I have another json key:values pair file … --- ## [Share dashboards without authentication](https://discuss.elastic.co/t/share-dashboards-without-authentication/275820)
**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 10:40am UTC](https://discuss.elastic.co/t/share-dashboards-without-authentication/275820 "2021-06-14T10:40:57Z")
Hello! I'm trying to share a custom dashboard without authentication to embed in a web but when I access to link it shows the following: How can I share the dashboard to allow its visualization without authentication… --- ## [Fliebeat netflow vs elastiflow](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 1\ **Last updated:** [September 2, 2020, 4:22am UTC](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114 "2020-09-02T04:22:52Z")
Hello , here im, trying to find a nice solution for netflow analisis. After reading elastiflow at https://github.com/robcowart/elastiflow And testing my recently working filebeat netflow module can not find more than … --- ## [Pagination Elastic Search](https://discuss.elastic.co/t/pagination-elastic-search/167071)
**Author:** [@Yash\_Kapoor](https://discuss.elastic.co/u/Yash_Kapoor)\ **Replies:** 7\ **Last updated:** [February 12, 2019, 6:45am UTC](https://discuss.elastic.co/t/pagination-elastic-search/167071 "2019-02-12T06:45:48Z")
How do we use pagination in elastic search ? I have been using the size field with from field with size field set to 1000 and from field to 0. { "from : 0, "sort": .... , "\_source": ... , "size": 1000 } Even after thi… --- ## [Unable to delete ES logs older than 7 Days with Elastic version 6.x](https://discuss.elastic.co/t/unable-to-delete-es-logs-older-than-7-days-with-elastic-version-6-x/159590)
**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\ **Replies:** 1\ **Last updated:** [December 18, 2018, 7:56pm UTC](https://discuss.elastic.co/t/unable-to-delete-es-logs-older-than-7-days-with-elastic-version-6-x/159590 "2018-12-18T19:56:08Z")
Hi, I have configured Elasticsearch cluster with 4 nodes and i see everyday it's creating new cluster logging file in /va/log/elasticsearch -rw-r--r--. 1 elasticsearch elasticsearch 5323 Nov 12 17:22 myescluster-2… --- ## [Is it possible to assign a query to a variable?](https://discuss.elastic.co/t/is-it-possible-to-assign-a-query-to-a-variable/109042)
**Author:** [@bilpor](https://discuss.elastic.co/u/bilpor)\ **Replies:** 1\ **Last updated:** [December 1, 2017, 9:13am UTC](https://discuss.elastic.co/t/is-it-possible-to-assign-a-query-to-a-variable/109042 "2017-12-01T09:13:59Z")
HI All, I have created an index and my basic query starts: GET kmnewindex/\_search { "query": { "query\_string": {"query": "going home", "fields": \["squestion", "ssubject"\]} }, "\_source": \["idisid", "itopid" ,"ipid",… --- ## [Diferentes entradas y filtros de logstash](https://discuss.elastic.co/t/diferentes-entradas-y-filtros-de-logstash/101616)
**Author:** [@Erick\_Garcia\_Perez](https://discuss.elastic.co/u/Erick_Garcia_Perez)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 12:58pm UTC](https://discuss.elastic.co/t/diferentes-entradas-y-filtros-de-logstash/101616 "2017-09-25T12:58:32Z")
Buenas tardes! Como puedo tener diferentes archivos de entrada con logstash y diferentes filtros. Yo lo tengo asi y queria saber si es correcto input { file{ path =\> "/home/clusterelastic/cluster/nodo1/logstash-5.5.… --- ## [How to start filebeat in windows](https://discuss.elastic.co/t/how-to-start-filebeat-in-windows/82821)
**Author:** [@shravan\_kumar](https://discuss.elastic.co/u/shravan_kumar)\ **Replies:** 1\ **Last updated:** [April 19, 2017, 7:57am UTC](https://discuss.elastic.co/t/how-to-start-filebeat-in-windows/82821 "2017-04-19T07:57:43Z")
Hi, I've installed logstash and filebeat in windows. I started the filebeat service from poweshell using following command, But getting an error . PS C:\\filebeat-5.3.0-windows-x86\> Start-Service filebeat Error: S… --- ## [Display Rate Metric](https://discuss.elastic.co/t/display-rate-metric/53019)
**Author:** [@Shane\_Daniel](https://discuss.elastic.co/u/Shane_Daniel)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 3:59pm UTC](https://discuss.elastic.co/t/display-rate-metric/53019 "2016-06-16T15:59:46Z")
I would like to create a Kibana visualization that displays a single metric that is the count (or sum) divided by the time interval given by the time filter (hence showing the average rate for the time period). This se… [Previous page](https://discuss.elastic.co/top.md?page=1382&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1384&per_page=50&period=all)