# Top **URL:** https://discuss.elastic.co/top.md?page=1410&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1411 --- ## [Percolator with lookup terms filter not working?](https://discuss.elastic.co/t/percolator-with-lookup-terms-filter-not-working/20493)
**Author:** [@Alexander\_Jiteg](https://discuss.elastic.co/u/Alexander_Jiteg)\ **Replies:** 5\ **Last updated:** [November 25, 2014, 2:09pm UTC](https://discuss.elastic.co/t/percolator-with-lookup-terms-filter-not-working/20493 "2014-11-25T14:09:09Z")
Hi! I'm trying to use a lookup terms filter for percolation but for some reason I'm not getting any matches when percolating documents that should match the registered percolator. Example: https://gist.github… --- ## [Decompress a gzip compressed string in logstash and push to es](https://discuss.elastic.co/t/decompress-a-gzip-compressed-string-in-logstash-and-push-to-es/327720)
**Author:** [@shdasgupta](https://discuss.elastic.co/u/shdasgupta)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 2:18am UTC](https://discuss.elastic.co/t/decompress-a-gzip-compressed-string-in-logstash-and-push-to-es/327720 "2023-03-20T02:18:45Z")
Team, I am trying to decompress a gzip compressed data using logstash - am not able to figure out how to do this. Input json: (this is fed through a file in this example. In actual, it is consuming a kafka message whic… --- ## [What is the difference b/w Reindexing and Split index](https://discuss.elastic.co/t/what-is-the-difference-b-w-reindexing-and-split-index/284687)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 10:00am UTC](https://discuss.elastic.co/t/what-is-the-difference-b-w-reindexing-and-split-index/284687 "2021-09-22T10:00:13Z")
Just reading something about elasticsearch how it route documents,i saw a term called Split API.What is the use Split API,we have reindex api we have clone api.Want to know the difference between in all this could not un… --- ## [Sqlite와 logstash를 연결하는 데 오류가 발생합니다](https://discuss.elastic.co/t/sqlite-logstash/244597)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 2\ **Last updated:** [August 31, 2020, 7:33am UTC](https://discuss.elastic.co/t/sqlite-logstash/244597 "2020-08-31T07:33:03Z")
지난 번 로그스태시와 장고 간 연결 관련 질문을 드렸던 사람입니다. 알고보니 현재 장고 웹서버를 구축했고 모델을 설정하여 sqlite DB에 데이터를 쌓아놓은 상태라 기존의 logstash tcp input이 적절하지 않은 것 같다는 판단을 했습니다. 따라서 sqlite와 logstash를 연결하려고 했고 아래와 같이 설정했는데요. input { sqlite { pat… --- ## [Parent-Child relationship Support for Kibana 7.6 Visualizations](https://discuss.elastic.co/t/parent-child-relationship-support-for-kibana-7-6-visualizations/231940)
**Author:** [@checkmateasus](https://discuss.elastic.co/u/checkmateasus)\ **Replies:** 2\ **Last updated:** [May 12, 2020, 4:23am UTC](https://discuss.elastic.co/t/parent-child-relationship-support-for-kibana-7-6-visualizations/231940 "2020-05-12T04:23:19Z")
Is there a way to Visualize Parent-Child & Parent-Child-Grandchild relationships and perform Bucketing in kibana 7.6.2 as Kibana discover shows only the Primary Parent fields though the whole Index structure is shown w… --- ## [Increment @timestamp with a float field](https://discuss.elastic.co/t/increment-timestamp-with-a-float-field/131915)
**Author:** [@Federico\_Foschini](https://discuss.elastic.co/u/Federico_Foschini)\ **Replies:** 2\ **Last updated:** [May 15, 2018, 3:44pm UTC](https://discuss.elastic.co/t/increment-timestamp-with-a-float-field/131915 "2018-05-15T15:44:21Z")
Hello, I'm parsing some logs and I have a timestamp field (that goes in @timestamp) and a float field mapped in duration. What I'm trying to do is to copy the @timestamp to another field, and then add the duration to t… --- ## [Collecting custom metrics for vsphere module?](https://discuss.elastic.co/t/collecting-custom-metrics-for-vsphere-module/100278)
**Author:** [@reymondk](https://discuss.elastic.co/u/reymondk)\ **Replies:** 2\ **Last updated:** [September 14, 2017, 12:00am UTC](https://discuss.elastic.co/t/collecting-custom-metrics-for-vsphere-module/100278 "2017-09-14T00:00:31Z")
Hi Everyone, OS: CentOS 7.x Beat: Metricbeat Version: 6.0.0-beta2 can we customize the list of metric that we want to collect in the vsphere module? I'm not sure if that's the purpose of get\_custom\_fields in the conf… --- ## [FilterContainer in Elasticsearch NEST 5.0](https://discuss.elastic.co/t/filtercontainer-in-elasticsearch-nest-5-0/69689)
**Author:** [@iluvcode](https://discuss.elastic.co/u/iluvcode)\ **Replies:** 2\ **Last updated:** [December 28, 2016, 4:25pm UTC](https://discuss.elastic.co/t/filtercontainer-in-elasticsearch-nest-5-0/69689 "2016-12-28T16:25:40Z")
I am working on Elasticsearch migration from 1.7.1 to 5.0. I fixed most of the issues in the code after upgrading to 5.0 but I couldn't figure out how to change FilterContainer to work in new version. Below is my code … --- ## [Using elasticSearch to index git repository](https://discuss.elastic.co/t/using-elasticsearch-to-index-git-repository/204491)
**Author:** [@manu4387](https://discuss.elastic.co/u/manu4387)\ **Replies:** 1\ **Last updated:** [October 21, 2019, 2:19pm UTC](https://discuss.elastic.co/t/using-elasticsearch-to-index-git-repository/204491 "2019-10-21T14:19:54Z")
Hi All, I am new to the Elastic search , and want to index the git repository through elastic search , what are the options i can use to make it connect to git hub repository. Thanks --- ## [A lot of empty messages with AWS SQS](https://discuss.elastic.co/t/a-lot-of-empty-messages-with-aws-sqs/169157)
**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 6:23am UTC](https://discuss.elastic.co/t/a-lot-of-empty-messages-with-aws-sqs/169157 "2019-02-21T06:23:02Z")
I have a lot of empty messages on my Logstash indexers, I am using AWS SQS input and my attribute on SQS tier (i think it is enough time to process) ReceiveMessageWaitTimeSeconds == 10 sec. Is it a responsibility o… --- ## [Kibana - not able to view](https://discuss.elastic.co/t/kibana-not-able-to-view/160465)
**Author:** [@tushar89](https://discuss.elastic.co/u/tushar89)\ **Replies:** 7\ **Last updated:** [December 13, 2018, 6:13am UTC](https://discuss.elastic.co/t/kibana-not-able-to-view/160465 "2018-12-13T06:13:05Z")
I have my ELK set-up on 3 different Linux2 EC2's in AWS. I am unable to view the Kibana dashboard. Says Kibana is not ready yet. I have opened up all traffic on all 3 EC2's for starters. And put in the Private IP of my … --- ## [Kibana not running as service but systemctl showing as active](https://discuss.elastic.co/t/kibana-not-running-as-service-but-systemctl-showing-as-active/111406)
**Author:** [@siranjeevi](https://discuss.elastic.co/u/siranjeevi)\ **Replies:** 1\ **Last updated:** [December 12, 2017, 7:57pm UTC](https://discuss.elastic.co/t/kibana-not-running-as-service-but-systemctl-showing-as-active/111406 "2017-12-12T19:57:56Z")
Hi, I am using Kibana V5.4 on RHEL 7. When I do "systemctl status kibana.service" it is showing active but not on "service kibana status". Also please let me know do I want to run kibana as root or normal is user is fi… --- ## [Single Tile Map from multiple geo\_point fields](https://discuss.elastic.co/t/single-tile-map-from-multiple-geo-point-fields/36102)
**Author:** [@Zv\_Ka](https://discuss.elastic.co/u/Zv_Ka)\ **Replies:** 1\ **Last updated:** [December 8, 2015, 6:09am UTC](https://discuss.elastic.co/t/single-tile-map-from-multiple-geo-point-fields/36102 "2015-12-08T06:09:09Z")
Hello elasticsearch / kibana gurus, I have a requirement to display multiple geo\_point type fields on a single kibana tile map, we're using Kibana 4.1.3. When we set up the new Geo Coordinates bucket with Geohash Ag… --- ## [Will add unique traceId per request to trace the cost time?](https://discuss.elastic.co/t/will-add-unique-traceid-per-request-to-trace-the-cost-time/25231)
**Author:** [@11169](https://discuss.elastic.co/u/11169)\ **Replies:** 1\ **Last updated:** [July 9, 2015, 1:19pm UTC](https://discuss.elastic.co/t/will-add-unique-traceid-per-request-to-trace-the-cost-time/25231 "2015-07-09T13:19:06Z")
In my application, there is a global unique traceId per user request. It will be used to trace the business processes and cost time. And I want to use this traceId to trace more details of es, e.g. the cost time of query… --- ## [Display Overall Max and Average of Sum in TSVB in Metric and Markdown Visualizations (v8.6.1)](https://discuss.elastic.co/t/display-overall-max-and-average-of-sum-in-tsvb-in-metric-and-markdown-visualizations-v8-6-1/345411)
**Author:** [@Behnam.R](https://discuss.elastic.co/u/Behnam.R)\ **Replies:** 3\ **Last updated:** [October 27, 2023, 8:57am UTC](https://discuss.elastic.co/t/display-overall-max-and-average-of-sum-in-tsvb-in-metric-and-markdown-visualizations-v8-6-1/345411 "2023-10-27T08:57:05Z")
Hi all, I'm using Elastic version 8.6.1. In Kibana's TSVB, I've set up a Time Series visualization where I've first aggregated using the Sum of a specific field. I then applied a secondary pipeline aggregation to comput… --- ## [Rollup with max/min aggregation on @timestamp field typed as "float"](https://discuss.elastic.co/t/rollup-with-max-min-aggregation-on-timestamp-field-typed-as-float/317735)
**Author:** [@ISim](https://discuss.elastic.co/u/ISim)\ **Replies:** 3\ **Last updated:** [November 11, 2022, 1:46pm UTC](https://discuss.elastic.co/t/rollup-with-max-min-aggregation-on-timestamp-field-typed-as-float/317735 "2022-11-11T13:46:44Z")
Hello all, I have a index with accounting events with @timestamp (type "date"). There is a high volume of events so I created rollup job (elasticsearch 7.17.3) with "date\_histogram" : { "d… --- ## [How to completely reset forced shard allocation awareness?](https://discuss.elastic.co/t/how-to-completely-reset-forced-shard-allocation-awareness/271710)
**Author:** [@dschneiter](https://discuss.elastic.co/u/dschneiter)\ **Replies:** 3\ **Last updated:** [April 29, 2021, 9:21pm UTC](https://discuss.elastic.co/t/how-to-completely-reset-forced-shard-allocation-awareness/271710 "2021-04-29T21:21:27Z")
While teaching about shard allocation awareness and forced shard allocation awareness (Elasticsearch Engineer II course), one of the students made a typo in his request to configure forced shard allocation awareness whic… --- ## [Kibana date\_nanos generate CSV - TypeError: FieldFormat is not a constructor](https://discuss.elastic.co/t/kibana-date-nanos-generate-csv-typeerror-fieldformat-is-not-a-constructor/200772)
**Author:** [@Alex-St](https://discuss.elastic.co/u/Alex-St)\ **Replies:** 3\ **Last updated:** [October 20, 2019, 6:37am UTC](https://discuss.elastic.co/t/kibana-date-nanos-generate-csv-typeerror-fieldformat-is-not-a-constructor/200772 "2019-10-20T06:37:17Z")
On Discover, click Share, CSV - getting "TypeError: FieldFormat is not a constructor" if one of the fields in kibana pattern is set to date\_nanos. resetting kibana field type to Date fixes the problem, but also trim digi… --- ## [Using Xpack Transport client for multiple nodes with certificate/key](https://discuss.elastic.co/t/using-xpack-transport-client-for-multiple-nodes-with-certificate-key/149692)
**Author:** [@lengoyvaerts](https://discuss.elastic.co/u/lengoyvaerts)\ **Replies:** 3\ **Last updated:** [September 28, 2018, 6:25am UTC](https://discuss.elastic.co/t/using-xpack-transport-client-for-multiple-nodes-with-certificate-key/149692 "2018-09-28T06:25:40Z")
I have 3 Elasticsearch nodes each configured with X-Pack including keys and certificates for https connections. The certificates and keys are different per node, the certificate authority (ca.crt) is the same. How can I… --- ## [How to Elasticsearch 5.5 as service RH Linux](https://discuss.elastic.co/t/how-to-elasticsearch-5-5-as-service-rh-linux/94606)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 3\ **Last updated:** [August 3, 2017, 8:49am UTC](https://discuss.elastic.co/t/how-to-elasticsearch-5-5-as-service-rh-linux/94606 "2017-08-03T08:49:10Z")
Hello ! After some tests on preproduction with rpm, i begin to configure production environment. Problem : Elasticsearch doesn't work in root user + It's not a service (source : tar.gz) Currently context : Elastic… --- ## [Files change during snapshot and restore process](https://discuss.elastic.co/t/files-change-during-snapshot-and-restore-process/88694)
**Author:** [@shubham9799](https://discuss.elastic.co/u/shubham9799)\ **Replies:** 3\ **Last updated:** [June 8, 2017, 12:42pm UTC](https://discuss.elastic.co/t/files-change-during-snapshot-and-restore-process/88694 "2017-06-08T12:42:25Z")
I took second snapshot after adding some files and try to find the difference. I found that some files also got removed and some got modified. But if I am adding documents, why some files get removed from the backup? I a… --- ## [Failed to running hive job with CDH 5.1.2 and ES-Hadoop 2.0.0](https://discuss.elastic.co/t/failed-to-running-hive-job-with-cdh-5-1-2-and-es-hadoop-2-0-0/19810)
**Author:** [@Joe\_Yu](https://discuss.elastic.co/u/Joe_Yu)\ **Replies:** 3\ **Last updated:** [September 16, 2014, 2:18pm UTC](https://discuss.elastic.co/t/failed-to-running-hive-job-with-cdh-5-1-2-and-es-hadoop-2-0-0/19810 "2014-09-16T14:18:18Z")
Hello list, I have 4 node ES cluster and 6 node CDH running in the lab. The Hive job is as below: ========hive job=============== CREATE TABLE logs (type STRING, time STRING, ext STRING, ip STRING, req STRING,… --- ## [Alternating hits totals for subsequent requests](https://discuss.elastic.co/t/alternating-hits-totals-for-subsequent-requests/15622)
**Author:** [@asanderson](https://discuss.elastic.co/u/asanderson)\ **Replies:** 8\ **Last updated:** [February 7, 2014, 6:32pm UTC](https://discuss.elastic.co/t/alternating-hits-totals-for-subsequent-requests/15622 "2014-02-07T18:32:25Z")
Why would I get a different alternating hits total for subsequent match\_all search requests (i.e. curl http://localhost:9200/\_search) with zero failed? i.e. The first time I get 8503251, the next time I get 8479263,… --- ## [Changing elasticsearch FS repository path](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658)
**Author:** [@amirmono](https://discuss.elastic.co/u/amirmono)\ **Replies:** 4\ **Last updated:** [July 28, 2022, 11:26am UTC](https://discuss.elastic.co/t/changing-elasticsearch-fs-repository-path/310658 "2022-07-28T11:26:15Z")
I'm using elastiSearch 8.3 on a windows machine, and created a shared file system repository - my\_repo: PUT \_snapshot/my\_repo { "type": "fs", "settings": { "location": "relative\_path" … --- ## [Create a Single Rule with Multiple Thresholds with Different Actions per Threshold?](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 4\ **Last updated:** [October 5, 2021, 10:15pm UTC](https://discuss.elastic.co/t/create-a-single-rule-with-multiple-thresholds-with-different-actions-per-threshold/285956 "2021-10-05T22:15:22Z")
Hi All, I was wondering if anyone know if the following is possible Rules and Connectors, as I wasn't able to figure out how to do it in the GUI. Have a single rule, let's call it Disk Usage. The goal of this rule is… --- ## [I can't start Kibana on Ubuntu 16.04](https://discuss.elastic.co/t/i-cant-start-kibana-on-ubuntu-16-04/222180)
**Author:** [@Mohamed\_Koubaa](https://discuss.elastic.co/u/Mohamed_Koubaa)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 1:14am UTC](https://discuss.elastic.co/t/i-cant-start-kibana-on-ubuntu-16-04/222180 "2020-03-06T01:14:48Z")
I installed the ELK package. Elasticsearch, kibana and logstash. Elasticsear seems to be working fine but i can't seem to be able to start kibana. Here are the results of sudo service kibana status kibana.service - Ki… --- ## [Charts with stictly defined Timezone](https://discuss.elastic.co/t/charts-with-stictly-defined-timezone/187287)
**Author:** [@Serghey\_Rodin](https://discuss.elastic.co/u/Serghey_Rodin)\ **Replies:** 4\ **Last updated:** [June 28, 2019, 2:46pm UTC](https://discuss.elastic.co/t/charts-with-stictly-defined-timezone/187287 "2019-06-28T14:46:42Z")
I'd like to make a bar chart that will display monthly stats without offsetting timestamp with users time zone. The problem is that for example record 2019-02-01T00:00:00.000Z for Kibana user in EST timezone will be di… --- ## [Kibana.yml cannot change elasticsearch.url](https://discuss.elastic.co/t/kibana-yml-cannot-change-elasticsearch-url/162004)
**Author:** [@Pop\_Song](https://discuss.elastic.co/u/Pop_Song)\ **Replies:** 1\ **Last updated:** [December 24, 2018, 1:45pm UTC](https://discuss.elastic.co/t/kibana-yml-cannot-change-elasticsearch-url/162004 "2018-12-24T13:45:18Z")
Hello, I'm not good at typing English. i change #elasticsearch.url: "192.168.2.81:9200" in Kibana.yml . when I Start kibana.bat. it show Unable to revive connection: http://localhost:9200/ . Where do I need… --- ## [Metricbeat can't create index into Elasticsearch](https://discuss.elastic.co/t/metricbeat-cant-create-index-into-elasticsearch/137635)
**Author:** [@m\_5amy](https://discuss.elastic.co/u/m_5amy)\ **Replies:** 4\ **Last updated:** [June 27, 2018, 3:34pm UTC](https://discuss.elastic.co/t/metricbeat-cant-create-index-into-elasticsearch/137635 "2018-06-27T15:34:55Z")
Hi all, My metricbeat configured to monitor system and my apache web server but it can't create any index to ES , When i'm trying to test configuration return Ok so what should i do ? This is my metricbeat.yml file ht… --- ## [Filebeat Cisco Umbrella Fileset](https://discuss.elastic.co/t/filebeat-cisco-umbrella-fileset/262731)
**Author:** [@InnerJoin](https://discuss.elastic.co/u/InnerJoin)\ **Replies:** 6\ **Last updated:** [February 18, 2021, 1:36am UTC](https://discuss.elastic.co/t/filebeat-cisco-umbrella-fileset/262731 "2021-02-18T01:36:05Z")
Hi. I'm trying to set up the Filebeat Cisco module with the Umbrella fileset. I understand that they do not yet support Cisco managed S3 instances but I see that you can set the input to be file. I can't find anything ab… --- ## [\[kibana\] somme sur des id uniques](https://discuss.elastic.co/t/kibana-somme-sur-des-id-uniques/182174)
**Author:** [@brayoue](https://discuss.elastic.co/u/brayoue)\ **Replies:** 6\ **Last updated:** [May 24, 2019, 8:28am UTC](https://discuss.elastic.co/t/kibana-somme-sur-des-id-uniques/182174 "2019-05-24T08:28:33Z")
Bonjour, Est-il possible de calculer la somme d'un field mais pour des id uniques ? Et l'afficher sous forme de métric ? Exemple: id quantité 1 100 1 100 2 200 3 300 Sous kibana en utilisant "Unique Coun… --- ## [Managing Multiline logs](https://discuss.elastic.co/t/managing-multiline-logs/142888)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 6\ **Last updated:** [August 6, 2018, 9:32am UTC](https://discuss.elastic.co/t/managing-multiline-logs/142888 "2018-08-06T09:32:14Z")
Hello All, I have single file of logs in which some logs are single line and some logs are multiline logs. I have wrote the logstash filter for single line log and its working fine. But i am facing the problem while tr… --- ## [Can't push decimal numbers](https://discuss.elastic.co/t/cant-push-decimal-numbers/100960)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 6\ **Last updated:** [September 19, 2017, 8:12am UTC](https://discuss.elastic.co/t/cant-push-decimal-numbers/100960 "2017-09-19T08:12:41Z")
Hi, I am having a problem getting decimal numbers in the ES as shown below: \[image\] I have an "ASR" that is 0.9, but when I use the following query: GET filebeat-\*/log/\_search { "query": { "bool":{ "mu… --- ## [WinXP file\_get\_contents with PUT don't work](https://discuss.elastic.co/t/winxp-file-get-contents-with-put-dont-work/3068)
**Author:** [@Chenri](https://discuss.elastic.co/u/Chenri)\ **Replies:** 6\ **Last updated:** [July 6, 2010, 5:59pm UTC](https://discuss.elastic.co/t/winxp-file-get-contents-with-put-dont-work/3068 "2010-07-06T17:59:03Z")
I'm trying to setup ES in WinXP box using the PHP class from here http://hublog.hubmed.org/archives/001907.html For all the method with GET (query , check status, etc) it worked but when using PUT (creating index) i… --- ## [Get newest value per distinct field](https://discuss.elastic.co/t/get-newest-value-per-distinct-field/241157)
**Author:** [@gudmundur](https://discuss.elastic.co/u/gudmundur)\ **Replies:** 2\ **Last updated:** [July 15, 2020, 5:15pm UTC](https://discuss.elastic.co/t/get-newest-value-per-distinct-field/241157 "2020-07-15T17:15:02Z")
Greetings I want to do a query which returns the newest 1 value per distinct combination of specific underlying fields (maybe also after a certain timestamp) In the sql world I can do a query like this: select Element… --- ## [Kibana - Method not Allowed](https://discuss.elastic.co/t/kibana-method-not-allowed/220443)
**Author:** [@andreluizpr](https://discuss.elastic.co/u/andreluizpr)\ **Replies:** 2\ **Last updated:** [March 18, 2020, 6:18pm UTC](https://discuss.elastic.co/t/kibana-method-not-allowed/220443 "2020-03-18T18:18:19Z")
Hello everyone I'm starting now with ELK. I installed my environment on a lightsail server on AWS and it has the following configuration: CentOS 7.7.1908 Elasticsearch 7.6.0 - Release 1 Kibana 7.6.0 - Release 1 Logs… --- ## [How to see the surrounding documents in kibana v7.4.2 log tab](https://discuss.elastic.co/t/how-to-see-the-surrounding-documents-in-kibana-v7-4-2-log-tab/208834)
**Author:** [@111244](https://discuss.elastic.co/u/111244)\ **Replies:** 2\ **Last updated:** [November 25, 2019, 8:37am UTC](https://discuss.elastic.co/t/how-to-see-the-surrounding-documents-in-kibana-v7-4-2-log-tab/208834 "2019-11-25T08:37:13Z")
how to see the surrounding documents in kibana v7.4.2 log tab? i can't find this link --- ## [Adding together kibana timelion variables](https://discuss.elastic.co/t/adding-together-kibana-timelion-variables/157013)
**Author:** [@BlueSpirit](https://discuss.elastic.co/u/BlueSpirit)\ **Replies:** 2\ **Last updated:** [November 20, 2018, 5:53am UTC](https://discuss.elastic.co/t/adding-together-kibana-timelion-variables/157013 "2018-11-20T05:53:22Z")
I am using a variable that holds a numeric value used later in the timelion script. For simplicity, I have created a simple problem. As you can see, I am using a variable threshold which holds my value. I want to r… --- ## [Ingest pipeline execute external command or call rest?](https://discuss.elastic.co/t/ingest-pipeline-execute-external-command-or-call-rest/98264)
**Author:** [@Zachary\_Buckholz](https://discuss.elastic.co/u/Zachary_Buckholz)\ **Replies:** 2\ **Last updated:** [August 26, 2017, 1:27pm UTC](https://discuss.elastic.co/t/ingest-pipeline-execute-external-command-or-call-rest/98264 "2017-08-26T13:27:09Z")
I’d like to know if it’s possible to execute an external command from an ingest pipeline? My usecase is to do a unix dig command on an IP and see who owns it. We have Akamai fronting a lot of our web traffic and I’d lik… --- ## [Filebeat multiline](https://discuss.elastic.co/t/filebeat-multiline/93326)
**Author:** [@ahongyun](https://discuss.elastic.co/u/ahongyun)\ **Replies:** 2\ **Last updated:** [July 17, 2017, 9:52am UTC](https://discuss.elastic.co/t/filebeat-multiline/93326 "2017-07-17T09:52:03Z")
Hi all, i have the following log file Start time Wednesday, July 12, 2017 07:34:19 PM SGT by murex File descriptors raised to 16384 for current cmd. Java option used : -d64 -showversion -Djavax.xml.stream.XMLEve… --- ## [Create data table with url contains word](https://discuss.elastic.co/t/create-data-table-with-url-contains-word/91857)
**Author:** [@sonnguyenit](https://discuss.elastic.co/u/sonnguyenit)\ **Replies:** 2\ **Last updated:** [July 6, 2017, 9:42am UTC](https://discuss.elastic.co/t/create-data-table-with-url-contains-word/91857 "2017-07-06T09:42:58Z")
I'm newer from Kibana. I need to create a data table to view count url matching some word. Example i want to count all url contains "chinh-tri". So i type "chinh-tri" at the include field. But no data show. Event i c… --- ## [PF\_RING on Packetbeat error](https://discuss.elastic.co/t/pf-ring-on-packetbeat-error/91356)
**Author:** [@pgyggi](https://discuss.elastic.co/u/pgyggi)\ **Replies:** 2\ **Last updated:** [July 1, 2017, 8:02am UTC](https://discuss.elastic.co/t/pf-ring-on-packetbeat-error/91356 "2017-07-01T08:02:11Z")
everybody, 1、I want to use PF\_RING for Packetbeat and then install PF\_RING on my CentOS(1161 min),PF\_RING is work. see: \[root@packetbeat packetbeat\]# lsmod |grep pf\_ring pf\_ring 1234205 0 2、 I clone the la… --- ## [Kibana & Jolokia](https://discuss.elastic.co/t/kibana-jolokia/75760)
**Author:** [@medley](https://discuss.elastic.co/u/medley)\ **Replies:** 2\ **Last updated:** [February 21, 2017, 9:22am UTC](https://discuss.elastic.co/t/kibana-jolokia/75760 "2017-02-21T09:22:01Z")
Hello, I am using Jolokia to get metrics from a Tomcat installed on a Sun Solaris Server. I would like to know if I can easily build dashboards with Kibana 4 or if it is better to use an other solution such as Grafana. … --- ## [What's the actual data type for a field defined as "date" with "dateOptionalTime"](https://discuss.elastic.co/t/whats-the-actual-data-type-for-a-field-defined-as-date-with-dateoptionaltime/73415)
**Author:** [@markcitizen](https://discuss.elastic.co/u/markcitizen)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 8:13pm UTC](https://discuss.elastic.co/t/whats-the-actual-data-type-for-a-field-defined-as-date-with-dateoptionaltime/73415 "2017-02-14T20:13:06Z")
Hello, I'm sending java.sql.Timestamp objects to Elastic (through Spark). With default mapping everything works OK, dates are showing up as long numbers in the index (milliseconds). However after changing the field mappi… --- ## [Pingbeat: Recommended architectures?](https://discuss.elastic.co/t/pingbeat-recommended-architectures/62019)
**Author:** [@viztastic](https://discuss.elastic.co/u/viztastic)\ **Replies:** 2\ **Last updated:** [October 4, 2016, 1:15pm UTC](https://discuss.elastic.co/t/pingbeat-recommended-architectures/62019 "2016-10-04T13:15:11Z")
Usecase My use case involves 200,000+ network assets and Pingbeat seems like a good tool to monitor their availability and round trip time. Constraint The issue is that our client expects continuous monitoring as th… --- ## [How can I determine if Filebeat is being throttled?](https://discuss.elastic.co/t/how-can-i-determine-if-filebeat-is-being-throttled/56687)
**Author:** [@joshuaspence](https://discuss.elastic.co/u/joshuaspence)\ **Replies:** 2\ **Last updated:** [July 31, 2016, 7:51pm UTC](https://discuss.elastic.co/t/how-can-i-determine-if-filebeat-is-being-throttled/56687 "2016-07-31T19:51:10Z")
My understanding of Filebeat (which could be wrong) is that it will throttle its output if it detects that the output can't keep up. In my case, we have Filebeat sending to Logstash. Is there any way of determining whe… --- ## [Does marvel store Datanode info in indices?](https://discuss.elastic.co/t/does-marvel-store-datanode-info-in-indices/54988)
**Author:** [@anil\_varghese](https://discuss.elastic.co/u/anil_varghese)\ **Replies:** 2\ **Last updated:** [July 8, 2016, 11:02pm UTC](https://discuss.elastic.co/t/does-marvel-store-datanode-info-in-indices/54988 "2016-07-08T23:02:01Z")
Hi All, Does Marvel store the utilization information of data nodes in the .marvel indices.? I can see all node related info in dashboard , but i am trying to see if i can query them and get the count. Thank You --- ## [Marvel gone after upgrading to Kibana 4.2.1](https://discuss.elastic.co/t/marvel-gone-after-upgrading-to-kibana-4-2-1/34834)
**Author:** [@renevdm](https://discuss.elastic.co/u/renevdm)\ **Replies:** 2\ **Last updated:** [November 18, 2015, 5:08pm UTC](https://discuss.elastic.co/t/marvel-gone-after-upgrading-to-kibana-4-2-1/34834 "2015-11-18T17:08:34Z")
After upgrading to Kibana 4.2.1 by extracting the archive and replacing the /opt/kibana directory, Marvel seems missing. Do I have to reinstall Marvel? And what about the licence? --- ## [Aggregation: Difference of Two Date Fields to Aggregate Timedeltas](https://discuss.elastic.co/t/aggregation-difference-of-two-date-fields-to-aggregate-timedeltas/84190)
**Author:** [@Michael\_Sander](https://discuss.elastic.co/u/Michael_Sander)\ **Replies:** 0\ **Last updated:** [May 2, 2017, 12:51am UTC](https://discuss.elastic.co/t/aggregation-difference-of-two-date-fields-to-aggregate-timedeltas/84190 "2017-05-02T00:51:52Z")
I have two date fields in my index (e.g., start\_time and end\_time). How can I build a histogram that aggregates the difference, e.g., end\_time - start\_time to find a total time? I could reindex everything, calculate th… --- ## [How fast can Filebeat send logs from disk?](https://discuss.elastic.co/t/how-fast-can-filebeat-send-logs-from-disk/305295)
**Author:** [@mikewillis](https://discuss.elastic.co/u/mikewillis)\ **Replies:** 1\ **Last updated:** [May 20, 2022, 3:03pm UTC](https://discuss.elastic.co/t/how-fast-can-filebeat-send-logs-from-disk/305295 "2022-05-20T15:03:53Z")
Filebeat 7.17 sending over the network to Logstash 6 (we're looking to get it upgraded) running on CentOS 7, 64GB RAM, 2 x 14 core Intel Xeon E5-2690. We've got some logs which often total as much as ~1.4b single line … [Previous page](https://discuss.elastic.co/top.md?page=1409&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1411&per_page=50&period=all)