# Top **URL:** https://discuss.elastic.co/top.md?page=1492&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1493 --- ## [Logstash Not parsing the file when running the again on the same file](https://discuss.elastic.co/t/logstash-not-parsing-the-file-when-running-the-again-on-the-same-file/70864)
**Author:** [@Akul\_Kapoor](https://discuss.elastic.co/u/Akul_Kapoor)\ **Replies:** 2\ **Last updated:** [January 7, 2017, 8:54pm UTC](https://discuss.elastic.co/t/logstash-not-parsing-the-file-when-running-the-again-on-the-same-file/70864 "2017-01-07T20:54:17Z")
I ran logstash successfully using my log and config file. After that I stopped it and ran again using the same config file and log file, the logstash does not give any output. Can someone explain why logstash is not runn… --- ## [How to disable logrotate?](https://discuss.elastic.co/t/how-to-disable-logrotate/62714)
**Author:** [@voelzmo](https://discuss.elastic.co/u/voelzmo)\ **Replies:** 2\ **Last updated:** [October 12, 2016, 12:22pm UTC](https://discuss.elastic.co/t/how-to-disable-logrotate/62714 "2016-10-12T12:22:30Z")
Hi, Following the documentation at https://www.elastic.co/guide/en/beats/packetbeat/master/configuration-logging.html I was looking for a way to disable logrotate. Is that even possible at all? How well would packetbea… --- ## [What is the meaning of the downward facing arrows on the Nodes screen?](https://discuss.elastic.co/t/what-is-the-meaning-of-the-downward-facing-arrows-on-the-nodes-screen/59879)
**Author:** [@jdmac](https://discuss.elastic.co/u/jdmac)\ **Replies:** 2\ **Last updated:** [October 11, 2016, 9:57pm UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-the-downward-facing-arrows-on-the-nodes-screen/59879 "2016-10-11T21:57:26Z")
Hi All, This probably sounds on the surface like it'd be an obvious answer to the my question but let me explain a bit further. I'm looking at the Nodes screen within Marvel (2.3.5) and noticed that next to each metr… --- ## [Timelion plugin error on execution](https://discuss.elastic.co/t/timelion-plugin-error-on-execution/58551)
**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\ **Replies:** 2\ **Last updated:** [August 22, 2016, 9:27am UTC](https://discuss.elastic.co/t/timelion-plugin-error-on-execution/58551 "2016-08-22T09:27:04Z")
Trying to use Timelion plugin inside kibana 4.5.2. Getting the below error. Could anyone help? Values are always coming as 0. {"title":"TypeError: Cannot read property 'match' of undefined","message":"TypeError: Cannot… --- ## [Re-running /opt/logstash/bin/logstash with same conf file does not produce output](https://discuss.elastic.co/t/re-running-opt-logstash-bin-logstash-with-same-conf-file-does-not-produce-output/53791)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 2\ **Last updated:** [June 30, 2016, 4:26pm UTC](https://discuss.elastic.co/t/re-running-opt-logstash-bin-logstash-with-same-conf-file-does-not-produce-output/53791 "2016-06-30T16:26:36Z")
Using logstash v2.3.2 I have a \*.conf file that I use for this command /opt/logstash/bin/logstash -f /path/mylogstash.conf I was able to run this yesterday and was able to produce my desired mylogstash.json output … --- ## [Why sorting elasticserch in my example is to slow](https://discuss.elastic.co/t/why-sorting-elasticserch-in-my-example-is-to-slow/53637)
**Author:** [@Radoslaw\_Wojtkiewicz](https://discuss.elastic.co/u/Radoslaw_Wojtkiewicz)\ **Replies:** 2\ **Last updated:** [June 24, 2016, 11:37am UTC](https://discuss.elastic.co/t/why-sorting-elasticserch-in-my-example-is-to-slow/53637 "2016-06-24T11:37:00Z")
Hey, I cant find anywhere answer why elasticsearch in my example is to slow. So lets see to my mapping: mappings": { "auctions": { "\_all": { "enabled": false }, "propert… --- ## [Inverted Index for each fields of a Document in Lucene?](https://discuss.elastic.co/t/inverted-index-for-each-fields-of-a-document-in-lucene/51756)
**Author:** [@skumar](https://discuss.elastic.co/u/skumar)\ **Replies:** 2\ **Last updated:** [June 6, 2016, 9:28am UTC](https://discuss.elastic.co/t/inverted-index-for-each-fields-of-a-document-in-lucene/51756 "2016-06-06T09:28:54Z")
Does Lucene creates inverted index for each field name in documents ? How can we search for a word which belongs to a particular field? --- ## [Usage of setBucketsPaths](https://discuss.elastic.co/t/usage-of-setbucketspaths/38625)
**Author:** [@PatrickKik](https://discuss.elastic.co/u/PatrickKik)\ **Replies:** 2\ **Last updated:** [January 8, 2016, 6:36am UTC](https://discuss.elastic.co/t/usage-of-setbucketspaths/38625 "2016-01-08T06:36:21Z")
I'm writing a pipeline aggregation in Java. This is part of my aggregation definition via the REST interface: "active\_users": { "bucket\_script": { "buckets\_path": { "added": "users\_added", "removed":… --- ## [Time series metric in Kibana](https://discuss.elastic.co/t/time-series-metric-in-kibana/33224)
**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\ **Replies:** 2\ **Last updated:** [December 9, 2015, 5:41am UTC](https://discuss.elastic.co/t/time-series-metric-in-kibana/33224 "2015-12-09T05:41:19Z")
Hi, Is it possible to create time series metric in Kibana like we can do in Grafana. Thanks --- ## [Heartbeat autodiscover not working: protocol not available](https://discuss.elastic.co/t/heartbeat-autodiscover-not-working-protocol-not-available/262780)
**Author:** [@jeffrey008](https://discuss.elastic.co/u/jeffrey008)\ **Replies:** 4\ **Last updated:** [February 4, 2021, 7:37am UTC](https://discuss.elastic.co/t/heartbeat-autodiscover-not-working-protocol-not-available/262780 "2021-02-04T07:37:00Z")
I was trying Heartbeat autodiscover on my Windows. Here is my heartbeast.yml: heartbeat.autodiscover: providers: - type: docker templates: - condition: contains: docker.cont… --- ## [ServiceNow Ticket data to ElasticSearch](https://discuss.elastic.co/t/servicenow-ticket-data-to-elasticsearch/258817)
**Author:** [@nottyheadedboss](https://discuss.elastic.co/u/nottyheadedboss)\ **Replies:** 4\ **Last updated:** [December 16, 2020, 10:59am UTC](https://discuss.elastic.co/t/servicenow-ticket-data-to-elasticsearch/258817 "2020-12-16T10:59:15Z")
Hi All I am a ElasticSearch noob... I am trying to upload data from ServiceNow to ElasticSearch... I am facing some issues with the data and the conf file I tried to take assistance from @Gauti who assisted me with the… --- ## [Create new pie chart from a data table with different columns](https://discuss.elastic.co/t/create-new-pie-chart-from-a-data-table-with-different-columns/231520)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 4\ **Last updated:** [May 8, 2020, 5:32am UTC](https://discuss.elastic.co/t/create-new-pie-chart-from-a-data-table-with-different-columns/231520 "2020-05-08T05:32:01Z")
Hello, I have a data table and i want to plot a pie chart. The screenshot of data table and expected pie chart is attached below. If any body can help me select right aggregations to get the graph it would be helpful. T… --- ## [Indexing error after elasticsearch upgrade](https://discuss.elastic.co/t/indexing-error-after-elasticsearch-upgrade/182961)
**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\ **Replies:** 4\ **Last updated:** [May 29, 2019, 10:29am UTC](https://discuss.elastic.co/t/indexing-error-after-elasticsearch-upgrade/182961 "2019-05-29T10:29:01Z")
Hi, I recently upgraded elasticsearch cluster from 5.x to 7.x. Post this upgrade, I'm seeing below error while indexing data: \*\*00:42:53\*\* File "/usr/local/lib/python2.7/site-packages/elasticsearch/client/utils.py", l… --- ## [What is X-Pack Watcher's Slack action "recipient" for?](https://discuss.elastic.co/t/what-is-x-pack-watchers-slack-action-recipient-for/159020)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 4\ **Last updated:** [December 3, 2018, 5:23pm UTC](https://discuss.elastic.co/t/what-is-x-pack-watchers-slack-action-recipient-for/159020 "2018-12-03T17:23:31Z")
I can't seem to find any documentation on this. I configured the Slack app with a webhook to a certain channel. From what I can tell, with Slack it is one channel per webhook, so I'm not sure what the point of the "recip… --- ## [Pie Chart showing unfilled circle with a line](https://discuss.elastic.co/t/pie-chart-showing-unfilled-circle-with-a-line/113309)
**Author:** [@ayadirh](https://discuss.elastic.co/u/ayadirh)\ **Replies:** 4\ **Last updated:** [December 29, 2017, 10:21am UTC](https://discuss.elastic.co/t/pie-chart-showing-unfilled-circle-with-a-line/113309 "2017-12-29T10:21:54Z")
I am using Pie chart visualization on my dashboard. I sometimes get this empty circle with a line as output as shown in Fig 1. This does not make sense to users. When I open that visualization in edit-mode. It says No… --- ## [Case studies of successful ES clusters in production](https://discuss.elastic.co/t/case-studies-of-successful-es-clusters-in-production/37170)
**Author:** [@zombie101](https://discuss.elastic.co/u/zombie101)\ **Replies:** 4\ **Last updated:** [December 15, 2015, 6:59pm UTC](https://discuss.elastic.co/t/case-studies-of-successful-es-clusters-in-production/37170 "2015-12-15T18:59:25Z")
Using ES in production? Are you indexing huge quantities of data per second or do you have a steady but critical trickle of data coming in? Are you running complex queries with tonnes of aggregations or just browsing t… --- ## [Replica Shards allocation in nodes](https://discuss.elastic.co/t/replica-shards-allocation-in-nodes/32384)
**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\ **Replies:** 4\ **Last updated:** [October 16, 2015, 6:44pm UTC](https://discuss.elastic.co/t/replica-shards-allocation-in-nodes/32384 "2015-10-16T18:44:12Z")
Hi! I have 2 nodes: Node 1 cluster.name: elasticsearch node.name: "belerian" node.master: true node.data: true discovery.zen.ping.multicast.enabled: false discovery.zen.ping.unicast.hosts: \["gondolin.cabib.local… --- ## [Native script caching](https://discuss.elastic.co/t/native-script-caching/22692)
**Author:** [@Sergey\_Novikov](https://discuss.elastic.co/u/Sergey_Novikov)\ **Replies:** 4\ **Last updated:** [March 17, 2015, 1:22pm UTC](https://discuss.elastic.co/t/native-script-caching/22692 "2015-03-17T13:22:16Z")
Hi, I'm trying to cache script results using cache = CacheBuilder.newBuilder() .maximumSize(CACHE\_MAX\_SIZE) .recordStats() .build(); then in the script I have @Override public Integer run() { try { return cach… --- ## [ElasticSearch Java API "Should" Array](https://discuss.elastic.co/t/elasticsearch-java-api-should-array/62084)
**Author:** [@yeikel](https://discuss.elastic.co/u/yeikel)\ **Replies:** 0\ **Last updated:** [October 3, 2016, 3:16pm UTC](https://discuss.elastic.co/t/elasticsearch-java-api-should-array/62084 "2016-10-03T15:16:22Z")
I am trying to convert the following query : GET /consumer/\_search { "query": { "bool": { "should": \[ { "bool": { "must": \[ { "match": { … --- ## [Auditbeat process.args shortened](https://discuss.elastic.co/t/auditbeat-process-args-shortened/337298)
**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\ **Replies:** 0\ **Last updated:** [June 30, 2023, 10:02am UTC](https://discuss.elastic.co/t/auditbeat-process-args-shortened/337298 "2023-06-30T10:02:49Z")
Hi, I noticed some time ago, that sometimes process.args get shortened in a way that 3 dots are put there instead of more arguments from the commandline so it looks like this: (this is from socket event.dataset, arg… --- ## [Connecting google sheets to elasticsearch](https://discuss.elastic.co/t/connecting-google-sheets-to-elasticsearch/273758)
**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\ **Replies:** 0\ **Last updated:** [May 23, 2021, 11:48am UTC](https://discuss.elastic.co/t/connecting-google-sheets-to-elasticsearch/273758 "2021-05-23T11:48:55Z")
I'm trying to connect a few sheets saved in my google drive to visualize in Kibana, I tried using Google sheets to elasticsearch add-on and it looks like the add-on no longer exists. Is there an alternative for this ? T… --- ## [Azure Module Metricbeat](https://discuss.elastic.co/t/azure-module-metricbeat/249125)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 7\ **Last updated:** [September 29, 2020, 12:27pm UTC](https://discuss.elastic.co/t/azure-module-metricbeat/249125 "2020-09-29T12:27:21Z")
Hello, I hope you are doing well! I have ELK stack 7.9 running in an AKS alongside metricbeat (which is running as a daemonset). Among the modules configured for metricbeat, I have the azure module which is configured… --- ## [CPU high on Elastic cloud, instance almost stuck](https://discuss.elastic.co/t/cpu-high-on-elastic-cloud-instance-almost-stuck/247188)
**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\ **Replies:** 7\ **Last updated:** [September 8, 2020, 9:23pm UTC](https://discuss.elastic.co/t/cpu-high-on-elastic-cloud-instance-almost-stuck/247188 "2020-09-08T21:23:38Z")
Hi guys, I'm looking for some hint. Starting from this morning my ES instance (aws.data.highio.i3 2GB ram on Elastic cloud) is almost stuck with high load on cpu as you can see from screenshots. It seems there is no loa… --- ## [Kibana sorts big numbers wrong](https://discuss.elastic.co/t/kibana-sorts-big-numbers-wrong/237326)
**Author:** [@jbeyer](https://discuss.elastic.co/u/jbeyer)\ **Replies:** 7\ **Last updated:** [June 22, 2020, 8:07am UTC](https://discuss.elastic.co/t/kibana-sorts-big-numbers-wrong/237326 "2020-06-22T08:07:24Z")
For a test, I inserted 1000 docs into elasticsearch index. One column has a consecutive number (3. column in the screen shot). This column is sorted ascending in Kibana. After the 253. row Kibana breaks the order and sho… --- ## [Formula from fields](https://discuss.elastic.co/t/formula-from-fields/229570)
**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\ **Replies:** 7\ **Last updated:** [May 3, 2020, 5:42pm UTC](https://discuss.elastic.co/t/formula-from-fields/229570 "2020-05-03T17:42:03Z")
Hi I need a new column with formula 'NG Amount' / 'Component Qty' \* 1000000 I tried to perform SCRIPTED FIELDS but without success. Thanks for the helpers --- ## [Standalone license model](https://discuss.elastic.co/t/standalone-license-model/198550)
**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\ **Replies:** 1\ **Last updated:** [September 8, 2019, 2:23pm UTC](https://discuss.elastic.co/t/standalone-license-model/198550 "2019-09-08T14:23:00Z")
Dear All, I want to understand enterprise version license model. if i have 3 \* ES nodes , 3 \* Logstash nodes and 2 \* kibana nodes . Then how many number of elasticstack single node standalone license requrired? 3 or … --- ## [Delay in data shiping to ELK](https://discuss.elastic.co/t/delay-in-data-shiping-to-elk/181942)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 7\ **Last updated:** [May 29, 2019, 4:47am UTC](https://discuss.elastic.co/t/delay-in-data-shiping-to-elk/181942 "2019-05-29T04:47:00Z")
hi all, I have three servers which one elasticesearch , one logstash and one kibana is installed in each server. therefore, the ELK cluster has three nodes. the resource of servers is as following: servers1: RAM 12, CP… --- ## [Is there a way to add new data source?](https://discuss.elastic.co/t/is-there-a-way-to-add-new-data-source/181418)
**Author:** [@keshav\_garg](https://discuss.elastic.co/u/keshav_garg)\ **Replies:** 1\ **Last updated:** [May 16, 2019, 2:07pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-add-new-data-source/181418 "2019-05-16T14:07:11Z")
Can we add a new data source to kibana or we have to migrate all our stats to elastic search and consume kibana. ? --- ## [Ayuda con fecha real en filebeat](https://discuss.elastic.co/t/ayuda-con-fecha-real-en-filebeat/172196)
**Author:** [@joseantoniotg26](https://discuss.elastic.co/u/joseantoniotg26)\ **Replies:** 1\ **Last updated:** [March 22, 2019, 4:20pm UTC](https://discuss.elastic.co/t/ayuda-con-fecha-real-en-filebeat/172196 "2019-03-22T16:20:50Z")
Hola, somos nevos en esto, tenemos montado el elk mas o menos bien ya nos funciona todo con elkibana etc... tenemos el siguiente problema al ver los logs que arrastramos con el filebeat las horas y fechas que nos aparec… --- ## [Python client : put\_script](https://discuss.elastic.co/t/python-client-put-script/126740)
**Author:** [@Gemma\_Cabero](https://discuss.elastic.co/u/Gemma_Cabero)\ **Replies:** 1\ **Last updated:** [April 4, 2018, 3:45pm UTC](https://discuss.elastic.co/t/python-client-put-script/126740 "2018-04-04T15:45:12Z")
Hi, I'm upgrading our elastic search code to 6.2 and on the python client we use the following API: http://elasticsearch-py.readthedocs.io/en/master/api.html, particularly "put\_script". Whereas before we would be able t… --- ## [Auth problem after installing X-pack on logstash](https://discuss.elastic.co/t/auth-problem-after-installing-x-pack-on-logstash/111936)
**Author:** [@Nima\_van\_Persien](https://discuss.elastic.co/u/Nima_van_Persien)\ **Replies:** 1\ **Last updated:** [December 22, 2017, 9:57am UTC](https://discuss.elastic.co/t/auth-problem-after-installing-x-pack-on-logstash/111936 "2017-12-22T09:57:14Z")
Hi community, I have recently installed xpack on Elasticsearch,Kibana and logstash as well. but I don't receive any data more! this is the log which I receive, tail -f /var/log/logstash/logstash-plain.log \[2017-12-1… --- ## [Apache struts Vulnerability](https://discuss.elastic.co/t/apache-struts-vulnerability/104147)
**Author:** [@rajatgupta](https://discuss.elastic.co/u/rajatgupta)\ **Replies:** 1\ **Last updated:** [October 16, 2017, 9:38pm UTC](https://discuss.elastic.co/t/apache-struts-vulnerability/104147 "2017-10-16T21:38:52Z")
Hi, Is any version of elastic search affected by apache struts vulnerability? Thanks --- ## [ElasticSearch segment size too small](https://discuss.elastic.co/t/elasticsearch-segment-size-too-small/96268)
**Author:** [@bforevdr](https://discuss.elastic.co/u/bforevdr)\ **Replies:** 1\ **Last updated:** [August 9, 2017, 5:59am UTC](https://discuss.elastic.co/t/elasticsearch-segment-size-too-small/96268 "2017-08-09T05:59:03Z")
We have a Elasticsearch cluster of four nodes, each allocated more than 32gb memory, but we found that we got too many small size segments which is about 20mb. We had tried some settings like: indices.memory.index\_buffe… --- ## [X-Pack Authentication using Google/SSO](https://discuss.elastic.co/t/x-pack-authentication-using-google-sso/71944)
**Author:** [@gurugudi](https://discuss.elastic.co/u/gurugudi)\ **Replies:** 1\ **Last updated:** [February 2, 2017, 12:11am UTC](https://discuss.elastic.co/t/x-pack-authentication-using-google-sso/71944 "2017-02-02T00:11:34Z")
I read the documentation for x-pack and I see that it supports LDAP. I am however curious to know if I an use x-pack for an enterprise which uses google for its SSO (or google authentication in general). If I missed rea… --- ## [Kibana 4.5 Discover Screen blank (no searchbar, fieldlist, metrics)](https://discuss.elastic.co/t/kibana-4-5-discover-screen-blank-no-searchbar-fieldlist-metrics/47645)
**Author:** [@mbst83r](https://discuss.elastic.co/u/mbst83r)\ **Replies:** 1\ **Last updated:** [April 18, 2016, 12:55pm UTC](https://discuss.elastic.co/t/kibana-4-5-discover-screen-blank-no-searchbar-fieldlist-metrics/47645 "2016-04-18T12:55:31Z")
Today Kibana 4.5.1 changed his default discover page to an white blankscreen with only the kibana logo and the different tabs. I can open visualize and browse my dashboard as well, only the discovery tab stays plain w… --- ## [I'm struggling set up the minimal Security and the configure the TLS](https://discuss.elastic.co/t/im-struggling-set-up-the-minimal-security-and-the-configure-the-tls/321851)
**Author:** [@Anonym123](https://discuss.elastic.co/u/Anonym123)\ **Replies:** 5\ **Last updated:** [December 23, 2022, 8:58am UTC](https://discuss.elastic.co/t/im-struggling-set-up-the-minimal-security-and-the-configure-the-tls/321851 "2022-12-23T08:58:17Z")
What im using: The offical Helm Chart verion 7.17.3 from artifacthub.io Image version is also 7.17.3 My Problem: I'm struggling set up the minimal Security and the configure the TLS My Steps: Create the p12 elast… --- ## [Heartbeat Error](https://discuss.elastic.co/t/heartbeat-error/184013)
**Author:** [@Imad\_Bouchakour](https://discuss.elastic.co/u/Imad_Bouchakour)\ **Replies:** 5\ **Last updated:** [June 28, 2019, 11:38am UTC](https://discuss.elastic.co/t/heartbeat-error/184013 "2019-06-28T11:38:55Z")
Hi I just installed Heartbeat to monitor our server using ICMP, even if my server is UP heartbeat detecte it as down giving me this message write ip4 0.0.0.0-\>192.168.XX.XX: sendto: operation not permitted PS: the pin… --- ## [How to disable automatic creating monitoring file](https://discuss.elastic.co/t/how-to-disable-automatic-creating-monitoring-file/163180)
**Author:** [@Vasudevantgi](https://discuss.elastic.co/u/Vasudevantgi)\ **Replies:** 5\ **Last updated:** [January 8, 2019, 6:18am UTC](https://discuss.elastic.co/t/how-to-disable-automatic-creating-monitoring-file/163180 "2019-01-08T06:18:37Z")
Hi Team, I have an issue when i start the Elasticsearch its automatically created the (dot) monitoring file daily .. This issue is come from last month . i dont know how this index is created and i am not enable anythin… --- ## [LS not ingesting syslog](https://discuss.elastic.co/t/ls-not-ingesting-syslog/158742)
**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\ **Replies:** 5\ **Last updated:** [November 29, 2018, 12:29pm UTC](https://discuss.elastic.co/t/ls-not-ingesting-syslog/158742 "2018-11-29T12:29:46Z")
Hi, I've installed this on a docker container, this is the current docker-compose.yaml: version: '2' services: elasticsearch: image: elasticsearch-img:6.3.2 container\_name: elasticsearch-container volumes… --- ## [Filebeat modules with filebeat input on ECK](https://discuss.elastic.co/t/filebeat-modules-with-filebeat-input-on-eck/305034)
**Author:** [@ryuseongryong](https://discuss.elastic.co/u/ryuseongryong)\ **Replies:** 3\ **Last updated:** [May 19, 2022, 6:58am UTC](https://discuss.elastic.co/t/filebeat-modules-with-filebeat-input-on-eck/305034 "2022-05-19T06:58:24Z")
hi. I'm collecting my k8s containers all logs in /var/log/containers/\*.log and I need to parsing with modules(e.g. kafka, zookeeper, mongodb etc.) but I cannot find reference. I already know about way like 'how to set… --- ## [Question about wildcard query](https://discuss.elastic.co/t/question-about-wildcard-query/269129)
**Author:** [@anyla](https://discuss.elastic.co/u/anyla)\ **Replies:** 8\ **Last updated:** [April 7, 2021, 2:56pm UTC](https://discuss.elastic.co/t/question-about-wildcard-query/269129 "2021-04-07T14:56:00Z")
Hi all, It seems that there is something about wildcard queries that it is not clear to me As far as I understand, Wildcard queries are term queries so. the search term is not analysed itself and it is "compared" aga… --- ## [Elasticsearch SQLの判定がおかしい](https://discuss.elastic.co/t/elasticsearch-sql/211049)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 3\ **Last updated:** [December 9, 2019, 7:01am UTC](https://discuss.elastic.co/t/elasticsearch-sql/211049 "2019-12-09T07:01:19Z")
お世話になります。 CanvasのImage revealエレメントで、data source に Elaticsearch SQLを指定しています。 SQLの中で、値がXX以上なら～のような構文を書いているのですが、想定どおり動作しない箇所があります。 SELECT CASE WHEN round(0,3) \< 0 THEN 0 ELSE 1 END AS "test" 結果：test=0 この場合、想定する動きとして r… --- ## [Puppet catalog error on version 5.2 for systemd](https://discuss.elastic.co/t/puppet-catalog-error-on-version-5-2-for-systemd/76774)
**Author:** [@m0n0lith](https://discuss.elastic.co/u/m0n0lith)\ **Replies:** 3\ **Last updated:** [February 28, 2017, 3:37pm UTC](https://discuss.elastic.co/t/puppet-catalog-error-on-version-5-2-for-systemd/76774 "2017-02-28T15:37:47Z")
Hello, I have an error after playing around with puppet-elasticsearch puppetForge mod version 'elastic-elasticsearch', '5.0.0'. Here is the error my puppet agent gives me: puppet-agent\[115010\]: Could not retrieve catalo… --- ## [File beat to switch logstash host in case of failure](https://discuss.elastic.co/t/file-beat-to-switch-logstash-host-in-case-of-failure/72911)
**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\ **Replies:** 3\ **Last updated:** [January 27, 2017, 1:03am UTC](https://discuss.elastic.co/t/file-beat-to-switch-logstash-host-in-case-of-failure/72911 "2017-01-27T01:03:03Z")
Hi, I am using filebeat to export logs from client machine to logstash server.. My scenario is: I have installed logstash (ELK server) in two servers. both the logstash will be listening always. I need to export … --- ## [Logstash is not reading CSV file](https://discuss.elastic.co/t/logstash-is-not-reading-csv-file/60569)
**Author:** [@Senz79](https://discuss.elastic.co/u/Senz79)\ **Replies:** 3\ **Last updated:** [September 15, 2016, 8:13am UTC](https://discuss.elastic.co/t/logstash-is-not-reading-csv-file/60569 "2016-09-15T08:13:41Z")
i am trying to read a CSV file and seems Logstash is not reading the file. Currently it is stuck at D:\\Tools\\ELK\\logstash-2.4.0\\bin\>logstash --allow-env agent -f test.conf Settings: Default pipeline workers: 4 Pipelin… --- ## [Grok custom filters](https://discuss.elastic.co/t/grok-custom-filters/46234)
**Author:** [@Giulio](https://discuss.elastic.co/u/Giulio)\ **Replies:** 3\ **Last updated:** [April 5, 2016, 7:13am UTC](https://discuss.elastic.co/t/grok-custom-filters/46234 "2016-04-05T07:13:32Z")
Hi I'm creating a custom filter for the log that I must store into the database. It work (more or less) but there are still a couple of problem (testing it on Grok Debugger) www.test.example.com 132.168.192.123 … --- ## [Which is better for logserver, S3FS or EBS?](https://discuss.elastic.co/t/which-is-better-for-logserver-s3fs-or-ebs/44552)
**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\ **Replies:** 3\ **Last updated:** [March 17, 2016, 10:17pm UTC](https://discuss.elastic.co/t/which-is-better-for-logserver-s3fs-or-ebs/44552 "2016-03-17T22:17:51Z")
I dont know whether my question make any sense or not, but I really stuck in this area. I need to use AWS S3 for storing logs. But on searching I came to know that, S3 could only be used for storing snapshots. My re… --- ## [How to remove .Keywords in kibana](https://discuss.elastic.co/t/how-to-remove-keywords-in-kibana/320677)
**Author:** [@vijay78](https://discuss.elastic.co/u/vijay78)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 11:19am UTC](https://discuss.elastic.co/t/how-to-remove-keywords-in-kibana/320677 "2022-12-07T11:19:02Z")
Can someone assist here with how to remove (exclude)these highlighted .keywords in kibana ,thanking in advance. --- ## [Kibana iframe error](https://discuss.elastic.co/t/kibana-iframe-error/293997)
**Author:** [@yanwencheng](https://discuss.elastic.co/u/yanwencheng)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 7:58am UTC](https://discuss.elastic.co/t/kibana-iframe-error/293997 "2022-01-12T07:58:32Z")
i set xpack.security.sameSiteCookies: "None" Error when accessing kibana Logging in with provider "basic" (basic) log \[17:00:29.269\] \[error\]\[http\] Error: "SameSite: None" requires Secure connection at validateO… --- ## [Internal Server Error](https://discuss.elastic.co/t/internal-server-error/283612)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 2\ **Last updated:** [October 5, 2021, 8:19am UTC](https://discuss.elastic.co/t/internal-server-error/283612 "2021-10-05T08:19:44Z")
Hello dear friends :slight\_smile: I have a problem. First thing I want to do is: I want to backup the indexes I created before, so I created some folders in "C:\\ "and added them to my elasticsearch.yml file.Then I restar… [Previous page](https://discuss.elastic.co/top.md?page=1491&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1493&per_page=50&period=all)