# Top **URL:** https://discuss.elastic.co/top.md?page=1501&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1502 --- ## [Some logs aren't being received by ElasticSearch / showing in Kibana](https://discuss.elastic.co/t/some-logs-arent-being-received-by-elasticsearch-showing-in-kibana/288139)
**Author:** [@nwright](https://discuss.elastic.co/u/nwright)\ **Replies:** 6\ **Last updated:** [November 14, 2021, 9:08pm UTC](https://discuss.elastic.co/t/some-logs-arent-being-received-by-elasticsearch-showing-in-kibana/288139 "2021-11-14T21:08:13Z")
I'm using Elasticsearch primarily to record log messages from a .NET API hosted on an AWS lambda. Whenever there are two or more API requests sent to this API, only the logs from one call are sent to Elasticsearch where… --- ## [Dashboard in vega query elasticsearch and a fixed](https://discuss.elastic.co/t/dashboard-in-vega-query-elasticsearch-and-a-fixed/269075)
**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\ **Replies:** 6\ **Last updated:** [April 4, 2021, 12:47pm UTC](https://discuss.elastic.co/t/dashboard-in-vega-query-elasticsearch-and-a-fixed/269075 "2021-04-04T12:47:33Z")
how to create a dashboard in vega sound an elasticsearch query and a fixed value. { "$schema": "https://vega.github.io/schema/vega-lite/v5.json", "description": "A simple pie chart with labels.", "data": { "v… --- ## [License question - am I basic or open source?](https://discuss.elastic.co/t/license-question-am-i-basic-or-open-source/247692)
**Author:** [@bn1980](https://discuss.elastic.co/u/bn1980)\ **Replies:** 6\ **Last updated:** [October 1, 2020, 2:10pm UTC](https://discuss.elastic.co/t/license-question-am-i-basic-or-open-source/247692 "2020-10-01T14:10:47Z")
I have installed ELK stack on FreeBSD using pkg manager. Kibana reports my license as BASIC. I don't appear to have the suricata module. Can someone please confirm which license i have? --- ## [Disable stack monitoring in Kibana](https://discuss.elastic.co/t/disable-stack-monitoring-in-kibana/364131)
**Author:** [@Cyanat](https://discuss.elastic.co/u/Cyanat)\ **Replies:** 3\ **Last updated:** [July 31, 2024, 2:04pm UTC](https://discuss.elastic.co/t/disable-stack-monitoring-in-kibana/364131 "2024-07-31T14:04:14Z")
Hello! I have wanted to see what monitoring of stack was offerring. As I don't have metricbeat installed, I chose a self monitoring. Now, I would like to revert this change and disable monitoring (because I'm afraid mo… --- ## [Index is getting deleted automatically](https://discuss.elastic.co/t/index-is-getting-deleted-automatically/341578)
**Author:** [@HardikSCaypro](https://discuss.elastic.co/u/HardikSCaypro)\ **Replies:** 3\ **Last updated:** [August 24, 2023, 1:58pm UTC](https://discuss.elastic.co/t/index-is-getting-deleted-automatically/341578 "2023-08-24T13:58:40Z")
Hello Team, We are using Elasticsearch from last few years. However recently we found that few of our indexes were getting deleted automatically, so we searched and found that we should reinstall it in different system. … --- ## [Filebeat converting special character into unicode value when loading into kafka](https://discuss.elastic.co/t/filebeat-converting-special-character-into-unicode-value-when-loading-into-kafka/279548)
**Author:** [@venkataraman](https://discuss.elastic.co/u/venkataraman)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 5:26pm UTC](https://discuss.elastic.co/t/filebeat-converting-special-character-into-unicode-value-when-loading-into-kafka/279548 "2021-07-26T17:26:40Z")
Hello Everyone, I am trying to load data into kafka topic through filebeat. The major issue I am facing is, filebeat is converting special character (&) into Unicode value (\\u0026) when loading into kafka topic output. … --- ## [S3 Input Plugin Does Not Delete The Temporary Files](https://discuss.elastic.co/t/s3-input-plugin-does-not-delete-the-temporary-files/253483)
**Author:** [@Rahul\_Kumar4](https://discuss.elastic.co/u/Rahul_Kumar4)\ **Replies:** 3\ **Last updated:** [October 27, 2020, 8:12pm UTC](https://discuss.elastic.co/t/s3-input-plugin-does-not-delete-the-temporary-files/253483 "2020-10-27T20:12:45Z")
The S3 input plugin does not delete the temporary files that it creates from the downloaded objects from S3 bucket even after processing and indexing it to Elasticsearch. Is there a work around/setting to automate this? … --- ## [Output: how to save a field to a pdf file?](https://discuss.elastic.co/t/output-how-to-save-a-field-to-a-pdf-file/211618)
**Author:** [@ITIC](https://discuss.elastic.co/u/ITIC)\ **Replies:** 3\ **Last updated:** [January 20, 2020, 12:39pm UTC](https://discuss.elastic.co/t/output-how-to-save-a-field-to-a-pdf-file/211618 "2020-01-20T12:39:09Z")
Hi there I'm using logstash (docker.elastic.co/logstash/logstash:7.4.0) to ingest data to our open data portal and saving said data to files (.csv, .geojson, etc.). All was well, until we got to one of our data sources… --- ## [Filebeat autodiscovery logging twice](https://discuss.elastic.co/t/filebeat-autodiscovery-logging-twice/169718)
**Author:** [@strowi](https://discuss.elastic.co/u/strowi)\ **Replies:** 3\ **Last updated:** [February 25, 2019, 2:44pm UTC](https://discuss.elastic.co/t/filebeat-autodiscovery-logging-twice/169718 "2019-02-25T14:44:56Z")
Hi, i'm currently playing with hint-based autodiscovery in kubernetes. So far my tests with an nginx-deployment seem to work fine, except that the logline appears twice in elasticsearch. One time as "message", the othe… --- ## [Filebeat - multiline pattern does not work as expected](https://discuss.elastic.co/t/filebeat-multiline-pattern-does-not-work-as-expected/160196)
**Author:** [@mateusz-lubanski-omn](https://discuss.elastic.co/u/mateusz-lubanski-omn)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 1:04pm UTC](https://discuss.elastic.co/t/filebeat-multiline-pattern-does-not-work-as-expected/160196 "2018-12-11T13:04:54Z")
Hi, I set up multiline.\* properties for /etc/filebeat/filebeat.yml as bellow: filebeat.inputs: - type: log paths: - /home/eip/logs/\*.log tail\_files: true multiline.pattern: '^%{TIMESTAMP\_ISO8601}' multiline.negat… --- ## [Filebeat Kafka output message compression](https://discuss.elastic.co/t/filebeat-kafka-output-message-compression/153916)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [October 31, 2018, 1:11pm UTC](https://discuss.elastic.co/t/filebeat-kafka-output-message-compression/153916 "2018-10-31T13:11:20Z")
Would like to know whether filebeat compresses the log events before sending to Kafka. --- ## [ElasticSearch.Net comptability matrix with ElasticSearch versions](https://discuss.elastic.co/t/elasticsearch-net-comptability-matrix-with-elasticsearch-versions/75132)
**Author:** [@ImdotnetJunkie](https://discuss.elastic.co/u/ImdotnetJunkie)\ **Replies:** 3\ **Last updated:** [February 17, 2017, 3:45am UTC](https://discuss.elastic.co/t/elasticsearch-net-comptability-matrix-with-elasticsearch-versions/75132 "2017-02-17T03:45:32Z")
Do we have a ElasticSearch.NET compatibility matrix with ElasticSearch versions ? or Latest ElasticSearch.NET version is compatible with all ES versions ? --- ## [ELK upgrade guide](https://discuss.elastic.co/t/elk-upgrade-guide/40942)
**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\ **Replies:** 3\ **Last updated:** [February 4, 2016, 12:00pm UTC](https://discuss.elastic.co/t/elk-upgrade-guide/40942 "2016-02-04T12:00:28Z")
Hi is there a guide to upgrade the entire ELK stack what component should be upgrade first ? kibana, logstash or elastic search does anyone know of a script or similar that lists the commands needed to perform the… --- ## [Getting error while setting password in interactive mode](https://discuss.elastic.co/t/getting-error-while-setting-password-in-interactive-mode/304096)
**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\ **Replies:** 5\ **Last updated:** [May 8, 2022, 1:15am UTC](https://discuss.elastic.co/t/getting-error-while-setting-password-in-interactive-mode/304096 "2022-05-08T01:15:49Z")
Hi i am trying to generate certificate and set passwd in interactive mode during build time but getting error. Docker file ARG ELASTICSEARCH\_VER="8.1.3" ARG ELASTICSEARCH\_IMAGE=docker.elastic.co/elasticsearch/elastics… --- ## [Why elasticsearch Downs After Reboot](https://discuss.elastic.co/t/why-elasticsearch-downs-after-reboot/281678)
**Author:** [@mertkaant](https://discuss.elastic.co/u/mertkaant)\ **Replies:** 5\ **Last updated:** [August 24, 2021, 10:15pm UTC](https://discuss.elastic.co/t/why-elasticsearch-downs-after-reboot/281678 "2021-08-24T22:15:02Z")
Hello, dear community, Recently we faced some critical errors in elasticsearch. The errors down below occurred after we rebooted the machines. #Issue: Failed to Read keystore Password on Console The problem was Elasti… --- ## [Canvas when filter added the value turns to zero \[6.8\]](https://discuss.elastic.co/t/canvas-when-filter-added-the-value-turns-to-zero-6-8/208081)
**Author:** [@SheetalRIL](https://discuss.elastic.co/u/SheetalRIL)\ **Replies:** 5\ **Last updated:** [November 19, 2019, 1:56pm UTC](https://discuss.elastic.co/t/canvas-when-filter-added-the-value-turns-to-zero-6-8/208081 "2019-11-19T13:56:10Z")
Hi I have tried to add a filter to one of my Canvas slides for the total dashboard but every value turns to zero as I select any of the values please provide me with a solution. On of the queries is : SELECT err from(s… --- ## [Configuring Canvas](https://discuss.elastic.co/t/configuring-canvas/122611)
**Author:** [@ave19](https://discuss.elastic.co/u/ave19)\ **Replies:** 5\ **Last updated:** [March 9, 2018, 5:02pm UTC](https://discuss.elastic.co/t/configuring-canvas/122611 "2018-03-09T17:02:37Z")
Hello, I'm poking around. I need to change my localhost:9200 Elasticsearch source to a slightly different private IP. Is there a place to drop a configuration yet? Or a right way to edit the existing datasource? Tha… --- ## [Elasticsearch 1.7 to 2.4 upgrade and slow indexing](https://discuss.elastic.co/t/elasticsearch-1-7-to-2-4-upgrade-and-slow-indexing/105487)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 5\ **Last updated:** [November 9, 2017, 3:21am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-to-2-4-upgrade-and-slow-indexing/105487 "2017-11-09T03:21:13Z")
We recently upgraded elasticsearch 1.7 to 2.4 . Our batch indexing used to take 20 ms before upgrade. After upgrade it’s taking 500-800 ms. Please let me know if there is known issue with es 2.4 or if there is anything t… --- ## [Discovery in multi node cluster using docker compose](https://discuss.elastic.co/t/discovery-in-multi-node-cluster-using-docker-compose/343199)
**Author:** [@JoyceBabu](https://discuss.elastic.co/u/JoyceBabu)\ **Replies:** 2\ **Last updated:** [September 26, 2023, 3:21pm UTC](https://discuss.elastic.co/t/discovery-in-multi-node-cluster-using-docker-compose/343199 "2023-09-26T15:21:38Z")
I am trying to create a three node ElasticSEarch cluster following the tutorial When I set cluster.initial\_master\_nodes to es1,es2,es3, I am getting the warning this node is locked into cluster UUID \[lUWf3vbtRcarnQX… --- ## [Index by hostname?](https://discuss.elastic.co/t/index-by-hostname/317187)
**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\ **Replies:** 2\ **Last updated:** [October 22, 2022, 7:14am UTC](https://discuss.elastic.co/t/index-by-hostname/317187 "2022-10-22T07:14:25Z")
elasticsearch { hosts =\> \["localhost:9200"\] index =\> "logstash-%{\[host\]\[hostname\]}%{+YYYY.MM.dd}" } but have --- ## [Filebeat SSL connection to logstash](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186)
**Author:** [@ruchil](https://discuss.elastic.co/u/ruchil)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 2:13pm UTC](https://discuss.elastic.co/t/filebeat-ssl-connection-to-logstash/303186 "2022-05-11T14:13:34Z")
Hi All, Appreciate any help in configuring SSL connection from Filebeat to logstash on ECK. Openshift 4.8.x ECK 2.1.0 ELKF stack 8.1.0 I am using to certs from Elasticsearch-es-http-certs-internal. Created pkcs8.key… --- ## [Error indexing with httpjson](https://discuss.elastic.co/t/error-indexing-with-httpjson/299122)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 2\ **Last updated:** [March 10, 2022, 1:59pm UTC](https://discuss.elastic.co/t/error-indexing-with-httpjson/299122 "2022-03-10T13:59:56Z")
Hi, Im having a issue while indexing via filebeat httpjson to elastic I have this configuration filebeat.inputs: - type: httpjson enabled: true config\_version: 2 fields\_under\_root: true json.keys\_under\_root: t… --- ## [How to get a specific cluster setting?](https://discuss.elastic.co/t/how-to-get-a-specific-cluster-setting/269081)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [April 2, 2021, 6:40am UTC](https://discuss.elastic.co/t/how-to-get-a-specific-cluster-setting/269081 "2021-04-02T06:40:27Z")
I know that I can get the cluster settings with this: GET \_cluster/settings What I don’t know is how I can get a specific setting, especially when it‘s at the default and so it doesn’t show up on the GET. For example,… --- ## [Unable to hide the top menu bar of kibana when using the discover page in HTML](https://discuss.elastic.co/t/unable-to-hide-the-top-menu-bar-of-kibana-when-using-the-discover-page-in-html/256518)
**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\ **Replies:** 2\ **Last updated:** [November 25, 2020, 6:35am UTC](https://discuss.elastic.co/t/unable-to-hide-the-top-menu-bar-of-kibana-when-using-the-discover-page-in-html/256518 "2020-11-25T06:35:39Z")
Hello Everyone, I have 2 versions of ELK - on AWS (version 7.1) on my own server (version 7.9) My situation / requirement is to navigate to "discover" tab from dashboard, which I am achieving by making one of my colu… --- ## [How to assign index to a group of nodes](https://discuss.elastic.co/t/how-to-assign-index-to-a-group-of-nodes/159742)
**Author:** [@Jason\_Wee](https://discuss.elastic.co/u/Jason_Wee)\ **Replies:** 2\ **Last updated:** [December 6, 2018, 2:41pm UTC](https://discuss.elastic.co/t/how-to-assign-index-to-a-group-of-nodes/159742 "2018-12-06T14:41:51Z")
i have a cluster with 6 nodes, is it possible to have 3 of them assigned indices/shards of a,b whilst another 3 nodes assigned indices/shards of c,d? if possible, can you give the documentation how this can be accomplish… --- ## [Grok Parse Failure - CSV input via Filebeat](https://discuss.elastic.co/t/grok-parse-failure-csv-input-via-filebeat/153662)
**Author:** [@phoenix66](https://discuss.elastic.co/u/phoenix66)\ **Replies:** 2\ **Last updated:** [October 25, 2018, 7:24am UTC](https://discuss.elastic.co/t/grok-parse-failure-csv-input-via-filebeat/153662 "2018-10-25T07:24:53Z")
Hi all, I am having a problem with a Grok filter failing to parse, despite it working fine in the Kibana Grok debugger. Here is an example message (CSV into Filebeat to Logstash) { "message" =\> "\\"46642378\\",\\… --- ## [Curl command to delete kibana visualizations](https://discuss.elastic.co/t/curl-command-to-delete-kibana-visualizations/100271)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 3:55am UTC](https://discuss.elastic.co/t/curl-command-to-delete-kibana-visualizations/100271 "2017-09-13T03:55:52Z")
I am using elastic APIs to add visualizations in kibana. For example, curl -XPUT -H "Content-Type: {application/json}" http://localhost:9200/.kibana/visualization/Network-Bandwidth -d “@file” I am able to add the visua… --- ## [Can not ship logs to elasticsearch ? any idea](https://discuss.elastic.co/t/can-not-ship-logs-to-elasticsearch-any-idea/54561)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 2\ **Last updated:** [July 5, 2016, 7:04pm UTC](https://discuss.elastic.co/t/can-not-ship-logs-to-elasticsearch-any-idea/54561 "2016-07-05T19:04:30Z")
{:timestamp=\>"2016-07-01T18:57:37.916000+0000", :message=\>"Failed to flush outgoing items", :outgoing\_count=\>1, :exception=\>"NoMethodError", :backtrace=\>\["/opt/logstash/vendor/bundle/jruby/1.9/gems/aws-sdk-core-2.1.36/li… --- ## [Can Watcher search and alert on external Elastic installations](https://discuss.elastic.co/t/can-watcher-search-and-alert-on-external-elastic-installations/38161)
**Author:** [@jbowker](https://discuss.elastic.co/u/jbowker)\ **Replies:** 2\ **Last updated:** [December 30, 2015, 12:42pm UTC](https://discuss.elastic.co/t/can-watcher-search-and-alert-on-external-elastic-installations/38161 "2015-12-30T12:42:18Z")
Hi Steve @skearns is it possible to run Watcher on one installation and alert on search results on external Elastic instance. --- ## [Best practice for changing recovery settings after cluster size changes](https://discuss.elastic.co/t/best-practice-for-changing-recovery-settings-after-cluster-size-changes/34872)
**Author:** [@Chris\_Fraschetti](https://discuss.elastic.co/u/Chris_Fraschetti)\ **Replies:** 2\ **Last updated:** [November 18, 2015, 3:33am UTC](https://discuss.elastic.co/t/best-practice-for-changing-recovery-settings-after-cluster-size-changes/34872 "2015-11-18T03:33:15Z")
Hi Folks. Running 1.7.1 and I've not found a good answer to how the proper approach to change the ES recovery settings (expected, recover after, etc.) when growing/shrinking an ES cluster. If I have 10 nodes and add a… --- ## [How to set Time range in Watcher](https://discuss.elastic.co/t/how-to-set-time-range-in-watcher/239617)
**Author:** [@skdas](https://discuss.elastic.co/u/skdas)\ **Replies:** 4\ **Last updated:** [July 23, 2020, 9:30am UTC](https://discuss.elastic.co/t/how-to-set-time-range-in-watcher/239617 "2020-07-23T09:30:55Z")
Hello Elastic Team, I am trying to set time range in my below watcher configuration but i am getting an error while configuring the Watcher could you please assist. Watcher Configuration { "trigger": { "schedule"… --- ## [Automatically obtain PDF Generation URL for use in Watcher (7.7)](https://discuss.elastic.co/t/automatically-obtain-pdf-generation-url-for-use-in-watcher-7-7/233746)
**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\ **Replies:** 4\ **Last updated:** [May 26, 2020, 9:15pm UTC](https://discuss.elastic.co/t/automatically-obtain-pdf-generation-url-for-use-in-watcher-7-7/233746 "2020-05-26T21:15:31Z")
Given a working Dashboard in Kibana 7.7 where we're able to Share \> PDF Reports \> Generate PDF, we'd like to automate the regular generation of these reports. We've manually created a Watcher job following the Kibana do… --- ## [Elastic stack for Node & Angular](https://discuss.elastic.co/t/elastic-stack-for-node-angular/228452)
**Author:** [@Bhagyashree\_S.B](https://discuss.elastic.co/u/Bhagyashree_S.B)\ **Replies:** 4\ **Last updated:** [April 19, 2020, 11:08pm UTC](https://discuss.elastic.co/t/elastic-stack-for-node-angular/228452 "2020-04-19T23:08:23Z")
Hi, We have recently started to setup centralized logging for our projects using Elastic stack. The projects are built with Angular as the frontend framework & NodeJS as the middleware. Please suggest on how to send th… --- ## [How to make a deepcopy BoolQueryBuilder](https://discuss.elastic.co/t/how-to-make-a-deepcopy-boolquerybuilder/211411)
**Author:** [@401825317](https://discuss.elastic.co/u/401825317)\ **Replies:** 4\ **Last updated:** [December 11, 2019, 6:19am UTC](https://discuss.elastic.co/t/how-to-make-a-deepcopy-boolquerybuilder/211411 "2019-12-11T06:19:49Z")
How to copy BoolQueryBuilder in depth?? --- ## [Unable to access elasticsearch instance from browser after changing the port](https://discuss.elastic.co/t/unable-to-access-elasticsearch-instance-from-browser-after-changing-the-port/112996)
**Author:** [@Milad\_Hamid](https://discuss.elastic.co/u/Milad_Hamid)\ **Replies:** 4\ **Last updated:** [December 25, 2017, 8:20am UTC](https://discuss.elastic.co/t/unable-to-access-elasticsearch-instance-from-browser-after-changing-the-port/112996 "2017-12-25T08:20:40Z")
Hi, Just to make my production setup more secure i changed the default http.port in elasticsearch.yml, then i restarted the elasticsearch service. Now i can't access the ES instance from browser! It was working fine wi… --- ## [Logstash date parsing error ( date field doesn't have any time)](https://discuss.elastic.co/t/logstash-date-parsing-error-date-field-doesnt-have-any-time/112737)
**Author:** [@Arjun\_subramanyam\_va](https://discuss.elastic.co/u/Arjun_subramanyam_va)\ **Replies:** 4\ **Last updated:** [December 23, 2017, 1:21am UTC](https://discuss.elastic.co/t/logstash-date-parsing-error-date-field-doesnt-have-any-time/112737 "2017-12-23T01:21:18Z")
down vote favorite My data has date in the format yyyy-MM-dd ex : "2015-10-12" My logstash date filter is as below date { match =\> \["start\_date", "yyyy-MM-dd"\] target =\> "start\_date" } However, my es instance is … --- ## [Logstash - Could not connect to a compatible version of Elasticsearch](https://discuss.elastic.co/t/logstash-could-not-connect-to-a-compatible-version-of-elasticsearch/325629)
**Author:** [@hnclientes\_HN](https://discuss.elastic.co/u/hnclientes_HN)\ **Replies:** 1\ **Last updated:** [February 15, 2023, 3:20pm UTC](https://discuss.elastic.co/t/logstash-could-not-connect-to-a-compatible-version-of-elasticsearch/325629 "2023-02-15T15:20:58Z")
I'm trying to upload a .csv file via logstash to a test version on Cloud V 8.6.1 and I get an error when trying (I'm using logstash version 8.6.1 anyway) and I get the following error: ´\`\`\` \[2023-02-14T23:21:15,274\]\[ER… --- ## [Is there a way invoke shell script or python script as part of filebeat output or processor](https://discuss.elastic.co/t/is-there-a-way-invoke-shell-script-or-python-script-as-part-of-filebeat-output-or-processor/279252)
**Author:** [@naresh\_b](https://discuss.elastic.co/u/naresh_b)\ **Replies:** 1\ **Last updated:** [July 22, 2021, 12:24pm UTC](https://discuss.elastic.co/t/is-there-a-way-invoke-shell-script-or-python-script-as-part-of-filebeat-output-or-processor/279252 "2021-07-22T12:24:59Z")
As part of LSF accounting file monitoring, need some processing(parsing job\_finish event) for each event entry using LSF API (python or c). Want to keep this agent as simple as possible, hence considering to use only fil… --- ## [Is it possible to filter multiple records of one index from another index in elasticsearch query?](https://discuss.elastic.co/t/is-it-possible-to-filter-multiple-records-of-one-index-from-another-index-in-elasticsearch-query/210464)
**Author:** [@adarshzphin](https://discuss.elastic.co/u/adarshzphin)\ **Replies:** 1\ **Last updated:** [December 4, 2019, 8:36am UTC](https://discuss.elastic.co/t/is-it-possible-to-filter-multiple-records-of-one-index-from-another-index-in-elasticsearch-query/210464 "2019-12-04T08:36:47Z")
Lets say I have 100 records in index1 and 10 records in index2. And I want to get like this: select \* from index1 where id not in (select id from index2) Can we have the same above query in elasticsearch or is it even … --- ## [Machinebeat MQTT module: SSL connection to broker fails](https://discuss.elastic.co/t/machinebeat-mqtt-module-ssl-connection-to-broker-fails/206369)
**Author:** [@gmackers](https://discuss.elastic.co/u/gmackers)\ **Replies:** 1\ **Last updated:** [November 5, 2019, 8:16am UTC](https://discuss.elastic.co/t/machinebeat-mqtt-module-ssl-connection-to-broker-fails/206369 "2019-11-05T08:16:19Z")
Hi, I'm trying out the MQTT module of the machinebeat beta after reading about it here: \[https://www.elastic.co/blog/industrial-internet-of-things-iiot-with-the-elastic-stack\] and I'm having a problem connecting to an M… --- ## [Create geoip field in elasticsearch template](https://discuss.elastic.co/t/create-geoip-field-in-elasticsearch-template/167871)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 9:26pm UTC](https://discuss.elastic.co/t/create-geoip-field-in-elasticsearch-template/167871 "2019-02-15T21:26:48Z")
I am using the geoip plugin of logstash to get geographical information about hosts. I am using geoip { source =\> "dst" } which seems to work, but creates the following two fields in my… --- ## [Elasticsearch reindex painless compile error](https://discuss.elastic.co/t/elasticsearch-reindex-painless-compile-error/148772)
**Author:** [@nayun\_oh](https://discuss.elastic.co/u/nayun_oh)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 7:37pm UTC](https://discuss.elastic.co/t/elasticsearch-reindex-painless-compile-error/148772 "2018-09-19T19:37:05Z")
I have to reindex dynamically like the code below. curl -XPOST 'http://localhost:9200/\_reindex' -H 'Content-Type: application/json' -d ' { "source": { "index": "apache-\*", "query": { "bool": { "must": \[ { "rang… --- ## [SNMP Trap listener died?](https://discuss.elastic.co/t/snmp-trap-listener-died/47245)
**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\ **Replies:** 1\ **Last updated:** [April 18, 2016, 9:05pm UTC](https://discuss.elastic.co/t/snmp-trap-listener-died/47245 "2016-04-18T21:05:31Z")
Dear logstash, when i start logstash ,I got the error msg as follow, /opt/logstash/bin/logstash -f /etc/logstash/conf.d/logstash-snmptrap.conf -d SNMP Trap listener died {:exception=\>#\ **Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [April 7, 2016, 5:47pm UTC](https://discuss.elastic.co/t/how-to-install-marvel-plugin-for-elasticsearch-2-2-0/46651 "2016-04-07T17:47:07Z") I have installed elasticsearch 2.2.0 using debian version and after that I have installed marvel using the following instructions that provided in documentation. After that I restarted elasticsearch and I have tried in… --- ## [Logstash 1.5.4 hangs@Logstash startup completed](https://discuss.elastic.co/t/logstash-1-5-4-hangs-logstash-startup-completed/29343)
**Author:** [@Sriram\_Narayanan](https://discuss.elastic.co/u/Sriram_Narayanan)\ **Replies:** 1\ **Last updated:** [September 15, 2015, 7:53pm UTC](https://discuss.elastic.co/t/logstash-1-5-4-hangs-logstash-startup-completed/29343 "2015-09-15T19:53:17Z")
I am trying to post my log details via logstash. This is how my filter looks input { file { path =\>"/opt/projects/logs/Marketplace.log" start\_position =\> "beginning" } } filter { grok { match =\> \[ "m… --- ## [How to sort results by field's priorities](https://discuss.elastic.co/t/how-to-sort-results-by-fields-priorities/22469)
**Author:** [@Oleg\_Patrushev](https://discuss.elastic.co/u/Oleg_Patrushev)\ **Replies:** 1\ **Last updated:** [March 2, 2015, 4:15pm UTC](https://discuss.elastic.co/t/how-to-sort-results-by-fields-priorities/22469 "2015-03-02T16:15:27Z")
My query is {"filter":{"and":\[{"term":{"inSearch":1}},{"query":{"match":{"status":{ "query":1}}}}\]},"sort":{"sequence":{"order":"asc"}},"query":{"bool":{ "should":\[{"match":{"metaKeywords.ngram":{"query":"fossil","o… --- ## [Java-API: search template: passing an array as parameter](https://discuss.elastic.co/t/java-api-search-template-passing-an-array-as-parameter/21031)
**Author:** [@janne\_olesen](https://discuss.elastic.co/u/janne_olesen)\ **Replies:** 1\ **Last updated:** [December 2, 2014, 1:08pm UTC](https://discuss.elastic.co/t/java-api-search-template-passing-an-array-as-parameter/21031 "2014-12-02T13:08:10Z")
Hi, I'm trying to use the java-api to pass an array of parameters to a search template. Since the SearchRequestBuilder.setTemplateParams only allows am MapString\> as parameter I'm stuck. Any ideas are wellcomed. I'… --- ## [Kibana Search from Index using document name rather than the document contents](https://discuss.elastic.co/t/kibana-search-from-index-using-document-name-rather-than-the-document-contents/247755)
**Author:** [@Kushal\_Nekkalapu](https://discuss.elastic.co/u/Kushal_Nekkalapu)\ **Replies:** 8\ **Last updated:** [September 9, 2020, 12:29pm UTC](https://discuss.elastic.co/t/kibana-search-from-index-using-document-name-rather-than-the-document-contents/247755 "2020-09-09T12:29:43Z")
Hi team, I'm trying to retrieve data from Kibana using GET \[Index\_name\]/\_search but from the retrieved data i want all the documents with a particular name without the help of contents in the doc i.e; doc\_name.field\_… --- ## [ES 7.4 GC keeps reclaiming less memory on each pass](https://discuss.elastic.co/t/es-7-4-gc-keeps-reclaiming-less-memory-on-each-pass/229547)
**Author:** [@tyler-3](https://discuss.elastic.co/u/tyler-3)\ **Replies:** 8\ **Last updated:** [April 26, 2020, 10:07pm UTC](https://discuss.elastic.co/t/es-7-4-gc-keeps-reclaiming-less-memory-on-each-pass/229547 "2020-04-26T22:07:14Z")
Hello, I recently upgraded 7.4 and I'm having a problem where the sawtooth pattern's reclaimed heap keeps shrinking (EG: Initially GC goes from 75% to 20%... but the node goes to 30%... then 40% with each additional recl… --- ## [How to get all unique values of a field for a single index?](https://discuss.elastic.co/t/how-to-get-all-unique-values-of-a-field-for-a-single-index/215492)
**Author:** [@Tom\_Somerville](https://discuss.elastic.co/u/Tom_Somerville)\ **Replies:** 0\ **Last updated:** [January 17, 2020, 4:12pm UTC](https://discuss.elastic.co/t/how-to-get-all-unique-values-of-a-field-for-a-single-index/215492 "2020-01-17T16:12:26Z")
Hey All, Running into an issue that I cannot seem to find a solution. I currently have a number of indexes, all of them billions of docs large, and I need a way to extract all unique values for any given field in the in… [Previous page](https://discuss.elastic.co/top.md?page=1500&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1502&per_page=50&period=all)