# Top

**URL:** https://discuss.elastic.co/top.md?page=1449&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1450

---

## [Getting Problem with Logstash to Index Mysql Data](https://discuss.elastic.co/t/getting-problem-with-logstash-to-index-mysql-data/129409)

<div class="topic-metadata">

**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\
**Replies:** 5\
**Last updated:** [April 25, 2018, 3:33pm UTC](https://discuss.elastic.co/t/getting-problem-with-logstash-to-index-mysql-data/129409 "2018-04-25T15:33:49Z")

</div>

Hi All, Details are as below. I am using Ubuntu 17.10 and installed Elastic Seach , Kibana,Logstash \[Latest version 6+\]. All 3 services are running perfectly. In my project , For Testing I am trying to Input Mysql tabl…

---

## [What happens when a the Elasticsearch server you're querying goes down?](https://discuss.elastic.co/t/what-happens-when-a-the-elasticsearch-server-youre-querying-goes-down/111176)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 5\
**Last updated:** [December 11, 2017, 9:27pm UTC](https://discuss.elastic.co/t/what-happens-when-a-the-elasticsearch-server-youre-querying-goes-down/111176 "2017-12-11T21:27:16Z")

</div>

We are discussing how to handle this, and I'm not sure if we're misunderstanding something. We are querying one of our three Elasticsearch nodes (e.g. elasticsearch1.ourdomain.com) and are wondering what will happen if t…

---

## [Logstash log says "Pushing flushed events" but I can't see any output in ES](https://discuss.elastic.co/t/logstash-log-says-pushing-flushed-events-but-i-cant-see-any-output-in-es/101988)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 5\
**Last updated:** [September 28, 2017, 11:35am UTC](https://discuss.elastic.co/t/logstash-log-says-pushing-flushed-events-but-i-cant-see-any-output-in-es/101988 "2017-09-28T11:35:48Z")

</div>

Hi, I am getting the following log in Logstash, but from some reason in Elasticsearch I can't see any output. How can this be? \[2017-09-27T16:38:40,961\]\[DEBUG\]\[logstash.pipeline \] Pushing flushed events {:event…

---

## [Elasticsearch attachment parsing usecase](https://discuss.elastic.co/t/elasticsearch-attachment-parsing-usecase/81177)

<div class="topic-metadata">

**Author:** [@svb01](https://discuss.elastic.co/u/svb01)\
**Replies:** 5\
**Last updated:** [April 4, 2017, 10:03pm UTC](https://discuss.elastic.co/t/elasticsearch-attachment-parsing-usecase/81177 "2017-04-04T22:03:38Z")

</div>

Hi, I am exploring ElasticSearch as a solution for one of our usecase. I wanted to know whether the current ElasticSearch capabilities could meet our requirements. For our use case, we want to index excel files in ou…

---

## [Index design for very dynamic Form/Fields](https://discuss.elastic.co/t/index-design-for-very-dynamic-form-fields/19877)

<div class="topic-metadata">

**Author:** [@Michael\_Chen](https://discuss.elastic.co/u/Michael_Chen)\
**Replies:** 6\
**Last updated:** [November 13, 2014, 4:22pm UTC](https://discuss.elastic.co/t/index-design-for-very-dynamic-form-fields/19877 "2014-11-13T16:22:52Z")

</div>

Hi, We have a system very much like Google Forms, which allow users to design their own forms with various fields (single line text, paragraph, number, address etc, you can imagine that.) Without any doubt, it's r…

---

## [Machine learning jobs: soft and hard limit](https://discuss.elastic.co/t/machine-learning-jobs-soft-and-hard-limit/254023)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 2\
**Last updated:** [November 2, 2020, 2:26pm UTC](https://discuss.elastic.co/t/machine-learning-jobs-soft-and-hard-limit/254023 "2020-11-02T14:26:00Z")

</div>

Hello everybody, I am running elasticsearch machine learning jobs and in some of them I am getting in their memory status: hard\_limit and soft\_limit and other type of error is : Datafeed has missed X documents due to i…

---

## [Stop logging all http reponse messages to syslog?](https://discuss.elastic.co/t/stop-logging-all-http-reponse-messages-to-syslog/198849)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [September 10, 2019, 11:37pm UTC](https://discuss.elastic.co/t/stop-logging-all-http-reponse-messages-to-syslog/198849 "2019-09-10T23:37:21Z")

</div>

Hi, Kibana 7.2 I installed filebeat on the server that is running Kibana and with the syslog module enabled I noticed Kibana is generating a lot of messages like this: {"type":"response","@timestamp":"2019-09-10T08:19…

---

## [Elasticsearch nodes get killed by kubernetes due to OOM](https://discuss.elastic.co/t/elasticsearch-nodes-get-killed-by-kubernetes-due-to-oom/186682)

<div class="topic-metadata">

**Author:** [@Bozo\_Tegeltija](https://discuss.elastic.co/u/Bozo_Tegeltija)\
**Replies:** 2\
**Last updated:** [June 25, 2019, 8:05am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-get-killed-by-kubernetes-due-to-oom/186682 "2019-06-25T08:05:07Z")

</div>

I have installed ES cluster on my k8s cluster and no matter how much RAM limit i give to the nodes, they eventually get killed. The load on the cluster is low (approx. 50 docs/min). I have used the default template for …

---

## [Role mapping on user's metadata](https://discuss.elastic.co/t/role-mapping-on-users-metadata/167990)

<div class="topic-metadata">

**Author:** [@misomij](https://discuss.elastic.co/u/misomij)\
**Replies:** 2\
**Last updated:** [February 14, 2019, 4:46pm UTC](https://discuss.elastic.co/t/role-mapping-on-users-metadata/167990 "2019-02-14T16:46:46Z")

</div>

Hi all, I am on 6.5.4 and I am using AD for authentication. Authentication works correctly, now I am trying to create some role\_mapping. Following this guide I understand that it should be possible to create mappings …

---

## [How to hide some data(Sensitive data)](https://discuss.elastic.co/t/how-to-hide-some-data-sensitive-data/160191)

<div class="topic-metadata">

**Author:** [@murtazahzaveri](https://discuss.elastic.co/u/murtazahzaveri)\
**Replies:** 2\
**Last updated:** [December 18, 2018, 8:05am UTC](https://discuss.elastic.co/t/how-to-hide-some-data-sensitive-data/160191 "2018-12-18T08:05:52Z")

</div>

Following is my query: { size: 0, aggs:{ property:{ nested: {path: "dept"}, aggs: { dept\_name: { terms: { field: "dept.dept\_name" size: 10000 }, aggs: { id: { cardinality: { field:"dept\_dept\_name.id" } } …

---

## [SSH and Syslog not reaching on kibana](https://discuss.elastic.co/t/ssh-and-syslog-not-reaching-on-kibana/150967)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 2\
**Last updated:** [October 4, 2018, 7:49am UTC](https://discuss.elastic.co/t/ssh-and-syslog-not-reaching-on-kibana/150967 "2018-10-04T07:49:11Z")

</div>

Hello Team, I am using ELK 6.4.0 and beat (Filebeat) 6.4.0. My architecture is Filebeat-\>Logstash-\>Elasticsearch-\>Kibana. I have installed Filebeat on my 20 servers and sending auth.log, syslog, nginx access.log and ap…

---

## [Startup error in auditbeat](https://discuss.elastic.co/t/startup-error-in-auditbeat/150520)

<div class="topic-metadata">

**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\
**Replies:** 2\
**Last updated:** [October 1, 2018, 10:39am UTC](https://discuss.elastic.co/t/startup-error-in-auditbeat/150520 "2018-10-01T10:39:49Z")

</div>

Hi All, I'm getting below startup error in auditbeat tar package installation. 2018-10-01T00:00:12.242-0700 ERROR instance/beat.go:743 Exiting: 1 error: 1 error: failed to unpack the auditd config: 1 error: failed load…

---

## [Load multi mysql table to elasticsearch with logstash 6.3.0](https://discuss.elastic.co/t/load-multi-mysql-table-to-elasticsearch-with-logstash-6-3-0/137037)

<div class="topic-metadata">

**Author:** [@simmonHuong](https://discuss.elastic.co/u/simmonHuong)\
**Replies:** 2\
**Last updated:** [June 30, 2018, 11:28am UTC](https://discuss.elastic.co/t/load-multi-mysql-table-to-elasticsearch-with-logstash-6-3-0/137037 "2018-06-30T11:28:36Z")

</div>

I am using logstash to load multi table from mysql to elasticsearch.As suggested I will create index per table. Got two problems: I have to comment if \[type\] == "activity" {,then the data will successfully imported,o…

---

## [How to set metric in logstash datadog\_metrics plugin](https://discuss.elastic.co/t/how-to-set-metric-in-logstash-datadog-metrics-plugin/50793)

<div class="topic-metadata">

**Author:** [@Amos\_Shahar](https://discuss.elastic.co/u/Amos_Shahar)\
**Replies:** 2\
**Last updated:** [November 1, 2016, 11:08pm UTC](https://discuss.elastic.co/t/how-to-set-metric-in-logstash-datadog-metrics-plugin/50793 "2016-11-01T23:08:47Z")

</div>

I am trying to send custom metrics to datadog using the datadog\_metrics output plugin, All parameters seems to work fine as I can see the host and metric\_name in the datadog. my problem is with the metric\_value paramete…

---

## [Logstash Stops Processing](https://discuss.elastic.co/t/logstash-stops-processing/401)

<div class="topic-metadata">

**Author:** [@kotter](https://discuss.elastic.co/u/kotter)\
**Replies:** 2\
**Last updated:** [May 10, 2015, 12:15am UTC](https://discuss.elastic.co/t/logstash-stops-processing/401 "2015-05-10T00:15:06Z")

</div>

Hello all: I'm working with a logstash docker image (https://registry.hub.docker.com/u/helder/logstash/) linked to elasticsearch and kibana, all via docker. My problem is that logstash stops processing randomly. I o…

---

## [I want to use spark to read data from es, but I don't know what es.net.ssl.keystore.pass is](https://discuss.elastic.co/t/i-want-to-use-spark-to-read-data-from-es-but-i-dont-know-what-es-net-ssl-keystore-pass-is/335210)

<div class="topic-metadata">

**Author:** [@gaorui](https://discuss.elastic.co/u/gaorui)\
**Replies:** 3\
**Last updated:** [June 6, 2023, 7:58am UTC](https://discuss.elastic.co/t/i-want-to-use-spark-to-read-data-from-es-but-i-dont-know-what-es-net-ssl-keystore-pass-is/335210 "2023-06-06T07:58:51Z")

</div>

When I built the es cluster, I used bin/elasticsearch-certutil to generate the CA certificate and p12 certificate, but I did not enter the password, but chose to press Enter directly. When I want to use spark to connect…

---

## [How to visualize json data obtained from filebeat in kibana](https://discuss.elastic.co/t/how-to-visualize-json-data-obtained-from-filebeat-in-kibana/317793)

<div class="topic-metadata">

**Author:** [@anu1](https://discuss.elastic.co/u/anu1)\
**Replies:** 3\
**Last updated:** [November 10, 2022, 4:25am UTC](https://discuss.elastic.co/t/how-to-visualize-json-data-obtained-from-filebeat-in-kibana/317793 "2022-11-10T04:25:06Z")

</div>

Hi, I'm new to elk. I've configured elk as a server and filebeat as a client and through filebeat, i'm sending the json format data (temperature values) to elk.Now i'm finding it difficulty to visualize only temperatur…

---

## [Node won’t start up due to duplicate alias/index names (HELP)](https://discuss.elastic.co/t/node-won-t-start-up-due-to-duplicate-alias-index-names-help/288123)

<div class="topic-metadata">

**Author:** [@Rabih\_harb](https://discuss.elastic.co/u/Rabih_harb)\
**Replies:** 3\
**Last updated:** [November 4, 2021, 2:08pm UTC](https://discuss.elastic.co/t/node-won-t-start-up-due-to-duplicate-alias-index-names-help/288123 "2021-11-04T14:08:27Z")

</div>

Dear community, we have a major issue in our production cluster (2.4.6): previous cluster setup: 4 nodes ( master and data) the upgrade done on the cluster was: 4 nodes---\> set as data only master false. 2 additio…

---

## [How to set Environment variable in kibana](https://discuss.elastic.co/t/how-to-set-environment-variable-in-kibana/275483)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 3\
**Last updated:** [June 10, 2021, 2:00pm UTC](https://discuss.elastic.co/t/how-to-set-environment-variable-in-kibana/275483 "2021-06-10T14:00:51Z")

</div>

Hi Team, I am working on 7.10.2 kibana source code. On kibana UI i want to show build version which is dynamic in nature and gets changed on each build . How i can access environment variable inside header.tsx file. H…

---

## [Solarwinds alternative](https://discuss.elastic.co/t/solarwinds-alternative/260280)

<div class="topic-metadata">

**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 8:25pm UTC](https://discuss.elastic.co/t/solarwinds-alternative/260280 "2021-01-06T20:25:25Z")

</div>

Hi, We are looking to replace our current Solar Winds monitoring system using ELK stack. In this regard i' am looking out for any reference articles on architecture All out network infrastructure , Virtual machines are…

---

## [Logstash could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/254234)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 3\
**Last updated:** [November 5, 2020, 9:44pm UTC](https://discuss.elastic.co/t/logstash-could-not-index-event-to-elasticsearch/254234 "2020-11-05T21:44:31Z")

</div>

Hello eveybody, I am using Logstash to parse my firewall logs, and in some logs I am getting that errors: \[2020-11-03T16:07:22,361\]\[WARN \]\[logstash.outputs.elasticsearch\]\[main\]\[f05eea78ee20871f68357cbab5919471405decdd5…

---

## [Metricbeat (6.6.0) Windows Module Breaks in Win7 server](https://discuss.elastic.co/t/metricbeat-6-6-0-windows-module-breaks-in-win7-server/167589)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 3\
**Last updated:** [February 12, 2019, 12:38pm UTC](https://discuss.elastic.co/t/metricbeat-6-6-0-windows-module-breaks-in-win7-server/167589 "2019-02-12T12:38:33Z")

</div>

Hi- I was trying to pull the perfmon data from a Windows-7 Ultimate server, but it fails abruptly. When I enabled the debug mode and test the modules, I see the below log: C:\\Users\\Administrator\\Desktop\\metricbeat-6.6.…

---

## [Canvas for Kibana 6.4.1](https://discuss.elastic.co/t/canvas-for-kibana-6-4-1/149170)

<div class="topic-metadata">

**Author:** [@DaveRoss](https://discuss.elastic.co/u/DaveRoss)\
**Replies:** 3\
**Last updated:** [September 20, 2018, 1:13pm UTC](https://discuss.elastic.co/t/canvas-for-kibana-6-4-1/149170 "2018-09-20T13:13:51Z")

</div>

Hi there!, I tried to install Canvas but I'm getting this error: Plugin installation was unsuccessful due to error "Incorrect Kibana version in plugin \[canvas\]. Expected \[6.4.1\]; found \[6.4.0\]" I did install the last …

---

## [Elasticsearch 5.x: Is it possible to ignore missing inner object when indexing?](https://discuss.elastic.co/t/elasticsearch-5-x-is-it-possible-to-ignore-missing-inner-object-when-indexing/123328)

<div class="topic-metadata">

**Author:** [@shangsunset](https://discuss.elastic.co/u/shangsunset)\
**Replies:** 3\
**Last updated:** [March 9, 2018, 9:35pm UTC](https://discuss.elastic.co/t/elasticsearch-5-x-is-it-possible-to-ignore-missing-inner-object-when-indexing/123328 "2018-03-09T21:35:56Z")

</div>

So in my mapping shown below, lonlat is geo-shape inside location. "location": { "type": "object", "properties" : { "lonlat" : { "type" : "geo\_shape" }, ... } }, My problem is that when indexi…

---

## [How would you get full page hits out of apache logs?](https://discuss.elastic.co/t/how-would-you-get-full-page-hits-out-of-apache-logs/32892)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 3\
**Last updated:** [October 24, 2015, 9:48pm UTC](https://discuss.elastic.co/t/how-would-you-get-full-page-hits-out-of-apache-logs/32892 "2015-10-24T21:48:27Z")

</div>

Apache logs a message for every request. So you get a separate entry for every image/js/css file on every page. How would you filter that down to only hits on actual pages? As in, a user comes to /about. Apache logs hi…

---

## [Want advice for upgrade from 1.2.4 to 1.6.x](https://discuss.elastic.co/t/want-advice-for-upgrade-from-1-2-4-to-1-6-x/26383)

<div class="topic-metadata">

**Author:** [@xzer\_LR](https://discuss.elastic.co/u/xzer_LR)\
**Replies:** 3\
**Last updated:** [July 28, 2015, 5:50am UTC](https://discuss.elastic.co/t/want-advice-for-upgrade-from-1-2-4-to-1-6-x/26383 "2015-07-28T05:50:43Z")

</div>

Our elasticsearch clusters are runnin on 1.2.3/1.2.4, now we are planning to upgrade them to the newest stable version 1.6.x. Now we have two options to upgrade: upgrade them to 1.3.x, then to 1.4.x, then 1.5.x, fin…

---

## [Recursive queries (Perform new query based on previous results)](https://discuss.elastic.co/t/recursive-queries-perform-new-query-based-on-previous-results/19062)

<div class="topic-metadata">

**Author:** [@Andreas\_Hallberg](https://discuss.elastic.co/u/Andreas_Hallberg)\
**Replies:** 0\
**Last updated:** [August 4, 2014, 8:26am UTC](https://discuss.elastic.co/t/recursive-queries-perform-new-query-based-on-previous-results/19062 "2014-08-04T08:26:00Z")

</div>

Hi! I'm just starting to learn about ES and I have a question regarding recursive queries (I'm not sure that's the correct term for what I'm trying to do...). I'm using Logstash to index logs from multiple sources,…

---

## [Sort Doubt](https://discuss.elastic.co/t/sort-doubt/10817)

<div class="topic-metadata">

**Author:** [@Maria\_John\_Franklin](https://discuss.elastic.co/u/Maria_John_Franklin)\
**Replies:** 3\
**Last updated:** [February 22, 2013, 8:39am UTC](https://discuss.elastic.co/t/sort-doubt/10817 "2013-02-22T08:39:13Z")

</div>

{ "from" : 0, "size" :10, "fields" :\["id","co","prd","pd","st","int","ab","cls","pt"\], "query" : {"query\_string": { "query": "((test) AND ( (test1) OR (test2))) OR (test)"}}, "facets": { "tagi…

---

## [Unable to download csv from kibana dashboard, "we couldn't generate your csv at this time"](https://discuss.elastic.co/t/unable-to-download-csv-from-kibana-dashboard-we-couldnt-generate-your-csv-at-this-time/356991)

<div class="topic-metadata">

**Author:** [@robocop](https://discuss.elastic.co/u/robocop)\
**Replies:** 7\
**Last updated:** [April 19, 2024, 2:44pm UTC](https://discuss.elastic.co/t/unable-to-download-csv-from-kibana-dashboard-we-couldnt-generate-your-csv-at-this-time/356991 "2024-04-19T14:44:21Z")

</div>

Kibana 7.6.2 csv download failed we couldn't generate your csv at this time. I checked kibana.yml but there is no xpack.reporting.csv.maxSizeBytes mentioned in the settings. Also, I checked with a very small sample too …

---

## [Invalid license found](https://discuss.elastic.co/t/invalid-license-found/179092)

<div class="topic-metadata">

**Author:** [@Eddie35](https://discuss.elastic.co/u/Eddie35)\
**Replies:** 1\
**Last updated:** [April 30, 2019, 4:34pm UTC](https://discuss.elastic.co/t/invalid-license-found/179092 "2019-04-30T16:34:49Z")

</div>

Hello, I am installing ELK following the instructions on this website. https://www.digitalocean.com/community/tutorials/how-to-install-elasticsearch-logstash-and-kibana-elastic-stack-on-ubuntu-18-04. For the command s…

---

## [ML Job failed: autodetect process stopped unexpectedly: Fatal error](https://discuss.elastic.co/t/ml-job-failed-autodetect-process-stopped-unexpectedly-fatal-error/137867)

<div class="topic-metadata">

**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\
**Replies:** 1\
**Last updated:** [June 29, 2018, 9:12am UTC](https://discuss.elastic.co/t/ml-job-failed-autodetect-process-stopped-unexpectedly-fatal-error/137867 "2018-06-29T09:12:42Z")

</div>

Hi I am trying to use ML but it is failing with auto-detect process stopped unexpectedly The job is the nginx job from the filebeat-\* index that is preinstalled. The elastic log: \[2018-06-28T21:59:12,698\]\[INFO \]\[o.e.x…

---

## [Copying dashboard into different Kibana instance](https://discuss.elastic.co/t/copying-dashboard-into-different-kibana-instance/124235)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 1\
**Last updated:** [March 16, 2018, 4:03pm UTC](https://discuss.elastic.co/t/copying-dashboard-into-different-kibana-instance/124235 "2018-03-16T16:03:03Z")

</div>

Hi, I have two Kibana instances. Both have the same index with the same fields, mappings and etc. So, the data is identical. I made a dashboard on one of them. Is it possible to somehow copy the metadata of dashboard, o…

---

## [How to improve performance of relevant term chart. Not loading up for large data](https://discuss.elastic.co/t/how-to-improve-performance-of-relevant-term-chart-not-loading-up-for-large-data/108198)

<div class="topic-metadata">

**Author:** [@priyal](https://discuss.elastic.co/u/priyal)\
**Replies:** 7\
**Last updated:** [November 21, 2017, 6:12am UTC](https://discuss.elastic.co/t/how-to-improve-performance-of-relevant-term-chart-not-loading-up-for-large-data/108198 "2017-11-21T06:12:45Z")

</div>

I am new to this elastic and kibana set up so saying sorry in advance if asking some basic questions. I am using a 9 node cluster among which 3 master 8gb/2cpu 4 data 32gb/6cpu 2 client/kibana node 16gb/4cpu I…

---

## [Importing multiple csv files to different indexes in elastic by beats?](https://discuss.elastic.co/t/importing-multiple-csv-files-to-different-indexes-in-elastic-by-beats/97359)

<div class="topic-metadata">

**Author:** [@remziay](https://discuss.elastic.co/u/remziay)\
**Replies:** 1\
**Last updated:** [August 17, 2017, 10:07pm UTC](https://discuss.elastic.co/t/importing-multiple-csv-files-to-different-indexes-in-elastic-by-beats/97359 "2017-08-17T22:07:02Z")

</div>

Hello, is there a way to import different csv files to elastic (each csv have its own index on elastic) via beats?

---

## [Logstash and multi filebeat index (different)](https://discuss.elastic.co/t/logstash-and-multi-filebeat-index-different/86413)

<div class="topic-metadata">

**Author:** [@Globule](https://discuss.elastic.co/u/Globule)\
**Replies:** 1\
**Last updated:** [May 29, 2017, 8:17pm UTC](https://discuss.elastic.co/t/logstash-and-multi-filebeat-index-different/86413 "2017-05-29T20:17:52Z")

</div>

HI , I have set a wazuh ids server and a elk server a part... No problem with logstash and filebeat, no problem with kibana dashboard, but I have in logstash a config for parse filebeat wazuh log... and now I want to a…

---

## [Cisco ASA firewall patterns](https://discuss.elastic.co/t/cisco-asa-firewall-patterns/79573)

<div class="topic-metadata">

**Author:** [@caliph](https://discuss.elastic.co/u/caliph)\
**Replies:** 1\
**Last updated:** [March 22, 2017, 11:26am UTC](https://discuss.elastic.co/t/cisco-asa-firewall-patterns/79573 "2017-03-22T11:26:26Z")

</div>

I am new to Elastic and have been experimenting with syslog from my Cisco ASA firewall to logstash to get an understanding of it. I've followed the various instructions on the Internet to achieve this and managed to get …

---

## [How does a master node divide querry request between two nodes with the same dataset](https://discuss.elastic.co/t/how-does-a-master-node-divide-querry-request-between-two-nodes-with-the-same-dataset/58160)

<div class="topic-metadata">

**Author:** [@L0s](https://discuss.elastic.co/u/L0s)\
**Replies:** 7\
**Last updated:** [August 17, 2016, 9:18am UTC](https://discuss.elastic.co/t/how-does-a-master-node-divide-querry-request-between-two-nodes-with-the-same-dataset/58160 "2016-08-17T09:18:53Z")

</div>

Hey ! I was working on ES, with 3 Nodes, One master and Two data one. The usual way to work with this is to cut our data in 2 sets that you distribute between node A and node B, then when the master node is querrie…

---

## [Kibana-4.1 LDAP Authentication Issue](https://discuss.elastic.co/t/kibana-4-1-ldap-authentication-issue/43869)

<div class="topic-metadata">

**Author:** [@star](https://discuss.elastic.co/u/star)\
**Replies:** 1\
**Last updated:** [March 9, 2016, 8:08pm UTC](https://discuss.elastic.co/t/kibana-4-1-ldap-authentication-issue/43869 "2016-03-09T20:08:54Z")

</div>

Not able to load npm package 'ldap' in kibana. I'm trying to use the ldap package in kibana. Installed it by running npm install ldapjs and included it in package.json file Added the ldap entry in require.config.js an…

---

## [Logstash ElasticSearch IOException :](https://discuss.elastic.co/t/logstash-elasticsearch-ioexception/29664)

<div class="topic-metadata">

**Author:** [@BenjaminD](https://discuss.elastic.co/u/BenjaminD)\
**Replies:** 1\
**Last updated:** [September 28, 2015, 7:29am UTC](https://discuss.elastic.co/t/logstash-elasticsearch-ioexception/29664 "2015-09-28T07:29:47Z")

</div>

Hi all, I'm trying to use Logstash and ElasticSearch for the first time and I get some troubles doing so. ES version : 1.7.2 (also tried with 2.0.0 beta2 for the same result). Logstash version : 1.5.4 The context :…

---

## [ElasticSearch to SQL sync](https://discuss.elastic.co/t/elasticsearch-to-sql-sync/16487)

<div class="topic-metadata">

**Author:** [@Komal\_Parekh](https://discuss.elastic.co/u/Komal_Parekh)\
**Replies:** 7\
**Last updated:** [March 20, 2014, 6:27pm UTC](https://discuss.elastic.co/t/elasticsearch-to-sql-sync/16487 "2014-03-20T18:27:50Z")

</div>

Hello, We are running one application which has very large amount of data updating very frequently. And we are using SQL for any command like update/delete/add records. And for querying part we are using Elastic…

---

## [Numeric Range Query](https://discuss.elastic.co/t/numeric-range-query/2806)

<div class="topic-metadata">

**Author:** [@rabbit\_fr](https://discuss.elastic.co/u/rabbit_fr)\
**Replies:** 7\
**Last updated:** [February 12, 2010, 1:22pm UTC](https://discuss.elastic.co/t/numeric-range-query/2806 "2010-02-12T13:22:51Z")

</div>

Hi, I'd like to do combined range query on document like document { start: 10, stop: 20 } Querying using '{ query : { range : {start: { from :null, to: 15 } } }' works fine, but how to do something li…

---

## [Metricbeat ZFS capture volume size](https://discuss.elastic.co/t/metricbeat-zfs-capture-volume-size/282012)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 0\
**Last updated:** [August 19, 2021, 9:26pm UTC](https://discuss.elastic.co/t/metricbeat-zfs-capture-volume-size/282012 "2021-08-19T21:26:10Z")

</div>

After a few hours I've been unable to get Metricbeat to read ZFS stats. It looks like GitHub - maireanu/zfsbeat has gone stale as the last work was 2 years ago. Seeing as ZFS is nodev in /proc/filesystems the default f…

---

## [Issue with ILM](https://discuss.elastic.co/t/issue-with-ilm/264035)

<div class="topic-metadata">

**Author:** [@jamesp220291](https://discuss.elastic.co/u/jamesp220291)\
**Replies:** 0\
**Last updated:** [February 11, 2021, 4:13pm UTC](https://discuss.elastic.co/t/issue-with-ilm/264035 "2021-02-11T16:13:33Z")

</div>

Hi i am having an issue with iLM there error is - \`\> illegal\_argument\_exception: index.lifecycle.rollover\_alias \[filebeat\] does not point to index \[filebeat-test-2021.02.11-000001\]\` Logstash settings - elasticsearc…

---

## [What backend to use for EUI library?](https://discuss.elastic.co/t/what-backend-to-use-for-eui-library/254547)

<div class="topic-metadata">

**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\
**Replies:** 0\
**Last updated:** [November 6, 2020, 3:18pm UTC](https://discuss.elastic.co/t/what-backend-to-use-for-eui-library/254547 "2020-11-06T15:18:38Z")

</div>

The EUI react.js library looks very interesting. I'd like to experiment with it but I can't find any examples of the backend code people are using to connect to elasticsearch. Is there any recommendation for this?

---

## [Best practice on multilingual documents with fallback](https://discuss.elastic.co/t/best-practice-on-multilingual-documents-with-fallback/7259)

<div class="topic-metadata">

**Author:** [@Arny](https://discuss.elastic.co/u/Arny)\
**Replies:** 0\
**Last updated:** [April 7, 2012, 6:08pm UTC](https://discuss.elastic.co/t/best-practice-on-multilingual-documents-with-fallback/7259 "2012-04-07T18:08:39Z")

</div>

Hi, I'm just sitting here and trying to find a good solution to build a multilingual document which supports several languages, but also has its default language. Let's say I have something like this: doc: { de…

---

## [Shards of an index present only in one node in a multinode cluster](https://discuss.elastic.co/t/shards-of-an-index-present-only-in-one-node-in-a-multinode-cluster/284805)

<div class="topic-metadata">

**Author:** [@Srinivas1602](https://discuss.elastic.co/u/Srinivas1602)\
**Replies:** 4\
**Last updated:** [September 22, 2021, 7:18am UTC](https://discuss.elastic.co/t/shards-of-an-index-present-only-in-one-node-in-a-multinode-cluster/284805 "2021-09-22T07:18:37Z")

</div>

Hi, I have a multinode Elasticsearch setup with one master node and two data nodes. I created an index with number of shards as 2 and number of replicas as 1 and inserted the data in the index. However I see that both …

---

## [No error in logstash. But no data in kibana](https://discuss.elastic.co/t/no-error-in-logstash-but-no-data-in-kibana/262143)

<div class="topic-metadata">

**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\
**Replies:** 4\
**Last updated:** [January 26, 2021, 5:08pm UTC](https://discuss.elastic.co/t/no-error-in-logstash-but-no-data-in-kibana/262143 "2021-01-26T17:08:35Z")

</div>

I don't see any indices created in amazon ES. architecture filebeat-\> logstash-\> amazon ES. filebeat conf filebeat.inputs: - type: log paths: - /var/test.log fields: tags: test environment: uflek …

---

## [How to parse a csv file which has some field containing seprator (comma) as-values](https://discuss.elastic.co/t/how-to-parse-a-csv-file-which-has-some-field-containing-seprator-comma-as-values/223708)

<div class="topic-metadata">

**Author:** [@Shahid\_Mustafa](https://discuss.elastic.co/u/Shahid_Mustafa)\
**Replies:** 4\
**Last updated:** [March 17, 2020, 8:26am UTC](https://discuss.elastic.co/t/how-to-parse-a-csv-file-which-has-some-field-containing-seprator-comma-as-values/223708 "2020-03-17T08:26:20Z")

</div>

sample message - 111,222,333,444,555,val1in6th,val2in6th,777 The sixth column contains a value consisting of commas (val1in6th,val2in6th is a sample value of 6th column). When I use a simple csv filter this message is …

---

## [Generate UUID of the String(field) in logstash](https://discuss.elastic.co/t/generate-uuid-of-the-string-field-in-logstash/222943)

<div class="topic-metadata">

**Author:** [@Pink11](https://discuss.elastic.co/u/Pink11)\
**Replies:** 4\
**Last updated:** [March 10, 2020, 9:43pm UTC](https://discuss.elastic.co/t/generate-uuid-of-the-string-field-in-logstash/222943 "2020-03-10T21:43:42Z")

</div>

want to generate consistent UUID(Just like MD5) of the String(field) in logstash. Tried Using fingerprint with UUID but it gives random UUID.

---

## [Help needed On Nest using OIS](https://discuss.elastic.co/t/help-needed-on-nest-using-ois/118938)

<div class="topic-metadata">

**Author:** [@Joey\_Lu](https://discuss.elastic.co/u/Joey_Lu)\
**Replies:** 4\
**Last updated:** [February 9, 2018, 12:43am UTC](https://discuss.elastic.co/t/help-needed-on-nest-using-ois/118938 "2018-02-09T00:43:53Z")

</div>

So I am doing a keyword searching using Asp.Net and Elastic. This is my code (Dynamic Query): public List\<string\> SearchFiles(string\[\] searchPattern, string indexName, string docType, DateTime date) { IEnumer…

[Previous page](https://discuss.elastic.co/top.md?page=1448&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1450&per_page=50&period=all)
