# Top **URL:** https://discuss.elastic.co/top.md?page=1450&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1451 --- ## [Conflicts of OS versions](https://discuss.elastic.co/t/conflicts-of-os-versions/101556)
**Author:** [@Balamurali](https://discuss.elastic.co/u/Balamurali)\ **Replies:** 1\ **Last updated:** [September 23, 2017, 8:26am UTC](https://discuss.elastic.co/t/conflicts-of-os-versions/101556 "2017-09-23T08:26:10Z")
HI all, We are using elasticsearch 1.3.7 cluster , we are working hardly on upgrading es version. We are need to add more nodes to cluster for some high performance urgently. now all ES nodes are running in centos6.7… --- ## [Mapping advice](https://discuss.elastic.co/t/mapping-advice/53740)
**Author:** [@mangetout](https://discuss.elastic.co/u/mangetout)\ **Replies:** 4\ **Last updated:** [June 23, 2016, 10:37am UTC](https://discuss.elastic.co/t/mapping-advice/53740 "2016-06-23T10:37:53Z")
Hello, I am extremely new to elasticsearch so be gentle, please. I would like to get some advice on a mapping problem I am facing. I know that a type, once set, cannot be changed so if it is a string has to be a stri… --- ## [Cloud-aws plugin overwrites snapshots](https://discuss.elastic.co/t/cloud-aws-plugin-overwrites-snapshots/52462)
**Author:** [@ajays20078](https://discuss.elastic.co/u/ajays20078)\ **Replies:** 4\ **Last updated:** [June 11, 2016, 6:34am UTC](https://discuss.elastic.co/t/cloud-aws-plugin-overwrites-snapshots/52462 "2016-06-11T06:34:51Z")
The Cloud Aws plugin , overwrites the earlier snapshots in the bucket. Doesn't it impact restore operation? Or is this the expected behaviour? Also how do we purge snapshot older than x days, is purging files older than … --- ## [Migrate bulk lookup from Oracle - performance problem](https://discuss.elastic.co/t/migrate-bulk-lookup-from-oracle-performance-problem/46261)
**Author:** [@rasmushalland](https://discuss.elastic.co/u/rasmushalland)\ **Replies:** 4\ **Last updated:** [April 6, 2016, 2:51pm UTC](https://discuss.elastic.co/t/migrate-bulk-lookup-from-oracle-performance-problem/46261 "2016-04-06T14:51:52Z")
Hi, I'm trying to migrate a text search tool from oracle to elasticsearch. It's working, but unfortunately searching is a lot slower than the oracle version, and I'm hoping for clues as to what can be done about it. W… --- ## [Logs are getting parsed multiple times due to ?\[31mA plugin. can some one help me on this issue](https://discuss.elastic.co/t/logs-are-getting-parsed-multiple-times-due-to-31ma-plugin-can-some-one-help-me-on-this-issue/33293)
**Author:** [@sree1](https://discuss.elastic.co/u/sree1)\ **Replies:** 4\ **Last updated:** [November 2, 2015, 9:14am UTC](https://discuss.elastic.co/t/logs-are-getting-parsed-multiple-times-due-to-31ma-plugin-can-some-one-help-me-on-this-issue/33293 "2015-11-02T09:14:53Z")
I am newbie to elk . currently,I am working with logstash-2.0.0-beta2 . whenever, I will run my logstash conf file .I am getting following errors. 1)io/console not supported; tty will not be manipulated 2)Error: No such … --- ## [Query\_string query operator precedence](https://discuss.elastic.co/t/query-string-query-operator-precedence/297183)
**Author:** [@MrFantastic2022](https://discuss.elastic.co/u/MrFantastic2022)\ **Replies:** 2\ **Last updated:** [February 15, 2022, 2:56pm UTC](https://discuss.elastic.co/t/query-string-query-operator-precedence/297183 "2022-02-15T14:56:49Z")
Hello. When constructing a query\_string query, what is the precedence of the operators? For instance, the example given is this AND that OR thus. So does it AND this/that, then OR with thus? Or does it OR then AND? … --- ## [Logstash fails on startup](https://discuss.elastic.co/t/logstash-fails-on-startup/285170)
**Author:** [@hazenvs](https://discuss.elastic.co/u/hazenvs)\ **Replies:** 2\ **Last updated:** [September 26, 2021, 7:36pm UTC](https://discuss.elastic.co/t/logstash-fails-on-startup/285170 "2021-09-26T19:36:16Z")
So I've narrowed this issue down to this line in my example.conf (/etc/logstash/conf.d/example.conf) input { tcp { port =\> 5002 type =\> syslog } udp { port =\> 5002 type =\> syslog } beats { … --- ## [ElasticSearch Query string returns total hits different than scroll](https://discuss.elastic.co/t/elasticsearch-query-string-returns-total-hits-different-than-scroll/275462)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 2\ **Last updated:** [June 9, 2021, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-query-string-returns-total-hits-different-than-scroll/275462 "2021-06-09T17:01:11Z")
Hi There, I run query string against new ES V7 which expected to return 25k result set, but only returns total hit 1000, when running the same query but using scroll, it returns the expected correct count of 25k as a to… --- ## [Hot and cold data nodes](https://discuss.elastic.co/t/hot-and-cold-data-nodes/203191)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 2\ **Last updated:** [October 11, 2019, 12:49pm UTC](https://discuss.elastic.co/t/hot-and-cold-data-nodes/203191 "2019-10-11T12:49:53Z")
hello, I've got 2 clusters one is nice and fast with SSD storage, lean indexes (although many of them) and if I cycle a node in that cluster it will recover from yellow back to green in about 30 mins. The other uses spin… --- ## [Is CONTAINS deprecated in 7.x?](https://discuss.elastic.co/t/is-contains-deprecated-in-7-x/180001)
**Author:** [@tstirrat](https://discuss.elastic.co/u/tstirrat)\ **Replies:** 2\ **Last updated:** [May 10, 2019, 4:36pm UTC](https://discuss.elastic.co/t/is-contains-deprecated-in-7-x/180001 "2019-05-10T16:36:37Z")
I found documentation here that still references CONTAINS, but also includes a deprecation notice. The following doctype declaration works: "bounding\_box": { "type": "geo\_sha… --- ## [Error parsing syslog input message in Logstash](https://discuss.elastic.co/t/error-parsing-syslog-input-message-in-logstash/172530)
**Author:** [@lcavator](https://discuss.elastic.co/u/lcavator)\ **Replies:** 2\ **Last updated:** [March 15, 2019, 2:43pm UTC](https://discuss.elastic.co/t/error-parsing-syslog-input-message-in-logstash/172530 "2019-03-15T14:43:17Z")
Hi to all, I'm trying to parse a syslog message (coming from vmWare Log Insight) to obtain additional fields added inside the message body string, and then send them in json format to a kafka broker. This is an example… --- ## [System status (Green, Yellow, Red) for specific watcher](https://discuss.elastic.co/t/system-status-green-yellow-red-for-specific-watcher/71710)
**Author:** [@Marek\_Leszczynski](https://discuss.elastic.co/u/Marek_Leszczynski)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 10:27am UTC](https://discuss.elastic.co/t/system-status-green-yellow-red-for-specific-watcher/71710 "2017-01-17T10:27:57Z")
Hello, I'm setting up watchers in our system and I want to know if there is a possibility to recognize status (Green, Yellow, Red) for watcher. E.g If connection with some service went down and we will have 3 exceptions … --- ## [Mess query lags the ElasticSearch Server](https://discuss.elastic.co/t/mess-query-lags-the-elasticsearch-server/57910)
**Author:** [@renego](https://discuss.elastic.co/u/renego)\ **Replies:** 2\ **Last updated:** [August 13, 2016, 9:38am UTC](https://discuss.elastic.co/t/mess-query-lags-the-elasticsearch-server/57910 "2016-08-13T09:38:14Z")
Hi, I had the problem, that some bots are executing some mess queries to my ealsticsearch. In my logs, there we many logs in this way: at java.lang.Thread.run(Thread.java:745) \[2016-08-11 07:03:54,166\]\[DEBUG\]\[acti… --- ## [Syslog filters for Versa Networks](https://discuss.elastic.co/t/syslog-filters-for-versa-networks/156113)
**Author:** [@Zorkmid](https://discuss.elastic.co/u/Zorkmid)\ **Replies:** 0\ **Last updated:** [November 9, 2018, 10:28pm UTC](https://discuss.elastic.co/t/syslog-filters-for-versa-networks/156113 "2018-11-09T22:28:09Z")
Hello, Has any one work with Syslog output from Versa Network's SD-WAND products? I'm working on a POC with Versa and would like to see the output from the SD-WAN devices be ingested into ES via logstash. The following… --- ## [Elasticsearch Lab LangChain Sample App Requirements](https://discuss.elastic.co/t/elasticsearch-lab-langchain-sample-app-requirements/347181)
**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\ **Replies:** 5\ **Last updated:** [November 16, 2023, 9:00am UTC](https://discuss.elastic.co/t/elasticsearch-lab-langchain-sample-app-requirements/347181 "2023-11-16T09:00:46Z")
Hello Elastic, I found this github to run my own sample apps for a starting point for my project Elastic LangChain Sample App I would like to run this apps but I notice it requires Elastic Could ID? Currently I've be… --- ## [Elasticsearch snapshots fail everyday](https://discuss.elastic.co/t/elasticsearch-snapshots-fail-everyday/335747)
**Author:** [@ramdas](https://discuss.elastic.co/u/ramdas)\ **Replies:** 5\ **Last updated:** [June 14, 2023, 11:23am UTC](https://discuss.elastic.co/t/elasticsearch-snapshots-fail-everyday/335747 "2023-06-14T11:23:01Z")
Hi, I am using elasticsearch 8.7 in out production cluster on Azure kubernetes platform which has 8 data and master nodes and almost 4TB per node disks being used to store our observability data. we have 699 indexes as … --- ## [Winlogbeat output config problems](https://discuss.elastic.co/t/winlogbeat-output-config-problems/295628)
**Author:** [@jlareos](https://discuss.elastic.co/u/jlareos)\ **Replies:** 5\ **Last updated:** [January 28, 2022, 10:21am UTC](https://discuss.elastic.co/t/winlogbeat-output-config-problems/295628 "2022-01-28T10:21:01Z")
Hi everyone! I have installed in a VMWare machine the Security Onion OS. On the same machine i have installed winlogbeat and i'm having problems with the yml file. When i execute this command ./winlogbeat test config … --- ## [Use filebeat file output as logstash input](https://discuss.elastic.co/t/use-filebeat-file-output-as-logstash-input/187904)
**Author:** [@maddin2016](https://discuss.elastic.co/u/maddin2016)\ **Replies:** 5\ **Last updated:** [July 2, 2019, 3:57pm UTC](https://discuss.elastic.co/t/use-filebeat-file-output-as-logstash-input/187904 "2019-07-02T15:57:35Z")
I want to use the file output from filebeat as file input in logstash because there is no direct connection between the both systems. Here is my logstash config input { file { path =\> "/home/martin/logs/filebeat\*"… --- ## [Is it possible to have a time filter based on an integer field?](https://discuss.elastic.co/t/is-it-possible-to-have-a-time-filter-based-on-an-integer-field/151021)
**Author:** [@OphyTe](https://discuss.elastic.co/u/OphyTe)\ **Replies:** 5\ **Last updated:** [October 9, 2018, 12:16pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-time-filter-based-on-an-integer-field/151021 "2018-10-09T12:16:27Z")
Hi, I have an integer field which store a date in UNIX\_MS format (number of milliseconds since epoch). How can I do to base my time filter on it ? Do I have to duplicate the field in a Date format ? Isn't that heavy t… --- ## [Official Kibana Plugin Demo](https://discuss.elastic.co/t/official-kibana-plugin-demo/124898)
**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\ **Replies:** 5\ **Last updated:** [March 22, 2018, 1:36am UTC](https://discuss.elastic.co/t/official-kibana-plugin-demo/124898 "2018-03-22T01:36:28Z")
Hi, I went through the official demo of Kibana hello world plugin. Everything is good except when I run the command"npm start", it shows npm ERR! code ELIFECYCLE npm ERR! errno 1 npm ERR! demo@0.0.0 start: \`plugin-helpe… --- ## [Metricbeat fields defaults](https://discuss.elastic.co/t/metricbeat-fields-defaults/100365)
**Author:** [@GogLlundain](https://discuss.elastic.co/u/GogLlundain)\ **Replies:** 5\ **Last updated:** [September 14, 2017, 2:31pm UTC](https://discuss.elastic.co/t/metricbeat-fields-defaults/100365 "2017-09-14T14:31:33Z")
Hi, I'm running a test cluster and a production cluster, metricbeats is one of the things posting data into both of these. In the metricbeat-\* index pattern on my dev cluster the host field is searchable and aggregatab… --- ## [Need help configuring my grok filters](https://discuss.elastic.co/t/need-help-configuring-my-grok-filters/79500)
**Author:** [@Rich\_Johnson](https://discuss.elastic.co/u/Rich_Johnson)\ **Replies:** 5\ **Last updated:** [March 23, 2017, 6:02pm UTC](https://discuss.elastic.co/t/need-help-configuring-my-grok-filters/79500 "2017-03-23T18:02:09Z")
As I am only starting to test with ElasticStack, I have only configured 3 hosts with filebeat installed to forward apache logs to logstash. My grok filter looks like this: input { beats { port =\> "5044" … --- ## [Sorting on nested elements](https://discuss.elastic.co/t/sorting-on-nested-elements/318)
**Author:** [@blake1024](https://discuss.elastic.co/u/blake1024)\ **Replies:** 5\ **Last updated:** [May 10, 2015, 9:53pm UTC](https://discuss.elastic.co/t/sorting-on-nested-elements/318 "2015-05-10T21:53:36Z")
Greetings, I have a query that I want to be sorted by specific nested elements. I get back the correct result with no errors, but it is not sorted. I feel confident that it is something to do with the "sort" element … --- ## [Https:9200 without user/password and certificate](https://discuss.elastic.co/t/https-9200-without-user-password-and-certificate/361514)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 6\ **Last updated:** [June 14, 2024, 5:43pm UTC](https://discuss.elastic.co/t/https-9200-without-user-password-and-certificate/361514 "2024-06-14T17:43:14Z")
Can I setup elasticsearch, so I can use curl like this curl https://server:9200 if yes what are the settings in yml --- ## [Oracle cloud S3 repository - No Snapshots after restart](https://discuss.elastic.co/t/oracle-cloud-s3-repository-no-snapshots-after-restart/218363)
**Author:** [@Alrik\_Geselle](https://discuss.elastic.co/u/Alrik_Geselle)\ **Replies:** 6\ **Last updated:** [February 11, 2020, 9:34am UTC](https://discuss.elastic.co/t/oracle-cloud-s3-repository-no-snapshots-after-restart/218363 "2020-02-11T09:34:11Z")
Hi there, I have a problem with the snapshot API when it comes to use it with a S3 repository on oracle cloud. My elasticsearch 7.5.2 instance is running inside a docker container. GET /\_snapshot/s3\_repository/ retur… --- ## [Can anyone explain this exception](https://discuss.elastic.co/t/can-anyone-explain-this-exception/5475)
**Author:** [@Steff](https://discuss.elastic.co/u/Steff)\ **Replies:** 6\ **Last updated:** [October 2, 2011, 12:56pm UTC](https://discuss.elastic.co/t/can-anyone-explain-this-exception/5475 "2011-10-02T12:56:12Z")
I sometimes get the following exception when running one of my unittests against ES. The exception is returned to me in a ActionListener.onFailure object that I give as a parameter when I call execute on SearchRequest… --- ## [JSON Schema of the Elasticsearch Query DSL](https://discuss.elastic.co/t/json-schema-of-the-elasticsearch-query-dsl/272600)
**Author:** [@kyoh86](https://discuss.elastic.co/u/kyoh86)\ **Replies:** 1\ **Last updated:** [May 12, 2021, 10:19am UTC](https://discuss.elastic.co/t/json-schema-of-the-elasticsearch-query-dsl/272600 "2021-05-12T10:19:39Z")
Recently, it has become quite common to define JSON Schema for various JSON format documents and publish them to assist editors and other development environments. For example, JSON Schema Store is a very good example o… --- ## [Django 데이터를 logstash로 elasticsearch에 뿌리고 싶습니다](https://discuss.elastic.co/t/django-logstash-elasticsearch/244107)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 1\ **Last updated:** [August 31, 2020, 7:30am UTC](https://discuss.elastic.co/t/django-logstash-elasticsearch/244107 "2020-08-31T07:30:33Z")
현재 장고 웹서버를 구축했고 로그스태시를 연결하여 엘라스틱서치에 뿌리는 작업을 하고 있습니다. 로그스태시 인풋은 tcp를 사용했는데요. 아래처럼 django 파일의 settings.py를 설정해줬고요. LOGGING = { 'version': 1, 'disable\_existing\_loggers': False, 'formatters': { 'simple':… --- ## [APM Agent for Perl](https://discuss.elastic.co/t/apm-agent-for-perl/179629)
**Author:** [@juanxho](https://discuss.elastic.co/u/juanxho)\ **Replies:** 1\ **Last updated:** [May 6, 2019, 3:00am UTC](https://discuss.elastic.co/t/apm-agent-for-perl/179629 "2019-05-06T03:00:44Z")
Hi, everyone. I am working on Globant Consultant, and one of our client it's LATAM Airlines. Some great percentage of their legacy code its on perl 5.14, we tried to used new\_relic agent but we have many inconsistencies… --- ## [Filebeat not starting at startup](https://discuss.elastic.co/t/filebeat-not-starting-at-startup/124679)
**Author:** [@lfk](https://discuss.elastic.co/u/lfk)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 8:58am UTC](https://discuss.elastic.co/t/filebeat-not-starting-at-startup/124679 "2018-03-20T08:58:05Z")
I've installed Filebeat on an Ubuntu 16.04 server (AWS EC2) according to the instructions here, including running sudo update-rc.d filebeat defaults 95 10 However, I still have to run sudo service filebeat start to s… --- ## [Performing a regex search in Kibana dev tools](https://discuss.elastic.co/t/performing-a-regex-search-in-kibana-dev-tools/119273)
**Author:** [@ghouston10](https://discuss.elastic.co/u/ghouston10)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 7:38pm UTC](https://discuss.elastic.co/t/performing-a-regex-search-in-kibana-dev-tools/119273 "2018-02-09T19:38:40Z")
Hi, I am trying to perform a regex search in dev tools within kibana. Current query: GET test/\_search { "query": { "regexp":{ "BATAPSN": ".BDT\[0-9\]{4}." } } } I want the query to identify BDT, followed by 4 nu… --- ## [How to track/monitor logstash errors](https://discuss.elastic.co/t/how-to-track-monitor-logstash-errors/88762)
**Author:** [@saisn](https://discuss.elastic.co/u/saisn)\ **Replies:** 1\ **Last updated:** [June 9, 2017, 3:44am UTC](https://discuss.elastic.co/t/how-to-track-monitor-logstash-errors/88762 "2017-06-09T03:44:36Z")
Hi, I've multiple logstash process setup and scheduled every 5 minutes. Here, I'd like to include a mechanism that capture any error or exception thrown by logstash process and eventually trigger an alert in the form o… --- ## [Red status after unexpected stop](https://discuss.elastic.co/t/red-status-after-unexpected-stop/17387)
**Author:** [@Arnau\_Arnauito](https://discuss.elastic.co/u/Arnau_Arnauito)\ **Replies:** 1\ **Last updated:** [May 8, 2014, 1:11pm UTC](https://discuss.elastic.co/t/red-status-after-unexpected-stop/17387 "2014-05-08T13:11:54Z")
Hello all, I did ask similar question to logstash mailing-list, but as I've debugging the problem and it's 100% EL related I've decided to ask for help here. I have a 1 node EL cluster filled from logstash. Ever… --- ## [Shard balance is by default is confusing, can someone pls explain?](https://discuss.elastic.co/t/shard-balance-is-by-default-is-confusing-can-someone-pls-explain/364048)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 8\ **Last updated:** [August 23, 2024, 6:54am UTC](https://discuss.elastic.co/t/shard-balance-is-by-default-is-confusing-can-someone-pls-explain/364048 "2024-08-23T06:54:01Z")
Below is the default values for balance. ES 8.9. "disk\_usage": "2.0E-11", "index": "0.55", "threshold": "1.0", "shard": "0.45", "write\_load": "10.0" Fyi : In above default values… --- ## [Elastic search SaveJsontoEs Hadoop Libra dropping documents without throwing error or warning](https://discuss.elastic.co/t/elastic-search-savejsontoes-hadoop-libra-dropping-documents-without-throwing-error-or-warning/323384)
**Author:** [@Bhuvesh\_Seth](https://discuss.elastic.co/u/Bhuvesh_Seth)\ **Replies:** 8\ **Last updated:** [January 27, 2023, 7:51pm UTC](https://discuss.elastic.co/t/elastic-search-savejsontoes-hadoop-libra-dropping-documents-without-throwing-error-or-warning/323384 "2023-01-27T19:51:59Z")
Hi, we are using Elasticsearch Hadoop library to index the documents from Spark job. We are facing one weird issue where the documents are not getting indexed without throwing any error or exception. Method used: rdd.Sa… --- ## [How to use elastic ui within angular plugin](https://discuss.elastic.co/t/how-to-use-elastic-ui-within-angular-plugin/321973)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 3\ **Last updated:** [January 23, 2023, 10:36am UTC](https://discuss.elastic.co/t/how-to-use-elastic-ui-within-angular-plugin/321973 "2023-01-23T10:36:02Z")
Hi, I am building a custom external plugin using Angular. I want to use Elastic UI for styling. How can I use it within angular? Thanks --- ## [How to calculate the cost of elasticsearch in AWS?](https://discuss.elastic.co/t/how-to-calculate-the-cost-of-elasticsearch-in-aws/292995)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [December 28, 2021, 2:46pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-cost-of-elasticsearch-in-aws/292995 "2021-12-28T14:46:13Z")
Hi, we are considering moving , one of our cluster, from on premise to AWS, is there a calculator to get how much it will cost? or a blog page, your personal experiences... the cluster has 3 nodes and 3 teras of data. --- ## [Filter winlog.event\_id in wineventlog](https://discuss.elastic.co/t/filter-winlog-event-id-in-wineventlog/206507)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 3\ **Last updated:** [November 28, 2019, 2:01am UTC](https://discuss.elastic.co/t/filter-winlog-event-id-in-wineventlog/206507 "2019-11-28T02:01:52Z")
Dear all I am trying to filter the window event\_id i want to remove the message field and add my own field But i have try 3 method i can think of like this \[winlog\]\[event\_id\] == 4624 winlog.event\_id == 4624 \[event\_i… --- ## [Kibana restarts every 14seconds](https://discuss.elastic.co/t/kibana-restarts-every-14seconds/204319)
**Author:** [@b4dr4b11t](https://discuss.elastic.co/u/b4dr4b11t)\ **Replies:** 3\ **Last updated:** [October 30, 2019, 8:15am UTC](https://discuss.elastic.co/t/kibana-restarts-every-14seconds/204319 "2019-10-30T08:15:38Z")
Hi, This is a newly installed Elasticsearch and Kibana on CentOS7 Core. This system was hardened following "CIS\_CentOS\_Linux\_7\_Benchmark\_v2.2.0.pdf". I'm experiencing a very weird situation wherein Kibana restarts every… --- ## [How to update filebeat grok filter](https://discuss.elastic.co/t/how-to-update-filebeat-grok-filter/185725)
**Author:** [@marcandre](https://discuss.elastic.co/u/marcandre)\ **Replies:** 3\ **Last updated:** [June 15, 2019, 6:40pm UTC](https://discuss.elastic.co/t/how-to-update-filebeat-grok-filter/185725 "2019-06-15T18:40:24Z")
Hello, I would like to know if you have a link or a step by step guide on how to add more format for filebeat? Looking to add more format for filebeat apache module. Latest version. Provided Grok expressions do not ma… --- ## [Best practices for documents in date sequence](https://discuss.elastic.co/t/best-practices-for-documents-in-date-sequence/94407)
**Author:** [@EdGreenberg](https://discuss.elastic.co/u/EdGreenberg)\ **Replies:** 3\ **Last updated:** [July 26, 2017, 12:32am UTC](https://discuss.elastic.co/t/best-practices-for-documents-in-date-sequence/94407 "2017-07-26T00:32:15Z")
Tonight I got my first ElasticStore instance running, along with my first index. I was able to write to the instance using the PHP API, which is my use case. This is cool stuff. I have an application that logs oper… --- ## [Logstash pipeline not ingesting entire file](https://discuss.elastic.co/t/logstash-pipeline-not-ingesting-entire-file/84035)
**Author:** [@dolanmk](https://discuss.elastic.co/u/dolanmk)\ **Replies:** 3\ **Last updated:** [May 4, 2017, 3:46pm UTC](https://discuss.elastic.co/t/logstash-pipeline-not-ingesting-entire-file/84035 "2017-05-04T15:46:36Z")
Hi, I'm having an issue with my pipeline not reading all of the lines in my file. I am sure the pattern matches all of the lines. I am using a sample log file with 5 lines of standard syntax for my grok pattern. How… --- ## [Y-axis tick intervals](https://discuss.elastic.co/t/y-axis-tick-intervals/53799)
**Author:** [@Omnibro](https://discuss.elastic.co/u/Omnibro)\ **Replies:** 3\ **Last updated:** [June 23, 2016, 4:28pm UTC](https://discuss.elastic.co/t/y-axis-tick-intervals/53799 "2016-06-23T16:28:15Z")
Tick marks on the Y-axis seem to be automatically created, however they can end up as very odd values. Is there a way to define the intervals you want the ticks to appear? --- ## [Using multiple geo\_points per document, return matched geo\_point(s)](https://discuss.elastic.co/t/using-multiple-geo-points-per-document-return-matched-geo-point-s/47796)
**Author:** [@japel](https://discuss.elastic.co/u/japel)\ **Replies:** 3\ **Last updated:** [May 4, 2016, 10:55am UTC](https://discuss.elastic.co/t/using-multiple-geo-points-per-document-return-matched-geo-point-s/47796 "2016-05-04T10:55:05Z")
I index documents with each an array of geo\_points. I am able to do a distance search returning only those documents with geo\_points within a certain radius of another geo location. Is there any way to determine which ge… --- ## [Is there any way to create aliases for new (Future) index also in elasticsearch?](https://discuss.elastic.co/t/is-there-any-way-to-create-aliases-for-new-future-index-also-in-elasticsearch/39569)
**Author:** [@thiruna](https://discuss.elastic.co/u/thiruna)\ **Replies:** 3\ **Last updated:** [January 26, 2016, 8:47pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-create-aliases-for-new-future-index-also-in-elasticsearch/39569 "2016-01-26T20:47:54Z")
Hello, We can able to create aliases and filters for the existing indexes without any issues. However we are not able to create aliases for the new indexes. Is there any way to create aliases for new (Future) index… --- ## [How to index the Google Geocode](https://discuss.elastic.co/t/how-to-index-the-google-geocode/23799)
**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\ **Replies:** 3\ **Last updated:** [June 17, 2015, 6:25am UTC](https://discuss.elastic.co/t/how-to-index-the-google-geocode/23799 "2015-06-17T06:25:48Z")
I Have google Geocode API, which works well with JSON response, here is the GET curl -XGET https://maps.googleapis.com/maps/api/geocode/json?address=USA here is the response { "results" : \[ { "add… --- ## [Replicating one cluster to another cluster](https://discuss.elastic.co/t/replicating-one-cluster-to-another-cluster/15132)
**Author:** [@Zuhaib\_Siddique](https://discuss.elastic.co/u/Zuhaib_Siddique)\ **Replies:** 3\ **Last updated:** [January 8, 2014, 6:17pm UTC](https://discuss.elastic.co/t/replicating-one-cluster-to-another-cluster/15132 "2014-01-08T18:17:11Z")
Hey, Was wondering if anyone has tried replicating one cluster to a new cluster and keep it in "sync". Example is I have a production cluster and i need to reindex all data. I would like to do this in a 2nd clus… --- ## [Boosting fields](https://discuss.elastic.co/t/boosting-fields/13857)
**Author:** [@benmccann](https://discuss.elastic.co/u/benmccann)\ **Replies:** 3\ **Last updated:** [October 5, 2013, 7:34pm UTC](https://discuss.elastic.co/t/boosting-fields/13857 "2013-10-05T19:34:39Z")
I want to query on numerous fields and have some fields be weighted much more heavily than other fields. Only one field needs to match to return a result, but if multiple match I'd like the scores to combine to a hig… --- ## [Snapshots Compression](https://discuss.elastic.co/t/snapshots-compression/306932)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 2\ **Last updated:** [June 11, 2022, 12:58pm UTC](https://discuss.elastic.co/t/snapshots-compression/306932 "2022-06-11T12:58:03Z")
What is the difference if I toggle switch On the Snapshot Compression? What's the difference when I leave it as Off? Does it any make sense? --- ## [Multiple pipelines mixing records in indexes](https://discuss.elastic.co/t/multiple-pipelines-mixing-records-in-indexes/285705)
**Author:** [@Danny\_Dumenigo](https://discuss.elastic.co/u/Danny_Dumenigo)\ **Replies:** 2\ **Last updated:** [October 4, 2021, 12:35pm UTC](https://discuss.elastic.co/t/multiple-pipelines-mixing-records-in-indexes/285705 "2021-10-04T12:35:13Z")
Hello Community: Im a new user at ELK. I have deployed an ELK stack and everything works fine except for my Logstash pipelines. I explain myself: I have a Logstash server with 3 pipelines defined: Pipeline 1: Manage a… [Previous page](https://discuss.elastic.co/top.md?page=1449&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1451&per_page=50&period=all)