# Top **URL:** https://discuss.elastic.co/top.md?page=1523&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1524 --- ## [Logstash not starting with the error "error: jvm options parser failed; exiting"](https://discuss.elastic.co/t/logstash-not-starting-with-the-error-error-jvm-options-parser-failed-exiting/274393)
**Author:** [@Swaroop\_S](https://discuss.elastic.co/u/Swaroop_S)\ **Replies:** 1\ **Last updated:** [May 29, 2021, 8:44am UTC](https://discuss.elastic.co/t/logstash-not-starting-with-the-error-error-jvm-options-parser-failed-exiting/274393 "2021-05-29T08:44:51Z")
Hi All, I downloaded the logstash file and created the config file and I am trying to start the logstash with the command "logstash -f simple-config.conf" after navigating to bin folder in logstash. But I am getting err… --- ## [Prefix with multi\_match](https://discuss.elastic.co/t/prefix-with-multi-match/103606)
**Author:** [@Paddy\_Mahadeva](https://discuss.elastic.co/u/Paddy_Mahadeva)\ **Replies:** 1\ **Last updated:** [October 12, 2017, 1:28pm UTC](https://discuss.elastic.co/t/prefix-with-multi-match/103606 "2017-10-12T13:28:57Z")
Hi, I am running the below search query on my index { "\_source": "false", "query": { "bool": { "must": \[ { "multi\_match": { "fields": \["email","name", "company", "phone"\],… --- ## [I'm getting a Blocking Operation related exception when running search using Java](https://discuss.elastic.co/t/im-getting-a-blocking-operation-related-exception-when-running-search-using-java/89765)
**Author:** [@Gregory\_Berezowsky](https://discuss.elastic.co/u/Gregory_Berezowsky)\ **Replies:** 1\ **Last updated:** [June 16, 2017, 8:14pm UTC](https://discuss.elastic.co/t/im-getting-a-blocking-operation-related-exception-when-running-search-using-java/89765 "2017-06-16T20:14:35Z")
I searched past issues, but I can't find any reference to this one. I'm upgrading a 1.4.2 solution to a 2.4.4 (on the way to 5.x). The offending operation is basically: QueryBuilder query = ... Client client = Node.… --- ## [Logstash cant load](https://discuss.elastic.co/t/logstash-cant-load/88270)
**Author:** [@talial](https://discuss.elastic.co/u/talial)\ **Replies:** 1\ **Last updated:** [June 7, 2017, 6:13am UTC](https://discuss.elastic.co/t/logstash-cant-load/88270 "2017-06-07T06:13:14Z")
Hi, we have a 5 nodes elasticsearch cluster running 5.2.0, 2 of the nodes are configured as client nodes (data=false, master=false), 3 nodes are elasticsearch cluster (data=true, master=true) I install logstash in on… --- ## [Logstash-filter-memorize for Logstash v2.2](https://discuss.elastic.co/t/logstash-filter-memorize-for-logstash-v2-2/47512)
**Author:** [@twa-nxp](https://discuss.elastic.co/u/twa-nxp)\ **Replies:** 1\ **Last updated:** [April 17, 2016, 6:16am UTC](https://discuss.elastic.co/t/logstash-filter-memorize-for-logstash-v2-2/47512 "2016-04-17T06:16:18Z")
Hi everyone, I am running an ELK stack with logstash v2.2. I would like to use the logstash-filter-memorize plugin I used to use in logstash v1.5 but it seems that this plugin is not available from logstash v2.0 (https… --- ## [Possible problem in elasticsearch.yml parameter](https://discuss.elastic.co/t/possible-problem-in-elasticsearch-yml-parameter/19172)
**Author:** [@Sitkawoof](https://discuss.elastic.co/u/Sitkawoof)\ **Replies:** 1\ **Last updated:** [August 9, 2014, 7:11am UTC](https://discuss.elastic.co/t/possible-problem-in-elasticsearch-yml-parameter/19172 "2014-08-09T07:11:18Z")
I did a put to ES and got the following error: org.elasticsearch.common.netty.handler.codec.frame.TooLongFrameException: An HTTP line is larger than 4096 bytes. # Set a custom allowed content length: # # http… --- ## [What's wrong with my match query in Java API?](https://discuss.elastic.co/t/whats-wrong-with-my-match-query-in-java-api/16036)
**Author:** [@Daniel\_Guo](https://discuss.elastic.co/u/Daniel_Guo)\ **Replies:** 1\ **Last updated:** [February 26, 2014, 3:57pm UTC](https://discuss.elastic.co/t/whats-wrong-with-my-match-query-in-java-api/16036 "2014-02-26T15:57:42Z")
I want to do a match query, and the query works fine in REST: curl -XGET 'localhost:9200/search/video\_search/\_search?pretty' -d @query. json query.json: { "query": { "match": { "tvName"… --- ## [ConcurrentModificationException](https://discuss.elastic.co/t/concurrentmodificationexception/4391)
**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\ **Replies:** 1\ **Last updated:** [May 12, 2011, 3:29pm UTC](https://discuss.elastic.co/t/concurrentmodificationexception/4391 "2011-05-12T15:29:22Z")
I got the following exception several times 3 minutes after starting the node: \[elasticsearch\[Zuras\]clusterService#updateTask-pool-11-thread-1\] WARN org.elasticsearch.cluster.service - \[Zuras\] failed to execute clus… --- ## [Kibana url template scripted field](https://discuss.elastic.co/t/kibana-url-template-scripted-field/329050)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 3\ **Last updated:** [May 22, 2023, 10:29am UTC](https://discuss.elastic.co/t/kibana-url-template-scripted-field/329050 "2023-05-22T10:29:53Z")
Hello All, I've created a scripted field and would like know how can i configure the url host and port dynamically through some external config for 1 specific index pattern? intention is not to come in kibana and do… --- ## [Kibana 7.5.2 to 7.17.0 Migration Failure - Migration of Saved Objects Failure](https://discuss.elastic.co/t/kibana-7-5-2-to-7-17-0-migration-failure-migration-of-saved-objects-failure/300126)
**Author:** [@anburethy](https://discuss.elastic.co/u/anburethy)\ **Replies:** 3\ **Last updated:** [March 21, 2022, 11:40pm UTC](https://discuss.elastic.co/t/kibana-7-5-2-to-7-17-0-migration-failure-migration-of-saved-objects-failure/300126 "2022-03-21T23:40:39Z")
Hi, I am migrating Kibana from 7.5.2 to 7.17.0 and getting the following error when doing so. Kibana isnt starting up due to this failure and hence migration fails. {"type":"log","@timestamp":"2022-03-20T12:32:03+00:00"… --- ## [Kibana: Divide column data with time range](https://discuss.elastic.co/t/kibana-divide-column-data-with-time-range/284075)
**Author:** [@Vishal\_Patil](https://discuss.elastic.co/u/Vishal_Patil)\ **Replies:** 3\ **Last updated:** [September 13, 2021, 3:52pm UTC](https://discuss.elastic.co/t/kibana-divide-column-data-with-time-range/284075 "2021-09-13T15:52:19Z")
I have a data table in Kibana with one of the columns representing a metric in terms of hours . I would like to create a new column whose values equal to the hour values divided by the number of hours selected in the tim… --- ## [Upgrade cluster to 7.9.2, master\_not\_discovered\_exception](https://discuss.elastic.co/t/upgrade-cluster-to-7-9-2-master-not-discovered-exception/251287)
**Author:** [@JSkier](https://discuss.elastic.co/u/JSkier)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 12:33pm UTC](https://discuss.elastic.co/t/upgrade-cluster-to-7-9-2-master-not-discovered-exception/251287 "2020-10-08T12:33:33Z")
Hi, This started out with Kibana not working, now seeing the root issue may be with my 3 node cluster no longer working. I get this error (telnet to 9300 works on all three search nodes): {"error":{"root\_cause":\[{"typ… --- ## [Filebeat fails to start when output is set to file](https://discuss.elastic.co/t/filebeat-fails-to-start-when-output-is-set-to-file/220328)
**Author:** [@ldv](https://discuss.elastic.co/u/ldv)\ **Replies:** 0\ **Last updated:** [February 21, 2020, 10:06am UTC](https://discuss.elastic.co/t/filebeat-fails-to-start-when-output-is-set-to-file/220328 "2020-02-21T10:06:19Z")
I am quite new to filebeat and the ELK stack. After succesfully building a Filebeat, Elastic and Kibana stack indexing apache access logfiles, I wanted to use Filebeat to send output to a file for testing purposes. Howev… --- ## [Handling repository snapshots](https://discuss.elastic.co/t/handling-repository-snapshots/126343)
**Author:** [@ChaosMTA](https://discuss.elastic.co/u/ChaosMTA)\ **Replies:** 3\ **Last updated:** [April 22, 2018, 6:41am UTC](https://discuss.elastic.co/t/handling-repository-snapshots/126343 "2018-04-22T06:41:34Z")
Hey, I'm wondering what the recommended way is to backup a repository of elasticsearch? I want to push a snapshot to B2 Storage. Would it be acceptable to tar the whole thing and upload it and then delete any snapshots … --- ## [Extract Coordinates From Field "log" and Create A New GeoPoint type from it](https://discuss.elastic.co/t/extract-coordinates-from-field-log-and-create-a-new-geopoint-type-from-it/126187)
**Author:** [@kai\_socrates](https://discuss.elastic.co/u/kai_socrates)\ **Replies:** 3\ **Last updated:** [April 3, 2018, 6:12am UTC](https://discuss.elastic.co/t/extract-coordinates-from-field-log-and-create-a-new-geopoint-type-from-it/126187 "2018-04-03T06:12:34Z")
I have existing logs which are being added to elasticsearch as a single field called, 'log'. Sample of log content is something like below: \[2018-03-28T14:20:16.994Z\] "GET /places/v1/radius?maxresults=25&offset=0&locale… --- ## [Using Kibana visualizations without the Kibana dashboard](https://discuss.elastic.co/t/using-kibana-visualizations-without-the-kibana-dashboard/108203)
**Author:** [@braddelcat](https://discuss.elastic.co/u/braddelcat)\ **Replies:** 3\ **Last updated:** [December 18, 2017, 6:07pm UTC](https://discuss.elastic.co/t/using-kibana-visualizations-without-the-kibana-dashboard/108203 "2017-12-18T18:07:31Z")
I've just started looking into Kibana today, and so far not seeing documentation or options on integrating Kibana visualizations outside of the Kibana dashboard. I did see a topic about integrating the dashboard into an … --- ## [org.elasticsearch.spark.rdd.java.api.JavaEsSpark exists?](https://discuss.elastic.co/t/org-elasticsearch-spark-rdd-java-api-javaesspark-exists/62641)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [October 10, 2016, 8:35pm UTC](https://discuss.elastic.co/t/org-elasticsearch-spark-rdd-java-api-javaesspark-exists/62641 "2016-10-10T20:35:35Z")
Hello, I am not sure "org.elasticsearch.spark.rdd.java.api.JavaEsSpark;" is correct (seen in documentation), should not be "org.elasticsearch.spark.rdd.api.java.JavaEsSpark;" instead? As here https://github.com/elastic… --- ## [Join and search in 2 index](https://discuss.elastic.co/t/join-and-search-in-2-index/58459)
**Author:** [@mujibkhan](https://discuss.elastic.co/u/mujibkhan)\ **Replies:** 3\ **Last updated:** [August 22, 2016, 7:02am UTC](https://discuss.elastic.co/t/join-and-search-in-2-index/58459 "2016-08-22T07:02:38Z")
i have created 2 index. I like have a elastic linq query. As of now with single index I am able to write a query. How to join another index with existing index any work around. Please let me know. --- ## [Elasticsearch shield and Kibana 3.x](https://discuss.elastic.co/t/elasticsearch-shield-and-kibana-3-x/22922)
**Author:** [@Marcello\_A](https://discuss.elastic.co/u/Marcello_A)\ **Replies:** 3\ **Last updated:** [March 18, 2016, 3:33pm UTC](https://discuss.elastic.co/t/elasticsearch-shield-and-kibana-3-x/22922 "2016-03-18T15:33:51Z")
Hi All, we have installed shield on Elasticsearch 1.5 in a test environment. We have enabled the SSL on http module and the authentication but we noticed issue on Kibana 3.1.2 version but it's not working. Did so… --- ## [Does ElasticSearch fit my use case?](https://discuss.elastic.co/t/does-elasticsearch-fit-my-use-case/43449)
**Author:** [@iDemonix](https://discuss.elastic.co/u/iDemonix)\ **Replies:** 3\ **Last updated:** [March 4, 2016, 6:53am UTC](https://discuss.elastic.co/t/does-elasticsearch-fit-my-use-case/43449 "2016-03-04T06:53:21Z")
Hi all! I don't want to discuss my project directly, so I've made the below a bit vague as it's a clients project. I'm a LAMP developer, and I'm working on a side project. Essentially, let's say that I need to log ev… --- ## [Unique identified per line during logstash](https://discuss.elastic.co/t/unique-identified-per-line-during-logstash/38705)
**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\ **Replies:** 3\ **Last updated:** [January 9, 2016, 12:33am UTC](https://discuss.elastic.co/t/unique-identified-per-line-during-logstash/38705 "2016-01-09T00:33:58Z")
Hi All, is there a way to add a uniquer identified per line when we index log files to elastic search. initially i thought of considering time stamp as the unique identifier per line if we are running a single thread, … --- ## [Issue Facing during Logstash startup](https://discuss.elastic.co/t/issue-facing-during-logstash-startup/33222)
**Author:** [@PKD](https://discuss.elastic.co/u/PKD)\ **Replies:** 3\ **Last updated:** [November 3, 2015, 9:59pm UTC](https://discuss.elastic.co/t/issue-facing-during-logstash-startup/33222 "2015-11-03T21:59:10Z")
Hi All, We are facing issue while logstash startup. We are trying with Sun JDK 7 and 8. Are there any additional steps required for startup ? We are using logstash 1.5.2 and 1.5.4 and 2.0. Are there any additional st… --- ## [The issue of fetching duplicate data in Logstash](https://discuss.elastic.co/t/the-issue-of-fetching-duplicate-data-in-logstash/341643)
**Author:** [@inkweon7269](https://discuss.elastic.co/u/inkweon7269)\ **Replies:** 2\ **Last updated:** [August 26, 2023, 1:40pm UTC](https://discuss.elastic.co/t/the-issue-of-fetching-duplicate-data-in-logstash/341643 "2023-08-26T13:40:13Z")
I have written the following code within the input section, but I'm experiencing a problem where data is being fetched redundantly. Which part should I modify? logstash.conf input { beats { port =\> 5044 … --- ## [Filebeat keep getting error : ERROR pipeline/output.go:121 Failed to publish events: temporary bulk send failure and needed restart](https://discuss.elastic.co/t/filebeat-keep-getting-error-error-pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure-and-needed-restart/296823)
**Author:** [@roy3861](https://discuss.elastic.co/u/roy3861)\ **Replies:** 2\ **Last updated:** [February 25, 2022, 1:51pm UTC](https://discuss.elastic.co/t/filebeat-keep-getting-error-error-pipeline-output-go-121-failed-to-publish-events-temporary-bulk-send-failure-and-needed-restart/296823 "2022-02-25T13:51:50Z")
Hi, We are sending cassandra logs to ES via filebeat and after each few days it stop sending entries to ES with following Error is visible in filebeat logs: 2022-02-09T16:04:08.762Z INFO pipeline/output.go:10… --- ## [Osquery Manager Feedback](https://discuss.elastic.co/t/osquery-manager-feedback/290825)
**Author:** [@Aitor](https://discuss.elastic.co/u/Aitor)\ **Replies:** 2\ **Last updated:** [December 3, 2021, 6:09pm UTC](https://discuss.elastic.co/t/osquery-manager-feedback/290825 "2021-12-03T18:09:13Z")
Hi there, I have installed osquery manager and I am not able to do live queries from the fleet elastic cloud instance (v 7.15.2). I always get the message: "2 agents have responded, no osquery data has been reported" wh… --- ## [How to use variable inside a switch condition?](https://discuss.elastic.co/t/how-to-use-variable-inside-a-switch-condition/285188)
**Author:** [@isaacli](https://discuss.elastic.co/u/isaacli)\ **Replies:** 2\ **Last updated:** [October 4, 2021, 1:10am UTC](https://discuss.elastic.co/t/how-to-use-variable-inside-a-switch-condition/285188 "2021-10-04T01:10:50Z")
Hello, I am trying to build a traffic light element inside Canvas. I am using different variables to control the expression. However, I found that the variables are not working inside the "Switch" condition blocks. fi… --- ## [ECK - Alternative secrets storage using CSI Driver for KeyVault in Azure](https://discuss.elastic.co/t/eck-alternative-secrets-storage-using-csi-driver-for-keyvault-in-azure/284294)
**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\ **Replies:** 2\ **Last updated:** [September 23, 2021, 6:18am UTC](https://discuss.elastic.co/t/eck-alternative-secrets-storage-using-csi-driver-for-keyvault-in-azure/284294 "2021-09-23T06:18:01Z")
I have integrated my AKS cluster with Azure Keyvault CSI Driver for secrets storage. Link: GitHub - Azure/secrets-store-csi-driver-provider-azure: Azure Key Vault provider for Secret Store CSI driver allows you to get … --- ## [Kibana error after upgrading to 7.5.0 from 7.3.2](https://discuss.elastic.co/t/kibana-error-after-upgrading-to-7-5-0-from-7-3-2/212484)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 1:09pm UTC](https://discuss.elastic.co/t/kibana-error-after-upgrading-to-7-5-0-from-7-3-2/212484 "2019-12-19T13:09:14Z")
Hello, I have just upgraded kibana from 7.3.2 to 7.5.0 and it is failing with the following error: Dec 19 12:32:21 MGT-VMNVLOG02-1c kibana\[6490\]: {"type":"log","@timestamp":"2019-12-19T12:32:21Z","tags":\["fatal","root"… --- ## [Install filebeat and application in the same POD](https://discuss.elastic.co/t/install-filebeat-and-application-in-the-same-pod/196171)
**Author:** [@prabhat\_ranjan](https://discuss.elastic.co/u/prabhat_ranjan)\ **Replies:** 2\ **Last updated:** [August 23, 2019, 10:49am UTC](https://discuss.elastic.co/t/install-filebeat-and-application-in-the-same-pod/196171 "2019-08-23T10:49:30Z")
Team, I am working with kubernetes/docker and hosting a application on cloud. My application is having multi pod .I am creating image using docker . I want to ship filebeat along with my application in the same dock… --- ## [Problem with "share iFrame saved dashboard"](https://discuss.elastic.co/t/problem-with-share-iframe-saved-dashboard/86810)
**Author:** [@mdiserio](https://discuss.elastic.co/u/mdiserio)\ **Replies:** 2\ **Last updated:** [May 24, 2017, 12:14pm UTC](https://discuss.elastic.co/t/problem-with-share-iframe-saved-dashboard/86810 "2017-05-24T12:14:46Z")
Hello, i have a problem. I want to share my dashobard using iframe link. When i saved this link in a HTML document and i will try to open in my browser, i have an error in this new "KIBANA\_IFRAME". "Uncaught Securit… --- ## [Data Table in Dashboard not showing data as per date range](https://discuss.elastic.co/t/data-table-in-dashboard-not-showing-data-as-per-date-range/82803)
**Author:** [@Sudhanva\_Rao](https://discuss.elastic.co/u/Sudhanva_Rao)\ **Replies:** 2\ **Last updated:** [April 19, 2017, 6:02pm UTC](https://discuss.elastic.co/t/data-table-in-dashboard-not-showing-data-as-per-date-range/82803 "2017-04-19T18:02:44Z")
Hi, I created a data table visualization and added it to a dashboard. By changing the date range in the dashboard, the data in the data table doesn't change. I want the data table to show only data that is available… --- ## [Currency Conversion from Logstash JDBC Input - SOLVED](https://discuss.elastic.co/t/currency-conversion-from-logstash-jdbc-input-solved/47117)
**Author:** [@Wayne\_Taylor](https://discuss.elastic.co/u/Wayne_Taylor)\ **Replies:** 2\ **Last updated:** [April 12, 2016, 12:59pm UTC](https://discuss.elastic.co/t/currency-conversion-from-logstash-jdbc-input-solved/47117 "2016-04-12T12:59:34Z")
Hi All, I have a purchase data store which has data in multiple currencies. The data is stored in multiple fields such as Purchase Amount, Discount Amount, Tax Amount and then a different field called currency which i… --- ## [Use regex in Kibana SearchBox properly](https://discuss.elastic.co/t/use-regex-in-kibana-searchbox-properly/46802)
**Author:** [@peter.branzi](https://discuss.elastic.co/u/peter.branzi)\ **Replies:** 2\ **Last updated:** [April 8, 2016, 12:24pm UTC](https://discuss.elastic.co/t/use-regex-in-kibana-searchbox-properly/46802 "2016-04-08T12:24:10Z")
Hi everyone, I'm currently trying to filter out a URL pattern on Kibana. We have already amended the mapping to make sure URLs are not split up due to being a analyzed\_field. I want to filter out all URL of a specifi… --- ## [How to filter out certain lines from log file in logstash](https://discuss.elastic.co/t/how-to-filter-out-certain-lines-from-log-file-in-logstash/41010)
**Author:** [@subbu.nv](https://discuss.elastic.co/u/subbu.nv)\ **Replies:** 2\ **Last updated:** [February 4, 2016, 10:41pm UTC](https://discuss.elastic.co/t/how-to-filter-out-certain-lines-from-log-file-in-logstash/41010 "2016-02-04T22:41:49Z")
Hi, i am current have a log file with following lines \*\*\*\*\* TESTINGG Finished Start Time: 02:05:33 Oct 11 2015 Temp: 46 C: 46 C: 43 C: 40 C: 40 C: 53 C: 59 C End Time: 01:35:45 Oct 13 2015 Temp: 52 C: 49 C: 49 C: … --- ## [Couldn't connect to server](https://discuss.elastic.co/t/couldnt-connect-to-server/353058)
**Author:** [@Jean-Claude](https://discuss.elastic.co/u/Jean-Claude)\ **Replies:** 4\ **Last updated:** [February 14, 2024, 3:07pm UTC](https://discuss.elastic.co/t/couldnt-connect-to-server/353058 "2024-02-14T15:07:42Z")
Hello Kibana version: 8.12 Elasticsearch version: 8.12 APM Server version: 8.12 APM Agent language and version: php v1.13.0 Browser version: firefox 122.0.1 (64 bits) Original install method (e.g. download page, y… --- ## [Questions about query latency](https://discuss.elastic.co/t/questions-about-query-latency/278483)
**Author:** [@yeziblo](https://discuss.elastic.co/u/yeziblo)\ **Replies:** 4\ **Last updated:** [July 13, 2021, 6:13am UTC](https://discuss.elastic.co/t/questions-about-query-latency/278483 "2021-07-13T06:13:38Z")
Hi everyone. I have a strange problem. We have an ES cluster with three nodes, each node's heap memory is 8 GB and the es version is 7.8. Now I have two indexes: test@20210711125233 and test@20210712075544. There mapp… --- ## [Basic License unable to enable xpack](https://discuss.elastic.co/t/basic-license-unable-to-enable-xpack/260461)
**Author:** [@navin1093](https://discuss.elastic.co/u/navin1093)\ **Replies:** 4\ **Last updated:** [January 8, 2021, 5:30am UTC](https://discuss.elastic.co/t/basic-license-unable-to-enable-xpack/260461 "2021-01-08T05:30:27Z")
Hi, i perform yum install in my centos 7 elk. When i configure security i hitting the error below. I am using basic license. Is basic license not allowed for xpack security as i want allow user to login rather than hav… --- ## [Configure fortigate](https://discuss.elastic.co/t/configure-fortigate/203603)
**Author:** [@Asmaa\_Sarih](https://discuss.elastic.co/u/Asmaa_Sarih)\ **Replies:** 4\ **Last updated:** [October 18, 2019, 8:28am UTC](https://discuss.elastic.co/t/configure-fortigate/203603 "2019-10-18T08:28:13Z")
How to configure fortigate to send logs to logstash ? --- ## [Can i get the pod labels in the metricsets](https://discuss.elastic.co/t/can-i-get-the-pod-labels-in-the-metricsets/152079)
**Author:** [@pastorsx](https://discuss.elastic.co/u/pastorsx)\ **Replies:** 4\ **Last updated:** [November 5, 2018, 10:24pm UTC](https://discuss.elastic.co/t/can-i-get-the-pod-labels-in-the-metricsets/152079 "2018-11-05T22:24:09Z")
Hi, I am interested in using metric beat but I need to do some filtering of pods based on labels for some kibana visualizations.... Is there a way to do so?... I would have expected the pod metricset in kubernetes to s… --- ## [Watcher name and watcher indices name](https://discuss.elastic.co/t/watcher-name-and-watcher-indices-name/149940)
**Author:** [@laurent\_telle](https://discuss.elastic.co/u/laurent_telle)\ **Replies:** 4\ **Last updated:** [October 11, 2018, 5:10pm UTC](https://discuss.elastic.co/t/watcher-name-and-watcher-indices-name/149940 "2018-10-11T17:10:18Z")
Hi, Is it possible to create watchers in a specific watcher name and give access to user only to this watcher indices then only to some specific watcher. watcher user and wtcher admin are too large ! --- ## [Yet another multiple type issue in ES 6.X. I am stumped](https://discuss.elastic.co/t/yet-another-multiple-type-issue-in-es-6-x-i-am-stumped/149477)
**Author:** [@rouble](https://discuss.elastic.co/u/rouble)\ **Replies:** 4\ **Last updated:** [September 21, 2018, 5:22pm UTC](https://discuss.elastic.co/t/yet-another-multiple-type-issue-in-es-6-x-i-am-stumped/149477 "2018-09-21T17:22:02Z")
Gurus, I am recreating some work originally done in ES 5.X and I am hitting the multiple type issue. The original work can be found in github here. For some reason, and I cant explain why, when inserting entries they ge… --- ## [Configuring Metricbeat to send data to other machine](https://discuss.elastic.co/t/configuring-metricbeat-to-send-data-to-other-machine/139583)
**Author:** [@jtstorey](https://discuss.elastic.co/u/jtstorey)\ **Replies:** 4\ **Last updated:** [July 12, 2018, 8:49pm UTC](https://discuss.elastic.co/t/configuring-metricbeat-to-send-data-to-other-machine/139583 "2018-07-12T20:49:23Z")
I have two VMs. One of them is running elasticsearch and kibana, the other is running metricbeat. I am trying to get the 2nd VM to send its data to the 1st. I thought that the only configuration was to put the IP of the … --- ## [Grok: multiple occurences of pattern](https://discuss.elastic.co/t/grok-multiple-occurences-of-pattern/125957)
**Author:** [@janvkn](https://discuss.elastic.co/u/janvkn)\ **Replies:** 4\ **Last updated:** [April 2, 2018, 7:29pm UTC](https://discuss.elastic.co/t/grok-multiple-occurences-of-pattern/125957 "2018-04-02T19:29:31Z")
Hello, I am looking for a solution to do the following: I have a log file where a single log entry can contain multiple key/value pairs that I want to extract. The problem is, I want to extract all occurences in a singl… --- ## [How to get step by steps results as logstash processes the conf file](https://discuss.elastic.co/t/how-to-get-step-by-steps-results-as-logstash-processes-the-conf-file/109073)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 4\ **Last updated:** [November 26, 2017, 10:00pm UTC](https://discuss.elastic.co/t/how-to-get-step-by-steps-results-as-logstash-processes-the-conf-file/109073 "2017-11-26T22:00:30Z")
Is there a way to get step by step results at stdout as each filter processes the input stream? Specifically, i'm parsing csv data. I assume that the csv input stream is converted in the order that input filter is defi… --- ## [Logstash pipeline is not strating when I run it for second time](https://discuss.elastic.co/t/logstash-pipeline-is-not-strating-when-i-run-it-for-second-time/82745)
**Author:** [@shravan\_kumar](https://discuss.elastic.co/u/shravan_kumar)\ **Replies:** 4\ **Last updated:** [April 20, 2017, 10:58am UTC](https://discuss.elastic.co/t/logstash-pipeline-is-not-strating-when-i-run-it-for-second-time/82745 "2017-04-20T10:58:02Z")
Hi, When I run logstash config file, I can see the index created in elastic search. But when I run it again with few changes( like changing index name) I can see logstash pipeline has started but the index is not create… --- ## [Anyone Using AWS ElasticSearch](https://discuss.elastic.co/t/anyone-using-aws-elasticsearch/51510)
**Author:** [@ninjada](https://discuss.elastic.co/u/ninjada)\ **Replies:** 4\ **Last updated:** [June 1, 2016, 5:10am UTC](https://discuss.elastic.co/t/anyone-using-aws-elasticsearch/51510 "2016-06-01T05:10:51Z")
im manually running an ELK cluster (latest versions) on EC2. just looking at evaluating the elasticsearch service on aws, to see if theres any benefit (less management). i had a brief attempt, but nothing would work o… --- ## [Django log format| grok things | need help](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915)
**Author:** [@qinwenchao](https://discuss.elastic.co/u/qinwenchao)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 10:51am UTC](https://discuss.elastic.co/t/django-log-format-grok-things-need-help/45915 "2016-03-31T10:51:13Z")
log\_format Get: \[u'push\_id=', u'vendor=ziyou', u'platform=iPhone', u'app=7', u'height=568', u'width=320', u'version=2.0.3', u'app\_ver=2.0.3', u'phoneType=iPhone', u'systemVer=9.2.1', u'device\_id=0baaa6972b5d41a5900dc76c9… --- ## [Split brain due to 'on the fence' network partition](https://discuss.elastic.co/t/split-brain-due-to-on-the-fence-network-partition/14490)
**Author:** [@Mark\_Tinsley](https://discuss.elastic.co/u/Mark_Tinsley)\ **Replies:** 4\ **Last updated:** [November 20, 2013, 4:49pm UTC](https://discuss.elastic.co/t/split-brain-due-to-on-the-fence-network-partition/14490 "2013-11-20T16:49:26Z")
Hi all, I have been having some strange occurrences using elasticsearch on aws. The setup is three nodes each with the setting of: cluster.name: \ bootstrap.mlockall: true discovery.zen.ping.multicast.en… --- ## [Search has\_child with multiple types](https://discuss.elastic.co/t/search-has-child-with-multiple-types/42167)
**Author:** [@Tim\_Richardson](https://discuss.elastic.co/u/Tim_Richardson)\ **Replies:** 1\ **Last updated:** [March 1, 2017, 6:42pm UTC](https://discuss.elastic.co/t/search-has-child-with-multiple-types/42167 "2017-03-01T18:42:11Z")
I have a parent which has multiple different types of children. Is it possible to preform a has\_child search over multiple types of children? something like { "has\_child" : { "type" : "\*", "score… --- ## [Version history](https://discuss.elastic.co/t/version-history/312463)
**Author:** [@afuente](https://discuss.elastic.co/u/afuente)\ **Replies:** 1\ **Last updated:** [August 22, 2022, 12:27am UTC](https://discuss.elastic.co/t/version-history/312463 "2022-08-22T00:27:32Z")
Hello, guys!! Is it possible to see the version history of a saved query, dashboard, visualization, etc.? I mean, I created a saved query, but another user has changed it without telling me, is it possible to know who c… [Previous page](https://discuss.elastic.co/top.md?page=1522&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1524&per_page=50&period=all)