# Top **URL:** https://discuss.elastic.co/top.md?page=1464&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1465 --- ## [Old vs new configuration settings](https://discuss.elastic.co/t/old-vs-new-configuration-settings/175330)
**Author:** [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\ **Replies:** 1\ **Last updated:** [April 4, 2019, 7:25am UTC](https://discuss.elastic.co/t/old-vs-new-configuration-settings/175330 "2019-04-04T07:25:10Z")
Hello I'm upgrade my Elasticsearch/Logstash Cluster form 6.6.x to 6.7.0 I saw in the logs some notice, that I'm using old config settings, which will not work after 7.0.0. Like old: xpack.monitoring.elasticsearch.url … --- ## [Failed to create event](https://discuss.elastic.co/t/failed-to-create-event/86006)
**Author:** [@craftytech1](https://discuss.elastic.co/u/craftytech1)\ **Replies:** 1\ **Last updated:** [May 17, 2017, 2:10pm UTC](https://discuss.elastic.co/t/failed-to-create-event/86006 "2017-05-17T14:10:06Z")
using ELK stack 5.3. I'm getting the following error message: \[ERROR\]\[logstash.inputs.metrics \] Failed to create monitoring event {:message=\>"For path: events", :error=\>"LogStash::Instrument::MetricStore::MetricNotFoun… --- ## [Is it possible to share saved searches between users?](https://discuss.elastic.co/t/is-it-possible-to-share-saved-searches-between-users/79044)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 1\ **Last updated:** [March 17, 2017, 2:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-share-saved-searches-between-users/79044 "2017-03-17T14:47:57Z")
Can one user share a saved search with other users through the "Load Saved Search" button? If so how? I know one can click on the "Share" button and then copy/paste the link but that is not what I'm talking about. --- ## [Running out of space on main disk - will altering path.data help?](https://discuss.elastic.co/t/running-out-of-space-on-main-disk-will-altering-path-data-help/61958)
**Author:** [@botninja](https://discuss.elastic.co/u/botninja)\ **Replies:** 1\ **Last updated:** [October 1, 2016, 10:09am UTC](https://discuss.elastic.co/t/running-out-of-space-on-main-disk-will-altering-path-data-help/61958 "2016-10-01T10:09:59Z")
Hey all. I have a running single node ES that is running out of disk space. If I add another drive to the machine, format it and add it to the path.data so I have the line: path.data\["/var/lib/elasticsearch/data", "/… --- ## [Which charting library does Kibana use?](https://discuss.elastic.co/t/which-charting-library-does-kibana-use/26864)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 1\ **Last updated:** [August 7, 2015, 1:44am UTC](https://discuss.elastic.co/t/which-charting-library-does-kibana-use/26864 "2015-08-07T01:44:44Z")
Which charting library does kibana use for making its charts?? --- ## [What is the multi-threading model for querying & indexing?](https://discuss.elastic.co/t/what-is-the-multi-threading-model-for-querying-indexing/5025)
**Author:** [@Paul\_Sabou](https://discuss.elastic.co/u/Paul_Sabou)\ **Replies:** 1\ **Last updated:** [August 2, 2011, 10:33am UTC](https://discuss.elastic.co/t/what-is-the-multi-threading-model-for-querying-indexing/5025 "2011-08-02T10:33:29Z")
Hi, I searched for this information all over the site and the old/new mailing list and I could not find anything specific, explaining the multi threading model for the indexing/querying. Could you guys provide mo… --- ## [Nest : Bulk insert or update](https://discuss.elastic.co/t/nest-bulk-insert-or-update/165058)
**Author:** [@srikanthkadem](https://discuss.elastic.co/u/srikanthkadem)\ **Replies:** 0\ **Last updated:** [January 21, 2019, 2:01pm UTC](https://discuss.elastic.co/t/nest-bulk-insert-or-update/165058 "2019-01-21T14:01:10Z")
Hi , Can any one provide sample code to insertorupdate document into ES index. I tried below code but it is creating single document (i have 300 rows in sql). I want to have single method to insert or update as I am not… --- ## [Ruby script to quickly parse URL for easier filtering or use in visualizations](https://discuss.elastic.co/t/ruby-script-to-quickly-parse-url-for-easier-filtering-or-use-in-visualizations/145003)
**Author:** [@mbreest](https://discuss.elastic.co/u/mbreest)\ **Replies:** 0\ **Last updated:** [August 18, 2018, 11:40am UTC](https://discuss.elastic.co/t/ruby-script-to-quickly-parse-url-for-easier-filtering-or-use-in-visualizations/145003 "2018-08-18T11:40:48Z")
Hi folks, just wanted to share the Ruby script that we use for parsing the URLs the we receive in our CDN logs to do further analysis on it. It is a mix of what you can do with Grok plugin (https://www.elastic.co/guide/… --- ## [Filebeat - cannot change pipeline in nginx module](https://discuss.elastic.co/t/filebeat-cannot-change-pipeline-in-nginx-module/219360)
**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\ **Replies:** 2\ **Last updated:** [February 19, 2020, 9:12pm UTC](https://discuss.elastic.co/t/filebeat-cannot-change-pipeline-in-nginx-module/219360 "2020-02-19T21:12:31Z")
Hi, For processing our nginx access logs, we'd like to use a custom pipeline. Therefore I've changed the configuration to: - module: nginx # Access logs access: enabled: true input: pipeline: filebeat… --- ## [Add version for Mapping](https://discuss.elastic.co/t/add-version-for-mapping/313047)
**Author:** [@Ghassan\_Karwchan](https://discuss.elastic.co/u/Ghassan_Karwchan)\ **Replies:** 1\ **Last updated:** [August 27, 2022, 12:50am UTC](https://discuss.elastic.co/t/add-version-for-mapping/313047 "2022-08-27T00:50:13Z")
Hi. A newbie question. Can I add some kind of versioning for the mapping itself and not the document. So, it is not a property or attribute of the document being indexed, but the mapping itself. So, when I request th… --- ## [Restore an index on single node only](https://discuss.elastic.co/t/restore-an-index-on-single-node-only/298250)
**Author:** [@rihad](https://discuss.elastic.co/u/rihad)\ **Replies:** 4\ **Last updated:** [February 26, 2022, 6:04am UTC](https://discuss.elastic.co/t/restore-an-index-on-single-node-only/298250 "2022-02-26T06:04:20Z")
Hi, we have a 3-node ES cluster. Each node provides both master-eligible & data role. Is it possible to restore an index there temporarily without spreading its contents across all nodes? Just the current node or the cur… --- ## [Disaster Recovery - Non-Enterprise version](https://discuss.elastic.co/t/disaster-recovery-non-enterprise-version/293897)
**Author:** [@rajeev.j.khanna](https://discuss.elastic.co/u/rajeev.j.khanna)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 2:50pm UTC](https://discuss.elastic.co/t/disaster-recovery-non-enterprise-version/293897 "2022-01-10T14:50:06Z")
Hi Team, We are using the open-source version of ELK. We want to implement a Disaster Recovery (DR) solution for our application. That means ELK LOGS has to be replicated. How can we do this? (Please do not share the… --- ## [Watcher: comparing two fields from different indexes](https://discuss.elastic.co/t/watcher-comparing-two-fields-from-different-indexes/276699)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 4\ **Last updated:** [June 29, 2021, 9:00am UTC](https://discuss.elastic.co/t/watcher-comparing-two-fields-from-different-indexes/276699 "2021-06-29T09:00:11Z")
Hi, Im running a chained input watch with two queries: "first" and "second", and comparing the fields partition\_field\_value from "first" against hostname from "second", Im certain that in both indexes exist a partition\_… --- ## [What is the propper way to create in logstash checkpoint filter](https://discuss.elastic.co/t/what-is-the-propper-way-to-create-in-logstash-checkpoint-filter/273309)
**Author:** [@Enrique\_Pedroza](https://discuss.elastic.co/u/Enrique_Pedroza)\ **Replies:** 4\ **Last updated:** [May 19, 2021, 8:55am UTC](https://discuss.elastic.co/t/what-is-the-propper-way-to-create-in-logstash-checkpoint-filter/273309 "2021-05-19T08:55:21Z")
I have a ELK stack in my server, in other pc i have filebeat listening for Checkpoint syslogs. I know i have to write the filters in a .conf file. This is mine : filter{ if "checkpoint-firewall" in \[tags\] { gro… --- ## [Elastic Search service is stopped and disabled in services.msc](https://discuss.elastic.co/t/elastic-search-service-is-stopped-and-disabled-in-services-msc/257672)
**Author:** [@Bhavrendra](https://discuss.elastic.co/u/Bhavrendra)\ **Replies:** 4\ **Last updated:** [December 15, 2020, 2:05pm UTC](https://discuss.elastic.co/t/elastic-search-service-is-stopped-and-disabled-in-services-msc/257672 "2020-12-15T14:05:09Z")
Hi, i have a machine with 1 node, 16gb RAM and 500gb HDD. I'm using filebeats to read data for around 15 applications and each days index is reading and storing around 53gb of logs data per day. Recently when i see that … --- ## [Implementing a "set" type in Elasticsearch](https://discuss.elastic.co/t/implementing-a-set-type-in-elasticsearch/231628)
**Author:** [@pushshift](https://discuss.elastic.co/u/pushshift)\ **Replies:** 4\ **Last updated:** [May 10, 2020, 11:04pm UTC](https://discuss.elastic.co/t/implementing-a-set-type-in-elasticsearch/231628 "2020-05-10T23:04:09Z")
As a test, I have a very basic mapping that consists of an id field and a "colors" text field. I want the colors field to only hold one of each type of color. If a color already exists in the colors field, I don't want t… --- ## [TSVB multiple axis](https://discuss.elastic.co/t/tsvb-multiple-axis/208218)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 4\ **Last updated:** [November 22, 2019, 1:08am UTC](https://discuss.elastic.co/t/tsvb-multiple-axis/208218 "2019-11-22T01:08:43Z")
4 data are shown in TSVB. Two of them(current error, last hour error) added the y-axis separately. like this... 'current error' and 'last hour error' use the same format y-axis. Can I have two y-axes appear only … --- ## [German Number Formats in Kibana](https://discuss.elastic.co/t/german-number-formats-in-kibana/154114)
**Author:** [@BicaLuv](https://discuss.elastic.co/u/BicaLuv)\ **Replies:** 4\ **Last updated:** [October 26, 2018, 6:44pm UTC](https://discuss.elastic.co/t/german-number-formats-in-kibana/154114 "2018-10-26T18:44:35Z")
According to a former post here I would like to know how to achieve a German number format like 12.345,67 for general settings using Kibana 6.4.1. I saw the git hub link to issue https://github.com/elastic/kibana/issues… --- ## [Adding of clients with the different index names](https://discuss.elastic.co/t/adding-of-clients-with-the-different-index-names/140266)
**Author:** [@kranthi\_851](https://discuss.elastic.co/u/kranthi_851)\ **Replies:** 4\ **Last updated:** [July 19, 2018, 7:58am UTC](https://discuss.elastic.co/t/adding-of-clients-with-the-different-index-names/140266 "2018-07-19T07:58:41Z")
Kindly suggest me how to add the filebeats with the different index names? As of now,I just added two clients, but I am able to view only logs of one client. Logs of filebeat of other client is also fine, its saying its… --- ## [Xpack Monitoring](https://discuss.elastic.co/t/xpack-monitoring/83174)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 4\ **Last updated:** [April 24, 2017, 7:14am UTC](https://discuss.elastic.co/t/xpack-monitoring/83174 "2017-04-24T07:14:55Z")
Hi All, We have purchased xpack for our single node cluster ,we were using trial pack fro 30 days and later we purchased the xpack with only forum support ,but when am clicking on monitoring tab I could see only Ev… --- ## [Analysis ICU plugin download](https://discuss.elastic.co/t/analysis-icu-plugin-download/68378)
**Author:** [@aghosh1](https://discuss.elastic.co/u/aghosh1)\ **Replies:** 4\ **Last updated:** [December 8, 2016, 4:29pm UTC](https://discuss.elastic.co/t/analysis-icu-plugin-download/68378 "2016-12-08T16:29:47Z")
Hi All, I have installed ES 2.4.0. Unable to find url to download corresponding Analysis-icu-plugin.The url "https://download.elastic.co/elasticsearch/release/org/elasticsearch/plugin/analysis-icu/2.4.1/analysis-icu-2.… --- ## [Elasticsearch indexes filling up the drive](https://discuss.elastic.co/t/elasticsearch-indexes-filling-up-the-drive/61938)
**Author:** [@napoleon182](https://discuss.elastic.co/u/napoleon182)\ **Replies:** 4\ **Last updated:** [October 3, 2016, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-indexes-filling-up-the-drive/61938 "2016-10-03T11:48:57Z")
Hi All, what will be the best approach to implement policy where only last 3months of logs are being kept and analysed in the elasticsearch? I'm currently testing curator- any advise on best approach? Thanks a lot guys. … --- ## [How to index the ip address of long type](https://discuss.elastic.co/t/how-to-index-the-ip-address-of-long-type/43903)
**Author:** [@lizhenmxcz](https://discuss.elastic.co/u/lizhenmxcz)\ **Replies:** 4\ **Last updated:** [March 10, 2016, 1:57pm UTC](https://discuss.elastic.co/t/how-to-index-the-ip-address-of-long-type/43903 "2016-03-10T13:57:04Z")
hi, I want to index the data that has a ip address field stored as long. when i index the data with a ip type mapping, it says "mapper\_parsing\_exception", when i index it with a long type mapping, it cannot be query wit… --- ## [How to filter by the nested values in the "message" field?](https://discuss.elastic.co/t/how-to-filter-by-the-nested-values-in-the-message-field/325277)
**Author:** [@Shiva\_Subramaniyan](https://discuss.elastic.co/u/Shiva_Subramaniyan)\ **Replies:** 6\ **Last updated:** [February 12, 2023, 7:57pm UTC](https://discuss.elastic.co/t/how-to-filter-by-the-nested-values-in-the-message-field/325277 "2023-02-12T19:57:11Z")
Hi, I have a "message" field in my "filebeat\*" index. This "message" field, particularly has nested fields like "httpRequest" and a "country" field in it. The value of this "country" field is 'US' I want to use a quer… --- ## [JDBC input, kafka output, syntax error, unexpected end-of-file Java:: after pipeline starts](https://discuss.elastic.co/t/jdbc-input-kafka-output-syntax-error-unexpected-end-of-file-java-after-pipeline-starts/294452)
**Author:** [@rschmerb](https://discuss.elastic.co/u/rschmerb)\ **Replies:** 6\ **Last updated:** [January 26, 2022, 7:09pm UTC](https://discuss.elastic.co/t/jdbc-input-kafka-output-syntax-error-unexpected-end-of-file-java-after-pipeline-starts/294452 "2022-01-26T19:09:32Z")
We are seeing the following error messages after starting our pipeline: \[2022-01-13T19:48:06,009\]\[FATAL\]\[org.logstash.Logstash \] Logstash stopped processing because of an error: (SyntaxError) (eval):1: syntax error, un… --- ## [Uptime App Simple Status Alert](https://discuss.elastic.co/t/uptime-app-simple-status-alert/277881)
**Author:** [@ephemeric](https://discuss.elastic.co/u/ephemeric)\ **Replies:** 6\ **Last updated:** [July 6, 2021, 9:06am UTC](https://discuss.elastic.co/t/uptime-app-simple-status-alert/277881 "2021-07-06T09:06:09Z")
Hi, In the Uptime app if I enable a status alert (Simple status alert), it prompts me to configure a default connector under settings. I don't see an Email connector available? If I configure an Index connector as defa… --- ## [Grok pattern not getting full message](https://discuss.elastic.co/t/grok-pattern-not-getting-full-message/205834)
**Author:** [@tomsozolins](https://discuss.elastic.co/u/tomsozolins)\ **Replies:** 6\ **Last updated:** [November 1, 2019, 5:29pm UTC](https://discuss.elastic.co/t/grok-pattern-not-getting-full-message/205834 "2019-11-01T17:29:13Z")
Hello! I have have a problem with grok getting full message from log file. Can you please help me? Log message: 2019-10-29 19:27:21.779+02:00 \[ 27\] INFO - State has changed: Rule: Recording FPS, Counter: \\Vi… --- ## [Pick latest child records of each parent and aggregate data](https://discuss.elastic.co/t/pick-latest-child-records-of-each-parent-and-aggregate-data/172227)
**Author:** [@r.singh](https://discuss.elastic.co/u/r.singh)\ **Replies:** 6\ **Last updated:** [April 11, 2019, 5:32am UTC](https://discuss.elastic.co/t/pick-latest-child-records-of-each-parent-and-aggregate-data/172227 "2019-04-11T05:32:01Z")
Hi , I have the following problem Lets say I have a parent called parent-1 which has childs child-1(version:1,action:NOACTION),child-2(version:2,action:REVOKED) and child-3(version:3,action:CERTIFIED). Child 3 is the l… --- ## [SearchResponse Vs CURL response. Aggregations responses don't match](https://discuss.elastic.co/t/searchresponse-vs-curl-response-aggregations-responses-dont-match/170894)
**Author:** [@Shankar\_Daruga](https://discuss.elastic.co/u/Shankar_Daruga)\ **Replies:** 6\ **Last updated:** [March 21, 2019, 1:30pm UTC](https://discuss.elastic.co/t/searchresponse-vs-curl-response-aggregations-responses-dont-match/170894 "2019-03-21T13:30:37Z")
Hello, In our current configuration, with 5.2 jar, the 'SearchResponse' Object, after converting it to JSON using XContentBuilder, the JSON matches that of the CURL request. We are now trying to upgrade to 6.6 and so t… --- ## [Email body is it not evaluating %{message}](https://discuss.elastic.co/t/email-body-is-it-not-evaluating-message/111180)
**Author:** [@psosa](https://discuss.elastic.co/u/psosa)\ **Replies:** 6\ **Last updated:** [December 12, 2017, 11:10am UTC](https://discuss.elastic.co/t/email-body-is-it-not-evaluating-message/111180 "2017-12-12T11:10:38Z")
input { jdbc { ... ... statement =\> "SELECT 70 as value" } } output { stdout { codec =\> rubydebug } email { authentication =\> 'login' from =\> 'whatever@xxx.com' domain =\> 'xxx.com' … --- ## [Elasticsearch and its files?](https://discuss.elastic.co/t/elasticsearch-and-its-files/61492)
**Author:** [@dop87](https://discuss.elastic.co/u/dop87)\ **Replies:** 6\ **Last updated:** [September 27, 2016, 12:15pm UTC](https://discuss.elastic.co/t/elasticsearch-and-its-files/61492 "2016-09-27T12:15:54Z")
Hi everyone. Im kinda brand new to elasticsearch . Is there a way to see what files that are going through elasticsearch? Lets say my elasticsearch are running some files that are passing through. Is there a way to s… --- ## [How to pull large amount of data (all documents in the index) using elasticsearch python client?](https://discuss.elastic.co/t/how-to-pull-large-amount-of-data-all-documents-in-the-index-using-elasticsearch-python-client/302763)
**Author:** [@safarial.fatemeh](https://discuss.elastic.co/u/safarial.fatemeh)\ **Replies:** 3\ **Last updated:** [April 20, 2022, 6:22am UTC](https://discuss.elastic.co/t/how-to-pull-large-amount-of-data-all-documents-in-the-index-using-elasticsearch-python-client/302763 "2022-04-20T06:22:34Z")
I'm using Elasticsearch.helpers.scan to pull down over 1M documents from Elasticsearch and I use match\_all query for that. the process is superslow (taking over 2hrs). is there a better way to pull down all the documen… --- ## [Reverse dns lookup for elastic-agent](https://discuss.elastic.co/t/reverse-dns-lookup-for-elastic-agent/296971)
**Author:** [@VoncinaMihael](https://discuss.elastic.co/u/VoncinaMihael)\ **Replies:** 3\ **Last updated:** [February 12, 2022, 3:20am UTC](https://discuss.elastic.co/t/reverse-dns-lookup-for-elastic-agent/296971 "2022-02-12T03:20:45Z")
Hi, I'm trying to find a way to resolve IP to host, for logs ingested from elastic-agents. Within Filebeat i can use dns processor, but i don't know how to do this for agent data... --- ## [Kibana field preview size](https://discuss.elastic.co/t/kibana-field-preview-size/252216)
**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\ **Replies:** 3\ **Last updated:** [October 16, 2020, 8:11am UTC](https://discuss.elastic.co/t/kibana-field-preview-size/252216 "2020-10-16T08:11:28Z")
I am using elasticsearch and Kibana for log management, one developer asked me if I could make a field "larger", a field they look at all day is quite large and they need to hit the "toggle field details" to get to see t… --- ## [Why is kibana web server is Not secure](https://discuss.elastic.co/t/why-is-kibana-web-server-is-not-secure/241710)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 3\ **Last updated:** [July 20, 2020, 6:37pm UTC](https://discuss.elastic.co/t/why-is-kibana-web-server-is-not-secure/241710 "2020-07-20T18:37:07Z")
Please take look at the screenshot, chrome saying Not Secure, is it safe to access imp data on kibana? --- ## [Why kibana doesn't have statefulset.yaml in templates?](https://discuss.elastic.co/t/why-kibana-doesnt-have-statefulset-yaml-in-templates/234557)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 3\ **Last updated:** [May 28, 2020, 9:43am UTC](https://discuss.elastic.co/t/why-kibana-doesnt-have-statefulset-yaml-in-templates/234557 "2020-05-28T09:43:16Z")
Hi, When I checked the templates of Kibana there is no statefulset.yaml file I was just wondering how Kibana container deployment happening when there is no api version mentioned the way it is present in /elasticsearch… --- ## [Metricbeat cannot create index](https://discuss.elastic.co/t/metricbeat-cannot-create-index/190103)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [July 12, 2019, 9:01am UTC](https://discuss.elastic.co/t/metricbeat-cannot-create-index/190103 "2019-07-12T09:01:59Z")
Hello I am trying to add metricbeat to the elasticsearch but it does not seam to be able to create the index. I've tried loading the data manually and I get the following error message. { "error": { "root\_cause": … --- ## [Logstash ConfigurationError, trying to migrate data from mysql to ELK using JDBC driver](https://discuss.elastic.co/t/logstash-configurationerror-trying-to-migrate-data-from-mysql-to-elk-using-jdbc-driver/186587)
**Author:** [@ShashankAC](https://discuss.elastic.co/u/ShashankAC)\ **Replies:** 3\ **Last updated:** [June 20, 2019, 1:33pm UTC](https://discuss.elastic.co/t/logstash-configurationerror-trying-to-migrate-data-from-mysql-to-elk-using-jdbc-driver/186587 "2019-06-20T13:33:23Z")
Hi there, I am new ELK and having some trouble configuring Logstash. I tried to follow this tutorial the config file is as follows. input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://localhost/telecom1" # Th… --- ## [Upgrade from 5.4 to 6.5 is not starting elasticsearch](https://discuss.elastic.co/t/upgrade-from-5-4-to-6-5-is-not-starting-elasticsearch/161446)
**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 6:43am UTC](https://discuss.elastic.co/t/upgrade-from-5-4-to-6-5-is-not-starting-elasticsearch/161446 "2018-12-19T06:43:42Z")
Here is the log: Dec 17 18:53:01 masternodes-12345 elasticsearch\[17567\]: PWD=/usr/local/elasticsearch Dec 17 18:53:01 masternodes-12345 elasticsearch\[17567\]: LANG=en\_US.UTF-8 Dec 17 18:53:01 masternodes-12345 elastic… --- ## [Dockerizing the entire elastic stack](https://discuss.elastic.co/t/dockerizing-the-entire-elastic-stack/144655)
**Author:** [@Ji\_Ho\_Choi](https://discuss.elastic.co/u/Ji_Ho_Choi)\ **Replies:** 3\ **Last updated:** [August 17, 2018, 5:29am UTC](https://discuss.elastic.co/t/dockerizing-the-entire-elastic-stack/144655 "2018-08-17T05:29:16Z")
I am trying to dockerize elasticsearch, kibana, logstash, metricbeat, packetbeat, postgresql and redis I have a configuration file looking like below version: '3' services: redis: build: ./docker/redis postgre… --- ## [Regex in query bar - get results for strings that don't start with '/'](https://discuss.elastic.co/t/regex-in-query-bar-get-results-for-strings-that-dont-start-with/143702)
**Author:** [@Kevin854](https://discuss.elastic.co/u/Kevin854)\ **Replies:** 3\ **Last updated:** [August 9, 2018, 9:21pm UTC](https://discuss.elastic.co/t/regex-in-query-bar-get-results-for-strings-that-dont-start-with/143702 "2018-08-09T21:21:09Z")
I'm trying to filter out all products that start with a forward slash. Is there a way to do this with the query bar? My field: i.Product Code/UPC.keyword I've been trying: "i.Product Code/UPC.keyword"=/(?!/)\*/ but t… --- ## [User impersonation does not work with Active directory realm](https://discuss.elastic.co/t/user-impersonation-does-not-work-with-active-directory-realm/91519)
**Author:** [@jetnet](https://discuss.elastic.co/u/jetnet)\ **Replies:** 3\ **Last updated:** [July 5, 2017, 10:08am UTC](https://discuss.elastic.co/t/user-impersonation-does-not-work-with-active-directory-realm/91519 "2017-07-05T10:08:06Z")
Hi Elasticsearch team! any news regarding the subject? so, basically, this does not work with active directory realm (with LDAP realm works fine, but no nested groups support): curl -H "es-security-runas-user: an\_ad\_u… --- ## [@timestamp format string error](https://discuss.elastic.co/t/timestamp-format-string-error/83562)
**Author:** [@xuhaibo](https://discuss.elastic.co/u/xuhaibo)\ **Replies:** 3\ **Last updated:** [April 27, 2017, 3:49am UTC](https://discuss.elastic.co/t/timestamp-format-string-error/83562 "2017-04-27T03:49:27Z")
my kafka config is output.kafka: # Boolean flag to enable or disable the output module. enabled: true codec.format: string: ' %{\[@timestamp\]} ' When start reading the nginx log. It will appear this error … --- ## [Create a histogram of filtered data](https://discuss.elastic.co/t/create-a-histogram-of-filtered-data/82224)
**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\ **Replies:** 3\ **Last updated:** [April 13, 2017, 1:45pm UTC](https://discuss.elastic.co/t/create-a-histogram-of-filtered-data/82224 "2017-04-13T13:45:16Z")
I created an X-Axis Aggregation of Range with my Field having values from 0 to 1, which gives me a count of the number of documents that fits that range. Now, I want to make a histogram of that...I tried to do a sub-a… --- ## [Is there a limit on count of roles for document level security](https://discuss.elastic.co/t/is-there-a-limit-on-count-of-roles-for-document-level-security/63506)
**Author:** [@yehuday](https://discuss.elastic.co/u/yehuday)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 1:16pm UTC](https://discuss.elastic.co/t/is-there-a-limit-on-count-of-roles-for-document-level-security/63506 "2016-11-09T13:16:47Z")
I plan to implement a document level security with Shield 2.4. the implementation suppose to support a lot of users (native) and roles. Is there a limit on count of roles? --- ## [Beta-1 packages in yum repository are not signed?](https://discuss.elastic.co/t/beta-1-packages-in-yum-repository-are-not-signed/61346)
**Author:** [@cero-t](https://discuss.elastic.co/u/cero-t)\ **Replies:** 3\ **Last updated:** [September 23, 2016, 10:32am UTC](https://discuss.elastic.co/t/beta-1-packages-in-yum-repository-are-not-signed/61346 "2016-09-23T10:32:12Z")
Hi, I tried to install Elasticsearch / Kibana / Beats on Amazon Linux by yum command following the document. https://www.elastic.co/guide/en/beats/libbeat/master/setup-repositories.html But I could not finish yum comma… --- ## [Parse single array json (Elastic Agent)](https://discuss.elastic.co/t/parse-single-array-json-elastic-agent/345558)
**Author:** [@dmgeurts](https://discuss.elastic.co/u/dmgeurts)\ **Replies:** 5\ **Last updated:** [October 25, 2023, 5:24pm UTC](https://discuss.elastic.co/t/parse-single-array-json-elastic-agent/345558 "2023-10-25T17:24:33Z")
I'm trying to parse parsedmarc json files. These log files contain a single array with multiple records. I've taken the json and am testing with a single record, and am struggling to find the right combination of filebea… --- ## [Elastic search instillation problem](https://discuss.elastic.co/t/elastic-search-instillation-problem/146504)
**Author:** [@noora](https://discuss.elastic.co/u/noora)\ **Replies:** 5\ **Last updated:** [September 3, 2018, 9:34am UTC](https://discuss.elastic.co/t/elastic-search-instillation-problem/146504 "2018-09-03T09:34:48Z")
i am trying to install elastic search in my laptop but i am always getting this message when i try to run the bin/elasticsearch in command line \\Common was unexpected at this time. my elastic search version is :6.4.0 … --- ## [Logstash hangs on using document\_id while creating index for first time](https://discuss.elastic.co/t/logstash-hangs-on-using-document-id-while-creating-index-for-first-time/138701)
**Author:** [@aashishgahlawat](https://discuss.elastic.co/u/aashishgahlawat)\ **Replies:** 5\ **Last updated:** [July 5, 2018, 11:37am UTC](https://discuss.elastic.co/t/logstash-hangs-on-using-document-id-while-creating-index-for-first-time/138701 "2018-07-05T11:37:06Z")
input { jdbc { jdbc\_driver\_library =\> "sqljdbc42.jar" jdbc\_driver\_class =\> "com.microsoft.sqlserver.jdbc.SQLServerDriver" jdbc\_connection\_string =\> "jdbc:sqlserver://localhost:1433;databaseName=transact… --- ## [Curator command error in windows](https://discuss.elastic.co/t/curator-command-error-in-windows/124385)
**Author:** [@malc\_richi](https://discuss.elastic.co/u/malc_richi)\ **Replies:** 5\ **Last updated:** [March 24, 2018, 3:29pm UTC](https://discuss.elastic.co/t/curator-command-error-in-windows/124385 "2018-03-24T15:29:41Z")
Hi There, Under going a couple of issues,below is the list of activities preformed: 1.installed elastic search 5.4.3 - successful 2. Installed Python version 3.6 - successful 3 have pip set. 4.Trying to install cura… [Previous page](https://discuss.elastic.co/top.md?page=1463&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1465&per_page=50&period=all)