# Top **URL:** https://discuss.elastic.co/top.md?page=1457&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1458 --- ## [Elasticsearch Security plugin exception](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461)
**Author:** [@akr](https://discuss.elastic.co/u/akr)\ **Replies:** 1\ **Last updated:** [December 20, 2019, 12:24pm UTC](https://discuss.elastic.co/t/elasticsearch-security-plugin-exception/212461 "2019-12-20T12:24:00Z")
I am getting error while working on ssl part of elasticsearch. stacktrace": \["org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: failed to load plugin class \[org.elasticsearch.xpack.core.XPac… --- ## [S3 dynamic folder naming in yyyy/mm/dd](https://discuss.elastic.co/t/s3-dynamic-folder-naming-in-yyyy-mm-dd/58879)
**Author:** [@lrem006](https://discuss.elastic.co/u/lrem006)\ **Replies:** 1\ **Last updated:** [August 25, 2016, 2:19pm UTC](https://discuss.elastic.co/t/s3-dynamic-folder-naming-in-yyyy-mm-dd/58879 "2016-08-25T14:19:21Z")
Someone on another website proposed a mechanism for dynamically creating folders in the YYYY/mm/dd for the s3 output plugin. Effectively changing the function "write\_on\_bucket" to the following starting few lines. This… --- ## [Visualize moving average and standard devaition of daily count](https://discuss.elastic.co/t/visualize-moving-average-and-standard-devaition-of-daily-count/32574)
**Author:** [@lucyy](https://discuss.elastic.co/u/lucyy)\ **Replies:** 1\ **Last updated:** [October 21, 2015, 5:22am UTC](https://discuss.elastic.co/t/visualize-moving-average-and-standard-devaition-of-daily-count/32574 "2015-10-21T05:22:02Z")
I'm working on twitter data and I search the tweet text using some key words (such as word 'flu'). Then I generate date\_histogram of daily counts of the tweets which contain the search key words ('flu') and visualize it … --- ## [Error when converting timestamp date](https://discuss.elastic.co/t/error-when-converting-timestamp-date/26327)
**Author:** [@EricK](https://discuss.elastic.co/u/EricK)\ **Replies:** 1\ **Last updated:** [July 27, 2015, 7:14am UTC](https://discuss.elastic.co/t/error-when-converting-timestamp-date/26327 "2015-07-27T07:14:08Z")
Trying to add date from field (start\_date) to @timestamp using the following filter: date { match =\> \[ "start\_date", "yyyy-MM-dd HH:mm:ss Z" \] } start\_date is in the format: 2015-07-26 11:54:43 +0100 I get the followi… --- ## [Illegal reflective access errors](https://discuss.elastic.co/t/illegal-reflective-access-errors/323020)
**Author:** [@djrshn2346](https://discuss.elastic.co/u/djrshn2346)\ **Replies:** 6\ **Last updated:** [January 23, 2023, 9:58am UTC](https://discuss.elastic.co/t/illegal-reflective-access-errors/323020 "2023-01-23T09:58:24Z")
Getting Illegal reflective access errors along with these warnings: WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by org.jruby.ext.openssl.SecurityHelper (file:/{...}… --- ## [Create alerts for logs ingestion in kibana](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:16am UTC](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772 "2022-02-07T04:16:07Z")
Hello, I'm trying to create an alert for log ingestion alert. ex- If we have one index pattern and logs stopped coming to the kibana for the last 5 min, Can we create an alert for this in kibana? --- ## [How is the score of Significant Term aggregation calculated?](https://discuss.elastic.co/t/how-is-the-score-of-significant-term-aggregation-calculated/141329)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 6\ **Last updated:** [August 15, 2018, 2:16pm UTC](https://discuss.elastic.co/t/how-is-the-score-of-significant-term-aggregation-calculated/141329 "2018-08-15T14:16:57Z")
It's a little confusing how is the score of Significant Term aggregation calculated. Another thing is about the criteria of highlighting significant items. I know that a term is considered significant if there is a notic… --- ## [ES V2.x version on Ubuntu 16.04](https://discuss.elastic.co/t/es-v2-x-version-on-ubuntu-16-04/68135)
**Author:** [@Nikhil\_R](https://discuss.elastic.co/u/Nikhil_R)\ **Replies:** 6\ **Last updated:** [December 6, 2016, 4:26pm UTC](https://discuss.elastic.co/t/es-v2-x-version-on-ubuntu-16-04/68135 "2016-12-06T16:26:23Z")
Does anyone here have a working cluster of ES v2.3.x version on Ubuntu 16.04. From the support metrics ES v2.x wont be supported on 16.04, however it would take us time to migrate to 5.x versions of ES --- ## [Lens Formula subtract first and last document](https://discuss.elastic.co/t/lens-formula-subtract-first-and-last-document/330837)
**Author:** [@deepack86](https://discuss.elastic.co/u/deepack86)\ **Replies:** 2\ **Last updated:** [May 9, 2023, 8:05am UTC](https://discuss.elastic.co/t/lens-formula-subtract-first-and-last-document/330837 "2023-05-09T08:05:37Z")
I want to subtract the last and the first document from a timerange to check how much engergy was consumed. So i make a lens with a formula like this : (last\_value(value.value\_float32) - min(value.value\_float32)) . I ta… --- ## [Parse Vsftp log (Filebeat + Logstash)](https://discuss.elastic.co/t/parse-vsftp-log-filebeat-logstash/288040)
**Author:** [@Hecha](https://discuss.elastic.co/u/Hecha)\ **Replies:** 2\ **Last updated:** [November 9, 2021, 8:21pm UTC](https://discuss.elastic.co/t/parse-vsftp-log-filebeat-logstash/288040 "2021-11-09T20:21:12Z")
Hello guys! I am trying to parse the logs of my FTP server (Vsftpd) with logstash but I am having trouble. The logs follow the following format Fri Oct 29 17:16:17 2021 \[pid 22947\] CONNECT: Client "::ffff:10.0.1.6" Fri… --- ## [Is my data stream not rolling over to a new index like it's supposed to?](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515)
**Author:** [@nsouth](https://discuss.elastic.co/u/nsouth)\ **Replies:** 2\ **Last updated:** [October 25, 2021, 10:30am UTC](https://discuss.elastic.co/t/is-my-data-stream-not-rolling-over-to-a-new-index-like-its-supposed-to/287515 "2021-10-25T10:30:56Z")
We have a data stream created by Logstash and it's using the default index template and ILM policy. My understanding is that the data stream should roll over to a new index once the initial index has 50 GB of data or is … --- ## [Some documented fields (e.g. kubernetes.container.image) missing from events](https://discuss.elastic.co/t/some-documented-fields-e-g-kubernetes-container-image-missing-from-events/185217)
**Author:** [@bagratte](https://discuss.elastic.co/u/bagratte)\ **Replies:** 2\ **Last updated:** [June 13, 2019, 4:21pm UTC](https://discuss.elastic.co/t/some-documented-fields-e-g-kubernetes-container-image-missing-from-events/185217 "2019-06-13T16:21:13Z")
As per https://www.elastic.co/guide/en/beats/filebeat/current/configuration-autodiscover.html#\_kubernetes, kubernetes.container.image is available in filebeat events. Consider a deployment of filebeat on a Kubernetes cl… --- ## [Kibana -- Transform / Window / Rank not working in Vega v2](https://discuss.elastic.co/t/kibana-transform-window-rank-not-working-in-vega-v2/145749)
**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 11:18am UTC](https://discuss.elastic.co/t/kibana-transform-window-rank-not-working-in-vega-v2/145749 "2018-09-10T11:18:48Z")
Hi, My Vega code seems not working. I'm using Vega v2. I copied the sample online for window transform =\> rank operation, but the "rank" field is not showing up. I put a tooltip for field "exe" to show that it actually … --- ## [Discovery.zen.ping.unicast.hosts and custom ports](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-and-custom-ports/104530)
**Author:** [@toper](https://discuss.elastic.co/u/toper)\ **Replies:** 2\ **Last updated:** [October 19, 2017, 11:52am UTC](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-and-custom-ports/104530 "2017-10-19T11:52:31Z")
Hi, could somebody explain why i need to point ALL nodes (with ports) in discovery.zen.ping.unicast.hosts setting (my data nodes use custom http/transport ports)? My understanding was, that i need to point master nodes… --- ## [Remove event received from Metricbeat to Logstash](https://discuss.elastic.co/t/remove-event-received-from-metricbeat-to-logstash/85336)
**Author:** [@sumitbiswas](https://discuss.elastic.co/u/sumitbiswas)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 10:28am UTC](https://discuss.elastic.co/t/remove-event-received-from-metricbeat-to-logstash/85336 "2017-05-11T10:28:03Z")
Hi, I am using a setup where Metricbeat running in remote server sends data to Logstash. Metricbeat sends tons of data to Logstash and I don't want everything to be stored by Elasticsearch. At each interval, Logstash … --- ## [Lovebeat installation](https://discuss.elastic.co/t/lovebeat-installation/48440)
**Author:** [@Luke3](https://discuss.elastic.co/u/Luke3)\ **Replies:** 2\ **Last updated:** [April 27, 2016, 1:27pm UTC](https://discuss.elastic.co/t/lovebeat-installation/48440 "2016-04-27T13:27:13Z")
Hi. My intent is monitoring the health of logstash using heartbeat and lovebeat. The environment is under proxy and the npm is alredy set to work under proxy. Are the following commands correct? At the end I'm unable to… --- ## [Redmine output plugin](https://discuss.elastic.co/t/redmine-output-plugin/41409)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 2\ **Last updated:** [February 10, 2016, 7:19pm UTC](https://discuss.elastic.co/t/redmine-output-plugin/41409 "2016-02-10T19:19:48Z")
I am trying to use the redmine output plugin to write tickets to my redmine database. my config works but my question is how to make the description field more robust. I am trying to use description =\> "%{message}" so… --- ## [Can't seem to get custom interval to work in URI query](https://discuss.elastic.co/t/cant-seem-to-get-custom-interval-to-work-in-uri-query/25098)
**Author:** [@maxandkaia](https://discuss.elastic.co/u/maxandkaia)\ **Replies:** 2\ **Last updated:** [July 9, 2015, 9:46pm UTC](https://discuss.elastic.co/t/cant-seem-to-get-custom-interval-to-work-in-uri-query/25098 "2015-07-09T21:46:21Z")
I'm pretty new to this, so this may def be just pilot error...apologies up front if so... This feature is documented for regular queries as such: "aggs" : { "articles\_over\_time" : { "date\_histogra… --- ## [Tomcat and SEVERE messages in the output](https://discuss.elastic.co/t/tomcat-and-severe-messages-in-the-output/4284)
**Author:** [@Enrique\_Medina\_Monte](https://discuss.elastic.co/u/Enrique_Medina_Monte)\ **Replies:** 2\ **Last updated:** [April 26, 2011, 3:38pm UTC](https://discuss.elastic.co/t/tomcat-and-severe-messages-in-the-output/4284 "2011-04-26T15:38:25Z")
Hi, I'm trying to pinpoint some issues I have with my current environment, and found a bunch of this messages in the Tomcat console output: Apr 24, 2011 8:35:49 PM org.apache.catalina.loader.WebappClassLoader cle… --- ## [Linear regression to forecast demand](https://discuss.elastic.co/t/linear-regression-to-forecast-demand/101324)
**Author:** [@clandestino\_bgd\_2](https://discuss.elastic.co/u/clandestino_bgd_2)\ **Replies:** 0\ **Last updated:** [September 21, 2017, 11:56am UTC](https://discuss.elastic.co/t/linear-regression-to-forecast-demand/101324 "2017-09-21T11:56:15Z")
Hello, I am trying to come up with optimal way to forecast the purchase time for Product P and User U. We currently index these events in ES (pushed by e-commerce system) orderId,user,product,quantity,time,days "orde… --- ## [Custom Icon for Kibana App Category](https://discuss.elastic.co/t/custom-icon-for-kibana-app-category/272847)
**Author:** [@amartin-layer3com](https://discuss.elastic.co/u/amartin-layer3com)\ **Replies:** 1\ **Last updated:** [May 13, 2021, 9:14am UTC](https://discuss.elastic.co/t/custom-icon-for-kibana-app-category/272847 "2021-05-13T09:14:34Z")
Our business uses a simple in-house kibana plugin to present dashboard links in the sidebar. Here is an image illustrating how this might look: To get this to work, we have an custom AppCategory in our plugin: c… --- ## [Best way to remove CDATA Infos in xml](https://discuss.elastic.co/t/best-way-to-remove-cdata-infos-in-xml/164470)
**Author:** [@humalog](https://discuss.elastic.co/u/humalog)\ **Replies:** 1\ **Last updated:** [January 16, 2019, 3:55pm UTC](https://discuss.elastic.co/t/best-way-to-remove-cdata-infos-in-xml/164470 "2019-01-16T15:55:20Z")
Hello, I have an XML with several CDATA Info in my values. I don't want them there. What is the best way to delete this infos? I tried with using filter { mutate { gsub }} but is there an easier solution? Here is an e… --- ## [No logs on Kibana discover under filebeat-\* index](https://discuss.elastic.co/t/no-logs-on-kibana-discover-under-filebeat-index/156136)
**Author:** [@Shahid\_Chaudhary](https://discuss.elastic.co/u/Shahid_Chaudhary)\ **Replies:** 1\ **Last updated:** [November 12, 2018, 8:51pm UTC](https://discuss.elastic.co/t/no-logs-on-kibana-discover-under-filebeat-index/156136 "2018-11-12T20:51:33Z")
I installed new ELK server single node . on the first login i am getting the error of indice idex . here is my filebeat logs form y ELK server. sudo service filebeat restart root@ip-172-31-10-222:# sudo tail -f /var… --- ## [Pipeline to ingest data from multiple files in a folder - not responsive](https://discuss.elastic.co/t/pipeline-to-ingest-data-from-multiple-files-in-a-folder-not-responsive/124167)
**Author:** [@jason\_smith](https://discuss.elastic.co/u/jason_smith)\ **Replies:** 1\ **Last updated:** [March 16, 2018, 7:06am UTC](https://discuss.elastic.co/t/pipeline-to-ingest-data-from-multiple-files-in-a-folder-not-responsive/124167 "2018-03-16T07:06:10Z")
I am trying to ingest multiple files in a folder into Elasticsearch. I am using ELK 6.0 version on windows 8 OS. logstash -f ingestcars.config command is non-responsive. The log says "pipeline is running". If I try to … --- ## [Cannot aggregate long string](https://discuss.elastic.co/t/cannot-aggregate-long-string/101552)
**Author:** [@thlai15](https://discuss.elastic.co/u/thlai15)\ **Replies:** 1\ **Last updated:** [September 23, 2017, 4:21pm UTC](https://discuss.elastic.co/t/cannot-aggregate-long-string/101552 "2017-09-23T16:21:07Z")
I have an implementation where I need to aggregate strings of potentially long length. It appears not working in Elasticsearch. I ran the following example in Elasticsearch 5.5.1 Create the following two indexes: { "n… --- ## [Elasticsearch active failed](https://discuss.elastic.co/t/elasticsearch-active-failed/100140)
**Author:** [@yrizal](https://discuss.elastic.co/u/yrizal)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 1:24am UTC](https://discuss.elastic.co/t/elasticsearch-active-failed/100140 "2017-09-12T01:24:18Z")
Hello, OS = centos7, install in vm java version openjdk version "1.8.0\_102" OpenJDK Runtime Environment (build 1.8.0\_102-b14) OpenJDK 64-Bit Server VM (build 25.102-b14, mixed mode) the first time when install elas… --- ## [How to configure log4j in ELK statck](https://discuss.elastic.co/t/how-to-configure-log4j-in-elk-statck/85236)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 1\ **Last updated:** [May 10, 2017, 11:57am UTC](https://discuss.elastic.co/t/how-to-configure-log4j-in-elk-statck/85236 "2017-05-10T11:57:01Z")
I have installed logstash log4j filter plugin.When i check logstash Configtest ,i have the following Warning log4j:WARN No appenders could be found for logger (org.apache.http.impl.conn.PoolingHttpClientConnectionManag… --- ## [Split xml xpath](https://discuss.elastic.co/t/split-xml-xpath/84336)
**Author:** [@daian.martinho](https://discuss.elastic.co/u/daian.martinho)\ **Replies:** 1\ **Last updated:** [May 3, 2017, 5:40am UTC](https://discuss.elastic.co/t/split-xml-xpath/84336 "2017-05-03T05:40:29Z")
Hi, when parsing 4 xml files, sometimes the first and sometimes the last one has parse error. (cant split nillclass) . Am I doing something wrong? input { beats { port =\> "5044" } } filter { ## i… --- ## [SparkSQL to Elasticsearch compatibility problem](https://discuss.elastic.co/t/sparksql-to-elasticsearch-compatibility-problem/78848)
**Author:** [@Eduardo\_Curonisy](https://discuss.elastic.co/u/Eduardo_Curonisy)\ **Replies:** 1\ **Last updated:** [March 16, 2017, 5:51pm UTC](https://discuss.elastic.co/t/sparksql-to-elasticsearch-compatibility-problem/78848 "2017-03-16T17:51:02Z")
Hi, I have one cluster with hadoop (cloudera 5.8) and another separate cluster with ES 5.2.2. I want yo use Spark to write data from Hive to ES, but i have problems with Java version. Java version: 1.7 ES version: 5.2.… --- ## [Unable to start ELK in linux machine?](https://discuss.elastic.co/t/unable-to-start-elk-in-linux-machine/69273)
**Author:** [@sivaakurati](https://discuss.elastic.co/u/sivaakurati)\ **Replies:** 1\ **Last updated:** [December 16, 2016, 9:54am UTC](https://discuss.elastic.co/t/unable-to-start-elk-in-linux-machine/69273 "2016-12-16T09:54:26Z")
unable to install syscall filter: java.lang.UnsupportedOperationException: seccomp unavailable: requires kernel 3.5+ with CONFIG\_SECCOMP and CONFIG\_SECCOMP\_FILTER compiled in at org.elasticsearch.bootstrap.Seccom… --- ## [Must\_exist](https://discuss.elastic.co/t/must-exist/249009)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 5\ **Last updated:** [September 18, 2020, 4:26pm UTC](https://discuss.elastic.co/t/must-exist/249009 "2020-09-18T16:26:05Z")
Hi there! How do I use the must\_exist alias attribute that appeared in version 7.9? This is what I try: curl -sS -X POST http://localhost:9200/\_aliases?timeout=15m&master\_timeout=15m -H Content-Type: application/js… --- ## [Elastic 6.1 Internode communication error: SSL handshake exception](https://discuss.elastic.co/t/elastic-6-1-internode-communication-error-ssl-handshake-exception/121910)
**Author:** [@Aby](https://discuss.elastic.co/u/Aby)\ **Replies:** 5\ **Last updated:** [March 5, 2018, 10:01am UTC](https://discuss.elastic.co/t/elastic-6-1-internode-communication-error-ssl-handshake-exception/121910 "2018-03-05T10:01:52Z")
I have a 3 node cluster with 1 master and 2 data nodes. SSL/TSL has been setup by getting organization signed certificate. When i seperate the nodes within the cluster by assigning different cluster names and starting … --- ## [Contains query in elastic search](https://discuss.elastic.co/t/contains-query-in-elastic-search/351932)
**Author:** [@post90](https://discuss.elastic.co/u/post90)\ **Replies:** 3\ **Last updated:** [January 28, 2024, 12:28pm UTC](https://discuss.elastic.co/t/contains-query-in-elastic-search/351932 "2024-01-28T12:28:43Z")
How do we do a contains string search in elasticsearch in more than 1 field efficiently e.g text "denis tomas" should be searchable by query "tom". I stumbled upon query\_string query but usage of wildcards make it ineffi… --- ## [Search UI Set Sort Dynamically](https://discuss.elastic.co/t/search-ui-set-sort-dynamically/316020)
**Author:** [@tchocky](https://discuss.elastic.co/u/tchocky)\ **Replies:** 3\ **Last updated:** [October 11, 2022, 7:05am UTC](https://discuss.elastic.co/t/search-ui-set-sort-dynamically/316020 "2022-10-11T07:05:36Z")
Hi all - I am using the React Search UI with Elastic Cloud. I am looking for a way to set the search results order dynamically based on if the search box is populated. The logic is: Always default to a sort of date des… --- ## [User Agent Device Name](https://discuss.elastic.co/t/user-agent-device-name/180299)
**Author:** [@anushshukla](https://discuss.elastic.co/u/anushshukla)\ **Replies:** 3\ **Last updated:** [May 9, 2019, 2:17pm UTC](https://discuss.elastic.co/t/user-agent-device-name/180299 "2019-05-09T14:17:52Z")
In the kibana logs of the RUM events (APM transaction events) at the Elastic Cloud APM servers, we have got the raw user agent string like Mozilla/5.0 (Linux; Android 7.1.1; SM-C900F) AppleWebKit/537.36 (KHTML, like Ge… --- ## [Organisation des documents dans Elasticsearch](https://discuss.elastic.co/t/organisation-des-documents-dans-elasticsearch/86424)
**Author:** [@bouboune](https://discuss.elastic.co/u/bouboune)\ **Replies:** 3\ **Last updated:** [May 22, 2017, 8:41am UTC](https://discuss.elastic.co/t/organisation-des-documents-dans-elasticsearch/86424 "2017-05-22T08:41:39Z")
Bonjour, Je suis entrain de mettre en place un système de centralisation des logs applicatifs. Mon cluster est constitué d'un nœud (12go dédié à Elasticsearch). J'ai un index(5 shards sans réplica) par jour avec un … --- ## [Grok doesn't work](https://discuss.elastic.co/t/grok-doesnt-work/85645)
**Author:** [@Eduard\_Kolesnikov](https://discuss.elastic.co/u/Eduard_Kolesnikov)\ **Replies:** 3\ **Last updated:** [May 14, 2017, 6:03am UTC](https://discuss.elastic.co/t/grok-doesnt-work/85645 "2017-05-14T06:03:20Z")
Hello, i have some problem with grok. my\_config.conf: input { stdin {} } filter { grok { } } output { stdout { codec =\> rubydebug } } but grok doesn't work. logs: Sending Logstash's logs to /home/em/… --- ## [FEATURE REQUEST: parent.field query support for query\_string queries](https://discuss.elastic.co/t/feature-request-parent-field-query-support-for-query-string-queries/40920)
**Author:** [@Darren\_Rush](https://discuss.elastic.co/u/Darren_Rush)\ **Replies:** 3\ **Last updated:** [February 9, 2016, 6:36pm UTC](https://discuss.elastic.co/t/feature-request-parent-field-query-support-for-query-string-queries/40920 "2016-02-09T18:36:46Z")
I am requesting that query\_string queries be able to specify parent fields as part of the query\_string query. This should not cause any scaling challenges as parent-child mapping ensures that both documents will be loca… --- ## [How to send Ajax query with JQuery (Search API - Request Body) to Elasticsearch server](https://discuss.elastic.co/t/how-to-send-ajax-query-with-jquery-search-api-request-body-to-elasticsearch-server/4248)
**Author:** [@miha](https://discuss.elastic.co/u/miha)\ **Replies:** 0\ **Last updated:** [April 18, 2011, 4:24pm UTC](https://discuss.elastic.co/t/how-to-send-ajax-query-with-jquery-search-api-request-body-to-elasticsearch-server/4248 "2011-04-18T16:24:58Z")
Hello, I want to perform an Ajax request to elasticsearch server in both forms: through search api - URI request and Request Body. For the first case the request looks like this: ... The above… --- ## [Kibana - sentinl calculating alert](https://discuss.elastic.co/t/kibana-sentinl-calculating-alert/156459)
**Author:** [@cemkuleyin](https://discuss.elastic.co/u/cemkuleyin)\ **Replies:** 4\ **Last updated:** [November 26, 2018, 3:41pm UTC](https://discuss.elastic.co/t/kibana-sentinl-calculating-alert/156459 "2018-11-26T15:41:18Z")
Hi everyone, I want to create alert on sentinl. But i stucked. In our case, we have two field, i want to calculate field1 / field2 and sent notification via email. But i cannot do that. Our codes are, input =\> { "s… --- ## [RabbitMq Plugin issue](https://discuss.elastic.co/t/rabbitmq-plugin-issue/144088)
**Author:** [@Tigryss](https://discuss.elastic.co/u/Tigryss)\ **Replies:** 4\ **Last updated:** [August 16, 2018, 7:50am UTC](https://discuss.elastic.co/t/rabbitmq-plugin-issue/144088 "2018-08-16T07:50:46Z")
Hi i have an ActiveMQ server which sending me a log4j messages, so I try connect with logstash-input-rabbitmq input { rabbitmq { host =\> "testurl" port =\> 18062 queue =\> "ELK.PLAY.QUEUE" } } \[2018-08-13T06:56:… --- ## [UpdateByQueryRequestBuilder unit test](https://discuss.elastic.co/t/updatebyqueryrequestbuilder-unit-test/142716)
**Author:** [@dondon](https://discuss.elastic.co/u/dondon)\ **Replies:** 4\ **Last updated:** [August 2, 2018, 10:29am UTC](https://discuss.elastic.co/t/updatebyqueryrequestbuilder-unit-test/142716 "2018-08-02T10:29:02Z")
Hello, i need some help to working with unit test. I want to create unit test to update data using UpdateByQueryRequestBuilder But i always got an error like these java.lang.NullPointerException at org.elasticsear… --- ## [How Can I make my csv fields available on the Filter drop down in Kibana when discovering the data via the index?](https://discuss.elastic.co/t/how-can-i-make-my-csv-fields-available-on-the-filter-drop-down-in-kibana-when-discovering-the-data-via-the-index/107643)
**Author:** [@sconrod](https://discuss.elastic.co/u/sconrod)\ **Replies:** 4\ **Last updated:** [December 1, 2017, 8:11pm UTC](https://discuss.elastic.co/t/how-can-i-make-my-csv-fields-available-on-the-filter-drop-down-in-kibana-when-discovering-the-data-via-the-index/107643 "2017-12-01T20:11:19Z")
Below have pasted the .conf file and the mappings output: root@ubuntu-16:/etc/logstash/conf.d# cat bzip4-v4.conf input { file { path =\> "/opt/sample-data/csv/bzip4/\*.csv" start\_position =\> "beginning" sincedb\_path… --- ## [After insert document\_id at logstash, elastic stops receiveing data](https://discuss.elastic.co/t/after-insert-document-id-at-logstash-elastic-stops-receiveing-data/101223)
**Author:** [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)\ **Replies:** 4\ **Last updated:** [September 20, 2017, 6:30pm UTC](https://discuss.elastic.co/t/after-insert-document-id-at-logstash-elastic-stops-receiveing-data/101223 "2017-09-20T18:30:11Z")
HI guys Using debian + logstash+kibana+logstash version 5.6.0 If I insert document\_id at output elastic , I do not receive any new input at elasticsearch. Part of logstash file: input { file { path =\> "/var/log/fir… --- ## [Make different routing key to isolated shard](https://discuss.elastic.co/t/make-different-routing-key-to-isolated-shard/67158)
**Author:** [@compasses](https://discuss.elastic.co/u/compasses)\ **Replies:** 4\ **Last updated:** [November 25, 2016, 11:19am UTC](https://discuss.elastic.co/t/make-different-routing-key-to-isolated-shard/67158 "2016-11-25T11:19:32Z")
as we know the routing cannot make sure each shard have only one routing value. is there any way to make the routing key have one shard, means new routing key, new shard. --- ## [Need help for local Elastic node to read a kafka message (from Zookeeper)](https://discuss.elastic.co/t/need-help-for-local-elastic-node-to-read-a-kafka-message-from-zookeeper/53789)
**Author:** [@naren](https://discuss.elastic.co/u/naren)\ **Replies:** 4\ **Last updated:** [June 24, 2016, 4:37am UTC](https://discuss.elastic.co/t/need-help-for-local-elastic-node-to-read-a-kafka-message-from-zookeeper/53789 "2016-06-24T04:37:44Z")
Hi- from local elastic node ,need help to read a kafka message from Zookeeper. --- ## [Filebeat PostgreSQL module not parsing message](https://discuss.elastic.co/t/filebeat-postgresql-module-not-parsing-message/267464)
**Author:** [@martinfrancois](https://discuss.elastic.co/u/martinfrancois)\ **Replies:** 2\ **Last updated:** [March 19, 2021, 9:01am UTC](https://discuss.elastic.co/t/filebeat-postgresql-module-not-parsing-message/267464 "2021-03-19T09:01:37Z")
We are using filebeat 7.11.0 along with the postgresql module. However for some reason, the message attribute seems not to be touched, although some metadata seems to be added by the module. Our log messages look to be … --- ## [Does the .tar.gz archive include the systemd module?](https://discuss.elastic.co/t/does-the-tar-gz-archive-include-the-systemd-module/259372)
**Author:** [@JDP](https://discuss.elastic.co/u/JDP)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 11:20am UTC](https://discuss.elastic.co/t/does-the-tar-gz-archive-include-the-systemd-module/259372 "2020-12-22T11:20:58Z")
Hi all, I have a working installation of Elasticsearch 7.10.1 on Debian 10.7, which was installed via the tar.gz archive into /opt/elasticseach, however I'm having trouble using systemd to control startup\\shutdown. Bec… --- ## [Painless scrip error in kibana](https://discuss.elastic.co/t/painless-scrip-error-in-kibana/227526)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 2\ **Last updated:** [May 4, 2020, 7:56am UTC](https://discuss.elastic.co/t/painless-scrip-error-in-kibana/227526 "2020-05-04T07:56:58Z")
HI Team, I'm working on scripted field to generate userid value in separate field and please find my error detail with script. Script: def m = /.\*UserID/.matcher(doc\['message.keyword'\].value); if ( m.matches() ) { … --- ## [Errors related to http requests](https://discuss.elastic.co/t/errors-related-to-http-requests/216515)
**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\ **Replies:** 2\ **Last updated:** [January 26, 2020, 10:08am UTC](https://discuss.elastic.co/t/errors-related-to-http-requests/216515 "2020-01-26T10:08:21Z")
Hello, from time to time I see the next errors among elasticsearch logs: \[2020-01-25T01:20:41,285\]\[ERROR\]\[o.e.r.RestController \] failed to send failure response for uri \[/\] java.lang.IllegalArgumentException: Unex… [Previous page](https://discuss.elastic.co/top.md?page=1456&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1458&per_page=50&period=all)