# Top **URL:** https://discuss.elastic.co/top.md?page=1475&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1476 --- ## [How to accelerate the searching if there is a large number of data in es?](https://discuss.elastic.co/t/how-to-accelerate-the-searching-if-there-is-a-large-number-of-data-in-es/101097)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 6\ **Last updated:** [September 22, 2017, 7:32am UTC](https://discuss.elastic.co/t/how-to-accelerate-the-searching-if-there-is-a-large-number-of-data-in-es/101097 "2017-09-22T07:32:40Z")
ELK version: 5.5.1 There are 5 nodes in my es cluster. I use elk to collect nginx logs, and there is a project generate about 100GB logs every day, and it is very slow to open the dashboard of this project in kibana... … --- ## [Indices deleted and cluster in read only mode \[ES 2.3.4 on AWS\]](https://discuss.elastic.co/t/indices-deleted-and-cluster-in-read-only-mode-es-2-3-4-on-aws/57608)
**Author:** [@Claudio\_Comandini](https://discuss.elastic.co/u/Claudio_Comandini)\ **Replies:** 6\ **Last updated:** [August 10, 2016, 3:22pm UTC](https://discuss.elastic.co/t/indices-deleted-and-cluster-in-read-only-mode-es-2-3-4-on-aws/57608 "2016-08-10T15:22:14Z")
Something happened during the night to my ES cluster (version 2.3.4 on AWS), I have no idea what happened but all the indices and data were deleted and the cluster entered a "read only" mode. What happened and why? I'v… --- ## [Elasticsearch expected performance](https://discuss.elastic.co/t/elasticsearch-expected-performance/8710)
**Author:** [@Abhishek\_Pratap](https://discuss.elastic.co/u/Abhishek_Pratap)\ **Replies:** 6\ **Last updated:** [August 15, 2012, 3:36pm UTC](https://discuss.elastic.co/t/elasticsearch-expected-performance/8710 "2012-08-15T15:36:12Z")
Hi Guys I have started using ES as of today and I wondering being a naive user without doing any specific tweaks to the defaults what kind of performance I can expect to get from ES. I also have few other question… --- ## [Easiest way to get a dashboard?](https://discuss.elastic.co/t/easiest-way-to-get-a-dashboard/224912)
**Author:** [@tew](https://discuss.elastic.co/u/tew)\ **Replies:** 1\ **Last updated:** [March 25, 2020, 8:19am UTC](https://discuss.elastic.co/t/easiest-way-to-get-a-dashboard/224912 "2020-03-25T08:19:00Z")
I have the ES operator installed and running an ES cluster. I'd like to get a grafana dashboard running. Is there a walkthrough on enabling the metrics and installing a generic dashboard? Thank you. --- ## [Http header data extract](https://discuss.elastic.co/t/http-header-data-extract/185213)
**Author:** [@muntazirabbas](https://discuss.elastic.co/u/muntazirabbas)\ **Replies:** 1\ **Last updated:** [June 11, 2019, 2:56pm UTC](https://discuss.elastic.co/t/http-header-data-extract/185213 "2019-06-11T14:56:00Z")
Hi everyone, I am new to ELK and have started with Logstash already. One of my Task it to use http as an Input and extract the Header data out of it and send it to Elasticsearch and then to Kibana in later stage. Here is… --- ## [Unable to import dashboard with script and UI](https://discuss.elastic.co/t/unable-to-import-dashboard-with-script-and-ui/80354)
**Author:** [@2rock](https://discuss.elastic.co/u/2rock)\ **Replies:** 1\ **Last updated:** [March 28, 2017, 8:50pm UTC](https://discuss.elastic.co/t/unable-to-import-dashboard-with-script-and-ui/80354 "2017-03-28T20:50:45Z")
Hello, I juste installed ELK stack, on just one server. And a sent log with metricbeat and filebeat from another server. Everything is ok. But when I want to import dashboard I run the script and it seems to be good : … --- ## [Is watcher a free feature or does it cost?](https://discuss.elastic.co/t/is-watcher-a-free-feature-or-does-it-cost/33751)
**Author:** [@Avinash\_Pandey1](https://discuss.elastic.co/u/Avinash_Pandey1)\ **Replies:** 1\ **Last updated:** [November 4, 2015, 2:56pm UTC](https://discuss.elastic.co/t/is-watcher-a-free-feature-or-does-it-cost/33751 "2015-11-04T14:56:41Z")
Is watcher a free feature or does it cost? If it costs what is the pricing model? --- ## [400 Error on Version 1.5.0](https://discuss.elastic.co/t/400-error-on-version-1-5-0/1644)
**Author:** [@Akumar](https://discuss.elastic.co/u/Akumar)\ **Replies:** 1\ **Last updated:** [June 2, 2015, 11:30am UTC](https://discuss.elastic.co/t/400-error-on-version-1-5-0/1644 "2015-06-02T11:30:06Z")
I receive periodic messages such as - :message=\>"failed action with response of 400, dropping action: I cannot seem to locate that in any documentation. Is this because of a busy elastic cluster? Thanks Ash Kuma… --- ## [Unable to see logs in Elasticsearch from logstash](https://discuss.elastic.co/t/unable-to-see-logs-in-elasticsearch-from-logstash/344288)
**Author:** [@AnyThink\_A](https://discuss.elastic.co/u/AnyThink_A)\ **Replies:** 8\ **Last updated:** [October 11, 2023, 5:23pm UTC](https://discuss.elastic.co/t/unable-to-see-logs-in-elasticsearch-from-logstash/344288 "2023-10-11T17:23:44Z")
Hello All, I am trying to deploy ELK stack in lab. I was able to get elastic and kibana up and running with XPAC enabled. But now struggling to get logs in elasticsearch from logstash. Refer config as below elasticsear… --- ## [Lostash taking inputs from Filebeat](https://discuss.elastic.co/t/lostash-taking-inputs-from-filebeat/136740)
**Author:** [@pkshara](https://discuss.elastic.co/u/pkshara)\ **Replies:** 8\ **Last updated:** [June 29, 2018, 6:40am UTC](https://discuss.elastic.co/t/lostash-taking-inputs-from-filebeat/136740 "2018-06-29T06:40:30Z")
Hi Team, Can anyone provide me the configuration file, Where the logstash will be taking input from Filebeat port and creating the same files as output in logstash . Ex : input \> filebeat text file output \> logstash t… --- ## [Ignore\_inactive is not working](https://discuss.elastic.co/t/ignore-inactive-is-not-working/299193)
**Author:** [@lingminzeng](https://discuss.elastic.co/u/lingminzeng)\ **Replies:** 4\ **Last updated:** [March 23, 2022, 6:18am UTC](https://discuss.elastic.co/t/ignore-inactive-is-not-working/299193 "2022-03-23T06:18:37Z")
\#filebeat-8.0.0 filebeat.inputs: \* type: filestream enabled: true paths: \* /var/log/\*.log ignore\_inactive: since\_last\_start I configure ignore\_inactive: since\_last\_start,but filebeat still read at the beginning posit… --- ## [Creating pipeline Using beats in Windows and sending logs to logstash in linux](https://discuss.elastic.co/t/creating-pipeline-using-beats-in-windows-and-sending-logs-to-logstash-in-linux/289191)
**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\ **Replies:** 4\ **Last updated:** [November 16, 2021, 4:30pm UTC](https://discuss.elastic.co/t/creating-pipeline-using-beats-in-windows-and-sending-logs-to-logstash-in-linux/289191 "2021-11-16T16:30:09Z")
Hi, I am creating a pipeline using beats in windows to extract logs in form of txt file in multiple directories and send it to the Linux(server) to logstash to es/kibana. While running logstash conf pipeline I am getti… --- ## [Filebeat fingerprint doesn't understand columns from csv files](https://discuss.elastic.co/t/filebeat-fingerprint-doesnt-understand-columns-from-csv-files/282427)
**Author:** [@Baygon](https://discuss.elastic.co/u/Baygon)\ **Replies:** 4\ **Last updated:** [August 27, 2021, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-fingerprint-doesnt-understand-columns-from-csv-files/282427 "2021-08-27T14:44:35Z")
Hi, I have a filebeat instance that sends event from CSV files to an ES cluster. The ingest pipeline has the relevant mappings and everything works fine. I'm trying to improve the pipeline for deduplication of event b… --- ## [I push documents to elastic successfully but they are not visualized in Kibana's Discover](https://discuss.elastic.co/t/i-push-documents-to-elastic-successfully-but-they-are-not-visualized-in-kibanas-discover/269267)
**Author:** [@orfeas2021](https://discuss.elastic.co/u/orfeas2021)\ **Replies:** 4\ **Last updated:** [April 7, 2021, 10:42am UTC](https://discuss.elastic.co/t/i-push-documents-to-elastic-successfully-but-they-are-not-visualized-in-kibanas-discover/269267 "2021-04-07T10:42:46Z")
Hi! I have a 3-node installation (1 master, 2 data) , installed into the OpenStack VMs. I want to push data (logs) from an application to the stack and find them in Discover section of Kibana. (I have installed Kibana o… --- ## [Kibana: Map: How to set the default Latitude, Longitude and zoom factor?](https://discuss.elastic.co/t/kibana-map-how-to-set-the-default-latitude-longitude-and-zoom-factor/243980)
**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\ **Replies:** 4\ **Last updated:** [August 6, 2020, 5:31pm UTC](https://discuss.elastic.co/t/kibana-map-how-to-set-the-default-latitude-longitude-and-zoom-factor/243980 "2020-08-06T17:31:03Z")
Hi I would like to find out if there is a way to set the current map : Latitude, Longitude and Zoom factor based on the ingested data. I have created a map to map all the Geospatial field on the map; however, I find th… --- ## [Data Update from MYSQL not appear](https://discuss.elastic.co/t/data-update-from-mysql-not-appear/206512)
**Author:** [@dean92](https://discuss.elastic.co/u/dean92)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 3:07am UTC](https://discuss.elastic.co/t/data-update-from-mysql-not-appear/206512 "2019-11-07T03:07:53Z")
hi all, I have one problem on my data. I export one table and a few column on my MYSQL to ES using logstash. there are one column(status\_ticket) in table is frequently change e.g: from status new to open/closed and it e… --- ## [It takes up to 10 minutes to join new master](https://discuss.elastic.co/t/it-takes-up-to-10-minutes-to-join-new-master/194522)
**Author:** [@Jehutywong](https://discuss.elastic.co/u/Jehutywong)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 5:08am UTC](https://discuss.elastic.co/t/it-takes-up-to-10-minutes-to-join-new-master/194522 "2019-08-12T05:08:47Z")
When the leader master node fail, it takes about a minute to elect a new leader. But the follower master node takes minutes to switch to the new leader. It's this expected? or any configuration can optimize this? After … --- ## [Metricbeat output to logstash then no data in dashboards](https://discuss.elastic.co/t/metricbeat-output-to-logstash-then-no-data-in-dashboards/185415)
**Author:** [@PraveenKT](https://discuss.elastic.co/u/PraveenKT)\ **Replies:** 4\ **Last updated:** [June 19, 2019, 1:07pm UTC](https://discuss.elastic.co/t/metricbeat-output-to-logstash-then-no-data-in-dashboards/185415 "2019-06-19T13:07:55Z")
Hello, I pointed the output to logstash from Metricbeat & i am able to see the data in discovery. But no data in Metricbeat dashboards. IN Metricbeat: ym file output.logstash: hosts: \['X.x.X.x:5044'\] loadbalance:… --- ## [\_grokparsefailure, \_geoip\_lookup\_failure sophos utm](https://discuss.elastic.co/t/grokparsefailure-geoip-lookup-failure-sophos-utm/166167)
**Author:** [@fooc](https://discuss.elastic.co/u/fooc)\ **Replies:** 4\ **Last updated:** [January 30, 2019, 3:36pm UTC](https://discuss.elastic.co/t/grokparsefailure-geoip-lookup-failure-sophos-utm/166167 "2019-01-30T15:36:00Z")
Hi, I'm using the following conf file to process my syslog messages from a sophos utm: input { tcp { type =\> "utm-syslog" port =\> 5140 } } filter { if \[type\] == "utm-syslog" { grok { match =\> { "message" =\> "\<%{… --- ## [Read path from another config file in Logstash configuration file](https://discuss.elastic.co/t/read-path-from-another-config-file-in-logstash-configuration-file/118439)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 4\ **Last updated:** [February 7, 2018, 4:44am UTC](https://discuss.elastic.co/t/read-path-from-another-config-file-in-logstash-configuration-file/118439 "2018-02-07T04:44:25Z")
Hi I have a requirement that ,in input section i have to read file path location from another config file ,so that i can change the file location dynamically from the config file instead of going into logstash config fi… --- ## [Applying configuration to all prospectors](https://discuss.elastic.co/t/applying-configuration-to-all-prospectors/109431)
**Author:** [@vkurup](https://discuss.elastic.co/u/vkurup)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 2:29pm UTC](https://discuss.elastic.co/t/applying-configuration-to-all-prospectors/109431 "2017-11-29T14:29:46Z")
Is it possible to apply configuration to 'all' prospectors? For example, I know i can set up 2 prospectors with multiline configuration like this: filebeat.prospectors: - input\_type: log paths: - /var/log/sy… --- ## [Multiline is not working when i am sending logs to logstash through filebeat?](https://discuss.elastic.co/t/multiline-is-not-working-when-i-am-sending-logs-to-logstash-through-filebeat/88170)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 4\ **Last updated:** [June 4, 2017, 9:09am UTC](https://discuss.elastic.co/t/multiline-is-not-working-when-i-am-sending-logs-to-logstash-through-filebeat/88170 "2017-06-04T09:09:42Z")
Hi, Logs: \[2017-05-25 01:00:00,647\]\[ERROR\]\[marvel.agent.exporter.local\] local exporter \[default\_local\] - ... \[2017-05-18 00:00:06,339\]\[DEBUG\]\[action.admin.indices.create\] \[data-2\] \[data-may-2017,data-apr-.. When i … --- ## [Index packetbeat](https://discuss.elastic.co/t/index-packetbeat/79361)
**Author:** [@korsdecaying](https://discuss.elastic.co/u/korsdecaying)\ **Replies:** 4\ **Last updated:** [March 21, 2017, 2:01pm UTC](https://discuss.elastic.co/t/index-packetbeat/79361 "2017-03-21T14:01:01Z")
How do I determine which index the data from the packetbeat is written to. For some reason, they created a lot. And what query can I read the data from this index. As I understand it is necessary to determine what types … --- ## [What's the competitive advantage of elastic security v.s. existing security platforms?](https://discuss.elastic.co/t/whats-the-competitive-advantage-of-elastic-security-v-s-existing-security-platforms/339806)
**Author:** [@Ernest\_Dong](https://discuss.elastic.co/u/Ernest_Dong)\ **Replies:** 5\ **Last updated:** [August 3, 2023, 2:42pm UTC](https://discuss.elastic.co/t/whats-the-competitive-advantage-of-elastic-security-v-s-existing-security-platforms/339806 "2023-08-03T14:42:44Z")
What's the unique value elastic security provides? Is it SIEM? Why do people use elastic for XDR instead of crowdstrike and so on, since they can provide network solutions etc. --- ## [Get a page of products but return all product\_tags for the whole unpaginated result set](https://discuss.elastic.co/t/get-a-page-of-products-but-return-all-product-tags-for-the-whole-unpaginated-result-set/274283)
**Author:** [@kiko](https://discuss.elastic.co/u/kiko)\ **Replies:** 5\ **Last updated:** [May 28, 2021, 10:28am UTC](https://discuss.elastic.co/t/get-a-page-of-products-but-return-all-product-tags-for-the-whole-unpaginated-result-set/274283 "2021-05-28T10:28:19Z")
Hi I have a query, which filters products and paginates the results (by ?size URL argument). Is there a way to return just a page (?size=12) of products, but return the available product\_tags for the whole lot (hits.tot… --- ## [Expected one of \\"\\\\\\\\'\\", any character, \\"'\\"](https://discuss.elastic.co/t/expected-one-of-any-character/221249)
**Author:** [@ghl1l0](https://discuss.elastic.co/u/ghl1l0)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 7:12am UTC](https://discuss.elastic.co/t/expected-one-of-any-character/221249 "2020-02-28T07:12:11Z")
hello elastic community i need your help, i got this error when i have add the function rename on mutate this is the full logs error : \[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::P… --- ## [Elasticsearch Queries](https://discuss.elastic.co/t/elasticsearch-queries/88942)
**Author:** [@Mannu\_Choudhary](https://discuss.elastic.co/u/Mannu_Choudhary)\ **Replies:** 5\ **Last updated:** [June 13, 2017, 12:22pm UTC](https://discuss.elastic.co/t/elasticsearch-queries/88942 "2017-06-13T12:22:24Z")
I'm trying some scenarios using ELK. As I'm new to ELK could you guys help me out to make some queries for my below need. Senarios: 1:- Find the no of occurrence of particular string. like ResourceManager 2:- Response … --- ## [\--fleet-server-es-ca option does not work on Windows?](https://discuss.elastic.co/t/fleet-server-es-ca-option-does-not-work-on-windows/333120)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 2\ **Last updated:** [May 30, 2023, 8:48pm UTC](https://discuss.elastic.co/t/fleet-server-es-ca-option-does-not-work-on-windows/333120 "2023-05-30T20:48:59Z")
I'm having an issue with elastic agents Windows machines, but they work perfectly on Linux machines. My fleet server keeps showing the status Unhealthy for elastic agents I've installed on Windows machines. This is the… --- ## [Kibana权限认证问题](https://discuss.elastic.co/t/kibana/184084)
**Author:** [@hanyongsheng](https://discuss.elastic.co/u/hanyongsheng)\ **Replies:** 2\ **Last updated:** [June 5, 2019, 4:03am UTC](https://discuss.elastic.co/t/kibana/184084 "2019-06-05T04:03:42Z")
kibana设置好登录认证，登陆后为什么自己开发的插件请求es还需要认证？而es原有的插件就不需要再次认证了。如可让我自己的插件不需要再次认证？版本（7.1.1） --- ## [ElasticSearch Storage and Kubernetes](https://discuss.elastic.co/t/elasticsearch-storage-and-kubernetes/170222)
**Author:** [@beyond](https://discuss.elastic.co/u/beyond)\ **Replies:** 2\ **Last updated:** [February 27, 2019, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-storage-and-kubernetes/170222 "2019-02-27T18:29:12Z")
Hello, i set up on permise Kubernetes Cluster, i would like try run stateful elasticsearch in the cluster , my main concern is the storage how can be shared between the nodes, i thought about setting up GlusterFS, do y… --- ## [Azure Kubernetes Services - metadata API error](https://discuss.elastic.co/t/azure-kubernetes-services-metadata-api-error/146225)
**Author:** [@ac-astuartkregor](https://discuss.elastic.co/u/ac-astuartkregor)\ **Replies:** 2\ **Last updated:** [August 28, 2018, 7:58am UTC](https://discuss.elastic.co/t/azure-kubernetes-services-metadata-api-error/146225 "2018-08-28T07:58:57Z")
Hi folks, Apologies if this has already been mentioned, I couldn't find much reference to it. Would love to get some input as to what the cause of the error might be, as I've not managed to figure it out. I can use fil… --- ## [Filebeat Copy Field Processor](https://discuss.elastic.co/t/filebeat-copy-field-processor/143098)
**Author:** [@prometheus1](https://discuss.elastic.co/u/prometheus1)\ **Replies:** 2\ **Last updated:** [August 16, 2018, 10:58am UTC](https://discuss.elastic.co/t/filebeat-copy-field-processor/143098 "2018-08-16T10:58:01Z")
I found the rename processor for filebeat, couldn't find anything related to a copy field processor. My usecase is I want to copy some fields from the kubernetes processor to a root field with the original fields remaini… --- ## [Logstash coverting field names to all lowercase](https://discuss.elastic.co/t/logstash-coverting-field-names-to-all-lowercase/76470)
**Author:** [@harikishore96](https://discuss.elastic.co/u/harikishore96)\ **Replies:** 2\ **Last updated:** [February 25, 2017, 9:50am UTC](https://discuss.elastic.co/t/logstash-coverting-field-names-to-all-lowercase/76470 "2017-02-25T09:50:45Z")
I'm using Logstash to keep my MySql database and ES in sync. I want to keep field names in both databases to be same. But logstash is converting some uppercase field names to lowercase. How to config logstash, so that th… --- ## [Is it necessary to change role for kibana in the Users setting?](https://discuss.elastic.co/t/is-it-necessary-to-change-role-for-kibana-in-the-users-setting/55488)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [July 15, 2016, 4:21am UTC](https://discuss.elastic.co/t/is-it-necessary-to-change-role-for-kibana-in-the-users-setting/55488 "2016-07-15T04:21:01Z")
Hi ! I just installed x-pack for elasticsearch 5.0.0-alpha4 and walking through the installation step so that I did not miss anything. https://www.elastic.co/guide/en/x-pack/current/installing-xpack.html I realized on… --- ## [Array size inside of terms query cannot exceed 1000 indices](https://discuss.elastic.co/t/array-size-inside-of-terms-query-cannot-exceed-1000-indices/12945)
**Author:** [@dannalieth](https://discuss.elastic.co/u/dannalieth)\ **Replies:** 2\ **Last updated:** [March 23, 2016, 6:58am UTC](https://discuss.elastic.co/t/array-size-inside-of-terms-query-cannot-exceed-1000-indices/12945 "2016-03-23T06:58:20Z")
I have a query like so: "filter": { "query": { "terms": { "user": \["jonh", "doe", ..., "asdf"\]} } } The number of users in the array is arbitrarily big for our use case. However, ElasticSearch seems to fail wit… --- ## [Graph plotting by Value instead of Sum, Average... on the y-axis](https://discuss.elastic.co/t/graph-plotting-by-value-instead-of-sum-average-on-the-y-axis/45024)
**Author:** [@log1234](https://discuss.elastic.co/u/log1234)\ **Replies:** 2\ **Last updated:** [March 22, 2016, 2:45am UTC](https://discuss.elastic.co/t/graph-plotting-by-value-instead-of-sum-average-on-the-y-axis/45024 "2016-03-22T02:45:05Z")
I have a requirement to plot the batch-process-time for each day of batch run. That is, the graph will look like something like batch-process-time vs batch-run-date. Is these feature still not supported? If not, would t… --- ## [How to split nested json list into different document](https://discuss.elastic.co/t/how-to-split-nested-json-list-into-different-document/308261)
**Author:** [@Giulia](https://discuss.elastic.co/u/Giulia)\ **Replies:** 3\ **Last updated:** [June 28, 2022, 7:52am UTC](https://discuss.elastic.co/t/how-to-split-nested-json-list-into-different-document/308261 "2022-06-28T07:52:17Z")
Hello! I would to split a nested json array into different unique json document. For example, I have this document { "beginTimeSeconds": 1655886958, "endTimeS… --- ## [Pie chart on accumulated data](https://discuss.elastic.co/t/pie-chart-on-accumulated-data/300545)
**Author:** [@MarioRojas](https://discuss.elastic.co/u/MarioRojas)\ **Replies:** 3\ **Last updated:** [March 29, 2022, 1:25pm UTC](https://discuss.elastic.co/t/pie-chart-on-accumulated-data/300545 "2022-03-29T13:25:38Z")
Hi All, I'm very new to Kibana and I need to create a pie chart based on the sum of the values present in different logs, marginalized from a given term in yet another log... In Discover the data looks like this: W… --- ## [How to create alert when some component stopped to send data](https://discuss.elastic.co/t/how-to-create-alert-when-some-component-stopped-to-send-data/98048)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 3\ **Last updated:** [August 24, 2017, 9:54am UTC](https://discuss.elastic.co/t/how-to-create-alert-when-some-component-stopped-to-send-data/98048 "2017-08-24T09:54:56Z")
I’m thinking about using X-Pack Watcher for alerting when some of our components stopped to send data to ELK. I.e. there is no new data from certain source recently. There is quick&dirty solution by just create indivi… --- ## [SOLVED: Logstash 5.2.cannot install logstash-filter-anonymize in an offline environment](https://discuss.elastic.co/t/solved-logstash-5-2-cannot-install-logstash-filter-anonymize-in-an-offline-environment/76922)
**Author:** [@rodgermoore](https://discuss.elastic.co/u/rodgermoore)\ **Replies:** 3\ **Last updated:** [March 8, 2017, 9:00am UTC](https://discuss.elastic.co/t/solved-logstash-5-2-cannot-install-logstash-filter-anonymize-in-an-offline-environment/76922 "2017-03-08T09:00:08Z")
Ubuntu 14.04 LTS This works fine: sudo /usr/share/logstash/bin/logstash-plugin install logstash-filter-anonymize Validating logstash-filter-anonymize Installing logstash-filter-anonymize Installation successful Th… --- ## [Snapshots: are type "fs" compatible with type "s3"?](https://discuss.elastic.co/t/snapshots-are-type-fs-compatible-with-type-s3/74655)
**Author:** [@foobarbaz](https://discuss.elastic.co/u/foobarbaz)\ **Replies:** 3\ **Last updated:** [February 28, 2017, 3:17am UTC](https://discuss.elastic.co/t/snapshots-are-type-fs-compatible-with-type-s3/74655 "2017-02-28T03:17:13Z")
Is it possible to do a snapshot type "fs" (locally), sync the local snapshot location to an s3 bucket, and then from an AWS elasticsearch instance run a restore using the s3 bucket containing the snapshot generated with … --- ## [Ranking using painless](https://discuss.elastic.co/t/ranking-using-painless/65208)
**Author:** [@ahmmum](https://discuss.elastic.co/u/ahmmum)\ **Replies:** 3\ **Last updated:** [November 7, 2016, 3:27pm UTC](https://discuss.elastic.co/t/ranking-using-painless/65208 "2016-11-07T15:27:05Z")
Does elasticsearch supports field level ranking factors supported in Sphinx like, min\_hit\_pos, lcs, hit\_count natively? If so, can someone point out the page where I can read this up? If not, what would be the ways to … --- ## [Using http\_poller to search Elasticsearch](https://discuss.elastic.co/t/using-http-poller-to-search-elasticsearch/59612)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [September 2, 2016, 9:39pm UTC](https://discuss.elastic.co/t/using-http-poller-to-search-elasticsearch/59612 "2016-09-02T21:39:35Z")
I want to use http\_poller to do the equivalent of this: curl -XGET 'http://esnode:9200/\_all/\_search?pretty' -d '{ "query": { "term": { "type" : "syslog" } } }' Basically, I want… --- ## [Logstash JDBC unable to run multiple statements and ingest data from different tables](https://discuss.elastic.co/t/logstash-jdbc-unable-to-run-multiple-statements-and-ingest-data-from-different-tables/345015)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 7\ **Last updated:** [October 15, 2023, 5:19pm UTC](https://discuss.elastic.co/t/logstash-jdbc-unable-to-run-multiple-statements-and-ingest-data-from-different-tables/345015 "2023-10-15T17:19:10Z")
Hi, I'm running Logstash version 8.10.2 in a Docker container to ingest data from a MySQL DB into Elastic. I don't know why the first statement is executed but the second one does not execute. Below is my logstash con… --- ## [Having troubles installing Heartbeat on AKS](https://discuss.elastic.co/t/having-troubles-installing-heartbeat-on-aks/228216)
**Author:** [@nfsouzaj](https://discuss.elastic.co/u/nfsouzaj)\ **Replies:** 7\ **Last updated:** [May 4, 2020, 9:20am UTC](https://discuss.elastic.co/t/having-troubles-installing-heartbeat-on-aks/228216 "2020-05-04T09:20:24Z")
Hello, I've been trying pretty hard to install heartbeat but so far aint working. All our Elasticsearch stack is being installed through helm charts successfully. Apparently heartbeat doesn't have an official helm char… --- ## [スペースが存在する単語の辞書登録](https://discuss.elastic.co/t/topic/153711)
**Author:** [@Takahiro\_Horike](https://discuss.elastic.co/u/Takahiro_Horike)\ **Replies:** 1\ **Last updated:** [October 31, 2018, 9:05am UTC](https://discuss.elastic.co/t/topic/153711 "2018-10-31T09:05:02Z")
現在、ファッション系のwebメディアを運営しております。そして、サイト内検索にElasticsearchを使用して様々なファッションブランド名を辞書登録の上で、検索に引っかかるようにしております。 その際にスペースの存在する「THE NORTH FACE」といたブランド名もそのまま半角スペース付きで辞書登録の上、検索ワードが「THE NORTH FACE」で一致させたいと考えております。 しかし、辞書やシノニムは半角スペースで区切る… --- ## [Dead letter queue isn't cleaned up](https://discuss.elastic.co/t/dead-letter-queue-isnt-cleaned-up/139653)
**Author:** [@jbeck](https://discuss.elastic.co/u/jbeck)\ **Replies:** 1\ **Last updated:** [July 16, 2018, 12:07am UTC](https://discuss.elastic.co/t/dead-letter-queue-isnt-cleaned-up/139653 "2018-07-16T00:07:34Z")
We are using the dead letter queue with the Elasticsearch output plugin, and the dead letter queue input to reprocess events. It seems to work quite well, except that the old entries in the dead letter queue are never re… --- ## [Installing the syslog input plugin offline](https://discuss.elastic.co/t/installing-the-syslog-input-plugin-offline/120324)
**Author:** [@QuizzyRascal](https://discuss.elastic.co/u/QuizzyRascal)\ **Replies:** 1\ **Last updated:** [February 19, 2018, 3:31am UTC](https://discuss.elastic.co/t/installing-the-syslog-input-plugin-offline/120324 "2018-02-19T03:31:18Z")
Hi, I'm trying to install the syslog input plugin in an environment without internet access. I have downloaded the plugin zip from GitHub and unzipped into a directory on my Linux box. I have the following command line… --- ## [Topbeat - unreachable redis blocks logstash output](https://discuss.elastic.co/t/topbeat-unreachable-redis-blocks-logstash-output/82549)
**Author:** [@rajamadhavan](https://discuss.elastic.co/u/rajamadhavan)\ **Replies:** 1\ **Last updated:** [April 17, 2017, 1:59pm UTC](https://discuss.elastic.co/t/topbeat-unreachable-redis-blocks-logstash-output/82549 "2017-04-17T13:59:07Z")
Hi, For a specific requirement, I have to send topbeat data to 2 different outputs simultaneously Redis logstash Under normal cases when both are reachable, data reaches both outputs without any issue. If l… --- ## [Elaseticsearch logs filling up very fast](https://discuss.elastic.co/t/elaseticsearch-logs-filling-up-very-fast/70274)
**Author:** [@pkumar](https://discuss.elastic.co/u/pkumar)\ **Replies:** 1\ **Last updated:** [December 30, 2016, 2:22pm UTC](https://discuss.elastic.co/t/elaseticsearch-logs-filling-up-very-fast/70274 "2016-12-30T14:22:08Z")
HI Team, My Elastic Search logs are filling up very fast and need some help rotating the logs. My config is set to the location - /usr/local/etc/elasticsearch/elasticsearch.yml, where paths are set as below path.co… [Previous page](https://discuss.elastic.co/top.md?page=1474&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1476&per_page=50&period=all)