# Top **URL:** https://discuss.elastic.co/top.md?page=1440&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1441 --- ## [Discuss UI issue. "Recommended for you"](https://discuss.elastic.co/t/discuss-ui-issue-recommended-for-you/309102)
**Author:** [@ruant](https://discuss.elastic.co/u/ruant)\ **Replies:** 1\ **Last updated:** [July 7, 2022, 2:38pm UTC](https://discuss.elastic.co/t/discuss-ui-issue-recommended-for-you/309102 "2022-07-07T14:38:51Z")
The "Recommended for you" is taking up a lot of space and is making the threads very hard to read... Tested on both Chrome (Version 103.0.5060.114 (Official Build) (64-bit)) and Firefox (102.0.1 (64-bit)) --- ## [Elastic Cases events trigger an external SOAR](https://discuss.elastic.co/t/elastic-cases-events-trigger-an-external-soar/316999)
**Author:** [@yzaritskyi](https://discuss.elastic.co/u/yzaritskyi)\ **Replies:** 3\ **Last updated:** [October 21, 2022, 1:08pm UTC](https://discuss.elastic.co/t/elastic-cases-events-trigger-an-external-soar/316999 "2022-10-21T13:08:43Z")
Hey all! I have a big question for you guys. Does anybody know about the opportunity to trigger an external API from the Elastic Case? I mean, Is there a way to implement some webhook or index in elastic that could col… --- ## [Data Table multiple fields](https://discuss.elastic.co/t/data-table-multiple-fields/313370)
**Author:** [@frederico](https://discuss.elastic.co/u/frederico)\ **Replies:** 3\ **Last updated:** [September 1, 2022, 3:19pm UTC](https://discuss.elastic.co/t/data-table-multiple-fields/313370 "2022-09-01T15:19:34Z")
Hello, I want to create a table where I display top values for multiple fields What I currently have: This would be fine if I'd only two fields, however I intend to use more (+8) and having a column for each is not… --- ## [Facing issue while configuring TLS](https://discuss.elastic.co/t/facing-issue-while-configuring-tls/299691)
**Author:** [@shivendra95](https://discuss.elastic.co/u/shivendra95)\ **Replies:** 3\ **Last updated:** [March 15, 2022, 9:29am UTC](https://discuss.elastic.co/t/facing-issue-while-configuring-tls/299691 "2022-03-15T09:29:40Z")
Hi, I'm, configuring Elasticsearch with TLS but facing error when I restart the Elasticsearch server This is my Elasticsearch.yml configuration for security xpack.security.enabled: true xpack.security.transport.ssl.en… --- ## [Stop Logstash with a Filter or Ruby-Code](https://discuss.elastic.co/t/stop-logstash-with-a-filter-or-ruby-code/259000)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\ **Replies:** 3\ **Last updated:** [January 11, 2021, 10:59pm UTC](https://discuss.elastic.co/t/stop-logstash-with-a-filter-or-ruby-code/259000 "2021-01-11T22:59:09Z")
Hi All, I'm using Logstash to prepare/enrich documents before they are send to Elasticsearch. The enrichment is not really optional and will have an impact later, when the data is queried. Therefore, I need to make sure… --- ## [Kibana Role Mapping](https://discuss.elastic.co/t/kibana-role-mapping/244374)
**Author:** [@Kevin\_f](https://discuss.elastic.co/u/Kevin_f)\ **Replies:** 3\ **Last updated:** [August 10, 2020, 3:27pm UTC](https://discuss.elastic.co/t/kibana-role-mapping/244374 "2020-08-10T15:27:21Z")
Hello All, I am trying to map a kibana role with active directory users. The ad users assigned to the role can see the index but cannot see any data within the index itself. I have mirrored a working role with the exac… --- ## [Search query Timeout using RestHighLevelClient ES 7.6v](https://discuss.elastic.co/t/search-query-timeout-using-resthighlevelclient-es-7-6v/239784)
**Author:** [@Sriram8894](https://discuss.elastic.co/u/Sriram8894)\ **Replies:** 3\ **Last updated:** [July 3, 2020, 11:49am UTC](https://discuss.elastic.co/t/search-query-timeout-using-resthighlevelclient-es-7-6v/239784 "2020-07-03T11:49:04Z")
Hi, We have recently migrated from ES 5.6v to 7.6v. In ES 5.6 we have been using the below statement to throw an exception and return the default response if the query execution is taking more than the given TimeValue. … --- ## [Data Table Visualization :: Autosort and Display only Top N?](https://discuss.elastic.co/t/data-table-visualization-autosort-and-display-only-top-n/206867)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 3\ **Last updated:** [November 12, 2019, 11:49am UTC](https://discuss.elastic.co/t/data-table-visualization-autosort-and-display-only-top-n/206867 "2019-11-12T11:49:29Z")
Hi Kibana Gurus, I have a Data Table Visualization that works great. The full table contains hundreds of rows of data. When I look at the table, I can sort the table by a specific data field and limit the number of ro… --- ## [Kibana 6.7 embed=true broken](https://discuss.elastic.co/t/kibana-6-7-embed-true-broken/191099)
**Author:** [@kimyx](https://discuss.elastic.co/u/kimyx)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 11:45pm UTC](https://discuss.elastic.co/t/kibana-6-7-embed-true-broken/191099 "2019-07-18T23:45:18Z")
We've just upgraded a successful ELK installation from 6.2.2 to 6.7.0. We embed dashboards into a website using iframes. We're finding that the embed=true option no longer hides the left sidebar, or the top menu options … --- ## [Using Vega Tree layout offline](https://discuss.elastic.co/t/using-vega-tree-layout-offline/176331)
**Author:** [@joubeh](https://discuss.elastic.co/u/joubeh)\ **Replies:** 3\ **Last updated:** [April 16, 2019, 11:44am UTC](https://discuss.elastic.co/t/using-vega-tree-layout-offline/176331 "2019-04-16T11:44:36Z")
Dears, i was looking for a tree visualization to show data on Kibana and it ended with Vega Tree layout, but the question is there anyway to use it in Kibana without Internet access ? since the Tree Layout scripts cal… --- ## [Invalid Configuration class specified on Upgrade to 5.1.2](https://discuss.elastic.co/t/invalid-configuration-class-specified-on-upgrade-to-5-1-2/72623)
**Author:** [@CharliesL](https://discuss.elastic.co/u/CharliesL)\ **Replies:** 3\ **Last updated:** [January 24, 2017, 12:29pm UTC](https://discuss.elastic.co/t/invalid-configuration-class-specified-on-upgrade-to-5-1-2/72623 "2017-01-24T12:29:17Z")
Hi, I've just tried to upgrade from 5.0.1 to 5.1.2 using the rpm. I did rpm -i --force elasticsearch-5.1.2.rpm (i hope that is correct) But then when trying to start it up I get the following problem and cannot fig… --- ## [Elasticsearch not getting data after installing X-Pack](https://discuss.elastic.co/t/elasticsearch-not-getting-data-after-installing-x-pack/70456)
**Author:** [@Aamir\_A](https://discuss.elastic.co/u/Aamir_A)\ **Replies:** 3\ **Last updated:** [January 3, 2017, 6:05pm UTC](https://discuss.elastic.co/t/elasticsearch-not-getting-data-after-installing-x-pack/70456 "2017-01-03T18:05:35Z")
Hello, Installing X-Pack 5.0.1 on ELK cluster, login and alerting works fine but I am not getting new data on elasticsearch. \[2017-01-03T10:59:46,851\]\[WARN \]\[logstash.outputs.elasticsearch\] Error while performing res… --- ## [Packetbeat invalid\_index\_name](https://discuss.elastic.co/t/packetbeat-invalid-index-name/67152)
**Author:** [@james777](https://discuss.elastic.co/u/james777)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 7:40am UTC](https://discuss.elastic.co/t/packetbeat-invalid-index-name/67152 "2016-11-25T07:40:55Z")
Hi, I am trying to run packetbeat 5.0.1 in centos 6, while running I am getting the below error log 2016-11-25T13:20:01+09:00 WARN Can not index event (status=400): {"type":"invalid\_index\_name\_exception","reason":"Invali… --- ## [Is the email plugin defunct in LS 2.1?](https://discuss.elastic.co/t/is-the-email-plugin-defunct-in-ls-2-1/35999)
**Author:** [@bluethundr](https://discuss.elastic.co/u/bluethundr)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 8:21am UTC](https://discuss.elastic.co/t/is-the-email-plugin-defunct-in-ls-2-1/35999 "2015-12-01T08:21:09Z")
How can I enable e-mail alerting in LS 2.1? This: # Alerting if \[log\_message\] == "POSSIBLE BREAK-IN ATTEMPT!" { email { body =\> "Triggered in: %{message}" subject =\> "This is a Logstash alert for POSSIBLE… --- ## [Dumb Question on bouncing nodes](https://discuss.elastic.co/t/dumb-question-on-bouncing-nodes/15065)
**Author:** [@Pierce\_Wetter](https://discuss.elastic.co/u/Pierce_Wetter)\ **Replies:** 3\ **Last updated:** [January 1, 2014, 2:49am UTC](https://discuss.elastic.co/t/dumb-question-on-bouncing-nodes/15065 "2014-01-01T02:49:11Z")
Q: Is using the automatic node naming where every time I bounce a node I get a new node name interfering with restarting from the local gateway? Q Background: So previously, I asked about bouncing nodes, becaus… --- ## [Persisting Nested Objects with elasticsearch-dsl](https://discuss.elastic.co/t/persisting-nested-objects-with-elasticsearch-dsl/580)
**Author:** [@AndyBarilla](https://discuss.elastic.co/u/AndyBarilla)\ **Replies:** 0\ **Last updated:** [May 12, 2015, 8:50pm UTC](https://discuss.elastic.co/t/persisting-nested-objects-with-elasticsearch-dsl/580 "2015-05-12T20:50:56Z")
I'm attempting to persist an object to elasticsearch with a nested object. However instead of using syntax like: child = field.Object(properties={'name': field.String()}) I'd like to have child be it's own object. … --- ## [Azure Private link APM agent connectivity issue](https://discuss.elastic.co/t/azure-private-link-apm-agent-connectivity-issue/319668)
**Author:** [@RafaelPrade](https://discuss.elastic.co/u/RafaelPrade)\ **Replies:** 4\ **Last updated:** [November 23, 2022, 3:29pm UTC](https://discuss.elastic.co/t/azure-private-link-apm-agent-connectivity-issue/319668 "2022-11-23T15:29:40Z")
Hello, I am using a private link with our Elastic cloud instance on azure running on version 7.14. I am trying to add an APM Java agent to one of our servers. The Example configuration file given in Kibana includes the p… --- ## [Using pre-defined grok patterns](https://discuss.elastic.co/t/using-pre-defined-grok-patterns/271216)
**Author:** [@ThreatInter](https://discuss.elastic.co/u/ThreatInter)\ **Replies:** 4\ **Last updated:** [April 27, 2021, 4:48am UTC](https://discuss.elastic.co/t/using-pre-defined-grok-patterns/271216 "2021-04-27T04:48:21Z")
Hi, community. I just discovered that logstash has pre-defined grok patterns, for firewalls, for example (here logstash-patterns-core/patterns at master · logstash-plugins/logstash-patterns-core · GitHub). But I can't u… --- ## [Logstash mutate replace filter fails](https://discuss.elastic.co/t/logstash-mutate-replace-filter-fails/205827)
**Author:** [@LeonZC](https://discuss.elastic.co/u/LeonZC)\ **Replies:** 4\ **Last updated:** [October 31, 2019, 11:57am UTC](https://discuss.elastic.co/t/logstash-mutate-replace-filter-fails/205827 "2019-10-31T11:57:57Z")
I have field called "zone" and i am trying to replace the field value by using mutate to "BlockA" when the field value of "zone" is "Z0". Here is the code that I am using: filter { if \[source\] =~ "file.log" { grok … --- ## [How to get/use indexPatternService in server side api in kibana plugin](https://discuss.elastic.co/t/how-to-get-use-indexpatternservice-in-server-side-api-in-kibana-plugin/186531)
**Author:** [@Riddhesh](https://discuss.elastic.co/u/Riddhesh)\ **Replies:** 4\ **Last updated:** [June 19, 2019, 11:16pm UTC](https://discuss.elastic.co/t/how-to-get-use-indexpatternservice-in-server-side-api-in-kibana-plugin/186531 "2019-06-19T23:16:10Z")
I want to use indexPatternService on server api side of plugin, e.g. to get fields for a pattern(/api/index\_patterns/\_fields\_for\_wildcard). I know in server there is indexPatternsServiceFactory, but I don't know how to … --- ## [File input doesn t read incoming Json file from web application](https://discuss.elastic.co/t/file-input-doesn-t-read-incoming-json-file-from-web-application/172499)
**Author:** [@hilne](https://discuss.elastic.co/u/hilne)\ **Replies:** 4\ **Last updated:** [April 3, 2019, 6:18pm UTC](https://discuss.elastic.co/t/file-input-doesn-t-read-incoming-json-file-from-web-application/172499 "2019-04-03T18:18:33Z")
Hi everyone, I'm trying to parse incoming json files from my web app stored in folder /tmp/test/\*.json. The problem is that logstash doesnt read my files when there are created. I have to modify them so that logstash p… --- ## [Logstash skipped half of log file](https://discuss.elastic.co/t/logstash-skipped-half-of-log-file/147422)
**Author:** [@cosmo](https://discuss.elastic.co/u/cosmo)\ **Replies:** 4\ **Last updated:** [September 6, 2018, 10:31am UTC](https://discuss.elastic.co/t/logstash-skipped-half-of-log-file/147422 "2018-09-06T10:31:37Z")
Hello I have a daily process that downloads some compressed log files, and then extracts them into a directory logstash is watching weblogs pipeline; input { file { id =\> "weblogs\_input\_file" pat… --- ## [Grok!](https://discuss.elastic.co/t/grok/126362)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [April 2, 2018, 6:11am UTC](https://discuss.elastic.co/t/grok/126362 "2018-04-02T06:11:44Z")
So I understand grok patterns to be regex queries (Like DNS names for IP addresses). I am trying to build some patterns for the following log entries. New Node: 212.55.78.183 Issue: Semalt Project Spam Bot Network: LL… --- ## [Need to have true timestamp from the log](https://discuss.elastic.co/t/need-to-have-true-timestamp-from-the-log/77116)
**Author:** [@raamee](https://discuss.elastic.co/u/raamee)\ **Replies:** 4\ **Last updated:** [March 2, 2017, 12:12pm UTC](https://discuss.elastic.co/t/need-to-have-true-timestamp-from-the-log/77116 "2017-03-02T12:12:50Z")
Hi, I need help with sending the timestamp of the log properly to the Elasticsearch via logstash. My log looks like: Thu Feb 2 07:24:00 2017 - \[Client: WIFI-US001NW5 IPAddress: 10.29.24.6\] - \[User-Name: johndoe\] - \[A… --- ## [Sort is giving invalid results](https://discuss.elastic.co/t/sort-is-giving-invalid-results/45680)
**Author:** [@pranesh002](https://discuss.elastic.co/u/pranesh002)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 7:46pm UTC](https://discuss.elastic.co/t/sort-is-giving-invalid-results/45680 "2016-03-31T19:46:44Z")
Hi, I am using transport client in my application. When i search against multiple indices (user-\*) and sort them by date it is giving invalid result set. Can some one help me to fix that. Thanks Pranesh --- ## [Increase the lens max results](https://discuss.elastic.co/t/increase-the-lens-max-results/345601)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 6\ **Last updated:** [November 28, 2023, 8:21pm UTC](https://discuss.elastic.co/t/increase-the-lens-max-results/345601 "2023-11-28T20:21:15Z")
I'd like to increase the number of results on kibana lens data table viz but can't find out how. I regularly export unique ids I have to csv using lens in order to run some custom analysis, etc. I'd like to increase thi… --- ## [Converting very old logstash setup to a moden version, syntax issue pulling info from filebeat](https://discuss.elastic.co/t/converting-very-old-logstash-setup-to-a-moden-version-syntax-issue-pulling-info-from-filebeat/186851)
**Author:** [@Rykon8472](https://discuss.elastic.co/u/Rykon8472)\ **Replies:** 6\ **Last updated:** [June 26, 2019, 1:35am UTC](https://discuss.elastic.co/t/converting-very-old-logstash-setup-to-a-moden-version-syntax-issue-pulling-info-from-filebeat/186851 "2019-06-26T01:35:08Z")
Hello All I'm fairly new at Logstash and I was tasked of taking our old beast of a Logstash server into the new age. We use our Filebeat/Logstash setup for a central logging server and nothing more. I've got 90% of th… --- ## [Can Elasticsearch insecure by default?](https://discuss.elastic.co/t/can-elasticsearch-insecure-by-default/162440)
**Author:** [@hack3rcon](https://discuss.elastic.co/u/hack3rcon)\ **Replies:** 6\ **Last updated:** [December 31, 2018, 8:47am UTC](https://discuss.elastic.co/t/can-elasticsearch-insecure-by-default/162440 "2018-12-31T08:47:34Z")
Hello. I installed the last version of OpenSUSE and installed Elasticsearch and Kibana on it and nothing else. This Linux server is not ready yet and we never work with it but OpenSUSE uploaded many files and...Somethin… --- ## [Changes 5.1.1 to 5.2.1](https://discuss.elastic.co/t/changes-5-1-1-to-5-2-1/76960)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 6\ **Last updated:** [March 2, 2017, 11:48am UTC](https://discuss.elastic.co/t/changes-5-1-1-to-5-2-1/76960 "2017-03-02T11:48:58Z")
Hi, I have created new chart and it was working perfectly in 5.2.1. But after update for 5.2.2. it says: TypeError: Cannot read property 'length' of undefined \_ at bind (kibana.bundle.js?v=14707:52)\_ \_ at Arr… --- ## [Threat Intelligence Integration won't show any data](https://discuss.elastic.co/t/threat-intelligence-integration-wont-show-any-data/343541)
**Author:** [@Gio\_27](https://discuss.elastic.co/u/Gio_27)\ **Replies:** 7\ **Last updated:** [September 27, 2023, 9:47am UTC](https://discuss.elastic.co/t/threat-intelligence-integration-wont-show-any-data/343541 "2023-09-27T09:47:23Z")
Good morning, I have installed the Threat Intelligence Integration, I also have a fleet managed server and I am currently tracking different hosts with different integrations and i am managing all of that through 2 agen… --- ## [Elasticsearch index on compressed string blob](https://discuss.elastic.co/t/elasticsearch-index-on-compressed-string-blob/308151)
**Author:** [@Harsh\_Agarwal](https://discuss.elastic.co/u/Harsh_Agarwal)\ **Replies:** 7\ **Last updated:** [June 25, 2022, 9:04pm UTC](https://discuss.elastic.co/t/elasticsearch-index-on-compressed-string-blob/308151 "2022-06-25T21:04:43Z")
I needed to index on compressed string blob.. I read that ingest attachment plugin could be the right tool for files.. and base64 strings.. ingest attachment plugin relies on appache tikka I read that Tika supports: "… --- ## [Parse multiline JSON object from Docker log](https://discuss.elastic.co/t/parse-multiline-json-object-from-docker-log/251406)
**Author:** [@bellackn](https://discuss.elastic.co/u/bellackn)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 12:45pm UTC](https://discuss.elastic.co/t/parse-multiline-json-object-from-docker-log/251406 "2020-10-08T12:45:11Z")
Hey there, I am trying to parse multiline JSON objects that Filebeat collects from Docker container JSON logfiles and then sends them to Logstash. Specifically, it's Java stacktraces. My output looks like this: {"log":… --- ## [Is ID query faster than terms?](https://discuss.elastic.co/t/is-id-query-faster-than-terms/242623)
**Author:** [@cynosureabu](https://discuss.elastic.co/u/cynosureabu)\ **Replies:** 1\ **Last updated:** [July 26, 2020, 4:53am UTC](https://discuss.elastic.co/t/is-id-query-faster-than-terms/242623 "2020-07-26T04:53:51Z")
So I am trying to save comment objects to ES, should I just use comment\_id as the native \_id field? Later if I am to retrieve 500 comments, will query by ids { "query": { "ids" : { "values" : \[id1, id2, ...\] } } … --- ## [Using APM with latest Apollo Server and Apollo Server Express results into "Unknown routes"](https://discuss.elastic.co/t/using-apm-with-latest-apollo-server-and-apollo-server-express-results-into-unknown-routes/209080)
**Author:** [@b3n](https://discuss.elastic.co/u/b3n)\ **Replies:** 1\ **Last updated:** [December 11, 2019, 11:14am UTC](https://discuss.elastic.co/t/using-apm-with-latest-apollo-server-and-apollo-server-express-results-into-unknown-routes/209080 "2019-12-11T11:14:04Z")
Hello people, we recently switched from AWS Elasticsearch Service to the elastic.co one and due to this change we also wanted to give APM a try. But unfortunately it does not seem to work because of we're using a GraphQ… --- ## [What is this added "field" thing?](https://discuss.elastic.co/t/what-is-this-added-field-thing/208349)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 7\ **Last updated:** [November 19, 2019, 4:32pm UTC](https://discuss.elastic.co/t/what-is-this-added-field-thing/208349 "2019-11-19T16:32:37Z")
Greetings. This is probably a simple question. I'm creating records that look like this: { "\_index": "metrics\_daily\_summary", "\_type": "\_doc", "\_id": "E36Bbm4B8gCymL1PmIcS", "\_version": 1, "\_score": 0, "\_s… --- ## [Elasticsearch copy index data to a file](https://discuss.elastic.co/t/elasticsearch-copy-index-data-to-a-file/194330)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 1\ **Last updated:** [August 9, 2019, 6:04am UTC](https://discuss.elastic.co/t/elasticsearch-copy-index-data-to-a-file/194330 "2019-08-09T06:04:37Z")
Hi, I found the GET api and Multi Get api both definitely requires the id to retrieve the document. I want to get all the data in the index and save to a file (like a backup of index) without using the snaphost api sin… --- ## [File output to multiple files](https://discuss.elastic.co/t/file-output-to-multiple-files/171721)
**Author:** [@romariol](https://discuss.elastic.co/u/romariol)\ **Replies:** 1\ **Last updated:** [March 12, 2019, 1:11am UTC](https://discuss.elastic.co/t/file-output-to-multiple-files/171721 "2019-03-12T01:11:15Z")
I have a Logstash conf where I split an incoming XML into multiple events. I would like to write a file per event. However, the file output writes all the events to a single file (so an event per line). Is there a way to… --- ## [How to filter ipv6 address from message](https://discuss.elastic.co/t/how-to-filter-ipv6-address-from-message/115233)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 1\ **Last updated:** [January 12, 2018, 1:09pm UTC](https://discuss.elastic.co/t/how-to-filter-ipv6-address-from-message/115233 "2018-01-12T13:09:04Z")
bellows my logfile message format 2018-01-12 15:35:05 INFO - 173.211.17.104 2051 0 0 2018-01-12 15:35:06 INFO - 2001:db7:1000:2000::3000:1 2051 0 0 i want filter client format ipv6 address how can i do it ? --- ## [Watcher Fails or gets stuck posting to Slack](https://discuss.elastic.co/t/watcher-fails-or-gets-stuck-posting-to-slack/45922)
**Author:** [@bwgriffith](https://discuss.elastic.co/u/bwgriffith)\ **Replies:** 1\ **Last updated:** [April 1, 2016, 7:05am UTC](https://discuss.elastic.co/t/watcher-fails-or-gets-stuck-posting-to-slack/45922 "2016-04-01T07:05:23Z")
I have a watch that posts to slack as an action. When it is triggered it occasionally works (for a few days then just stops randomly), however, most of the time it fails. Any ideas? Below is the error and stack trace … --- ## [Elastic search indexing documents](https://discuss.elastic.co/t/elastic-search-indexing-documents/16538)
**Author:** [@Deepikaa\_Subramaniam](https://discuss.elastic.co/u/Deepikaa_Subramaniam)\ **Replies:** 7\ **Last updated:** [April 4, 2014, 7:00am UTC](https://discuss.elastic.co/t/elastic-search-indexing-documents/16538 "2014-04-04T07:00:51Z")
Hi guys, I am new to Elastic Search. Have setup my env use C# +Nest to access ES. I am able to index txt files successfully. I downloaded the elastic search mapper plugin to extract data from other document types… --- ## [Indexing multiple DBs](https://discuss.elastic.co/t/indexing-multiple-dbs/236380)
**Author:** [@squareEngine](https://discuss.elastic.co/u/squareEngine)\ **Replies:** 0\ **Last updated:** [June 9, 2020, 3:53pm UTC](https://discuss.elastic.co/t/indexing-multiple-dbs/236380 "2020-06-09T15:53:40Z")
Hi, We're planning to introduce Elasticsearch in our product, to provide better performance while searching data. Currently we have around 200 db instances with the same schema, containing data about tenants in our app. … --- ## [Composite Aggregation without "size" parameter](https://discuss.elastic.co/t/composite-aggregation-without-size-parameter/195845)
**Author:** [@lightning](https://discuss.elastic.co/u/lightning)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 5:12am UTC](https://discuss.elastic.co/t/composite-aggregation-without-size-parameter/195845 "2019-08-20T05:12:28Z")
What exactly will happen if we don't use the "size" parameter when using composite aggregation? Will it aggregate all records? if yes, how does this is different compared to terms aggregation? Thank you for your answer… --- ## [Load balancing using logstash](https://discuss.elastic.co/t/load-balancing-using-logstash/353439)
**Author:** [@kriti\_dabas](https://discuss.elastic.co/u/kriti_dabas)\ **Replies:** 2\ **Last updated:** [March 11, 2024, 6:16am UTC](https://discuss.elastic.co/t/load-balancing-using-logstash/353439 "2024-03-11T06:16:01Z")
I want to use two logstash so that if one goes down I can use the other one. Is there a chance of duplicacy if i am using two logstash with same pipelines? I will configure elasticsearch in the output of logstash. --- ## [Error=\>logstash Pipeline worker error :"(EACCES) Permission denied](https://discuss.elastic.co/t/error-logstash-pipeline-worker-error-eacces-permission-denied/324788)
**Author:** [@vaibhav.ubale](https://discuss.elastic.co/u/vaibhav.ubale)\ **Replies:** 2\ **Last updated:** [February 7, 2023, 6:26am UTC](https://discuss.elastic.co/t/error-logstash-pipeline-worker-error-eacces-permission-denied/324788 "2023-02-07T06:26:23Z")
Hi Team/Everyone, I am facing a pipeline error and my pipeline is terminating randomly with error=\>"(EACCES) Permission denied - /var/myrepo/devops/mytask\_watcher.csv" My logstash output conf is as below output { csv… --- ## [Is it possible to retrieve the api\_key value after initial creation?](https://discuss.elastic.co/t/is-it-possible-to-retrieve-the-api-key-value-after-initial-creation/265233)
**Author:** [@dvo](https://discuss.elastic.co/u/dvo)\ **Replies:** 2\ **Last updated:** [February 23, 2021, 7:18pm UTC](https://discuss.elastic.co/t/is-it-possible-to-retrieve-the-api-key-value-after-initial-creation/265233 "2021-02-23T19:18:52Z")
I'm relatively new to Elastic and can't seem to find information about this with a search... I understand that anyone creating an API key should secure the api\_key value returned at creation. Is there any way for a supe… --- ## [Error when installing Java Plugin from Offline Packs](https://discuss.elastic.co/t/error-when-installing-java-plugin-from-offline-packs/210897)
**Author:** [@rgomez](https://discuss.elastic.co/u/rgomez)\ **Replies:** 2\ **Last updated:** [December 13, 2019, 10:18am UTC](https://discuss.elastic.co/t/error-when-installing-java-plugin-from-offline-packs/210897 "2019-12-13T10:18:08Z")
I am experiencing the same issue that Cory\_Huebner reported in July: I am attempting to install a custom output Logstash plugin on Logstash 7.2; the plugin is written in Java based on the instructions found on this Log… --- ## [Kibana 7.4.0 and SQL Queries :: Can Index Name Have "." Character?](https://discuss.elastic.co/t/kibana-7-4-0-and-sql-queries-can-index-name-have-character/203680)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 2\ **Last updated:** [October 18, 2019, 4:03pm UTC](https://discuss.elastic.co/t/kibana-7-4-0-and-sql-queries-can-index-name-have-character/203680 "2019-10-18T16:03:50Z")
Hi Kibana Grandmasters, I recently upgraded to Elasticsearch and Kibana 7.4.0 on Docker, because I want to use the new SQL query-like feature. I watched the training video by Arthur Gimpel, plus read through the online… --- ## [Kibana timelion points and lines](https://discuss.elastic.co/t/kibana-timelion-points-and-lines/192928)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 2\ **Last updated:** [July 30, 2019, 7:38pm UTC](https://discuss.elastic.co/t/kibana-timelion-points-and-lines/192928 "2019-07-30T19:38:41Z")
We use timelion to use both lines and points with show=true: .points(show=true).lines(show=true) We do see both lines and points most of the time... however, when zoom in closer, we only see points. not sure when kiban… --- ## [Logstash 7.1.1 not writing last\_run in last\_run\_metadata\_path](https://discuss.elastic.co/t/logstash-7-1-1-not-writing-last-run-in-last-run-metadata-path/188496)
**Author:** [@Giovanni\_Gasparri](https://discuss.elastic.co/u/Giovanni_Gasparri)\ **Replies:** 2\ **Last updated:** [July 2, 2019, 3:23pm UTC](https://discuss.elastic.co/t/logstash-7-1-1-not-writing-last-run-in-last-run-metadata-path/188496 "2019-07-02T15:23:08Z")
Hello guys! I'm experiencing a problem with logstash 7.1.1 running as a deamon on debian with multiple pipelines. Despite the fact that record\_last\_run is true and last\_run\_metadata\_path is specified, no file is saved. … --- ## [Phonetic Plugin for Elasticsearch Cloud](https://discuss.elastic.co/t/phonetic-plugin-for-elasticsearch-cloud/134566)
**Author:** [@vishwas\_jadav](https://discuss.elastic.co/u/vishwas_jadav)\ **Replies:** 2\ **Last updated:** [June 5, 2018, 9:45am UTC](https://discuss.elastic.co/t/phonetic-plugin-for-elasticsearch-cloud/134566 "2018-06-05T09:45:46Z")
I have deployed cluster on Elasticsearch Cloud . Now , I want to add phonetic search feature. For that I was putting this setting with php api : 'settings' =\> \[ 'analysis' =\> \[ 'normalizer' =\> \[ "lowercase\_normalize… [Previous page](https://discuss.elastic.co/top.md?page=1439&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1441&per_page=50&period=all)