# Top **URL:** https://discuss.elastic.co/top.md?page=1426&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1427 --- ## [Add original message to documents logged with decode\_json\_fields](https://discuss.elastic.co/t/add-original-message-to-documents-logged-with-decode-json-fields/76772)
**Author:** [@Cylindric](https://discuss.elastic.co/u/Cylindric)\ **Replies:** 3\ **Last updated:** [March 1, 2017, 3:59pm UTC](https://discuss.elastic.co/t/add-original-message-to-documents-logged-with-decode-json-fields/76772 "2017-03-01T15:59:47Z")
Hi folks. I am using Filebeat to log a bunch of JSON-formatted log-files into ES, and occasionally I get records with a json error such as Error decoding JSON: invalid character ',' in numeric literal Can I add the o… --- ## [Autosuggestion for integer not working in elastic search](https://discuss.elastic.co/t/autosuggestion-for-integer-not-working-in-elastic-search/73329)
**Author:** [@Rahul\_Ranjan](https://discuss.elastic.co/u/Rahul_Ranjan)\ **Replies:** 3\ **Last updated:** [January 31, 2017, 10:55am UTC](https://discuss.elastic.co/t/autosuggestion-for-integer-not-working-in-elastic-search/73329 "2017-01-31T10:55:59Z")
I am using the Completion Suggesters as following. There is an issue for numeric autosuggest index : { "index": "mysuggestors", "type": "suggest", "id": "584a4455", "score": 1, "\_source": { "name": "Test 100AH 200 Titl… --- ## [Filebeat not detecting new entries in a log file](https://discuss.elastic.co/t/filebeat-not-detecting-new-entries-in-a-log-file/68215)
**Author:** [@romspacenut](https://discuss.elastic.co/u/romspacenut)\ **Replies:** 3\ **Last updated:** [December 7, 2016, 9:05am UTC](https://discuss.elastic.co/t/filebeat-not-detecting-new-entries-in-a-log-file/68215 "2016-12-07T09:05:09Z")
So we have a service that has an hourly log rotate because the volume of log entries. Filebeat for the most part recognizes that a new file has been created and correctly sees the new entries logged to the log file. Ther… --- ## [Montoring url](https://discuss.elastic.co/t/montoring-url/55373)
**Author:** [@rezz](https://discuss.elastic.co/u/rezz)\ **Replies:** 3\ **Last updated:** [July 30, 2016, 3:14pm UTC](https://discuss.elastic.co/t/montoring-url/55373 "2016-07-30T15:14:28Z")
Hi. I have installed elasticsearch v5 . i have installed x-pack but can not find the link to monitoring page, when I use kibana. Is monitoring page use the same port 5601 as kiban does or diffrent path and url? a… --- ## [Update an Elasticsearch document's array field without using scripting](https://discuss.elastic.co/t/update-an-elasticsearch-documents-array-field-without-using-scripting/21721)
**Author:** [@Jason\_Lee](https://discuss.elastic.co/u/Jason_Lee)\ **Replies:** 3\ **Last updated:** [January 22, 2015, 1:47am UTC](https://discuss.elastic.co/t/update-an-elasticsearch-documents-array-field-without-using-scripting/21721 "2015-01-22T01:47:11Z")
I'm trying to add new values to an existing array field in a document. I've noticed that using the update api just overwrites the entire array field. So far all the examples I have found are using scripting but … --- ## [Splitting out Master / Data](https://discuss.elastic.co/t/splitting-out-master-data/6187)
**Author:** [@Garth](https://discuss.elastic.co/u/Garth)\ **Replies:** 8\ **Last updated:** [December 27, 2011, 5:07pm UTC](https://discuss.elastic.co/t/splitting-out-master-data/6187 "2011-12-27T17:07:32Z")
Is there any good reason to split out a Master node and Data node if both nodes are to be on the same server? --- ## [Elastic Cloud APM not showing logs in Transactions Page](https://discuss.elastic.co/t/elastic-cloud-apm-not-showing-logs-in-transactions-page/293597)
**Author:** [@tsoeiro](https://discuss.elastic.co/u/tsoeiro)\ **Replies:** 2\ **Last updated:** [January 26, 2022, 10:22am UTC](https://discuss.elastic.co/t/elastic-cloud-apm-not-showing-logs-in-transactions-page/293597 "2022-01-26T10:22:30Z")
What makes Kibana to not show docker container logs in APM "Transactions" page under "Logs" tab. I verified the logs are successfully being generated with the "trace.id" associated for proper linking. I have the ex… --- ## [Shards failed caused by index.max\_docvalue\_fields\_search](https://discuss.elastic.co/t/shards-failed-caused-by-index-max-docvalue-fields-search/251587)
**Author:** [@cctk](https://discuss.elastic.co/u/cctk)\ **Replies:** 2\ **Last updated:** [October 12, 2020, 12:19pm UTC](https://discuss.elastic.co/t/shards-failed-caused-by-index-max-docvalue-fields-search/251587 "2020-10-12T12:19:24Z")
I have a problem with filebeat indexes , a new index is made everyday and each time I get a shard failed error. The reason behind it is shown as the index.max\_docvalue\_fields\_search is too low. I run this in dev tools … --- ## [Winlogbeat service stopped automaticly](https://discuss.elastic.co/t/winlogbeat-service-stopped-automaticly/249026)
**Author:** [@collideroff](https://discuss.elastic.co/u/collideroff)\ **Replies:** 2\ **Last updated:** [October 4, 2020, 12:08pm UTC](https://discuss.elastic.co/t/winlogbeat-service-stopped-automaticly/249026 "2020-10-04T12:08:56Z")
Good day! I have installed winlogbeat in WindowsServer 2012R2 on EventCollector. It's was istalled properly, but service automaticly stopped after several time..abou 12 hours on more. winlogbeat.event\_logs: name: Ap… --- ## [Index rollover is not happening](https://discuss.elastic.co/t/index-rollover-is-not-happening/240645)
**Author:** [@bivaswap](https://discuss.elastic.co/u/bivaswap)\ **Replies:** 2\ **Last updated:** [July 18, 2020, 2:18am UTC](https://discuss.elastic.co/t/index-rollover-is-not-happening/240645 "2020-07-18T02:18:00Z")
I have 4 node cluster (3 master eligible+data, 1 coordinating node) Logstash output output { elasticsearch { hosts =\> \["es-node-01.xyz.local:9200", "es-node-02.xyz.local:9200", "es-node-03.xyz.local:9200"\] il… --- ## [Need to do a calculation in logstash](https://discuss.elastic.co/t/need-to-do-a-calculation-in-logstash/211117)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 2\ **Last updated:** [December 10, 2019, 3:43am UTC](https://discuss.elastic.co/t/need-to-do-a-calculation-in-logstash/211117 "2019-12-10T03:43:25Z")
logstash input is elasticsearch and there is field called 'check' in input index. when ever read the documents in this index need to increment check by 1. I used ruby filter for this. ruby{code =\> "event.set('check',\[… --- ## [How does Search and Indexing latency calculated in Kibana charts?](https://discuss.elastic.co/t/how-does-search-and-indexing-latency-calculated-in-kibana-charts/208555)
**Author:** [@itvivekv](https://discuss.elastic.co/u/itvivekv)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 6:37pm UTC](https://discuss.elastic.co/t/how-does-search-and-indexing-latency-calculated-in-kibana-charts/208555 "2019-11-21T18:37:34Z")
--- ## [Show timeline information in Canvas](https://discuss.elastic.co/t/show-timeline-information-in-canvas/207769)
**Author:** [@clarissacastella](https://discuss.elastic.co/u/clarissacastella)\ **Replies:** 2\ **Last updated:** [November 14, 2019, 10:20pm UTC](https://discuss.elastic.co/t/show-timeline-information-in-canvas/207769 "2019-11-14T22:20:40Z")
Hi! I'm creating a visualization in Canvas and I need to show a queue timeline like the one in the upper right corner of this image: It is important that where one line ends the other starts. I want to show time from … --- ## [Mapper\_Parsing\_Exception After Logstash Rollback](https://discuss.elastic.co/t/mapper-parsing-exception-after-logstash-rollback/164183)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 2\ **Last updated:** [January 14, 2019, 6:31pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-after-logstash-rollback/164183 "2019-01-14T18:31:10Z")
We recently rolled back Logstash from 6.5.4 to 6.4.1 due to issues with the geoip plugin. Since then I've seen the below log lines in logstash, the value being mapped changes but it's always the same field. How do I re… --- ## [Deleting documents using terms query](https://discuss.elastic.co/t/deleting-documents-using-terms-query/161319)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 2\ **Last updated:** [December 20, 2018, 6:22am UTC](https://discuss.elastic.co/t/deleting-documents-using-terms-query/161319 "2018-12-20T06:22:18Z")
Hi All, I have scenario explained below, We need to delete multiple documents from Elasticsearch based on a given field which contains unique values. So, in this I wanted to use terms query where we can provide multipl… --- ## [Curl to watcher webhook](https://discuss.elastic.co/t/curl-to-watcher-webhook/123958)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 2\ **Last updated:** [March 15, 2018, 8:44pm UTC](https://discuss.elastic.co/t/curl-to-watcher-webhook/123958 "2018-03-15T20:44:29Z")
I have a curl post operation which uses OTRS REST API to create tickets . I want to integrate the same using watcher webhook . These are the parameters required to create a ticket in OTRS { "UserLogin" : "admin", "Pa… --- ## [Are there any tools to facilitate changing a mapping?](https://discuss.elastic.co/t/are-there-any-tools-to-facilitate-changing-a-mapping/123447)
**Author:** [@David9](https://discuss.elastic.co/u/David9)\ **Replies:** 2\ **Last updated:** [March 12, 2018, 7:22pm UTC](https://discuss.elastic.co/t/are-there-any-tools-to-facilitate-changing-a-mapping/123447 "2018-03-12T19:22:28Z")
I have to modify an index mapping and I feel like when doing this in the past it feels more difficult and error-prone than it should be. Specifically I have to modify a geopoint field. I'm going to use a json text edit… --- ## [Can I plot raw values from fields as is in X/Y axis rather than aggregration?](https://discuss.elastic.co/t/can-i-plot-raw-values-from-fields-as-is-in-x-y-axis-rather-than-aggregration/106613)
**Author:** [@schand](https://discuss.elastic.co/u/schand)\ **Replies:** 2\ **Last updated:** [November 13, 2017, 6:35am UTC](https://discuss.elastic.co/t/can-i-plot-raw-values-from-fields-as-is-in-x-y-axis-rather-than-aggregration/106613 "2017-11-13T06:35:13Z")
I have four fields indexed (clientname (string), clientusage (number), clientmaxlimit (number), stamp (timestamp). I want to plot client usage over the time against its maxlimit. I am not able to do so as Kibana not al… --- ## [Calculating average of values in a percentile](https://discuss.elastic.co/t/calculating-average-of-values-in-a-percentile/94413)
**Author:** [@Simon\_Oxwell](https://discuss.elastic.co/u/Simon_Oxwell)\ **Replies:** 2\ **Last updated:** [July 25, 2017, 6:42am UTC](https://discuss.elastic.co/t/calculating-average-of-values-in-a-percentile/94413 "2017-07-25T06:42:59Z")
Hi, I'm reproducing an old client report, and have discovered that what was reported as an average, was in fact the average of 90% of the available data (ie, the top 10% of the count of values was removed) Is there a… --- ## [Issue with ECE Setup on RHEL 7.3](https://discuss.elastic.co/t/issue-with-ece-setup-on-rhel-7-3/79955)
**Author:** [@califrangis](https://discuss.elastic.co/u/califrangis)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 4:15pm UTC](https://discuss.elastic.co/t/issue-with-ece-setup-on-rhel-7-3/79955 "2017-03-27T16:15:02Z")
I've tried for the last few days to get ECE to install I'm now stuck at the following point: Checking Minimum required memory... PASSED -- Completed Verifying Prerequisites -- Running Bootstrap container Monitor… --- ## [How to import the Beats Kibana dashboards offline into elasticsearch](https://discuss.elastic.co/t/how-to-import-the-beats-kibana-dashboards-offline-into-elasticsearch/66130)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 16, 2016, 10:28am UTC](https://discuss.elastic.co/t/how-to-import-the-beats-kibana-dashboards-offline-into-elasticsearch/66130 "2016-11-16T10:28:40Z")
I am looking for a option to import the beats kibana dashboards (https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-5.0.0.zip) offline using the ./scripts/import\_dashboards scripts. --- ## [Elasticsearch-5.0.0-beta1 be killed](https://discuss.elastic.co/t/elasticsearch-5-0-0-beta1-be-killed/61328)
**Author:** [@ugiwgh](https://discuss.elastic.co/u/ugiwgh)\ **Replies:** 2\ **Last updated:** [September 23, 2016, 6:00am UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-beta1-be-killed/61328 "2016-09-23T06:00:41Z")
\[wugh@centos7 elasticsearch-5.0.0-beta1\]$ bin/elasticsearch ....................... \[2016-09-23T11:43:54,909\]\[INFO \]\[o.e.p.PluginsService \] \[E6rF1V1\] loaded module \[aggs-matrix-stats\] \[2016-09-23T11:43:54,909\]\[IN… --- ## [File plugin: too many files error](https://discuss.elastic.co/t/file-plugin-too-many-files-error/54893)
**Author:** [@changxy](https://discuss.elastic.co/u/changxy)\ **Replies:** 2\ **Last updated:** [July 8, 2016, 1:14am UTC](https://discuss.elastic.co/t/file-plugin-too-many-files-error/54893 "2016-07-08T01:14:52Z")
IdentityMapCodec has reached 80% capacity {:current\_size=\>16427, :upper\_limit=\>20000, :level=\>:warn} how to fix it? $ ulimit -a core file size (blocks, -c) 0 data seg size (kbytes, -d) unlimited sc… --- ## [Filebeat logs](https://discuss.elastic.co/t/filebeat-logs/41904)
**Author:** [@veve90](https://discuss.elastic.co/u/veve90)\ **Replies:** 2\ **Last updated:** [February 18, 2016, 12:52pm UTC](https://discuss.elastic.co/t/filebeat-logs/41904 "2016-02-18T12:52:05Z")
Hello, In my filebeat configuration I have: logging: to\_syslog: true files: path: /var/log/filebeat name: myfilebeat rotateeverybytes: 10485760 # = 10MB keepfiles: 7 level: info However, I hav… --- ## [File input processing question](https://discuss.elastic.co/t/file-input-processing-question/27442)
**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\ **Replies:** 2\ **Last updated:** [August 16, 2015, 2:33pm UTC](https://discuss.elastic.co/t/file-input-processing-question/27442 "2015-08-16T14:33:46Z")
I have logstash config file setup as shown below. It is monitoring demo directory for specific file pattern. It finds the log file and reads it, but once it reads it I can't ever convince it to re-read it from the be… --- ## [Highlighting not working for \[edge\_\]ngram with the new versions](https://discuss.elastic.co/t/highlighting-not-working-for-edge--ngram-with-the-new-versions/14467)
**Author:** [@Guillermo\_Arias\_del\_](https://discuss.elastic.co/u/Guillermo_Arias_del_)\ **Replies:** 2\ **Last updated:** [November 20, 2013, 12:58pm UTC](https://discuss.elastic.co/t/highlighting-not-working-for-edge--ngram-with-the-new-versions/14467 "2013-11-20T12:58:37Z")
Hi, all! We recently updated from 0.90.1 to 0.90.6 and our highlighting tests began to fail. Updating to 0.90.7 didn't work, so I think there is a bug, or at least something changed in the specification... I ad… --- ## [Bug? Combining "custom\_score" script with "sort" gives value 'null' for score](https://discuss.elastic.co/t/bug-combining-custom-score-script-with-sort-gives-value-null-for-score/9989)
**Author:** [@wires](https://discuss.elastic.co/u/wires)\ **Replies:** 2\ **Last updated:** [December 12, 2012, 10:40pm UTC](https://discuss.elastic.co/t/bug-combining-custom-score-script-with-sort-gives-value-null-for-score/9989 "2012-12-12T22:40:32Z")
Hello guys, It seems I cannot combine a "custom\_score" query with sorting? Is this known? is it a bug? For example, this query: { "sort": \[ { "creation\_date": { "order": "desc" }… --- ## [Elastic search Kubernetes master restarts when snapshot triggered](https://discuss.elastic.co/t/elastic-search-kubernetes-master-restarts-when-snapshot-triggered/270805)
**Author:** [@rajkumar\_25](https://discuss.elastic.co/u/rajkumar_25)\ **Replies:** 5\ **Last updated:** [April 23, 2021, 4:54am UTC](https://discuss.elastic.co/t/elastic-search-kubernetes-master-restarts-when-snapshot-triggered/270805 "2021-04-23T04:54:45Z")
Elastic search Kubernetes restarts when the snapshot is triggered. Getting error OutOfMemoryError: Java heap space. My elastic search is having 2 master, 1 data, and 1 voting node. Having 850 indices and 50 open indic… --- ## [Logstash on AWS Elasticsearch Service - UNEXPECTED POOL ERROR | Cant install template](https://discuss.elastic.co/t/logstash-on-aws-elasticsearch-service-unexpected-pool-error-cant-install-template/247934)
**Author:** [@regic](https://discuss.elastic.co/u/regic)\ **Replies:** 5\ **Last updated:** [September 9, 2020, 1:19am UTC](https://discuss.elastic.co/t/logstash-on-aws-elasticsearch-service-unexpected-pool-error-cant-install-template/247934 "2020-09-09T01:19:09Z")
Hi, I have an Elasticsearch service running on an EC2 instance (Linux/Redhat) and I am trying to setup a Logstash service but getting a template error. Anyone have any ideas? Setup • AWS Elasticsearch 7.7 • Logstash… --- ## [Ingestion performance issues - where to start?](https://discuss.elastic.co/t/ingestion-performance-issues-where-to-start/245849)
**Author:** [@wardallen](https://discuss.elastic.co/u/wardallen)\ **Replies:** 5\ **Last updated:** [August 21, 2020, 1:35pm UTC](https://discuss.elastic.co/t/ingestion-performance-issues-where-to-start/245849 "2020-08-21T13:35:04Z")
Hi all, I'm having ingestion performance issues that I haven't gotten to the bottom of, and I'm quite new to the elastic stack, so I thought I'd seek advice here. I have a cluster of 3 VMs (4 CPU/64GB RAM/500GB disk). … --- ## [Can kibana and logstash enjoy platinum license](https://discuss.elastic.co/t/can-kibana-and-logstash-enjoy-platinum-license/186415)
**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\ **Replies:** 5\ **Last updated:** [June 24, 2019, 1:16am UTC](https://discuss.elastic.co/t/can-kibana-and-logstash-enjoy-platinum-license/186415 "2019-06-24T01:16:42Z")
Hello, I have been told that my company had purchased ELASTIC STACK platinum license for 9 nodes. In these 9 nodes, 3 will be used for dedicated master nodes and 6 will be data nodes. However, would kibana and logstas… --- ## [Should combining bool queries does not works](https://discuss.elastic.co/t/should-combining-bool-queries-does-not-works/47772)
**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\ **Replies:** 5\ **Last updated:** [April 20, 2016, 2:22pm UTC](https://discuss.elastic.co/t/should-combining-bool-queries-does-not-works/47772 "2016-04-20T14:22:53Z")
I have this query in Elasticsearch 1.4.4: \`GET my\_jobs/type\_job/\_search { "fields": \[ "id","user","state","start\_time","end\_time" \], "query": { "bool": { "must": \[ … --- ## [Berkeley DB Java edition river and/or other integration options?](https://discuss.elastic.co/t/berkeley-db-java-edition-river-and-or-other-integration-options/12117)
**Author:** [@Andrius\_Juozapaitis](https://discuss.elastic.co/u/Andrius_Juozapaitis)\ **Replies:** 5\ **Last updated:** [May 25, 2013, 11:08am UTC](https://discuss.elastic.co/t/berkeley-db-java-edition-river-and-or-other-integration-options/12117 "2013-05-25T11:08:23Z")
Hey, I got fed up with couchdb's lack of transactions, since the compromises in the design of the application logic to compensate for it became really annoying. This lead me to investigate a few other non-sql data… --- ## [Single digit numeric search not working](https://discuss.elastic.co/t/single-digit-numeric-search-not-working/5970)
**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\ **Replies:** 5\ **Last updated:** [November 27, 2011, 4:12pm UTC](https://discuss.elastic.co/t/single-digit-numeric-search-not-working/5970 "2011-11-27T16:12:53Z")
Hi there, I am searching on the zip field. and by default it is not analyzed. But while searching when I am entering first digit, request is passed to the server, but it gives no response. But as I … --- ## [Logstash Output doesnt have grok fields but Event.original only](https://discuss.elastic.co/t/logstash-output-doesnt-have-grok-fields-but-event-original-only/311220)
**Author:** [@vsudula](https://discuss.elastic.co/u/vsudula)\ **Replies:** 7\ **Last updated:** [August 2, 2022, 6:30pm UTC](https://discuss.elastic.co/t/logstash-output-doesnt-have-grok-fields-but-event-original-only/311220 "2022-08-02T18:30:18Z")
I am using Logstash 8.3 and i have provided my logs below . When logstsh ingests the data to elastic its ingesting data as whole line as text instead of individual values that i defined in grok pattern. //My Code here. … --- ## [Kibana server is not ready yet, all shards failed](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-all-shards-failed/160891)
**Author:** [@mortueta](https://discuss.elastic.co/u/mortueta)\ **Replies:** 1\ **Last updated:** [December 14, 2018, 12:17pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-all-shards-failed/160891 "2018-12-14T12:17:18Z")
Hi all, After upgrading my ELK stack I am havinh some troubles with Kibana... The upgrade has been from 6.4.3 to 6.5.3. I have update all the components and all are in the same version. Including the plugins. I have on… --- ## [Dateparsefailure reason not known](https://discuss.elastic.co/t/dateparsefailure-reason-not-known/101650)
**Author:** [@raja\_gopal](https://discuss.elastic.co/u/raja_gopal)\ **Replies:** 7\ **Last updated:** [September 25, 2017, 9:57am UTC](https://discuss.elastic.co/t/dateparsefailure-reason-not-known/101650 "2017-09-25T09:57:10Z")
I am running logstash 5 on rhel 6. I am trying to get xml data as input and format it through xml filter plugin. I store the output into a target field and i try to parse a UNIX type date in one of the fields inside the … --- ## [Deserializing a json string and make it a name in an index to ES](https://discuss.elastic.co/t/deserializing-a-json-string-and-make-it-a-name-in-an-index-to-es/90328)
**Author:** [@EigoCogito](https://discuss.elastic.co/u/EigoCogito)\ **Replies:** 1\ **Last updated:** [June 21, 2017, 6:31pm UTC](https://discuss.elastic.co/t/deserializing-a-json-string-and-make-it-a-name-in-an-index-to-es/90328 "2017-06-21T18:31:33Z")
Hello People, I'm relatively new to the ELK stack and have made progress in getting data into ES, however I would really appreciate some pointers on the following: My setup is sending data to kafka and then to ES thr… --- ## [Format nested json with Sql joins](https://discuss.elastic.co/t/format-nested-json-with-sql-joins/31405)
**Author:** [@Alexcopquin1](https://discuss.elastic.co/u/Alexcopquin1)\ **Replies:** 1\ **Last updated:** [November 7, 2015, 10:38pm UTC](https://discuss.elastic.co/t/format-nested-json-with-sql-joins/31405 "2015-11-07T22:38:03Z")
Hi, We want to hydrate an ES cluster with posgres data and are trying logstash. The input sql looks something like Select mem.id, mem.email, mem.first\_name, addr.id as address\_id, addr.city, addr.state, add… --- ## [Single node cluster vs multi node cluster compared to possible undetected data-loss](https://discuss.elastic.co/t/single-node-cluster-vs-multi-node-cluster-compared-to-possible-undetected-data-loss/44813)
**Author:** [@pvmeerbe](https://discuss.elastic.co/u/pvmeerbe)\ **Replies:** 0\ **Last updated:** [March 18, 2016, 8:47am UTC](https://discuss.elastic.co/t/single-node-cluster-vs-multi-node-cluster-compared-to-possible-undetected-data-loss/44813 "2016-03-18T08:47:15Z")
Hi, I'm planning a setup with the following 2 goals: audit data from multiple (ruby on rails) applications need to be combined and made available for reporting. The audit data does not have a scheme, i.e. different… --- ## [Error sending trace data to elasticsearch using otel collector](https://discuss.elastic.co/t/error-sending-trace-data-to-elasticsearch-using-otel-collector/358511)
**Author:** [@MSP85](https://discuss.elastic.co/u/MSP85)\ **Replies:** 0\ **Last updated:** [April 30, 2024, 6:20pm UTC](https://discuss.elastic.co/t/error-sending-trace-data-to-elasticsearch-using-otel-collector/358511 "2024-04-30T18:20:58Z")
Hi, I'm trying to send trace data to Elasticsearch using otel collector. and below is my configuration. when I send sample traces I get the below error messages: When I have httpsin the endpoint url Error: Exporting … --- ## [Logstash Email - Constantly sending](https://discuss.elastic.co/t/logstash-email-constantly-sending/210262)
**Author:** [@lquin1978](https://discuss.elastic.co/u/lquin1978)\ **Replies:** 0\ **Last updated:** [December 3, 2019, 12:23am UTC](https://discuss.elastic.co/t/logstash-email-constantly-sending/210262 "2019-12-03T00:23:10Z")
I am using an email output within logstash to send me a copy of an xml file that has been generated by an NMAP scan. The issue is Logstash is repeatedly sending me a copy of the same file every minute. Is there a way t… --- ## [Last value |No result found](https://discuss.elastic.co/t/last-value-no-result-found/297981)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 3:57pm UTC](https://discuss.elastic.co/t/last-value-no-result-found/297981 "2022-02-25T15:57:45Z")
hi my field having new value every min, i want to show the latest value of field in Metric regardless of dashboard Time interval but when i choose Last value i got No result found --- ## [Memory allocation against the index size](https://discuss.elastic.co/t/memory-allocation-against-the-index-size/187975)
**Author:** [@udara](https://discuss.elastic.co/u/udara)\ **Replies:** 2\ **Last updated:** [June 28, 2019, 8:14am UTC](https://discuss.elastic.co/t/memory-allocation-against-the-index-size/187975 "2019-06-28T08:14:01Z")
Hi all we are predicting our index size will be around 175 GB. We came up with a cluster topology of having 2 data nodes and 1 master only node. So each node data node will have 250GB of storage and 64 GB of ram alloc… --- ## [Ingest a text file as a single log with the help of filebeat](https://discuss.elastic.co/t/ingest-a-text-file-as-a-single-log-with-the-help-of-filebeat/167790)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 2\ **Last updated:** [February 14, 2019, 5:32am UTC](https://discuss.elastic.co/t/ingest-a-text-file-as-a-single-log-with-the-help-of-filebeat/167790 "2019-02-14T05:32:42Z")
I want to ingest a text file as a single log in elasticsearch any input would be really appreciated Best Regards Shrikant --- ## [Trying to use pipelines with filebeat output.elasticsearch](https://discuss.elastic.co/t/trying-to-use-pipelines-with-filebeat-output-elasticsearch/156361)
**Author:** [@srkrishna](https://discuss.elastic.co/u/srkrishna)\ **Replies:** 2\ **Last updated:** [November 17, 2018, 3:53am UTC](https://discuss.elastic.co/t/trying-to-use-pipelines-with-filebeat-output-elasticsearch/156361 "2018-11-17T03:53:12Z")
Hello, I configured multiple .yml config file for different types of logs. Now i need to add conditions to send outputs 1. to elasticsearch and 2.logstash this is based on a condition with fields.logtype value. After… --- ## [Filebeat and Magento2 reports](https://discuss.elastic.co/t/filebeat-and-magento2-reports/116226)
**Author:** [@sergiu.tot](https://discuss.elastic.co/u/sergiu.tot)\ **Replies:** 2\ **Last updated:** [January 22, 2018, 9:22am UTC](https://discuss.elastic.co/t/filebeat-and-magento2-reports/116226 "2018-01-22T09:22:22Z")
Hello guys, I have a Magento2 instance for which I collect the logs using prospectors in filebeat-5.2.1. This is happening on a docker container based on ubuntu xenial (16.04). The Magento2 report is a valid json file … --- ## [Logstatsh plugins issue](https://discuss.elastic.co/t/logstatsh-plugins-issue/102404)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [October 2, 2017, 6:05am UTC](https://discuss.elastic.co/t/logstatsh-plugins-issue/102404 "2017-10-02T06:05:54Z")
Hi Guys, How do I run plugins with logstash? I mean I tried entering below setting in my /etc/logstash/logstash.yml but after restarting its not picking up the desired setting and my netflow ports not listing. However … --- ## [Access aggregation key inside script](https://discuss.elastic.co/t/access-aggregation-key-inside-script/91266)
**Author:** [@Wullschi](https://discuss.elastic.co/u/Wullschi)\ **Replies:** 2\ **Last updated:** [June 29, 2017, 10:53am UTC](https://discuss.elastic.co/t/access-aggregation-key-inside-script/91266 "2017-06-29T10:53:40Z")
Hi, I have a filter script inside an Aggregation. Inside this script i would like to access the key from the outer Aggregation. Is this possible? "aggs": { "category": { "terms": { "field"… --- ## [How to switch off default ES output of filebeat](https://discuss.elastic.co/t/how-to-switch-off-default-es-output-of-filebeat/80120)
**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 11:47am UTC](https://discuss.elastic.co/t/how-to-switch-off-default-es-output-of-filebeat/80120 "2017-03-27T11:47:11Z")
Dear all, I would like to get know how to switch off default ES output of filebeat. I need enable just output to redis. My output config: output.elasticsearch: enabled: false output.redis: enabled: true host… [Previous page](https://discuss.elastic.co/top.md?page=1425&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1427&per_page=50&period=all)