# Top **URL:** https://discuss.elastic.co/top.md?page=1406&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1407 --- ## [Search by multiplier hops](https://discuss.elastic.co/t/search-by-multiplier-hops/130124)
**Author:** [@Ben\_B](https://discuss.elastic.co/u/Ben_B)\ **Replies:** 3\ **Last updated:** [May 4, 2018, 12:23pm UTC](https://discuss.elastic.co/t/search-by-multiplier-hops/130124 "2018-05-04T12:23:31Z")
Hi, First time poster! Please excuse my newbie question, I've spent some time googling but could not come up with much. My question is: If I wanted to index a service provided by the minute (by different providers): F… --- ## [Realtime data streaming from cassandra to elasticsearch](https://discuss.elastic.co/t/realtime-data-streaming-from-cassandra-to-elasticsearch/170141)
**Author:** [@yasin\_mohammed](https://discuss.elastic.co/u/yasin_mohammed)\ **Replies:** 5\ **Last updated:** [February 27, 2019, 12:45pm UTC](https://discuss.elastic.co/t/realtime-data-streaming-from-cassandra-to-elasticsearch/170141 "2019-02-27T12:45:24Z")
Hi... What are the alternatives to extract data from cassandra to elasticsearch. CQL has many limitations with queries so we are not able to do it. Also apart from logstash is there any other way. --- ## [Using APM Server Intake API from PHP](https://discuss.elastic.co/t/using-apm-server-intake-api-from-php/164786)
**Author:** [@slashman](https://discuss.elastic.co/u/slashman)\ **Replies:** 5\ **Last updated:** [February 4, 2019, 4:07pm UTC](https://discuss.elastic.co/t/using-apm-server-intake-api-from-php/164786 "2019-02-04T16:07:31Z")
Hi! I am trying to use the APM Server Intake API to monitor a high loaded PHP service which runs on many machines It comes out, that a POST request to APM Server takes from 18ms to 80ms in average, which increases the … --- ## [Use log timestamp](https://discuss.elastic.co/t/use-log-timestamp/61411)
**Author:** [@Roberto\_Iglesias](https://discuss.elastic.co/u/Roberto_Iglesias)\ **Replies:** 5\ **Last updated:** [September 26, 2016, 1:19pm UTC](https://discuss.elastic.co/t/use-log-timestamp/61411 "2016-09-26T13:19:55Z")
Hi I'm trying to use my log's timestamp but this is not working. My filter: date { match =\> \["realtimestamp", "MMM DD HH:mm:ss"\] target =\> "@timestamp" } And the result: "message" =\> "Sep 18 05:59:24" "@tim… --- ## [Help needed with Logstash and syslog config](https://discuss.elastic.co/t/help-needed-with-logstash-and-syslog-config/2548)
**Author:** [@janus](https://discuss.elastic.co/u/janus)\ **Replies:** 5\ **Last updated:** [June 12, 2015, 10:32am UTC](https://discuss.elastic.co/t/help-needed-with-logstash-and-syslog-config/2548 "2015-06-12T10:32:28Z")
Hello all, First of all I have to say that I am new to ELK, in fact I have just installed it in the system. Let me go to the point. :smiley: I have followed the oceand digital manual to install elk in a brand new debi… --- ## [Cannot Access localhost:9200 when xpack.security.http.ssl.enabled is true](https://discuss.elastic.co/t/cannot-access-localhost-9200-when-xpack-security-http-ssl-enabled-is-true/369302)
**Author:** [@Jerome\_Escamilla](https://discuss.elastic.co/u/Jerome_Escamilla)\ **Replies:** 4\ **Last updated:** [October 29, 2024, 9:45am UTC](https://discuss.elastic.co/t/cannot-access-localhost-9200-when-xpack-security-http-ssl-enabled-is-true/369302 "2024-10-29T09:45:24Z")
Hi Team, I'm a newbie for ElasticStack and I'm trying to run Kibana and MetricBeat with my Elasticsearch on my Windows Local Machine, I have both Elasticsearch and Kibana Running and I'm installing MetricBeat which requ… --- ## [\[SOLVED\] Whole cluster down after sorting on \_id](https://discuss.elastic.co/t/solved-whole-cluster-down-after-sorting-on-id/264445)
**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 10:28am UTC](https://discuss.elastic.co/t/solved-whole-cluster-down-after-sorting-on-id/264445 "2021-02-17T10:28:31Z")
Hi, I just had a massive issue with my ES prod cluster. I use an ES plugin for IntelliJ IDE that allows to see search result as a table, which can be ordered by clicking on the columns: it then add a sort parameter corr… --- ## [AD security realm: unknown setting "...metadata"](https://discuss.elastic.co/t/ad-security-realm-unknown-setting-metadata/196341)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 4\ **Last updated:** [August 23, 2019, 7:58am UTC](https://discuss.elastic.co/t/ad-security-realm-unknown-setting-metadata/196341 "2019-08-23T07:58:33Z")
The following configuration in ES 7.3 stopped working after adding the metadata parameter: xpack.security.authc: realms: file.file1: order: 0 native.native1: order: 1 ac… --- ## [Pipeline terminates in jdbc static filter plugin](https://discuss.elastic.co/t/pipeline-terminates-in-jdbc-static-filter-plugin/130204)
**Author:** [@manjur](https://discuss.elastic.co/u/manjur)\ **Replies:** 4\ **Last updated:** [May 2, 2018, 1:25pm UTC](https://discuss.elastic.co/t/pipeline-terminates-in-jdbc-static-filter-plugin/130204 "2018-05-02T13:25:02Z")
I have used this config file to perform joins on two tables. I used jdbc static filter plug in .When i run logstash it terminates. input { } filter { jdbc\_static { loaders =\> \[ { id =\> "tbl\_farmer" query =\> "sele… --- ## [Filtered Query that includes ANDs and ORs using the Java API](https://discuss.elastic.co/t/filtered-query-that-includes-ands-and-ors-using-the-java-api/7065)
**Author:** [@pmac](https://discuss.elastic.co/u/pmac)\ **Replies:** 4\ **Last updated:** [March 21, 2012, 12:31am UTC](https://discuss.elastic.co/t/filtered-query-that-includes-ands-and-ors-using-the-java-api/7065 "2012-03-21T00:31:07Z")
First, I want to thank you for this list - I'm new to ES and it's been extremely helpful. I've looked through all the articles I can find on filters and have read the ES guide too. I still can't figure out how to cre… --- ## [Copy field value from one index to another index](https://discuss.elastic.co/t/copy-field-value-from-one-index-to-another-index/284661)
**Author:** [@dnnxl](https://discuss.elastic.co/u/dnnxl)\ **Replies:** 0\ **Last updated:** [September 20, 2021, 9:33pm UTC](https://discuss.elastic.co/t/copy-field-value-from-one-index-to-another-index/284661 "2021-09-20T21:33:47Z")
Hello, I would like to know what is the best way to copy field value from one index to another existing index, base on a matching criteria. For example. I have index "indexOne" and target "indexTwo", here is an example… --- ## [Automaticaly set tags](https://discuss.elastic.co/t/automaticaly-set-tags/190751)
**Author:** [@nitzan.karni](https://discuss.elastic.co/u/nitzan.karni)\ **Replies:** 0\ **Last updated:** [July 16, 2019, 2:05pm UTC](https://discuss.elastic.co/t/automaticaly-set-tags/190751 "2019-07-16T14:05:27Z")
Hi, Is there a way to set automatically tags to beats in central management? case scenario: new beat is enrolled to the central management -\> tags A B and C are set to the specific beat by beat type, name, os and more… --- ## [Filebeat-OSS 7.16.2 compatibility with Logstash-OSS (Opensearch)](https://discuss.elastic.co/t/filebeat-oss-7-16-2-compatibility-with-logstash-oss-opensearch/347414)
**Author:** [@saqib\_tune](https://discuss.elastic.co/u/saqib_tune)\ **Replies:** 3\ **Last updated:** [November 17, 2023, 3:37pm UTC](https://discuss.elastic.co/t/filebeat-oss-7-16-2-compatibility-with-logstash-oss-opensearch/347414 "2023-11-17T15:37:51Z")
I am implementing Opensearch, Logstash and filebeat stack on Kubernetes with the following versions, Filebeat: Filebeat 7.16.2 | Elastic Logstash: docker pull opensearchproject/logstash-oss-with-opensearch-output-plugi… --- ## [How to restore elasticsearch s3 snapshot on a different cluster](https://discuss.elastic.co/t/how-to-restore-elasticsearch-s3-snapshot-on-a-different-cluster/241153)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 3\ **Last updated:** [July 15, 2020, 1:58pm UTC](https://discuss.elastic.co/t/how-to-restore-elasticsearch-s3-snapshot-on-a-different-cluster/241153 "2020-07-15T13:58:51Z")
I have an Elastic Cloud on Kubernetes (ECK) setup and i have also setup snapshots which are stored on s3. I want to restore these snapshots on s3 to a local version of ECK i have running on minikube. So how do i restore… --- ## [How much Disk I need To store 100GB/day with 1 Replica for 1 year?](https://discuss.elastic.co/t/how-much-disk-i-need-to-store-100gb-day-with-1-replica-for-1-year/164313)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 3\ **Last updated:** [January 15, 2019, 2:11pm UTC](https://discuss.elastic.co/t/how-much-disk-i-need-to-store-100gb-day-with-1-replica-for-1-year/164313 "2019-01-15T14:11:05Z")
Hi Experts, I have checked Elasticsearch docs and many blogs and this is what my understanding says . Please correct me if this calculation is wrong Daily Data volume :- 100 GB Retention period :- 1 year Replica:- 1 … --- ## [Import from BigQuery to Elasticsearch](https://discuss.elastic.co/t/import-from-bigquery-to-elasticsearch/155454)
**Author:** [@melissachang](https://discuss.elastic.co/u/melissachang)\ **Replies:** 0\ **Last updated:** [November 5, 2018, 8:42pm UTC](https://discuss.elastic.co/t/import-from-bigquery-to-elasticsearch/155454 "2018-11-05T20:42:31Z")
This is a follow-up to Import from BigQuery to Elasticsearch? In https://github.com/DataBiosphere/data-explorer-indexers, we're developing a solution that is pretty fast: Copy BigQuery table to JSON files on GCS. It o… --- ## [Watcher is not generating Email during anomaly](https://discuss.elastic.co/t/watcher-is-not-generating-email-during-anomaly/145670)
**Author:** [@Abhishek\_Dwivedi](https://discuss.elastic.co/u/Abhishek_Dwivedi)\ **Replies:** 3\ **Last updated:** [August 29, 2018, 6:59pm UTC](https://discuss.elastic.co/t/watcher-is-not-generating-email-during-anomaly/145670 "2018-08-29T18:59:32Z")
Hi, I am using Single metric ML job to detect an anomaly in my logs. I have also configured WATCHER TO generate EMAIL during any critical anomaly. But I found that the single metric viewer is showing 1 critical anomaly… --- ## [ES - plugin - via domaine web](https://discuss.elastic.co/t/es-plugin-via-domaine-web/45020)
**Author:** [@Fnizou](https://discuss.elastic.co/u/Fnizou)\ **Replies:** 3\ **Last updated:** [March 21, 2016, 5:02pm UTC](https://discuss.elastic.co/t/es-plugin-via-domaine-web/45020 "2016-03-21T17:02:53Z")
Bonjour à tous, Maintenant que j'ai bien ES d'opérationnel sur Debian 8, j'ai installé head, curl http://localhost:9200/\_plugin/head/ répond bien... Mais cherche à le faire fonctionner depuis http://monDomaine.com:9… --- ## [Local generation of html doc for pluggin?](https://discuss.elastic.co/t/local-generation-of-html-doc-for-pluggin/25912)
**Author:** [@eeveaud](https://discuss.elastic.co/u/eeveaud)\ **Replies:** 3\ **Last updated:** [July 21, 2015, 3:53pm UTC](https://discuss.elastic.co/t/local-generation-of-html-doc-for-pluggin/25912 "2015-07-21T15:53:45Z")
is there a way to generate the html doc for an under development pluggin ? I would like to check it before pushing it to git regards Eric --- ## [Using curl -XGET,-XPUT on cmd Windows?](https://discuss.elastic.co/t/using-curl-xget-xput-on-cmd-windows/11124)
**Author:** [@nhan248](https://discuss.elastic.co/u/nhan248)\ **Replies:** 0\ **Last updated:** [March 13, 2013, 4:44am UTC](https://discuss.elastic.co/t/using-curl-xget-xput-on-cmd-windows/11124 "2013-03-13T04:44:45Z")
Hello ,all I have a problem,i using elasticsearch on windows but i can run command on commandlinne windows ,but on linux it ok! Vd: curl -XPUT 'http://127.0.0.1:9200/\_river/my\_jdbc\_river/… --- ## [How to create : Stacked bar chart with negative values](https://discuss.elastic.co/t/how-to-create-stacked-bar-chart-with-negative-values/280169)
**Author:** [@HuongCV](https://discuss.elastic.co/u/HuongCV)\ **Replies:** 2\ **Last updated:** [August 2, 2021, 1:14pm UTC](https://discuss.elastic.co/t/how-to-create-stacked-bar-chart-with-negative-values/280169 "2021-08-02T13:14:40Z")
I want to create a visualization : Stacked bar chart with negative values. Let me know if kibana supports this chart. Thanks --- ## [Can not create script field by using regex in kibana](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967)
**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\ **Replies:** 2\ **Last updated:** [September 18, 2020, 12:53am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967 "2020-09-18T00:53:53Z")
I want to create new script field in Kibana. I want to using regex to cut some text from another field ('message') and fill to new script field. I follow instruction link below: ( Match a string and return that matc… --- ## [Best solution for de-duplication of alerts whilst using additional lookback time](https://discuss.elastic.co/t/best-solution-for-de-duplication-of-alerts-whilst-using-additional-lookback-time/243027)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 12:41pm UTC](https://discuss.elastic.co/t/best-solution-for-de-duplication-of-alerts-whilst-using-additional-lookback-time/243027 "2020-08-05T12:41:20Z")
Hi, An issue we are facing with real-time timestamps is the log processing time. Even if log processing time is less than a second to go through the pipeline, there is still a chance this log is missed due to the nature… --- ## [Elastic Search via python gives wrong count](https://discuss.elastic.co/t/elastic-search-via-python-gives-wrong-count/211173)
**Author:** [@forabraham](https://discuss.elastic.co/u/forabraham)\ **Replies:** 2\ **Last updated:** [December 11, 2019, 3:09pm UTC](https://discuss.elastic.co/t/elastic-search-via-python-gives-wrong-count/211173 "2019-12-11T15:09:08Z")
I’m new to python and I need to get connect to “Kibana” via python. we’re using Kibana 7.4.1. Requirement is to get the just the count (hits). Due to some restriction I need to use Python 3.6 only. I’ve added the “Elast… --- ## [Display latest values in metric vis](https://discuss.elastic.co/t/display-latest-values-in-metric-vis/152188)
**Author:** [@djfab](https://discuss.elastic.co/u/djfab)\ **Replies:** 2\ **Last updated:** [October 26, 2018, 9:30pm UTC](https://discuss.elastic.co/t/display-latest-values-in-metric-vis/152188 "2018-10-26T21:30:44Z")
Trying to display the latest values of metricbeat into the metric viz. However, Top Hit displays the max value in the series. The time series: --- ## [Special Character in query - Kibana](https://discuss.elastic.co/t/special-character-in-query-kibana/128108)
**Author:** [@SonChu](https://discuss.elastic.co/u/SonChu)\ **Replies:** 2\ **Last updated:** [April 16, 2018, 5:42pm UTC](https://discuss.elastic.co/t/special-character-in-query-kibana/128108 "2018-04-16T17:42:37Z")
Hi There, I am looking for a way to search in Kibana with special characters. I have a field with plaintext json as value like: {"Total":2,"Data":\[{"CompareName":"demo","CompareIsActive":true},"CompareName":"demo","Com… --- ## [Potential Clash of Auto-Generated IDs](https://discuss.elastic.co/t/potential-clash-of-auto-generated-ids/118738)
**Author:** [@krmathieu](https://discuss.elastic.co/u/krmathieu)\ **Replies:** 2\ **Last updated:** [February 8, 2018, 3:21am UTC](https://discuss.elastic.co/t/potential-clash-of-auto-generated-ids/118738 "2018-02-08T03:21:39Z")
I am going to be processing a couple million records of the same type into separate indexes for now and will be allowing ES to auto assign the ID of the records. My question is, if I do that and then later decide to merg… --- ## [External url for synonms\_path](https://discuss.elastic.co/t/external-url-for-synonms-path/97757)
**Author:** [@Vinothkumar](https://discuss.elastic.co/u/Vinothkumar)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 12:41pm UTC](https://discuss.elastic.co/t/external-url-for-synonms-path/97757 "2017-08-22T12:41:31Z")
Is there any possibilty to configure synonms\_path with external machine url. Sample Config "synonym" : { “type” : “synonym”, “synonyms\_path” : “http://domain:8080/esconfigdata/synonyms.txt”, “tokenizer” : “whitespac… --- ## [Create visualization from client portal based on custom filter criteria](https://discuss.elastic.co/t/create-visualization-from-client-portal-based-on-custom-filter-criteria/94111)
**Author:** [@sajjvino](https://discuss.elastic.co/u/sajjvino)\ **Replies:** 2\ **Last updated:** [July 22, 2017, 7:01am UTC](https://discuss.elastic.co/t/create-visualization-from-client-portal-based-on-custom-filter-criteria/94111 "2017-07-22T07:01:46Z")
Hello All, I am new to ELK stack and we are about to start a POC for one of the client requirement. Our client already having an application where they able to see data graphically and in tables. For some reason clie… --- ## [How does filebeat react to files dumped at once](https://discuss.elastic.co/t/how-does-filebeat-react-to-files-dumped-at-once/48013)
**Author:** [@wokmichel](https://discuss.elastic.co/u/wokmichel)\ **Replies:** 2\ **Last updated:** [April 21, 2016, 12:21pm UTC](https://discuss.elastic.co/t/how-does-filebeat-react-to-files-dumped-at-once/48013 "2016-04-21T12:21:26Z")
Hello, I am trying to understand how filebeat reacts to files that are dumped at once every x hours (versus log files that are fed on the fly, line by line) For instance, I have a file /log/audit.dump that is recreate… --- ## [XML filter error](https://discuss.elastic.co/t/xml-filter-error/36085)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 2\ **Last updated:** [December 1, 2015, 7:32pm UTC](https://discuss.elastic.co/t/xml-filter-error/36085 "2015-12-01T19:32:12Z")
Working with 2.1.0 logstash. With test.xml: \value1\ ...and configuration: input{ file{ path =\> "/test.xml" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } f… --- ## [Stratégie de stockage](https://discuss.elastic.co/t/strategie-de-stockage/26239)
**Author:** [@naguelfar](https://discuss.elastic.co/u/naguelfar)\ **Replies:** 2\ **Last updated:** [July 24, 2015, 8:21pm UTC](https://discuss.elastic.co/t/strategie-de-stockage/26239 "2015-07-24T20:21:56Z")
Bonjour, j'ai une application qui permet d'importer des CSV de différents clients / formats etc. dans un serveur elasticsearch (afin d'afficher un graphisme avec les données). Actuellement chaque CSV crée un index et… --- ## [Important comment on Git issue #7717: "Map visualizations not working anymore"](https://discuss.elastic.co/t/important-comment-on-git-issue-7717-map-visualizations-not-working-anymore/74650)
**Author:** [@tadams](https://discuss.elastic.co/u/tadams)\ **Replies:** 1\ **Last updated:** [February 10, 2017, 10:49pm UTC](https://discuss.elastic.co/t/important-comment-on-git-issue-7717-map-visualizations-not-working-anymore/74650 "2017-02-10T22:49:24Z")
Dear Kibana Community, we've seen, that there was an issue, that Kibana's Map visualizations did not work any more (#7717). Going the issue down, user:jamesspi added a comment mid oj July last year and proposed to use … --- ## [Access nested logstash event key in ruby](https://discuss.elastic.co/t/access-nested-logstash-event-key-in-ruby/167490)
**Author:** [@tszyro](https://discuss.elastic.co/u/tszyro)\ **Replies:** 1\ **Last updated:** [February 7, 2019, 5:45pm UTC](https://discuss.elastic.co/t/access-nested-logstash-event-key-in-ruby/167490 "2019-02-07T17:45:21Z")
I am trying to create new field as a list from nested keys in the event. I thought to do it in ruby filter but can't figure out how to retrieve nested keys into the list I would like to create a field with a list of all… --- ## [Global Search in Elastic Search](https://discuss.elastic.co/t/global-search-in-elastic-search/165331)
**Author:** [@Irvine456](https://discuss.elastic.co/u/Irvine456)\ **Replies:** 1\ **Last updated:** [January 23, 2019, 7:02am UTC](https://discuss.elastic.co/t/global-search-in-elastic-search/165331 "2019-01-23T07:02:40Z")
Working on Elasticsearch, my use case is very straight forward. When a user types in a search box I want to search all of my data set irrespective of field or column or any condition (search all data and provide all occu… --- ## [Convert field to lowercase to use in index name](https://discuss.elastic.co/t/convert-field-to-lowercase-to-use-in-index-name/145836)
**Author:** [@insomniac](https://discuss.elastic.co/u/insomniac)\ **Replies:** 1\ **Last updated:** [August 24, 2018, 2:47pm UTC](https://discuss.elastic.co/t/convert-field-to-lowercase-to-use-in-index-name/145836 "2018-08-24T14:47:12Z")
Trying to use the value of a field in the index name for the output to Elastic Cloud caused this error {"type":"invalid\_index\_name\_exception","reason":"Invalid index name \[winlogbeat-Microsoft-Windows-TaskScheduler-6.2… --- ## [Pushdown aggregations spark sql](https://discuss.elastic.co/t/pushdown-aggregations-spark-sql/36256)
**Author:** [@joris\_renkens](https://discuss.elastic.co/u/joris_renkens)\ **Replies:** 1\ **Last updated:** [December 8, 2015, 2:23pm UTC](https://discuss.elastic.co/t/pushdown-aggregations-spark-sql/36256 "2015-12-08T14:23:37Z")
Hi, I read that right now filters are pushed down to ES but aggregations aren't. Is adding this to ES-Hadoop on the roadmap and if so, when is the eta? Cheers, Joris --- ## [Specifying Index in URL as Parameter](https://discuss.elastic.co/t/specifying-index-in-url-as-parameter/26899)
**Author:** [@StephenGoodall](https://discuss.elastic.co/u/StephenGoodall)\ **Replies:** 1\ **Last updated:** [August 6, 2015, 10:48am UTC](https://discuss.elastic.co/t/specifying-index-in-url-as-parameter/26899 "2015-08-06T10:48:28Z")
Hi, Does anyone know if it is possible to specify the index as part of the URL? This would enable me to use a ProxyPass in Nginx to direct users to the Production log indices or the Development log indices by using somet… --- ## [Unable to show span attributes of OTEL span in kibana](https://discuss.elastic.co/t/unable-to-show-span-attributes-of-otel-span-in-kibana/343223)
**Author:** [@Hamad](https://discuss.elastic.co/u/Hamad)\ **Replies:** 6\ **Last updated:** [September 18, 2023, 3:07pm UTC](https://discuss.elastic.co/t/unable-to-show-span-attributes-of-otel-span-in-kibana/343223 "2023-09-18T15:07:11Z")
I have a nestjs project and i need to trace graphql calls. i am usnig opentelemetry to collect traces and apm server to show them on kibana. The problem i am facing is that all graphql calls are being grouped under same … --- ## [ElasticsearchClient didn't close socket connect and file open](https://discuss.elastic.co/t/elasticsearchclient-didnt-close-socket-connect-and-file-open/324705)
**Author:** [@Adam\_Lin](https://discuss.elastic.co/u/Adam_Lin)\ **Replies:** 6\ **Last updated:** [February 8, 2023, 6:14am UTC](https://discuss.elastic.co/t/elasticsearchclient-didnt-close-socket-connect-and-file-open/324705 "2023-02-08T06:14:18Z")
Hi all, I tried to query logs from the ELK server through java RestClient. This is how I set up search client try { restClient = RestClient .builder(new HttpHost(host, port)) .setRequestConfigCallback(new Res… --- ## [Error while trying to set up Arch Sight Module in logstash](https://discuss.elastic.co/t/error-while-trying-to-set-up-arch-sight-module-in-logstash/170659)
**Author:** [@rajatdey80](https://discuss.elastic.co/u/rajatdey80)\ **Replies:** 6\ **Last updated:** [March 8, 2019, 1:42pm UTC](https://discuss.elastic.co/t/error-while-trying-to-set-up-arch-sight-module-in-logstash/170659 "2019-03-08T13:42:16Z")
While setting Up Archsight ./logstash --modules arcsight --setup -M "arcsight.var.input.smartconnector.port=5602" -M "arcsight.var.elasticsearch.hosts=10.1.20.96:9200" -M "arcsight.var.kibana.host=10.1.20.96:5601" Th… --- ## [Fuzziness priority](https://discuss.elastic.co/t/fuzziness-priority/89614)
**Author:** [@Killoun](https://discuss.elastic.co/u/Killoun)\ **Replies:** 6\ **Last updated:** [June 15, 2017, 9:15pm UTC](https://discuss.elastic.co/t/fuzziness-priority/89614 "2017-06-15T21:15:39Z")
Hi all! my query: "query":{ "multi\_match":{ "query": "Car", "fields": \["title"\], "fuzziness": "AUTO" } }, got result first with title "Cor" than with "Car" How can I fix that? Thanks --- ## [How to check if a field exists in the Ruby plugin?](https://discuss.elastic.co/t/how-to-check-if-a-field-exists-in-the-ruby-plugin/43354)
**Author:** [@gunay](https://discuss.elastic.co/u/gunay)\ **Replies:** 0\ **Last updated:** [March 3, 2016, 9:03am UTC](https://discuss.elastic.co/t/how-to-check-if-a-field-exists-in-the-ruby-plugin/43354 "2016-03-03T09:03:33Z")
Hi, I am trying to find how to check if a field exist in the ruby filter. To check the existence of a field in Ruby, I tried the following three, seems that none of them work if event\['duration'\]\['time'\] =~ /.+/ … --- ## [VEGA increase 10000 loaded documents size in kibana](https://discuss.elastic.co/t/vega-increase-10000-loaded-documents-size-in-kibana/202200)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 2\ **Last updated:** [October 8, 2019, 2:37pm UTC](https://discuss.elastic.co/t/vega-increase-10000-loaded-documents-size-in-kibana/202200 "2019-10-08T14:37:07Z")
I would like to create a Vega geographic map visualization that shows more than 10000 coordinate points , but i can't increase the maximum size of loaded documents which is 10000 , is it possible ? --- ## [Elasticsearch doesn't create Metricbeat index](https://discuss.elastic.co/t/elasticsearch-doesnt-create-metricbeat-index/200444)
**Author:** [@ndg](https://discuss.elastic.co/u/ndg)\ **Replies:** 2\ **Last updated:** [September 25, 2019, 12:49pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-create-metricbeat-index/200444 "2019-09-25T12:49:57Z")
So, i am making a POC Swarm with 1 manager and 2 workers and both workers are in Drain state so i am only deploying services in the manager. I am trying to build a ELK stack from the ground up fully with docker container… --- ## [LogStash won't bind to any port](https://discuss.elastic.co/t/logstash-wont-bind-to-any-port/110886)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 2\ **Last updated:** [December 8, 2017, 9:57pm UTC](https://discuss.elastic.co/t/logstash-wont-bind-to-any-port/110886 "2017-12-08T21:57:12Z")
I'm running LS 5.4 on Ubuntu 16.04 LTS It's been running happily tailing locally written bro files for several months. I stopped it to do some troubleshooting and testing to add some functionality, but I'm having troub… --- ## [Grok filter output to elastic not filtered](https://discuss.elastic.co/t/grok-filter-output-to-elastic-not-filtered/100898)
**Author:** [@fridolf](https://discuss.elastic.co/u/fridolf)\ **Replies:** 2\ **Last updated:** [September 20, 2017, 8:02am UTC](https://discuss.elastic.co/t/grok-filter-output-to-elastic-not-filtered/100898 "2017-09-20T08:02:14Z")
Using logstash 5.4.0 and elastic 5.4.0 I have a grok filter: %{MYDATESTAMP:loggedtimestamp} GMT%{ISO8601\_TIMEZONE} %{MYTZ} \[-\] %{LOGLEVEL:loglevel}: %{GREEDYDATA:logmessage} I have below patterns: MYTZ (CE\[S\]?T) MYD… --- ## [Configure logstash for the Beats Plugin in logstash.yml](https://discuss.elastic.co/t/configure-logstash-for-the-beats-plugin-in-logstash-yml/91990)
**Author:** [@rbroaddus](https://discuss.elastic.co/u/rbroaddus)\ **Replies:** 2\ **Last updated:** [July 6, 2017, 1:06pm UTC](https://discuss.elastic.co/t/configure-logstash-for-the-beats-plugin-in-logstash-yml/91990 "2017-07-06T13:06:39Z")
Hi, I am trying to configure logstash for filebeat and the beats plugin in logstash.yml. I have already done this with the logstash.conf file and it works fine. I have not seen an example of this in logstash.yml after … --- ## [JS errors preventing Discover tab from displaying](https://discuss.elastic.co/t/js-errors-preventing-discover-tab-from-displaying/79633)
**Author:** [@mikemi](https://discuss.elastic.co/u/mikemi)\ **Replies:** 2\ **Last updated:** [March 22, 2017, 10:30pm UTC](https://discuss.elastic.co/t/js-errors-preventing-discover-tab-from-displaying/79633 "2017-03-22T22:30:41Z")
We're evaluating an elastic.co hosted instance of elasticsearch/kibana. Today, the Discover tab either doesn't load, or when it does, it is all white. (not white due to no results based on the time filter though) Whe… --- ## [Logstash IMAP input unable to parse HTML email](https://discuss.elastic.co/t/logstash-imap-input-unable-to-parse-html-email/68951)
**Author:** [@Geezer](https://discuss.elastic.co/u/Geezer)\ **Replies:** 2\ **Last updated:** [December 19, 2016, 3:46pm UTC](https://discuss.elastic.co/t/logstash-imap-input-unable-to-parse-html-email/68951 "2016-12-19T15:46:15Z")
Hello, I'm trying to use the logstash-input-imap plugin to parse email. I can read plain text emails OK but with an HTML email I get a page of HTML code as the message, rather than the text. I have set the content\_ty… [Previous page](https://discuss.elastic.co/top.md?page=1405&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1407&per_page=50&period=all)