# Top **URL:** https://discuss.elastic.co/top.md?page=1447&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1448 --- ## [How to specify Default Quote Analyzer](https://discuss.elastic.co/t/how-to-specify-default-quote-analyzer/258659)
**Author:** [@jacksumit](https://discuss.elastic.co/u/jacksumit)\ **Replies:** 2\ **Last updated:** [December 15, 2020, 2:27am UTC](https://discuss.elastic.co/t/how-to-specify-default-quote-analyzer/258659 "2020-12-15T02:27:30Z")
Is there a way to specify default quote analyzer on index level? We can specify default index analyzer using analysis.analyzer.default. Similarly we can specify default search analyzer using analysis.analyzer.default\_se… --- ## [Painless forEach + Replace failing](https://discuss.elastic.co/t/painless-foreach-replace-failing/256058)
**Author:** [@ramiriskis](https://discuss.elastic.co/u/ramiriskis)\ **Replies:** 2\ **Last updated:** [November 20, 2020, 7:03pm UTC](https://discuss.elastic.co/t/painless-foreach-replace-failing/256058 "2020-11-20T19:03:46Z")
Hi guys, I'm trying to write a script within watcher that applies a transform to each log before sending it through slack. My current script is like this: "script": { "source": """ ctx… --- ## [Not able to see logs which are 5 to 10 days old when queried on Kibana discover](https://discuss.elastic.co/t/not-able-to-see-logs-which-are-5-to-10-days-old-when-queried-on-kibana-discover/198491)
**Author:** [@Ranjana\_Venkatesh](https://discuss.elastic.co/u/Ranjana_Venkatesh)\ **Replies:** 2\ **Last updated:** [September 27, 2019, 12:27pm UTC](https://discuss.elastic.co/t/not-able-to-see-logs-which-are-5-to-10-days-old-when-queried-on-kibana-discover/198491 "2019-09-27T12:27:12Z")
So I have been working with ELK for some time now and just now discovered this problem. when I query the log data from the Kibana discover the logs dated 5 to 10 days back do not show up and it says no results found. Any… --- ## [Kibana keyword aggregation for visualisation](https://discuss.elastic.co/t/kibana-keyword-aggregation-for-visualisation/199599)
**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 5:50am UTC](https://discuss.elastic.co/t/kibana-keyword-aggregation-for-visualisation/199599 "2019-09-17T05:50:04Z")
Hi, I am struggeling with a little aggregation task. Let's say we have to following data from winlogbeat: First data: { "param1": "1.2.3.4:5555" } Second data: { "param1": "1.2.3.4:6666" } If I perform a pie chart… --- ## [JDBC Streaming](https://discuss.elastic.co/t/jdbc-streaming/185487)
**Author:** [@jonathan01](https://discuss.elastic.co/u/jonathan01)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 12:49pm UTC](https://discuss.elastic.co/t/jdbc-streaming/185487 "2019-06-13T12:49:37Z")
I am trying to use the jdbc streaming plugin to add data to metricbeats logs that are coming in. But I am getting an error that I do not understand. If I take the JDBC part out it works fine. I can connect to the datab… --- ## [Evaluating your search system's performance](https://discuss.elastic.co/t/evaluating-your-search-systems-performance/17064)
**Author:** [@Andrew\_O\_Brien](https://discuss.elastic.co/u/Andrew_O_Brien)\ **Replies:** 2\ **Last updated:** [April 23, 2018, 12:05pm UTC](https://discuss.elastic.co/t/evaluating-your-search-systems-performance/17064 "2018-04-23T12:05:13Z")
What do you generally do to evaluate your search system's performance? Do you use a metrics based approach where they can compare how changes to scoring, analysis, or similarities effect hits in a quantitative way? O… --- ## [Terms Query - Return matched term with hit?](https://discuss.elastic.co/t/terms-query-return-matched-term-with-hit/102345)
**Author:** [@DefensiveDepth](https://discuss.elastic.co/u/DefensiveDepth)\ **Replies:** 2\ **Last updated:** [October 2, 2017, 3:59pm UTC](https://discuss.elastic.co/t/terms-query-return-matched-term-with-hit/102345 "2017-10-02T15:59:03Z")
I am using the Terms query with a document lookup to load the Terms. Is there a way to return the specific term that was found with each hit? Right now, all I get back is a list of hits, but I don't know which terms wer… --- ## [\_dateparsefailure for date filtering on database date column value](https://discuss.elastic.co/t/-dateparsefailure-for-date-filtering-on-database-date-column-value/81918)
**Author:** [@ggajanan](https://discuss.elastic.co/u/ggajanan)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 1:58pm UTC](https://discuss.elastic.co/t/-dateparsefailure-for-date-filtering-on-database-date-column-value/81918 "2017-04-11T13:58:12Z")
Hi, I am using jdbc input and want to match @timestamp with the updatedttm column value extracted from the query execution. It is not working and also failing with \_dateparsefailure. Following is the config from log… --- ## [After bulk indexing with refresh\_interval disabled, now at 100% CPU usage for \> 24 hours](https://discuss.elastic.co/t/after-bulk-indexing-with-refresh-interval-disabled-now-at-100-cpu-usage-for-24-hours/16218)
**Author:** [@Swaroop\_CH](https://discuss.elastic.co/u/Swaroop_CH)\ **Replies:** 2\ **Last updated:** [March 7, 2014, 7:01am UTC](https://discuss.elastic.co/t/after-bulk-indexing-with-refresh-interval-disabled-now-at-100-cpu-usage-for-24-hours/16218 "2014-03-07T07:01:24Z")
Hello, We have a brand-new ES 1.0.1 cluster of 3 m2.xlarge machines, we set \`index.refresh\_interval\` to -1, \`index.number\_of\_replicas\` to 0, \`index.number\_of\_shards\` to 10 and indexed about half a million documents in… --- ## [ES, Logstash, Kibana as learning analytics platform](https://discuss.elastic.co/t/es-logstash-kibana-as-learning-analytics-platform/14518)
**Author:** [@mobcdi](https://discuss.elastic.co/u/mobcdi)\ **Replies:** 2\ **Last updated:** [November 22, 2013, 9:31am UTC](https://discuss.elastic.co/t/es-logstash-kibana-as-learning-analytics-platform/14518 "2013-11-22T09:31:34Z")
Hi ES Users, I was wondering if anyone knows whether its a) possible and b) done elsewhere to use ES, logstash and kibana to collect and analyse user data from learning management systems like moodle, blackboard, … --- ## [Elastic Agent SQL Integration](https://discuss.elastic.co/t/elastic-agent-sql-integration/294043)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 1\ **Last updated:** [January 11, 2022, 10:03pm UTC](https://discuss.elastic.co/t/elastic-agent-sql-integration/294043 "2022-01-11T22:03:33Z")
Hi All, I was wondering if there is or are plans to have an SQL integration for the Elastic Agent that is basically (SQL module | Metricbeat Reference \[7.16\] | Elastic)? I'm looking have a recurring query to collect som… --- ## [Esrally deployment on Kubernetes](https://discuss.elastic.co/t/esrally-deployment-on-kubernetes/261960)
**Author:** [@mastermind](https://discuss.elastic.co/u/mastermind)\ **Replies:** 1\ **Last updated:** [January 27, 2021, 7:34am UTC](https://discuss.elastic.co/t/esrally-deployment-on-kubernetes/261960 "2021-01-27T07:34:51Z")
Hi, I want to deploy esrally on the Kubernetes cluster to test the performance and then run the queries can anyone tell me how I can deploy that on Kubernetes cluster. Any help would be appreciated Thank you so much --- ## [Check elasticsearch cluster health without authentication when security feature is enable](https://discuss.elastic.co/t/check-elasticsearch-cluster-health-without-authentication-when-security-feature-is-enable/199903)
**Author:** [@Lex\_Xiao](https://discuss.elastic.co/u/Lex_Xiao)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 10:05am UTC](https://discuss.elastic.co/t/check-elasticsearch-cluster-health-without-authentication-when-security-feature-is-enable/199903 "2019-09-18T10:05:09Z")
I want to set up elasticsearch cluster automatically with ansible. Reset built-in users password with elasticsearch-setup-password after cluster is up. There is a readiness probe to check if cluster is up and ready. But … --- ## [Support multiple multiline patterns in filebeat](https://discuss.elastic.co/t/support-multiple-multiline-patterns-in-filebeat/145871)
**Author:** [@agilezebra](https://discuss.elastic.co/u/agilezebra)\ **Replies:** 1\ **Last updated:** [September 3, 2018, 8:48am UTC](https://discuss.elastic.co/t/support-multiple-multiline-patterns-in-filebeat/145871 "2018-09-03T08:48:13Z")
I'm having trouble parsing Python stack traces satisfactorily in the presence of other multiline output from other docker containers (traefik for example). There doesn't seem to be any mechanism to allow prospecting from… --- ## [High CPU load, many hot threads with the same stack](https://discuss.elastic.co/t/high-cpu-load-many-hot-threads-with-the-same-stack/76271)
**Author:** [@jazz](https://discuss.elastic.co/u/jazz)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 8:10pm UTC](https://discuss.elastic.co/t/high-cpu-load-many-hot-threads-with-the-same-stack/76271 "2017-02-23T20:10:09Z")
I have an Elasticsearch cluster running very slow sometimes (\>30s for each query) does to high CPU usage. In the hot threads, the thread I see the most is this one: sun.misc.Unsafe.park(Native Method) ja… --- ## [Uploading more than 15 engines in meta engine](https://discuss.elastic.co/t/uploading-more-than-15-engines-in-meta-engine/326737)
**Author:** [@mansi\_raval](https://discuss.elastic.co/u/mansi_raval)\ **Replies:** 8\ **Last updated:** [March 7, 2023, 9:26am UTC](https://discuss.elastic.co/t/uploading-more-than-15-engines-in-meta-engine/326737 "2023-03-07T09:26:51Z")
I have a set of more than 15 engines that I've created in elastic app search and I want to create a meta engine with them. Is there any way I can increase the capacity of the meta engine? If the capacity can't be increa… --- ## [Elastic Agent Google Workspace module retrieves repeated events](https://discuss.elastic.co/t/elastic-agent-google-workspace-module-retrieves-repeated-events/323516)
**Author:** [@German\_Bravo](https://discuss.elastic.co/u/German_Bravo)\ **Replies:** 8\ **Last updated:** [February 27, 2023, 2:46pm UTC](https://discuss.elastic.co/t/elastic-agent-google-workspace-module-retrieves-repeated-events/323516 "2023-02-27T14:46:12Z")
Hi im using Elastic Agent version 8.6 installed on one host, applying a policy with Google Workspace module enabled retrieving all type of events from our Google Workspace tenant. It works perfectly as alert rules give … --- ## [Kibana.yml file missing](https://discuss.elastic.co/t/kibana-yml-file-missing/294487)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [January 20, 2022, 6:44pm UTC](https://discuss.elastic.co/t/kibana-yml-file-missing/294487 "2022-01-20T18:44:42Z")
Hi all, i'm trying to install kibana in opendistro in Ubuntu systems I'm using command: sudo apt install opendistroforelasticsearch-kibana But when i run the above command, it unpacks packages , but kibana.yml is not … --- ## [Heartbeat dynamic config reloader stopped](https://discuss.elastic.co/t/heartbeat-dynamic-config-reloader-stopped/203229)
**Author:** [@alexandru.toader](https://discuss.elastic.co/u/alexandru.toader)\ **Replies:** 3\ **Last updated:** [October 16, 2019, 8:29am UTC](https://discuss.elastic.co/t/heartbeat-dynamic-config-reloader-stopped/203229 "2019-10-16T08:29:22Z")
at a random time the heartbeat is shutting down with INFO messages : INFO cfgfile/reload.go:229 Dynamic config reloader stopped INFO \[reload\] cfgfile/list.go:118 Stopping 9 runners ... INFO \[moni… --- ## [Execute wizard watcher: Error: input search: Error: Request Timeout after 60000ms](https://discuss.elastic.co/t/execute-wizard-watcher-error-input-search-error-request-timeout-after-60000ms/165509)
**Author:** [@aabababba](https://discuss.elastic.co/u/aabababba)\ **Replies:** 3\ **Last updated:** [January 25, 2019, 6:03am UTC](https://discuss.elastic.co/t/execute-wizard-watcher-error-input-search-error-request-timeout-after-60000ms/165509 "2019-01-25T06:03:11Z")
execute wizard watcher: Error: input search: Error: Request Timeout after 60000ms is it about Server resource consumption is too high? --- ## [How to optimize the multiple configuration files to improve the performance for too many filters](https://discuss.elastic.co/t/how-to-optimize-the-multiple-configuration-files-to-improve-the-performance-for-too-many-filters/136723)
**Author:** [@hyzhang6639](https://discuss.elastic.co/u/hyzhang6639)\ **Replies:** 8\ **Last updated:** [June 22, 2018, 3:38am UTC](https://discuss.elastic.co/t/how-to-optimize-the-multiple-configuration-files-to-improve-the-performance-for-too-many-filters/136723 "2018-06-22T03:38:14Z")
We have several configuration files include about 50 filters. It take about 9 mins to filter 10,000,000 events. After reducing to 30 filters, it take around 6 mins to complete to filter 10,000,000 events. In the future… --- ## [Elasticsearch for JUnits](https://discuss.elastic.co/t/elasticsearch-for-junits/52409)
**Author:** [@A.Aravindhan](https://discuss.elastic.co/u/A.Aravindhan)\ **Replies:** 3\ **Last updated:** [June 10, 2016, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-for-junits/52409 "2016-06-10T07:36:54Z")
We are using Elasticsearch and planning to have JUnits for our modules. These JUnits run during our product build infact as a first step... we are looking for a kind of embedded Elasticsearch which we can use for our JUn… --- ## [Does index.cache.field.type no longer work in ES v0.90?](https://discuss.elastic.co/t/does-index-cache-field-type-no-longer-work-in-es-v0-90/13188)
**Author:** [@Joseph\_Smith](https://discuss.elastic.co/u/Joseph_Smith)\ **Replies:** 3\ **Last updated:** [August 14, 2013, 8:11pm UTC](https://discuss.elastic.co/t/does-index-cache-field-type-no-longer-work-in-es-v0-90/13188 "2013-08-14T20:11:17Z")
The documentation at http://www.elasticsearch.org/guide/reference/index-modules/fielddata/ seems to indicate that the index.cache.field\* settings are no longer supported in 0.90. Am I understanding this correct? … --- ## [Adding filter to existing analyzer](https://discuss.elastic.co/t/adding-filter-to-existing-analyzer/7593)
**Author:** [@barnybug](https://discuss.elastic.co/u/barnybug)\ **Replies:** 3\ **Last updated:** [May 10, 2012, 6:00am UTC](https://discuss.elastic.co/t/adding-filter-to-existing-analyzer/7593 "2012-05-10T06:00:30Z")
Would like to add asciifolding to the default english analyzer. Is this possible? Or alternatively can I define a new analyzer with the same tokenizer/filters as the EnglishAnalyzer? thanks Barnaby --- ## [Should "NaN" string be in a float field?](https://discuss.elastic.co/t/should-nan-string-be-in-a-float-field/164121)
**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\ **Replies:** 0\ **Last updated:** [January 14, 2019, 9:57am UTC](https://discuss.elastic.co/t/should-nan-string-be-in-a-float-field/164121 "2019-01-14T09:57:42Z")
Hello, I collect information on metrics on my Elasticsearchs. I've seen the following return of API \_health (v5.5.0): Mon Jan 14 10:46:52 CET 2019 { "cluster\_name" : "my cluster", "status" : "red", "timed\_out" : fa… --- ## [Kibana Graph - Tree, Tidy of D3.js for create a line trail on my infrastructure with a correlationID](https://discuss.elastic.co/t/kibana-graph-tree-tidy-of-d3-js-for-create-a-line-trail-on-my-infrastructure-with-a-correlationid/328061)
**Author:** [@martel](https://discuss.elastic.co/u/martel)\ **Replies:** 6\ **Last updated:** [March 20, 2023, 3:35pm UTC](https://discuss.elastic.co/t/kibana-graph-tree-tidy-of-d3-js-for-create-a-line-trail-on-my-infrastructure-with-a-correlationid/328061 "2023-03-20T15:35:15Z")
Hey, i want know if the Graph module on Kibana use D3.js ? and if is possible to create a tree graph with only path on dateTime log . I should see a from left to right (oldest to newest) a path on each place where a p… --- ## [Logstash process taking more memory than configured](https://discuss.elastic.co/t/logstash-process-taking-more-memory-than-configured/291064)
**Author:** [@alaine](https://discuss.elastic.co/u/alaine)\ **Replies:** 6\ **Last updated:** [December 8, 2021, 8:23am UTC](https://discuss.elastic.co/t/logstash-process-taking-more-memory-than-configured/291064 "2021-12-08T08:23:45Z")
Hi there. Question in regards to some weird behavior I am noticing on all of our logstash servers. We are running 7.13.4 currently. The problem is related to logstash seemingly taking more memory than I have configured i… --- ## [Renaming Nodes and Clusters in Elastic Cloud](https://discuss.elastic.co/t/renaming-nodes-and-clusters-in-elastic-cloud/315729)
**Author:** [@mpky](https://discuss.elastic.co/u/mpky)\ **Replies:** 4\ **Last updated:** [October 4, 2022, 4:59am UTC](https://discuss.elastic.co/t/renaming-nodes-and-clusters-in-elastic-cloud/315729 "2022-10-04T04:59:05Z")
How do you go about renaming nodes and clusters in Elastic Cloud since there is no YML file to edit? I tried in the deployment settings but was getting errors and am wondering if there's a way to do this in Dev Tools? --- ## [Filtering a Pivot Transform](https://discuss.elastic.co/t/filtering-a-pivot-transform/299371)
**Author:** [@iamtheschmitzer](https://discuss.elastic.co/u/iamtheschmitzer)\ **Replies:** 4\ **Last updated:** [March 29, 2022, 9:35am UTC](https://discuss.elastic.co/t/filtering-a-pivot-transform/299371 "2022-03-29T09:35:37Z")
I have a pivot transform that calculates a duration between two timestamped documents by grouping them, matching like documents, then aggregating the min timestamp, the max timestamp and using a script to calculate the d… --- ## [Proper Template Mapping for ES/Kibana 6.2.3](https://discuss.elastic.co/t/proper-template-mapping-for-es-kibana-6-2-3/127700)
**Author:** [@diranged](https://discuss.elastic.co/u/diranged)\ **Replies:** 4\ **Last updated:** [April 13, 2018, 5:10pm UTC](https://discuss.elastic.co/t/proper-template-mapping-for-es-kibana-6-2-3/127700 "2018-04-13T17:10:44Z")
We are migrating from ES 2.4/Kibana4 to ES/Kibana 6.2.3. We use our own tool for pushing structured JSON into the ElasticSearch cluster. Functionally everything is basically working .. but we're struggling with the right… --- ## [Import visualization even with missing fields (BIS)?](https://discuss.elastic.co/t/import-visualization-even-with-missing-fields-bis/110642)
**Author:** [@fmedina](https://discuss.elastic.co/u/fmedina)\ **Replies:** 4\ **Last updated:** [December 12, 2017, 9:48am UTC](https://discuss.elastic.co/t/import-visualization-even-with-missing-fields-bis/110642 "2017-12-12T09:48:57Z")
Hi there! I have tried to post this question on a previous entry Import visualization even with missing fields? but it has not been possible. We are dealing with the same situation as the one described above, that is, … --- ## [Getting Multiple exceptions while restarting ES](https://discuss.elastic.co/t/getting-multiple-exceptions-while-restarting-es/101007)
**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\ **Replies:** 4\ **Last updated:** [September 19, 2017, 9:10pm UTC](https://discuss.elastic.co/t/getting-multiple-exceptions-while-restarting-es/101007 "2017-09-19T21:10:18Z")
Caused by: org.elasticsearch.transport.RemoteTransportException: \[g5kxvHK\]\[10.140.29.50:9300\]\[internal:gateway/local/started\_shards\[n\]\] Caused by: org.elasticsearch.ElasticsearchException: failed to load started shards … --- ## [Cross site replication using zoning and response time impact](https://discuss.elastic.co/t/cross-site-replication-using-zoning-and-response-time-impact/84833)
**Author:** [@Sivaramu](https://discuss.elastic.co/u/Sivaramu)\ **Replies:** 4\ **Last updated:** [May 8, 2017, 5:40am UTC](https://discuss.elastic.co/t/cross-site-replication-using-zoning-and-response-time-impact/84833 "2017-05-08T05:40:45Z")
After enabling zoning on a Production Cluster recently we have started noticing reduced response times for search / scroll requests. Version : 2.4 Cluster : 18 Nodes (12 data 8GB + 3 master 1GB+ 3 coordinator 8GB) Data… --- ## [Création d'indices](https://discuss.elastic.co/t/creation-dindices/74195)
**Author:** [@Brendao](https://discuss.elastic.co/u/Brendao)\ **Replies:** 4\ **Last updated:** [February 7, 2017, 12:38pm UTC](https://discuss.elastic.co/t/creation-dindices/74195 "2017-02-07T12:38:19Z")
Bonjour, Dans ma configuration LogStash, j'ai mis en place des renames pour permettre de mieux comprendre les champs. J'ai procédé de la manière suivante: rename =\> \[ "SourcePort", "Port Source" \] rename =\> … --- ## [Scoring script not applied unless I use deprecated filtered query](https://discuss.elastic.co/t/scoring-script-not-applied-unless-i-use-deprecated-filtered-query/74083)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 4\ **Last updated:** [February 7, 2017, 10:16am UTC](https://discuss.elastic.co/t/scoring-script-not-applied-unless-i-use-deprecated-filtered-query/74083 "2017-02-07T10:16:41Z")
I'm using the Java API (v 2.3.1) to run a custom scoring script as part of a query. However, I've noticed that the scoring script is not applied unless I use a deprecated part of the API. ie: This: BoolQueryBuild… --- ## [Has\_child query slow due to global ordinals - either at refresh or query time, looking for workaround](https://discuss.elastic.co/t/has-child-query-slow-due-to-global-ordinals-either-at-refresh-or-query-time-looking-for-workaround/67784)
**Author:** [@Jonathan\_Foy](https://discuss.elastic.co/u/Jonathan_Foy)\ **Replies:** 4\ **Last updated:** [December 7, 2016, 1:43pm UTC](https://discuss.elastic.co/t/has-child-query-slow-due-to-global-ordinals-either-at-refresh-or-query-time-looking-for-workaround/67784 "2016-12-07T13:43:57Z")
Hello I'm migrating from ES 1.1.1 to 2.4.1, and have run into an issue while testing some parent/child queries. Specifically, some has\_child queries were taking a long time to return as compared to the old cluster (2… --- ## [Pre-Sorted Doc Values](https://discuss.elastic.co/t/pre-sorted-doc-values/2603)
**Author:** [@Harlin\_ES](https://discuss.elastic.co/u/Harlin_ES)\ **Replies:** 4\ **Last updated:** [June 18, 2015, 12:24pm UTC](https://discuss.elastic.co/t/pre-sorted-doc-values/2603 "2015-06-18T12:24:52Z")
I was looking into Lucene and noticed that it has a SortedDocValues Class. Does anybody know if Elasticsearch's doc\_values are already using this class or if Elastic plans on implementing anything like this in future ver… --- ## [Logstash enrichement: URLHaus](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 5\ **Last updated:** [December 28, 2020, 4:14pm UTC](https://discuss.elastic.co/t/logstash-enrichement-urlhaus/259720 "2020-12-28T16:14:18Z")
Hello , I would like to enrich my SIEM with information from URLhaus, I configured my logstash pipline like this: input { exec { command =\> 'curl https://urlhaus.abuse.ch/downloads/csv/' interval =\> 86400 … --- ## [FieldFormat plugin for Kibana 7.6](https://discuss.elastic.co/t/fieldformat-plugin-for-kibana-7-6/222177)
**Author:** [@jdd1](https://discuss.elastic.co/u/jdd1)\ **Replies:** 5\ **Last updated:** [March 16, 2020, 11:18pm UTC](https://discuss.elastic.co/t/fieldformat-plugin-for-kibana-7-6/222177 "2020-03-16T23:18:29Z")
According to the migration notes, it appears FieldFormats (ui/registry/field\_formats) has been migrated to data.fieldFormats. However, it does not look like the FieldFormatsRegistryProvider has been migrated. Is it poss… --- ## [How to add new documents to an existing index](https://discuss.elastic.co/t/how-to-add-new-documents-to-an-existing-index/184260)
**Author:** [@jdemp0913](https://discuss.elastic.co/u/jdemp0913)\ **Replies:** 5\ **Last updated:** [June 5, 2019, 9:00pm UTC](https://discuss.elastic.co/t/how-to-add-new-documents-to-an-existing-index/184260 "2019-06-05T21:00:43Z")
What is the best way to add about 10,000 documents to an existing index each day. Or how can I merge to indexes? I am using the .net c# Nest client. --- ## [Kibana will not start with netflow module](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374)
**Author:** [@thekikzz](https://discuss.elastic.co/u/thekikzz)\ **Replies:** 5\ **Last updated:** [September 21, 2018, 12:21pm UTC](https://discuss.elastic.co/t/kibana-will-not-start-with-netflow-module/147374 "2018-09-21T12:21:34Z")
\[root@localhost ~\]# /usr/share/logstash/bin/logstash --modules netflow --setup -M netflow.var.input.udp.port=9996 -M netflow.var.kibana.host="localhost:5601" -M netflow.var.elasticsearch.hosts="localhost:9200" OpenJDK 6… --- ## [Visualisation with \* index](https://discuss.elastic.co/t/visualisation-with-index/111042)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 5\ **Last updated:** [December 13, 2017, 6:40pm UTC](https://discuss.elastic.co/t/visualisation-with-index/111042 "2017-12-13T18:40:50Z")
I have 2 indices, one with customer numbers and the other with errortypes. I made an index with \* to get exerithing into one index, now is it possible to compare these two values, for example in a Vertical Bar chart or a… --- ## [Elasticsearch for Apache Hadoop 2.1.1 and 2.2.0-m1 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-2-1-1-and-2-2-0-m1-released/28238)
**Author:** [@costin](https://discuss.elastic.co/u/costin)\ **Replies:** 0\ **Last updated:** [August 28, 2015, 10:03am UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-2-1-1-and-2-2-0-m1-released/28238 "2015-08-28T10:03:10Z")
ES-Hadoop 2.1.1 has been released. All ES-Hadoop 2.0.x and 2.1.x users are recommended to upgrade to it. Additionally, ES-Hadoop 2.2.0-m1 has been released. It provides compatibility with Elasticsearch 2.0.0-beta1 whil… --- ## [Sorting events with identical millis timestamps by order events were recorded](https://discuss.elastic.co/t/sorting-events-with-identical-millis-timestamps-by-order-events-were-recorded/297758)
**Author:** [@bublik-hpt](https://discuss.elastic.co/u/bublik-hpt)\ **Replies:** 1\ **Last updated:** [February 24, 2022, 9:19am UTC](https://discuss.elastic.co/t/sorting-events-with-identical-millis-timestamps-by-order-events-were-recorded/297758 "2022-02-24T09:19:00Z")
Hi i have logs where multiple lines have the same timestamp. In Kibana discover they are in opposite order (if i follow the timestamp) then in the logfile, but when I check surrounding documents they are in correct order… --- ## [How to connect Sybase Sql Anywhere 9 with logstash](https://discuss.elastic.co/t/how-to-connect-sybase-sql-anywhere-9-with-logstash/268390)
**Author:** [@AltC](https://discuss.elastic.co/u/AltC)\ **Replies:** 1\ **Last updated:** [March 25, 2021, 5:45pm UTC](https://discuss.elastic.co/t/how-to-connect-sybase-sql-anywhere-9-with-logstash/268390 "2021-03-25T17:45:24Z")
I'm new to using Elasticsearh components, and I'm having trouble connecting the Sybase SqlAnywhere database to LogStash. Below the configuration file to connect LogStash to SqlAnywhere is showing an error, I have already… --- ## [Just cannot have filebeat ouput right!](https://discuss.elastic.co/t/just-cannot-have-filebeat-ouput-right/148849)
**Author:** [@pastorsx](https://discuss.elastic.co/u/pastorsx)\ **Replies:** 1\ **Last updated:** [September 17, 2018, 4:47pm UTC](https://discuss.elastic.co/t/just-cannot-have-filebeat-ouput-right/148849 "2018-09-17T16:47:07Z")
I am trying to use something that should be straightforward: beat -\> logstash -\> elasticsearch -\> kibana. Few config parameters and I believe it should be fine... but hwres' the catch... I just can't get my beat to for… --- ## [Custom similarity in 6.3?](https://discuss.elastic.co/t/custom-similarity-in-6-3/145011)
**Author:** [@sikoried](https://discuss.elastic.co/u/sikoried)\ **Replies:** 7\ **Last updated:** [August 20, 2018, 9:16pm UTC](https://discuss.elastic.co/t/custom-similarity-in-6-3/145011 "2018-08-20T21:16:23Z")
Hi there, We were using a custom similarity that was using 3 float values in the payload. Unfortunately, this commit breaks it, since the refactor effectively prevents plugins to provide similarities. I guess it could… --- ## [Sorting score and shuffle Adversiting results](https://discuss.elastic.co/t/sorting-score-and-shuffle-adversiting-results/104439)
**Author:** [@lucashfreitas](https://discuss.elastic.co/u/lucashfreitas)\ **Replies:** 1\ **Last updated:** [October 22, 2017, 12:17pm UTC](https://discuss.elastic.co/t/sorting-score-and-shuffle-adversiting-results/104439 "2017-10-22T12:17:12Z")
Hello guys, My site use elasticsearch query for fetch adversiting data of customers. My query on elastic sort data considering SCORE calculed from score function. (I use score because many properties make a difference … --- ## [X-pack 5.4.1 Role mapping not getting applied on AD users](https://discuss.elastic.co/t/x-pack-5-4-1-role-mapping-not-getting-applied-on-ad-users/92049)
**Author:** [@venuambati](https://discuss.elastic.co/u/venuambati)\ **Replies:** 1\ **Last updated:** [July 7, 2017, 2:51am UTC](https://discuss.elastic.co/t/x-pack-5-4-1-role-mapping-not-getting-applied-on-ad-users/92049 "2017-07-07T02:51:59Z")
I am using ELK and x-pack 5.4.1 version. I am using AD authentication using x-pack. System is allowing me to login But getting this error. Config: Error 403 Forbidden: \[security\_exception\] action \[indices:data/write/… --- ## [Logstash Input Plugin for kafka 0.9 is not working](https://discuss.elastic.co/t/logstash-input-plugin-for-kafka-0-9-is-not-working/58146)
**Author:** [@hearvishwas](https://discuss.elastic.co/u/hearvishwas)\ **Replies:** 1\ **Last updated:** [August 16, 2016, 4:24pm UTC](https://discuss.elastic.co/t/logstash-input-plugin-for-kafka-0-9-is-not-working/58146 "2016-08-16T16:24:51Z")
logstash input plugin for kafka is not working for me: Here is my conf file: input { kafka { topic\_id =\> 'logstashlogs' } } output { stdout{} } Nothing comes up to the screen, just lostash starts, no error, nothing… [Previous page](https://discuss.elastic.co/top.md?page=1446&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1448&per_page=50&period=all)