# Top **URL:** https://discuss.elastic.co/top.md?page=1428&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1429 --- ## [Mysql schema logs push to logstash](https://discuss.elastic.co/t/mysql-schema-logs-push-to-logstash/264016)
**Author:** [@psganeshk](https://discuss.elastic.co/u/psganeshk)\ **Replies:** 2\ **Last updated:** [February 11, 2021, 7:59pm UTC](https://discuss.elastic.co/t/mysql-schema-logs-push-to-logstash/264016 "2021-02-11T19:59:19Z")
Logstash config file '' input { jdbc { clean\_run =\> true jdbc\_validate\_connection =\> true jdbc\_driver\_library =\> 'C:\\Program Files (x86)\\MySQL\\Connector J 8 0\\mysql-connector-java-8.0.22.jar' jdbc\_driver\_class =\> … --- ## [Kibana ES Index Management option missing](https://discuss.elastic.co/t/kibana-es-index-management-option-missing/236725)
**Author:** [@sakthiskv](https://discuss.elastic.co/u/sakthiskv)\ **Replies:** 2\ **Last updated:** [June 12, 2020, 4:10am UTC](https://discuss.elastic.co/t/kibana-es-index-management-option-missing/236725 "2020-06-12T04:10:04Z")
I am using Elastic search and logstash for Metrics and monitoring. In kibana-\>management tab i m getting only kibana index patterns. how to enable ES index patterns and watcher option . i attached that pic below . Plz… --- ## [Release announcement email](https://discuss.elastic.co/t/release-announcement-email/208706)
**Author:** [@Pradyumna\_Achar](https://discuss.elastic.co/u/Pradyumna_Achar)\ **Replies:** 2\ **Last updated:** [November 20, 2019, 8:26pm UTC](https://discuss.elastic.co/t/release-announcement-email/208706 "2019-11-20T20:26:34Z")
I would be keen to receive an email when new Elasticsearch features are released. Is there such a mailer list? Or a way to opt in to such emails? --- ## [Split series size - being able to show the remaining (cut off) part on the graph](https://discuss.elastic.co/t/split-series-size-being-able-to-show-the-remaining-cut-off-part-on-the-graph/155048)
**Author:** [@pz07](https://discuss.elastic.co/u/pz07)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 5:03pm UTC](https://discuss.elastic.co/t/split-series-size-being-able-to-show-the-remaining-cut-off-part-on-the-graph/155048 "2018-11-02T17:03:51Z")
I'm using split series functionality to group incoming traffic by its type. It all works fine, but with one or two hundreds of types the graph becomes unresponsive and not very readable. I can use 'Size' field to limit … --- ## [How to customize navigation in Kibana dashboard](https://discuss.elastic.co/t/how-to-customize-navigation-in-kibana-dashboard/154153)
**Author:** [@harutsuki](https://discuss.elastic.co/u/harutsuki)\ **Replies:** 2\ **Last updated:** [October 27, 2018, 4:22am UTC](https://discuss.elastic.co/t/how-to-customize-navigation-in-kibana-dashboard/154153 "2018-10-27T04:22:36Z")
Hi, I wanna customize my kibana dashboard navigation(Change text and add link). But I have no idea how to do this. Change src/core\_plugin/kibana? or add hack plugin? --- ## [Help creating 'Time since last logged-in' chart](https://discuss.elastic.co/t/help-creating-time-since-last-logged-in-chart/133809)
**Author:** [@Ben\_at\_Transpire](https://discuss.elastic.co/u/Ben_at_Transpire)\ **Replies:** 2\ **Last updated:** [June 1, 2018, 4:09am UTC](https://discuss.elastic.co/t/help-creating-time-since-last-logged-in-chart/133809 "2018-06-01T04:09:59Z")
Hi Elasticsearch community, I've got a requirement to display a time since last logged-in chart where the output is to be: Y axis: count of user\_id's having logged in between a specific time group X axis: specific dat… --- ## [A single global Filebeat.yml file with multiple application based .yml file](https://discuss.elastic.co/t/a-single-global-filebeat-yml-file-with-multiple-application-based-yml-file/110713)
**Author:** [@FreddyRaj](https://discuss.elastic.co/u/FreddyRaj)\ **Replies:** 2\ **Last updated:** [December 11, 2017, 3:39pm UTC](https://discuss.elastic.co/t/a-single-global-filebeat-yml-file-with-multiple-application-based-yml-file/110713 "2017-12-11T15:39:30Z")
Hi All, I have a requirement and trying to understand how to accomplish the same. I am using filebeat 5.5.0 and sending multiple application logs to logstash and Kibana for visualaliation Created a global yml file wit… --- ## [Logstash unable to parse multiline](https://discuss.elastic.co/t/logstash-unable-to-parse-multiline/103587)
**Author:** [@dbElastic](https://discuss.elastic.co/u/dbElastic)\ **Replies:** 2\ **Last updated:** [October 12, 2017, 4:23pm UTC](https://discuss.elastic.co/t/logstash-unable-to-parse-multiline/103587 "2017-10-12T16:23:38Z")
I have the conf file as below: input { file { path =\> "E:/Logs/A\_logs.log" start\_position =\> "beginning" codec =\> multiline { pattern =\> "^\\\[%{TIMESTAMP\_ISO8601}\\\] " negate =\> true what =\> "previous" } type =\> … --- ## [Elasticsearch can't run on CentOS 7 x64](https://discuss.elastic.co/t/elasticsearch-cant-run-on-centos-7-x64/89334)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 2\ **Last updated:** [June 18, 2017, 10:41am UTC](https://discuss.elastic.co/t/elasticsearch-cant-run-on-centos-7-x64/89334 "2017-06-18T10:41:11Z")
Hello. I installed the last version of "elasticsearch" via "yum" command but "service elasticsearch status" showing me that "elastcsearch" can't run. I stopped and started service again but problem exist: $ sudo servic… --- ## [Auto interval creates spiky graphs, 1m interval OK](https://discuss.elastic.co/t/auto-interval-creates-spiky-graphs-1m-interval-ok/83349)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [April 25, 2017, 5:03am UTC](https://discuss.elastic.co/t/auto-interval-creates-spiky-graphs-1m-interval-ok/83349 "2017-04-25T05:03:57Z")
Hi, I'm having some problems graphing netflow bps in timelion. Interval = auto $q='test\_name:test\_1', .es($q,metric='sum:netflow.in\_bytes').scale\_interval(1s).divide(1024).label('Up - KBps'), $q='test\_name:test\_1', .… --- ## [Default user/password after Shield is installed](https://discuss.elastic.co/t/default-user-password-after-shield-is-installed/62221)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 2\ **Last updated:** [October 5, 2016, 8:31am UTC](https://discuss.elastic.co/t/default-user-password-after-shield-is-installed/62221 "2016-10-05T08:31:07Z")
So I have installed license and shield plugins, after which I get user authentication error. I guess it defaults to Shield realm. What's the default user/password ? Also, how do I manually create users from a command lin… --- ## [Monitoring query stats](https://discuss.elastic.co/t/monitoring-query-stats/43445)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 2\ **Last updated:** [March 3, 2016, 9:43pm UTC](https://discuss.elastic.co/t/monitoring-query-stats/43445 "2016-03-03T21:43:08Z")
How do i monitor individual query stats viz. What is the exact search/filter request and time taken to execute the same + other stats. I need What exact request came in What is the response time Did it fail Number of… --- ## [ES consumes 100% CPU, why?](https://discuss.elastic.co/t/es-consumes-100-cpu-why/28325)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [September 1, 2015, 10:06pm UTC](https://discuss.elastic.co/t/es-consumes-100-cpu-why/28325 "2015-09-01T22:06:24Z")
Hi, I am running elasticsearch on 8 GB RHEL Rmachine. I have 70GB partition /elasticsearch where data files are stored. recently I have changed file /etc/sysconfig/elasticsearch to allocate 3gb memory to ES\_HEAP\_SIZE. Al… --- ## [Details about kibana code flow](https://discuss.elastic.co/t/details-about-kibana-code-flow/27973)
**Author:** [@Priya\_G](https://discuss.elastic.co/u/Priya_G)\ **Replies:** 2\ **Last updated:** [August 25, 2015, 4:03am UTC](https://discuss.elastic.co/t/details-about-kibana-code-flow/27973 "2015-08-25T04:03:22Z")
I integrated shield with elasticsearch. Kibana is displaying all index list in discover page.though the logged in user is not having access to all index list.How kibana is retrieving all index from elasticsearch.Is it ge… --- ## [동일 로그에 대한 다중 인덱스 생성 방법](https://discuss.elastic.co/t/topic/250610)
**Author:** [@wwwryuwww](https://discuss.elastic.co/u/wwwryuwww)\ **Replies:** 1\ **Last updated:** [October 1, 2020, 2:38pm UTC](https://discuss.elastic.co/t/topic/250610 "2020-10-01T14:38:09Z")
현재 filebeat -\> logstash -\> elasticsearch 구조로 모두 6.6.2 버전을 사용하고 있는데 동일 서버 내 한 개의 서비스 로그를 내용 패턴과 생성 목적에 따라서 별도의 인덱스로 elasticsearch에 저장하고자 합니다. "customs.log" -\> 1. index "case1" -\> 2. index "case2" 현재는 서버의 filebeat에서 동… --- ## [Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline/219168)
**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\ **Replies:** 7\ **Last updated:** [February 13, 2020, 11:21am UTC](https://discuss.elastic.co/t/failed-to-execute-action-action-logstash-create-pipeline/219168 "2020-02-13T11:21:54Z")
i have this code : input { file { path =\> "/home/samar/data/subscriber.csv" start\_position =\> "beginning" sincdb =\> "/dev/null" } } filter { csv { sparator =\> "," columns =\> \["Subscriber ID (MSISDN)","Account … --- ## [Date Problem In kibana VIsualization](https://discuss.elastic.co/t/date-problem-in-kibana-visualization/199427)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 7\ **Last updated:** [September 18, 2019, 1:02pm UTC](https://discuss.elastic.co/t/date-problem-in-kibana-visualization/199427 "2019-09-18T13:02:48Z")
I have converted date format into date and it changes into date format but when i try to visualize the date it does not show time only show date My record start on this date 2019-08-01 00:00:04, and end with this date … --- ## [Accessing term frequency using function\_score query script\_score option to compute custom score](https://discuss.elastic.co/t/accessing-term-frequency-using-function-score-query-script-score-option-to-compute-custom-score/161805)
**Author:** [@ManasaP](https://discuss.elastic.co/u/ManasaP)\ **Replies:** 1\ **Last updated:** [December 21, 2018, 7:39pm UTC](https://discuss.elastic.co/t/accessing-term-frequency-using-function-score-query-script-score-option-to-compute-custom-score/161805 "2018-12-21T19:39:11Z")
Hi, I am planning to implement custom scoring using function score query. I want the scores to be based on term frequencies in the document. It was possible in earlier versions of elastic search to access the term frequ… --- ## [Does Kibana Need LogStash](https://discuss.elastic.co/t/does-kibana-need-logstash/110140)
**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\ **Replies:** 1\ **Last updated:** [December 4, 2017, 12:32pm UTC](https://discuss.elastic.co/t/does-kibana-need-logstash/110140 "2017-12-04T12:32:05Z")
I am currently working at a enterprise company who has a large amount of infrastucure. We are using windows (I prefer linux). As I am trying to find answers to my questions, I thought I would be get it faster by asking … --- ## [Limit rows in a saved search](https://discuss.elastic.co/t/limit-rows-in-a-saved-search/102814)
**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\ **Replies:** 1\ **Last updated:** [October 5, 2017, 1:34pm UTC](https://discuss.elastic.co/t/limit-rows-in-a-saved-search/102814 "2017-10-05T13:34:53Z")
I show a saved search in a Kibana dashboard, but by default it shows all search results. I would like to limit the result to a specified number for only that search. I know that I can restrict the results globally in m… --- ## [Syslogs, Beat, Redundancy and Architecture](https://discuss.elastic.co/t/syslogs-beat-redundancy-and-architecture/52928)
**Author:** [@jasonh](https://discuss.elastic.co/u/jasonh)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 11:58pm UTC](https://discuss.elastic.co/t/syslogs-beat-redundancy-and-architecture/52928 "2016-06-15T23:58:28Z")
Hello Group I'm setting up an ELK which will take a feed of syslogs from a variety of devices including Cisco's Linux Server Syslogs, App files and Windows server logs and files. I want to make it as redundant as possibl… --- ## [Unable to push data into ES from Apache Spark](https://discuss.elastic.co/t/unable-to-push-data-into-es-from-apache-spark/40045)
**Author:** [@gaurav6351](https://discuss.elastic.co/u/gaurav6351)\ **Replies:** 1\ **Last updated:** [January 26, 2016, 12:27pm UTC](https://discuss.elastic.co/t/unable-to-push-data-into-es-from-apache-spark/40045 "2016-01-26T12:27:22Z")
I have created a jar file using sbt package and using that jar file to run my code . bin/spark-submit --jars /home/clogeny/analyser/reference-apps/logs\_analyzer/chapter1/scala/target/scala-2.10/spark-logs-analyzer\_2.10… --- ## [MIgration of Dashboard from Dev to PROD](https://discuss.elastic.co/t/migration-of-dashboard-from-dev-to-prod/24917)
**Author:** [@rshaikh](https://discuss.elastic.co/u/rshaikh)\ **Replies:** 1\ **Last updated:** [July 6, 2015, 5:43am UTC](https://discuss.elastic.co/t/migration-of-dashboard-from-dev-to-prod/24917 "2015-07-06T05:43:59Z")
Hi, We are using Kibana 4.1 in our development and production environments. We have completed our Dashboard in development environment and planning to move it to production. Please let me know how to migrate dashboar… --- ## [Set active index](https://discuss.elastic.co/t/set-active-index/19098)
**Author:** [@Rhys\_Campbell](https://discuss.elastic.co/u/Rhys_Campbell)\ **Replies:** 1\ **Last updated:** [August 5, 2014, 3:17pm UTC](https://discuss.elastic.co/t/set-active-index/19098 "2014-08-05T15:17:51Z")
Hi All, I have setup a EFK system just for testing at the moment. It's running in a VM with not much RAM and I am having problem with the elasticsearch process because of this. The VIRT = 12GB which is approxi… --- ## [DSL. Convert from SQL statement](https://discuss.elastic.co/t/dsl-convert-from-sql-statement/6193)
**Author:** [@Yada](https://discuss.elastic.co/u/Yada)\ **Replies:** 1\ **Last updated:** [December 19, 2011, 10:00pm UTC](https://discuss.elastic.co/t/dsl-convert-from-sql-statement/6193 "2011-12-19T22:00:04Z")
Hi folks, I'm new to ES. I don't think I fully understand the concept of query and filters. In my case I just want to use filters as I am using ES to replace mysql. How would I convert the following SQL stateme… --- ## [How to properly display prices in Kibana](https://discuss.elastic.co/t/how-to-properly-display-prices-in-kibana/247563)
**Author:** [@Jackson](https://discuss.elastic.co/u/Jackson)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 1:29pm UTC](https://discuss.elastic.co/t/how-to-properly-display-prices-in-kibana/247563 "2020-09-10T13:29:46Z")
Hello, I'm trying to properly display prices in Kibaba. Currently, prices are mapped as a long integer so that 120.00 is stored as 12000. We have some dashboards we show to clients such as their total revenue. I need t… --- ## [Fillebeat keeps restarting in Kuberneates](https://discuss.elastic.co/t/fillebeat-keeps-restarting-in-kuberneates/309702)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 3\ **Last updated:** [August 22, 2022, 4:01pm UTC](https://discuss.elastic.co/t/fillebeat-keeps-restarting-in-kuberneates/309702 "2022-08-22T16:01:33Z")
Filebeat Version: 8.3.2 (image gets from docker.elastic.co/beats/filebeat:8.3.2) I have roughly 40k logs in an NFS folder for Filebeat to collect. The Pod keeps restart itself in every ~10 minutes. And showing this erro… --- ## [Import CSV with json data](https://discuss.elastic.co/t/import-csv-with-json-data/279226)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 3\ **Last updated:** [July 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/import-csv-with-json-data/279226 "2021-07-21T15:13:37Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [Logstash replace existing fields & file input advice](https://discuss.elastic.co/t/logstash-replace-existing-fields-file-input-advice/254047)
**Author:** [@iccMe](https://discuss.elastic.co/u/iccMe)\ **Replies:** 3\ **Last updated:** [November 2, 2020, 5:36pm UTC](https://discuss.elastic.co/t/logstash-replace-existing-fields-file-input-advice/254047 "2020-11-02T17:36:29Z")
Hi, So this is a 2 part question. Below is an example of a log that is being read from a log file: \[09/10/2020 12:16:00\] xxx-server - HTTP Connections Spiking Ok 3.00 Perf Counter test (Current Connections) 4857 T… --- ## [Different fields in different documents](https://discuss.elastic.co/t/different-fields-in-different-documents/238139)
**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\ **Replies:** 3\ **Last updated:** [June 23, 2020, 7:05pm UTC](https://discuss.elastic.co/t/different-fields-in-different-documents/238139 "2020-06-23T19:05:37Z")
Hey, I have the following question and I want to visualize two fields with each other that are not connected to each other. Both are stored in different documents but in the same index. For example I have document A:… --- ## [HItbyWord result](https://discuss.elastic.co/t/hitbyword-result/176072)
**Author:** [@HHZinu](https://discuss.elastic.co/u/HHZinu)\ **Replies:** 3\ **Last updated:** [April 10, 2019, 12:20pm UTC](https://discuss.elastic.co/t/hitbyword-result/176072 "2019-04-10T12:20:15Z")
Hi I have a technical question on basic enterprise search capabilities. Does the search result on keyword search will return full word hit on proximity search or the literal search term? e.g. if we index this text: "… --- ## [Unable to install logstash-filter-geoip](https://discuss.elastic.co/t/unable-to-install-logstash-filter-geoip/111875)
**Author:** [@jbeck](https://discuss.elastic.co/u/jbeck)\ **Replies:** 3\ **Last updated:** [December 27, 2017, 7:39am UTC](https://discuss.elastic.co/t/unable-to-install-logstash-filter-geoip/111875 "2017-12-27T07:39:39Z")
Installing logstash-filter-geoip is failing as of this morning. bin/logstash-plugin install logstash-filter-geoip Validating logstash-filter-geoip Installing logstash-filter-geoip Error Bundler::InstallError, retrying 1… --- ## [Elasticsearch & X-Pack: how to get vertices/connections from nested documents](https://discuss.elastic.co/t/elasticsearch-x-pack-how-to-get-vertices-connections-from-nested-documents/88709)
**Author:** [@Trausti\_Dagsson](https://discuss.elastic.co/u/Trausti_Dagsson)\ **Replies:** 3\ **Last updated:** [June 12, 2017, 8:37am UTC](https://discuss.elastic.co/t/elasticsearch-x-pack-how-to-get-vertices-connections-from-nested-documents/88709 "2017-06-12T08:37:17Z")
I just started using X-Pack for Elasticsearch and want to connect vertices from a nested document type. However, looking for documentation on this hasn't got me anywhere. What I have is an index of documents which have… --- ## [Rally - Search operation on all types](https://discuss.elastic.co/t/rally-search-operation-on-all-types/62260)
**Author:** [@aswinm](https://discuss.elastic.co/u/aswinm)\ **Replies:** 3\ **Last updated:** [October 6, 2016, 7:29am UTC](https://discuss.elastic.co/t/rally-search-operation-on-all-types/62260 "2016-10-06T07:29:41Z")
Hi, In esrally, when I have more than 1 type in my track, how can I make a search operation across all types in my index? Should I specify "\_all" as the type? but doing that gives very different, quick results compare… --- ## [How to limit mapping size?](https://discuss.elastic.co/t/how-to-limit-mapping-size/48252)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 3\ **Last updated:** [April 27, 2016, 8:11pm UTC](https://discuss.elastic.co/t/how-to-limit-mapping-size/48252 "2016-04-27T20:11:23Z")
In my use case, my users can dynamically add fields to the documents I store which of course effect the mapping. Here is an example document: { "field1": "value", "field2": "value", "field3": "value", … --- ## [Retrieve Deleted Log File from Hadoop with ElasticSearch](https://discuss.elastic.co/t/retrieve-deleted-log-file-from-hadoop-with-elasticsearch/45007)
**Author:** [@gsronald](https://discuss.elastic.co/u/gsronald)\ **Replies:** 3\ **Last updated:** [April 5, 2016, 4:16pm UTC](https://discuss.elastic.co/t/retrieve-deleted-log-file-from-hadoop-with-elasticsearch/45007 "2016-04-05T16:16:32Z")
Dear all gens, I am doing the product evaluation about Elasticsearch with Hadoop. I would like to know that if I stored some log files in HDFS. when somebody deleted, by external hacker or internal stupid guy. A… --- ## [How to update Index patterns?](https://discuss.elastic.co/t/how-to-update-index-patterns/290636)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 4\ **Last updated:** [December 2, 2021, 2:22am UTC](https://discuss.elastic.co/t/how-to-update-index-patterns/290636 "2021-12-02T02:22:49Z")
I currently use Elastic stack 7.14. Recently, when I wanted to search for a certain field, I found that it couldn’t be searched. Kibana gave me a prompt "Unindexed fields can not be searched". I remember that index patte… --- ## [Wildcard index pattern matching non-system indices, 7.10.2 edition](https://discuss.elastic.co/t/wildcard-index-pattern-matching-non-system-indices-7-10-2-edition/263934)
**Author:** [@Supermathie](https://discuss.elastic.co/u/Supermathie)\ **Replies:** 4\ **Last updated:** [March 9, 2021, 5:30pm UTC](https://discuss.elastic.co/t/wildcard-index-pattern-matching-non-system-indices-7-10-2-edition/263934 "2021-03-09T17:30:12Z")
Allegedly in Kibana 7.10.2 this pattern is supposed to match only user indices: but it's definitely picking up fields from system indices: Is this supposed to work now in 7+ or do we need to keep using this w… --- ## [ELK version 7.8.1 : Kibana took longer time to start](https://discuss.elastic.co/t/elk-version-7-8-1-kibana-took-longer-time-to-start/245514)
**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\ **Replies:** 4\ **Last updated:** [August 19, 2020, 7:28am UTC](https://discuss.elastic.co/t/elk-version-7-8-1-kibana-took-longer-time-to-start/245514 "2020-08-19T07:28:56Z")
Hi I just recently upgraded my Elastic Docker image to use the version 7.8.1 and I notice the Kibana component took abnormally longer time to start. Thus, I observe lots of print from filebeat that It cannot connect to … --- ## [Sending sysmon logs from Winlogbeat to Logstash](https://discuss.elastic.co/t/sending-sysmon-logs-from-winlogbeat-to-logstash/208177)
**Author:** [@Coder\_HK](https://discuss.elastic.co/u/Coder_HK)\ **Replies:** 4\ **Last updated:** [November 20, 2019, 1:49pm UTC](https://discuss.elastic.co/t/sending-sysmon-logs-from-winlogbeat-to-logstash/208177 "2019-11-20T13:49:13Z")
I have installed ELK on ubuntu in vmware and Windows 10 is my main OS. I want to send sysmon logs to logstash that's on ubuntu from my windows system through winlogsbeat please guide me step by step how to do it .. --- ## [Bad JSON interpretation on Kibana Discover view](https://discuss.elastic.co/t/bad-json-interpretation-on-kibana-discover-view/172135)
**Author:** [@Mikolaj\_Solik](https://discuss.elastic.co/u/Mikolaj_Solik)\ **Replies:** 4\ **Last updated:** [March 18, 2019, 10:27am UTC](https://discuss.elastic.co/t/bad-json-interpretation-on-kibana-discover-view/172135 "2019-03-18T10:27:38Z")
Hello all, I have a question, if someone know what can be issue, when on Discovery view I get a JSON on each row, insted of separated rows, eg.: I get this: ? beat { "name": "hostname.domain", "hostname": "hostname.dom… --- ## [Can i update built-in Vega version 3.3.1 to 4.4.0 manually?](https://discuss.elastic.co/t/can-i-update-built-in-vega-version-3-3-1-to-4-4-0-manually/167560)
**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 4\ **Last updated:** [February 12, 2019, 1:19am UTC](https://discuss.elastic.co/t/can-i-update-built-in-vega-version-3-3-1-to-4-4-0-manually/167560 "2019-02-12T01:19:41Z")
Hi. im using kibana 6.4.1, and this version using vega 3.3.1 by default. vega 4.4 was released and i need this version's new feature. (https://github.com/vega/vega/releases/tag/v4.4.0) can i update built-in vega versi… --- ## [ParseHttp exception. Recovering, but please report this: runtime error: slice bounds out of range](https://discuss.elastic.co/t/parsehttp-exception-recovering-but-please-report-this-runtime-error-slice-bounds-out-of-range/119998)
**Author:** [@Aner\_Izraeli1](https://discuss.elastic.co/u/Aner_Izraeli1)\ **Replies:** 4\ **Last updated:** [February 19, 2018, 1:11pm UTC](https://discuss.elastic.co/t/parsehttp-exception-recovering-but-please-report-this-runtime-error-slice-bounds-out-of-range/119998 "2018-02-19T13:11:33Z")
Hello. im running packetbeat; Version: 6.2.1 on ubuntu machine, Connected to Elasticsearch version 5.1.2. capturing mirrored traffic. this is my yml file: packetbeat.interfaces.device: eth5 packetbeat.interfaces.ty… --- ## [Splitting 1 column of integers into 2 columns](https://discuss.elastic.co/t/splitting-1-column-of-integers-into-2-columns/94994)
**Author:** [@kahelek](https://discuss.elastic.co/u/kahelek)\ **Replies:** 4\ **Last updated:** [August 14, 2017, 8:30pm UTC](https://discuss.elastic.co/t/splitting-1-column-of-integers-into-2-columns/94994 "2017-08-14T20:30:13Z")
Hi all. I have been playing with ELK for a few months, and been making decent progress so far. I have an interesting problem I came across, which I haven’t been able to figure out. Let’s say you have a column that has … --- ## [Logstash: jdbc input plugin with MongoDb](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-with-mongodb/135866)
**Author:** [@KamalHr](https://discuss.elastic.co/u/KamalHr)\ **Replies:** 0\ **Last updated:** [June 14, 2018, 8:01am UTC](https://discuss.elastic.co/t/logstash-jdbc-input-plugin-with-mongodb/135866 "2018-06-14T08:01:58Z")
I'm trying to configure a pipeline between MongoDb and Elasticsearch using logstash and the jdbc input plugin. I tried to use Unity Mongo Jdbc driver, and dbschema's driver but nothing works, and I got the error: Seque… --- ## [Trying to delete a tag](https://discuss.elastic.co/t/trying-to-delete-a-tag/135034)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 0\ **Last updated:** [June 7, 2018, 5:28pm UTC](https://discuss.elastic.co/t/trying-to-delete-a-tag/135034 "2018-06-07T17:28:18Z")
I was looking for a way to delete a tag from docs in an index and I found the following two discussions on github I tried the suggestion in the first discussion: And then I tried the suggestion in the second dis… --- ## [ElasticSearch unit testing in C#](https://discuss.elastic.co/t/elasticsearch-unit-testing-in-c/69439)
**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\ **Replies:** 0\ **Last updated:** [December 19, 2016, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-unit-testing-in-c/69439 "2016-12-19T12:06:16Z")
Is there any reference for writing unit test for aggregations in a searchresponse? I am using ElasticSearch.NET and NEST 2.4.6. I would like to create shim for SearchAsync and get the response. --- ## [How to pass dynamic username-password through nginx for authenticating embedded iframe](https://discuss.elastic.co/t/how-to-pass-dynamic-username-password-through-nginx-for-authenticating-embedded-iframe/270485)
**Author:** [@Ram\_Chaudhari](https://discuss.elastic.co/u/Ram_Chaudhari)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 7:42am UTC](https://discuss.elastic.co/t/how-to-pass-dynamic-username-password-through-nginx-for-authenticating-embedded-iframe/270485 "2021-04-20T07:42:11Z")
I have a web application created using angular 8 in which I want to embed a kibana iframe. it should auto signin once the user logs in. I have done it using nginx reverse proxy method for one user. But I have to show dif… --- ## [Coordinating node configuration](https://discuss.elastic.co/t/coordinating-node-configuration/252080)
**Author:** [@deeps](https://discuss.elastic.co/u/deeps)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 5:19pm UTC](https://discuss.elastic.co/t/coordinating-node-configuration/252080 "2020-10-14T17:19:46Z")
hey there, could someone share the coordinator node config for elasticsearch 7.8.1 version? I tried with node.roles: \[ \] but its not accepting (i believe this is for 7.9 version) and throwing below error: Caused by: … --- ## [Query\_string using '\*' wildcard VS prefix query](https://discuss.elastic.co/t/query-string-using-wildcard-vs-prefix-query/215481)
**Author:** [@CesarPozo](https://discuss.elastic.co/u/CesarPozo)\ **Replies:** 1\ **Last updated:** [January 17, 2020, 3:28pm UTC](https://discuss.elastic.co/t/query-string-using-wildcard-vs-prefix-query/215481 "2020-01-17T15:28:32Z")
I wrote a query for get all clients whose name start with c. I am getting the same results with the two following queries: #Q1 Query String and \* wildcard GET /client/\_search { "query": { "query\_string": { "… [Previous page](https://discuss.elastic.co/top.md?page=1427&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1429&per_page=50&period=all)