# Top **URL:** https://discuss.elastic.co/top.md?page=1432&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1433 --- ## [Logstash.inputs.mongodb, fail \](https://discuss.elastic.co/t/logstash-inputs-mongodb-fail-bson-1-is-an-invalid-objectid/215570)
**Author:** [@angelma83](https://discuss.elastic.co/u/angelma83)\ **Replies:** 1\ **Last updated:** [January 21, 2020, 10:33pm UTC](https://discuss.elastic.co/t/logstash-inputs-mongodb-fail-bson-1-is-an-invalid-objectid/215570 "2020-01-21T22:33:56Z")
HI everybody, i am using logstash-input-mongodb, and i have the following mistake, \[logstash.inputs.mongodb \] MongoDB Input threw an exception, restarting {:exception=\>#\ **Author:** [@dilipts](https://discuss.elastic.co/u/dilipts)\ **Replies:** 1\ **Last updated:** [December 16, 2019, 11:10pm UTC](https://discuss.elastic.co/t/does-kibana-supports-visualisation-for-showing-multiple-images/211993 "2019-12-16T23:10:51Z") Hi Team, I have a requirement where we have stored images in hadoop and created a external table in hive for elasticsearch (We have configured the elasticsearch-hadoop jar for the hive). The external table for elastics… --- ## [Converting a JSON array into object key pairs](https://discuss.elastic.co/t/converting-a-json-array-into-object-key-pairs/180547)
**Author:** [@saiteja\_c](https://discuss.elastic.co/u/saiteja_c)\ **Replies:** 1\ **Last updated:** [May 10, 2019, 2:31pm UTC](https://discuss.elastic.co/t/converting-a-json-array-into-object-key-pairs/180547 "2019-05-10T14:31:53Z")
What I'm trying to achieve is I have input like "jsonBody": { "measurements": \[ { "value": 0, "statistic": "VALUE" }, { "value": 1, … --- ## [Ruby exception occurred](https://discuss.elastic.co/t/ruby-exception-occurred/105073)
**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\ **Replies:** 1\ **Last updated:** [October 26, 2017, 10:28am UTC](https://discuss.elastic.co/t/ruby-exception-occurred/105073 "2017-10-26T10:28:19Z")
I am getting the error \[2017-10-24T17:20:25,702\]\[ERROR\]\[logstash.filters.ruby \] Ruby exception occurred: invalid byte sequence in UTF-8 My ruby filter is: ruby { # isolate the server name from the… --- ## [Does logstash has connector to appdynamics](https://discuss.elastic.co/t/does-logstash-has-connector-to-appdynamics/64667)
**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\ **Replies:** 1\ **Last updated:** [November 2, 2016, 10:06am UTC](https://discuss.elastic.co/t/does-logstash-has-connector-to-appdynamics/64667 "2016-11-02T10:06:01Z")
Hi I need to know if logstash has connector to appdynamics. It would be also helpful if you can point to some good reference sites Thank you --- ## [Elasticsearch response without the field list](https://discuss.elastic.co/t/elasticsearch-response-without-the-field-list/24818)
**Author:** [@vicandp](https://discuss.elastic.co/u/vicandp)\ **Replies:** 1\ **Last updated:** [July 28, 2015, 6:01pm UTC](https://discuss.elastic.co/t/elasticsearch-response-without-the-field-list/24818 "2015-07-28T18:01:29Z")
hello I'm starting with elasticsearch, and use the instructions on how to access and create a java client. Marvel made a consultation with the next code: GET consolidacion/store/\_search { "query": { "bool": { … --- ## [Python Elasticsearch](https://discuss.elastic.co/t/python-elasticsearch/298053)
**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\ **Replies:** 4\ **Last updated:** [February 23, 2022, 10:02pm UTC](https://discuss.elastic.co/t/python-elasticsearch/298053 "2022-02-23T22:02:53Z")
Hello it's possible to update ILM policy directly with python? --- ## [Security error after re-install of ElasticSearch](https://discuss.elastic.co/t/security-error-after-re-install-of-elasticsearch/287593)
**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\ **Replies:** 4\ **Last updated:** [October 27, 2021, 12:16pm UTC](https://discuss.elastic.co/t/security-error-after-re-install-of-elasticsearch/287593 "2021-10-27T12:16:37Z")
Good Morning I have been receiving multiple messages that read Error: \[object Object\]: shard\_not\_found\_exception at http://10.12.36.50:5601/41022/bundles/plugin/data/kibana/data.plugin.js:1:361224 at async index… --- ## [Configure Kibana Log UI settings per space using API](https://discuss.elastic.co/t/configure-kibana-log-ui-settings-per-space-using-api/251704)
**Author:** [@leon.seng](https://discuss.elastic.co/u/leon.seng)\ **Replies:** 4\ **Last updated:** [October 15, 2020, 10:11pm UTC](https://discuss.elastic.co/t/configure-kibana-log-ui-settings-per-space-using-api/251704 "2020-10-15T22:11:13Z")
Hi, I am currently running Kibanamultiple spaces - each monitoring for different index patterns, in order the trigger alerts and actions on different indices. This page on Logs UI settings shows how we can configure th… --- ## [Independant monitoring cluster](https://discuss.elastic.co/t/independant-monitoring-cluster/167444)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 4\ **Last updated:** [February 8, 2019, 6:02am UTC](https://discuss.elastic.co/t/independant-monitoring-cluster/167444 "2019-02-08T06:02:15Z")
Unable to create a separate cluster for Monitoring the Elastic stack. I have tried configuring it via both MetricBeat as well as HTTP exporters, but I do not see the monitoring information for my production cluster. All… --- ## [Cross cluster search problem](https://discuss.elastic.co/t/cross-cluster-search-problem/162992)
**Author:** [@alberto.latorre](https://discuss.elastic.co/u/alberto.latorre)\ **Replies:** 1\ **Last updated:** [January 4, 2019, 6:10pm UTC](https://discuss.elastic.co/t/cross-cluster-search-problem/162992 "2019-01-04T18:10:14Z")
Hello. Please I need some help with the cross cluster search. I have a production cluster and a monitoring cluster (1 node only). All of them in version 6.4 I try to make cross cluster search and to accomplish this I e… --- ## [Some help for a newbie](https://discuss.elastic.co/t/some-help-for-a-newbie/103028)
**Author:** [@mat.bst](https://discuss.elastic.co/u/mat.bst)\ **Replies:** 4\ **Last updated:** [October 9, 2017, 12:33pm UTC](https://discuss.elastic.co/t/some-help-for-a-newbie/103028 "2017-10-09T12:33:09Z")
Hi everyone ! I'm posting today to ask some help with ElasticSearch. I would like use ELK for treat some data from a JSON file but I don't know how organize my ElasticSearch Structure. Below the structure of my JSON d… --- ## [Elastic search multiple queries issue](https://discuss.elastic.co/t/elastic-search-multiple-queries-issue/49015)
**Author:** [@Hitesh\_Chavhan](https://discuss.elastic.co/u/Hitesh_Chavhan)\ **Replies:** 4\ **Last updated:** [May 4, 2016, 10:55am UTC](https://discuss.elastic.co/t/elastic-search-multiple-queries-issue/49015 "2016-05-04T10:55:04Z")
I have 1 lakh individual names in one particular doc\_type { "name":"abc", "country":"Germany" } and so on. I receive 50k names from a REST Api, but then to fetch country of these names I have to query ES 50K times whic… --- ## [Kibana 7.11.0 kibana.pid en kibana.json not created in configured locations](https://discuss.elastic.co/t/kibana-7-11-0-kibana-pid-en-kibana-json-not-created-in-configured-locations/264694)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 5:23pm UTC](https://discuss.elastic.co/t/kibana-7-11-0-kibana-pid-en-kibana-json-not-created-in-configured-locations/264694 "2021-02-18T17:23:47Z")
Hello, On our DV Elastic, we tested 7.11 and noticed the Kibana logs were no longer generated in the expected location. After some debuging, it seems the logs are written to the default path /var/log/kibana/kibana.log i… --- ## [Pause Following on all Indices in cluster](https://discuss.elastic.co/t/pause-following-on-all-indices-in-cluster/199215)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 2\ **Last updated:** [September 12, 2019, 1:58pm UTC](https://discuss.elastic.co/t/pause-following-on-all-indices-in-cluster/199215 "2019-09-12T13:58:03Z")
:wave: everybody! So, I'm currently testing some edge cases within cross cluster replication and upgrading elasticsearch. The thing is, when you upgrade an elasticsearch cluster (bi-directional setup), you have to pau… --- ## [How to access json objects](https://discuss.elastic.co/t/how-to-access-json-objects/143703)
**Author:** [@Gegenki](https://discuss.elastic.co/u/Gegenki)\ **Replies:** 8\ **Last updated:** [August 9, 2018, 1:53pm UTC](https://discuss.elastic.co/t/how-to-access-json-objects/143703 "2018-08-09T13:53:32Z")
I cannot figure out how to access an array or flatten it. I get input from an SQL database. I use jdbc\_streaming to get more data jdbc\_streaming { jdbc\_connection\_string =\> "jdbc:postgresql://localhost:5432/db" sta… --- ## [Elasticsearch vs Oracle](https://discuss.elastic.co/t/elasticsearch-vs-oracle/236968)
**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\ **Replies:** 3\ **Last updated:** [June 14, 2020, 11:19pm UTC](https://discuss.elastic.co/t/elasticsearch-vs-oracle/236968 "2020-06-14T23:19:40Z")
Hi, I am a student and my project is about Elastic Stack. the company I work for is currently using oracle for managing its data. they want assess Elasticsearch as a replacement. according to my project success they … --- ## [Timelines Event Renderer - Why I don't see this in my timeline](https://discuss.elastic.co/t/timelines-event-renderer-why-i-dont-see-this-in-my-timeline/231258)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 3\ **Last updated:** [May 6, 2020, 9:14pm UTC](https://discuss.elastic.co/t/timelines-event-renderer-why-i-dont-see-this-in-my-timeline/231258 "2020-05-06T21:14:15Z")
So, I was parsing Fortigate events in a compliant way to ECS with some enrichment by adding categorization fields with logstash but instead of getting this : I get this : Even though I respected categorization fiel… --- ## [Issue when deployingin remote server as a docker image: logstastash log -\> " Sending Logstash logs to /usr/share/logstash/logs which is now configured via log4j2.properties" - afterwards no logs from logstash](https://discuss.elastic.co/t/issue-when-deployingin-remote-server-as-a-docker-image-logstastash-log-sending-logstash-logs-to-usr-share-logstash-logs-which-is-now-configured-via-log4j2-properties-afterwards-no-logs-from-logstash/193133)
**Author:** [@jobin](https://discuss.elastic.co/u/jobin)\ **Replies:** 3\ **Last updated:** [August 1, 2019, 10:05am UTC](https://discuss.elastic.co/t/issue-when-deployingin-remote-server-as-a-docker-image-logstastash-log-sending-logstash-logs-to-usr-share-logstash-logs-which-is-now-configured-via-log4j2-properties-afterwards-no-logs-from-logstash/193133 "2019-08-01T10:05:09Z")
ERROR pipeline/output.go:100 Failed to connect to backoff(async(tcp://localhost:5044)): dial tcp \[::1\]:5044: connect: cannot assign requested address 2019-07-31T13:43:31.419Z INFO pipeline/output.go:93 At… --- ## [Plotting nested data in Kibana](https://discuss.elastic.co/t/plotting-nested-data-in-kibana/153039)
**Author:** [@mehdi-gital](https://discuss.elastic.co/u/mehdi-gital)\ **Replies:** 3\ **Last updated:** [October 19, 2018, 3:52pm UTC](https://discuss.elastic.co/t/plotting-nested-data-in-kibana/153039 "2018-10-19T15:52:51Z")
Here's a typical document I'm working with: "\_source": { "timestamp": "2017-04-26T08:28:00", "signals": \[ { "par": "signalA", "value": 76.36666666666666 }, { … --- ## [Path to directory where to store the data](https://discuss.elastic.co/t/path-to-directory-where-to-store-the-data/133874)
**Author:** [@babar](https://discuss.elastic.co/u/babar)\ **Replies:** 3\ **Last updated:** [May 31, 2018, 9:44am UTC](https://discuss.elastic.co/t/path-to-directory-where-to-store-the-data/133874 "2018-05-31T09:44:34Z")
Whenever I change the default path of data and logs to another location then I face the below problem: \[elastic@elsqw1 elastic\]$ systemctl status elasticsearch.service â elasticsearch.service - Elasticsearch Loaded: l… --- ## [Elastica PHP filter multiple values for the same field](https://discuss.elastic.co/t/elastica-php-filter-multiple-values-for-the-same-field/128647)
**Author:** [@Islam\_Elshobokshy](https://discuss.elastic.co/u/Islam_Elshobokshy)\ **Replies:** 3\ **Last updated:** [April 19, 2018, 10:09am UTC](https://discuss.elastic.co/t/elastica-php-filter-multiple-values-for-the-same-field/128647 "2018-04-19T10:09:24Z")
I'm not able to use Elastica to filter multiple values for the same field. Single value for a field works : $filtre = array(); array\_push($filtre, $qb-\>filter()-\>term(array('id' =\> '60'))); $elastica\_query-\>setQuery( … --- ## [Distributing custom beats?](https://discuss.elastic.co/t/distributing-custom-beats/114313)
**Author:** [@Grigory\_Shamov1](https://discuss.elastic.co/u/Grigory_Shamov1)\ **Replies:** 3\ **Last updated:** [January 18, 2018, 12:59pm UTC](https://discuss.elastic.co/t/distributing-custom-beats/114313 "2018-01-18T12:59:57Z")
Hi All, Is there a best practice on how to distribute custom beats Sources, including the right Golang dependencies? Right now, it is kind of hard, because of Beats library having complex build mechanism. It gives a ni… --- ## [Fusion de date dans Kibana](https://discuss.elastic.co/t/fusion-de-date-dans-kibana/106662)
**Author:** [@mat.bst](https://discuss.elastic.co/u/mat.bst)\ **Replies:** 3\ **Last updated:** [November 7, 2017, 11:00am UTC](https://discuss.elastic.co/t/fusion-de-date-dans-kibana/106662 "2017-11-07T11:00:01Z")
Bonjour, Voici mon problème, j'ai toute les 3 heures un lot d'entrée dans mon elasticsearch. Chaque entrée représente pour une date T un utilisateur connecté. Dans kibana je voudrai établir un histogramme simple du nom… --- ## [Consumer Groups not reporting offset topics](https://discuss.elastic.co/t/consumer-groups-not-reporting-offset-topics/95364)
**Author:** [@oleksandrtub](https://discuss.elastic.co/u/oleksandrtub)\ **Replies:** 3\ **Last updated:** [August 2, 2017, 7:44pm UTC](https://discuss.elastic.co/t/consumer-groups-not-reporting-offset-topics/95364 "2017-08-02T19:44:23Z")
Hi All, Got a problem with metricbeat kafka consumer groups offset for topics/partition. After updating Kafka from 0.10.0.1 to 0.10.2.1, stoped reporting offset. Bellow part of debug log related to kafka module: 2017… --- ## [Slow script query](https://discuss.elastic.co/t/slow-script-query/75555)
**Author:** [@ashokm](https://discuss.elastic.co/u/ashokm)\ **Replies:** 3\ **Last updated:** [February 27, 2017, 4:54pm UTC](https://discuss.elastic.co/t/slow-script-query/75555 "2017-02-27T16:54:18Z")
We have a 4 node cluster. Searching On a index with 40k records is taking upto 3 secs. It used to take less than a second like 400ms but now in last couple of weeks, it started slowing down. We dont see much of GC in the… --- ## [Is it possible to start Elasticsearch in the foreground in Windows?](https://discuss.elastic.co/t/is-it-possible-to-start-elasticsearch-in-the-foreground-in-windows/72327)
**Author:** [@brigzzy](https://discuss.elastic.co/u/brigzzy)\ **Replies:** 3\ **Last updated:** [January 20, 2017, 9:29pm UTC](https://discuss.elastic.co/t/is-it-possible-to-start-elasticsearch-in-the-foreground-in-windows/72327 "2017-01-20T21:29:30Z")
Hi all, As the title asks, is it possible to start Elasticsearch in the foreground in Windows? I have Elasticsearch running as a service on a non standard port on my workstation, and I occasionally need to look into d… --- ## [ES 2+ Configuration yaml](https://discuss.elastic.co/t/es-2-configuration-yaml/37689)
**Author:** [@aliostad](https://discuss.elastic.co/u/aliostad)\ **Replies:** 3\ **Last updated:** [December 21, 2015, 2:15pm UTC](https://discuss.elastic.co/t/es-2-configuration-yaml/37689 "2015-12-21T14:15:10Z")
I am afraid I was unable to find the answer by looking through the documentation. The new elasticsearch.yaml is much briefer and it is not clear whether previous entries are supported, such as number\_of\_replicas. Wh… --- ## [Should all settings in elasticsearch.yml file appear when queried via the rest API?](https://discuss.elastic.co/t/should-all-settings-in-elasticsearch-yml-file-appear-when-queried-via-the-rest-api/23937)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 3\ **Last updated:** [June 18, 2015, 11:56pm UTC](https://discuss.elastic.co/t/should-all-settings-in-elasticsearch-yml-file-appear-when-queried-via-the-rest-api/23937 "2015-06-18T23:56:33Z")
...because mine do not. When I bring up my cluster, and query the cluster settings api via Sense: GET /\_cluster/settings?v I get {} Then if I update the cluster settings via the API call like: PUT /\_cluster/set… --- ## [Metricbeat Configuration on eck](https://discuss.elastic.co/t/metricbeat-configuration-on-eck/317257)
**Author:** [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\ **Replies:** 7\ **Last updated:** [October 25, 2022, 5:31pm UTC](https://discuss.elastic.co/t/metricbeat-configuration-on-eck/317257 "2022-10-25T17:31:48Z")
Hello, I am trying to send data from a container ubuntu to eck. Below you can see my configuration output.elasticsearch: Array of hosts to connect to. hosts: \["https://elasticsearch-es-internal-http:9200"\] Protocol… --- ## [Reference Tables in Elastic](https://discuss.elastic.co/t/reference-tables-in-elastic/301369)
**Author:** [@Matthew\_Dominic\_Ramp](https://discuss.elastic.co/u/Matthew_Dominic_Ramp)\ **Replies:** 7\ **Last updated:** [April 4, 2022, 6:24pm UTC](https://discuss.elastic.co/t/reference-tables-in-elastic/301369 "2022-04-04T18:24:12Z")
Scenario: I have a multi-field index which stores documents, 'index a', which has a field "id" whose value is a hexadecimal number i have another index 'b' which stores a list of id's and their corresponding string nam… --- ## [Geoip\_databases index allocation failed](https://discuss.elastic.co/t/geoip-databases-index-allocation-failed/300783)
**Author:** [@roman.huesler](https://discuss.elastic.co/u/roman.huesler)\ **Replies:** 1\ **Last updated:** [March 31, 2022, 3:52pm UTC](https://discuss.elastic.co/t/geoip-databases-index-allocation-failed/300783 "2022-03-31T15:52:17Z")
Im learning and playing around with Elasticsearch. Just setup a new local test cluster with 3 nodes on kubernetes (Elasticsearch 8.1.0) and also set up kibana 8.1.0. In kubernetes its a StateFulset with storage on NFS. T… --- ## [How to pass variable base parameter in http\_poller logstash input plugin](https://discuss.elastic.co/t/how-to-pass-variable-base-parameter-in-http-poller-logstash-input-plugin/298621)
**Author:** [@Purushottam22](https://discuss.elastic.co/u/Purushottam22)\ **Replies:** 1\ **Last updated:** [March 2, 2022, 8:16pm UTC](https://discuss.elastic.co/t/how-to-pass-variable-base-parameter-in-http-poller-logstash-input-plugin/298621 "2022-03-02T20:16:41Z")
Hi All, Can you please help me with below issue, I am trying to hit two rest api for below two conditions: First is used for providing the login credentials and it will give an response as session id. I have to use t… --- ## [Index is not actionable in curator shrink](https://discuss.elastic.co/t/index-is-not-actionable-in-curator-shrink/220105)
**Author:** [@Ramazan\_dd](https://discuss.elastic.co/u/Ramazan_dd)\ **Replies:** 1\ **Last updated:** [February 20, 2020, 7:33am UTC](https://discuss.elastic.co/t/index-is-not-actionable-in-curator-shrink/220105 "2020-02-20T07:33:34Z")
Hello, I need to archive file in order to shrink size of index which older than 1 day, also delete index. Now my delete\_indeces action works well, shrink action doesn\`t. My index status is green now. What i should do? H… --- ## [X-Axis Set to 100](https://discuss.elastic.co/t/x-axis-set-to-100/207723)
**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\ **Replies:** 1\ **Last updated:** [November 15, 2019, 9:24am UTC](https://discuss.elastic.co/t/x-axis-set-to-100/207723 "2019-11-15T09:24:21Z")
Hello! I have a horizontal bar graph that measures a percentage. It looks great but the scale changes based on the values of the metric. How can I set my x-axis to a flat 100, so that the scale on that axis never change… --- ## [Setup Elastic search cluster for production](https://discuss.elastic.co/t/setup-elastic-search-cluster-for-production/175689)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 7\ **Last updated:** [April 8, 2019, 3:53am UTC](https://discuss.elastic.co/t/setup-elastic-search-cluster-for-production/175689 "2019-04-08T03:53:53Z")
Hi I am trying to setup elastic search cluster for production. I have approximately 500 vms which we will be monitoring. I am expecting 2gig data every day. I will be installing Metric beats and files beats on servers. … --- ## [Dynamic add\_field in metrics](https://discuss.elastic.co/t/dynamic-add-field-in-metrics/94926)
**Author:** [@costef](https://discuss.elastic.co/u/costef)\ **Replies:** 1\ **Last updated:** [August 5, 2017, 7:58pm UTC](https://discuss.elastic.co/t/dynamic-add-field-in-metrics/94926 "2017-08-05T19:58:41Z")
I’ve a logstash conf file like the following: input { generator { type =\> “generated” } } filter { metrics { type =\> "generated" meter =\> "foo" add\_tag =\> "metric" add\_field =\> \[ “foo”, “Hello world, from %{ho… --- ## [Logstash-input-jms doesn't work with WebLogic Server 12.1.3.0.0](https://discuss.elastic.co/t/logstash-input-jms-doesnt-work-with-weblogic-server-12-1-3-0-0/92431)
**Author:** [@Cosmin\_Cosmin](https://discuss.elastic.co/u/Cosmin_Cosmin)\ **Replies:** 1\ **Last updated:** [July 10, 2017, 11:01am UTC](https://discuss.elastic.co/t/logstash-input-jms-doesnt-work-with-weblogic-server-12-1-3-0-0/92431 "2017-07-10T11:01:53Z")
Hi, I have logstash 5.5.0, I installed the logstash-input-jms plugin, was installed successfully. But when I try to run it it gives this error: \[2017-07-10T10:30:45,866\]\[WARN \]\[logstash.inputs.jms \] JMS Consumer d… --- ## [Kibana: Create tag or field based on conditional query](https://discuss.elastic.co/t/kibana-create-tag-or-field-based-on-conditional-query/54073)
**Author:** [@khall](https://discuss.elastic.co/u/khall)\ **Replies:** 1\ **Last updated:** [June 27, 2016, 9:13pm UTC](https://discuss.elastic.co/t/kibana-create-tag-or-field-based-on-conditional-query/54073 "2016-06-27T21:13:17Z")
New to Kibana/ES; need syntax help. I have a query w/3 filter conditions that basically goes like this: If Type="movement" and X=32 AND Y=33, then label this document as "Hazard". I can get the query filters to wor… --- ## [Best practices for Integration of ES-Hadoop to CDH5](https://discuss.elastic.co/t/best-practices-for-integration-of-es-hadoop-to-cdh5/26118)
**Author:** [@Twash](https://discuss.elastic.co/u/Twash)\ **Replies:** 1\ **Last updated:** [July 25, 2015, 11:29am UTC](https://discuss.elastic.co/t/best-practices-for-integration-of-es-hadoop-to-cdh5/26118 "2015-07-25T11:29:07Z")
Hi All, I have a small CDH5 cluster - 1, manager, 2 name nodes and 4 data nodes all are stand alone servers. What I'd like to do is to add ES-Hadoop, Kibana and FluentD to the cluster. Should ES-Hadoop be installed on… --- ## [How do i start .Kibana Index?](https://discuss.elastic.co/t/how-do-i-start-kibana-index/697)
**Author:** [@woosi](https://discuss.elastic.co/u/woosi)\ **Replies:** 1\ **Last updated:** [May 14, 2015, 4:48pm UTC](https://discuss.elastic.co/t/how-do-i-start-kibana-index/697 "2015-05-14T16:48:06Z")
While starting the kibana 4 instance, i am getting below error. Is there any configuration issue in Kibana or Elasticsearch ? {"@timestamp":"2015-05-14T15:20:25.035Z","level":"error","message":"IndexClosedException\[\[.k… --- ## [Use kv filter on newline & return split pattern](https://discuss.elastic.co/t/use-kv-filter-on-newline-return-split-pattern/249655)
**Author:** [@ParashB](https://discuss.elastic.co/u/ParashB)\ **Replies:** 2\ **Last updated:** [September 30, 2020, 5:39am UTC](https://discuss.elastic.co/t/use-kv-filter-on-newline-return-split-pattern/249655 "2020-09-30T05:39:56Z")
Hi, I am trying to use kv filter to parse the below logs Name: abc\\r\\nAge: 39\\r\\nGender: Male\\r\\nSalary: 87 My kv filter is as below kv { source =\> "log" field\_split\_pattern =\> "\\\\\\r\\\\\\n" value\_split =\> ":" } I h… --- ## [ES SQL - Order by Count](https://discuss.elastic.co/t/es-sql-order-by-count/248195)
**Author:** [@Jose\_H](https://discuss.elastic.co/u/Jose_H)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 7:02am UTC](https://discuss.elastic.co/t/es-sql-order-by-count/248195 "2020-09-11T07:02:51Z")
Hi all, Im trying to order and display by the highest count for @computed.message field, but encountering the below error: POST /\_sql?format=txt { "query":"SELECT \\"@timestamp\\", \\"@computed.message\\", \\"@computed.… --- ## [Can i write elastic query using KQL or Lucene](https://discuss.elastic.co/t/can-i-write-elastic-query-using-kql-or-lucene/227337)
**Author:** [@Saurabh\_Singh1](https://discuss.elastic.co/u/Saurabh_Singh1)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 4:19am UTC](https://discuss.elastic.co/t/can-i-write-elastic-query-using-kql-or-lucene/227337 "2020-04-21T04:19:44Z")
I was trying to replicate watcher functionality using SIEM detection rule. In watcher i can write elastic query, but can i perform that using detection rule ? Please help. --- ## [Compare fields from different index pattern using a scripted field](https://discuss.elastic.co/t/compare-fields-from-different-index-pattern-using-a-scripted-field/161632)
**Author:** [@Sanj](https://discuss.elastic.co/u/Sanj)\ **Replies:** 2\ **Last updated:** [December 21, 2018, 9:42am UTC](https://discuss.elastic.co/t/compare-fields-from-different-index-pattern-using-a-scripted-field/161632 "2018-12-21T09:42:09Z")
Hi Team, My scenario is that I need to compare fields from two different data. I have three fields named "Server", "Name" and "Size". Say I'll be getting data from two servers (i.e) server1 and server2. these servers w… --- ## [Can we get FileBeats to optionally ignore DeviceID in FileStateOS?](https://discuss.elastic.co/t/can-we-get-filebeats-to-optionally-ignore-deviceid-in-filestateos/105967)
**Author:** [@xrl](https://discuss.elastic.co/u/xrl)\ **Replies:** 2\ **Last updated:** [November 6, 2017, 3:22am UTC](https://discuss.elastic.co/t/can-we-get-filebeats-to-optionally-ignore-deviceid-in-filestateos/105967 "2017-11-06T03:22:51Z")
I am running a data pipeline through filebeats, running on kubernetes. One container in the kubernetes pod receives traffic and dumps it to disk, the other container is filebeat. All traffic comes in to the pod through E… --- ## [Conflict between Filebeat and Packetbeat fields](https://discuss.elastic.co/t/conflict-between-filebeat-and-packetbeat-fields/96453)
**Author:** [@Bobby](https://discuss.elastic.co/u/Bobby)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 2:15pm UTC](https://discuss.elastic.co/t/conflict-between-filebeat-and-packetbeat-fields/96453 "2017-08-10T14:15:33Z")
Filebeat logs have a string field called “source” which is the filepath to the file that the filebeat log is coming from. Packetbeat logs of type “flow” have an object field called"source" which has the properties ip, p… --- ## [Does ES Java API 1.7 supports terms filter lookup mechanism?](https://discuss.elastic.co/t/does-es-java-api-1-7-supports-terms-filter-lookup-mechanism/31301)
**Author:** [@wayne.yang](https://discuss.elastic.co/u/wayne.yang)\ **Replies:** 2\ **Last updated:** [May 6, 2016, 12:05am UTC](https://discuss.elastic.co/t/does-es-java-api-1-7-supports-terms-filter-lookup-mechanism/31301 "2016-05-06T00:05:06Z")
Hi All, Does ES Java API 1.7 supports terms filter lookup mechanism? https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-terms-filter.html#\_terms\_lookup\_mechanism Seems for now I have to use Filte… --- ## [Elasticsearch 1.7 - Mysql - river](https://discuss.elastic.co/t/elasticsearch-1-7-mysql-river/40712)
**Author:** [@Olivier\_Romeyer](https://discuss.elastic.co/u/Olivier_Romeyer)\ **Replies:** 2\ **Last updated:** [February 2, 2016, 12:01pm UTC](https://discuss.elastic.co/t/elasticsearch-1-7-mysql-river/40712 "2016-02-02T12:01:06Z")
Bonjour, J'ai une base de données sous mysql qui est nourrit 24h/24, je souhaiterais indexer mes données automatiquement. J'ai lu que les rivers n'étaient plus préconisées, quelle méthode serait la plus adapté à mon be… --- ## [Inconsistency with query\_string results](https://discuss.elastic.co/t/inconsistency-with-query-string-results/24866)
**Author:** [@Arcimboldo](https://discuss.elastic.co/u/Arcimboldo)\ **Replies:** 2\ **Last updated:** [July 6, 2015, 7:47am UTC](https://discuss.elastic.co/t/inconsistency-with-query-string-results/24866 "2015-07-06T07:47:39Z")
I encountered some strange behavior of the query\_string query: I have an index with one type "objects" that contains one document with a default-analyzed string field called "content" that is empty. If I search with G… [Previous page](https://discuss.elastic.co/top.md?page=1431&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1433&per_page=50&period=all)