# Top **URL:** https://discuss.elastic.co/top.md?page=1531&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1532 --- ## [Lucene Regex issues](https://discuss.elastic.co/t/lucene-regex-issues/339869)
**Author:** [@turboz](https://discuss.elastic.co/u/turboz)\ **Replies:** 2\ **Last updated:** [August 7, 2023, 10:21pm UTC](https://discuss.elastic.co/t/lucene-regex-issues/339869 "2023-08-07T22:21:06Z")
I'm trying to use some regex and its becoming frustrating. It appears the syntax is not respected around the Kibana interface. For example, I can exclude via regex with visualizations. However I noticed if you choose to… --- ## [Optimizing elasticsearch index](https://discuss.elastic.co/t/optimizing-elasticsearch-index/118289)
**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\ **Replies:** 6\ **Last updated:** [February 7, 2018, 12:50am UTC](https://discuss.elastic.co/t/optimizing-elasticsearch-index/118289 "2018-02-07T00:50:00Z")
Are there any articles on how to optimize elastic search index in 6.1, currently with the default setting and 600 MB of syslog data my index size is around 1.7G this is way larger than the actual file size. I disabled \_… --- ## ["Elasticsearch connection failure" on newly installed Elastic Security server](https://discuss.elastic.co/t/elasticsearch-connection-failure-on-newly-installed-elastic-security-server/333707)
**Author:** [@Timothy\_Dilbert](https://discuss.elastic.co/u/Timothy_Dilbert)\ **Replies:** 1\ **Last updated:** [May 19, 2023, 10:50pm UTC](https://discuss.elastic.co/t/elasticsearch-connection-failure-on-newly-installed-elastic-security-server/333707 "2023-05-19T22:50:55Z")
I recently installed Elastic Security following the belowlinked YouTube video: Under Management \> Fleet it is showing "Fleet Server is not Healthy. A healthy Fleet server is required before you can enroll … --- ## [Issues with Bulk Sending data](https://discuss.elastic.co/t/issues-with-bulk-sending-data/224694)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 7\ **Last updated:** [March 23, 2020, 10:43pm UTC](https://discuss.elastic.co/t/issues-with-bulk-sending-data/224694 "2020-03-23T22:43:58Z")
I am having a weird issue. I have a index template setup and I created an index. I tried sending data from dev inside KIBANA and it worked. One document went in. But when I try to send bulk through my code using python I… --- ## [Kibana 7.0.1 does not work with centos 8 base image](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-with-centos-8-base-image/219603)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 11:20am UTC](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-with-centos-8-base-image/219603 "2020-03-05T11:20:51Z")
Hi, I was using kibana-oss 7.0.1 with centos 7 as base image which was working fine. Now we are migrating to centos 8 and I am able to build kibana image with centos 8. I am facing problem while runnnig this newly buil… --- ## ["master not discovered exception" after having 999 of 1000 max. shards open](https://discuss.elastic.co/t/master-not-discovered-exception-after-having-999-of-1000-max-shards-open/207066)
**Author:** [@anli](https://discuss.elastic.co/u/anli)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 8:06am UTC](https://discuss.elastic.co/t/master-not-discovered-exception-after-having-999-of-1000-max-shards-open/207066 "2019-11-08T08:06:56Z")
Hello there, I'm migrating my live data from our live elasticsearch server to our archive elasticsearch server. Both are single nodes. While doing this I missed to close indices on the archive server. Using curator I go… --- ## [Socket timeout during reindexAsync in RestHighLevelClient](https://discuss.elastic.co/t/socket-timeout-during-reindexasync-in-resthighlevelclient/203452)
**Author:** [@Dawid\_Macura](https://discuss.elastic.co/u/Dawid_Macura)\ **Replies:** 1\ **Last updated:** [October 18, 2019, 6:22pm UTC](https://discuss.elastic.co/t/socket-timeout-during-reindexasync-in-resthighlevelclient/203452 "2019-10-18T18:22:11Z")
Hi, I have the problem with reindexing my documents, I have index with 900K documents but RestHighLevelClient always returns java.net.SocketTimeoutException, I increase the socket timeout, set the batch size to 500 bu… --- ## [How to monitor kubernetes node filesystem from a container](https://discuss.elastic.co/t/how-to-monitor-kubernetes-node-filesystem-from-a-container/191919)
**Author:** [@Nicolas\_Labrot](https://discuss.elastic.co/u/Nicolas_Labrot)\ **Replies:** 1\ **Last updated:** [July 24, 2019, 5:42am UTC](https://discuss.elastic.co/t/how-to-monitor-kubernetes-node-filesystem-from-a-container/191919 "2019-07-24T05:42:44Z")
Hi, I'm trying to monitor the k8s node filesystem by using the metricbeat 7.2 deployment: I have adapted a little bit the drop event to drop the container filesystem: processors: - drop\_event.when.regexp: … --- ## [Passer un paramètre dans la fonction httpClient.get()](https://discuss.elastic.co/t/passer-un-parametre-dans-la-fonction-httpclient-get/187280)
**Author:** [@Simon\_Ledoit](https://discuss.elastic.co/u/Simon_Ledoit)\ **Replies:** 7\ **Last updated:** [June 26, 2019, 7:33am UTC](https://discuss.elastic.co/t/passer-un-parametre-dans-la-fonction-httpclient-get/187280 "2019-06-26T07:33:40Z")
Bonjour à tous, j'essaye d'envoyer depuis mon front les paramètres de recherche sélectionné par un utilisateur et de les récupérer dans mon back. Malheureusement je n'y arrive pas si quelqu'un a déjà fait face a ce probl… --- ## [Delete document in ElasticSearch Output Plugin using Script](https://discuss.elastic.co/t/delete-document-in-elasticsearch-output-plugin-using-script/126128)
**Author:** [@msugas19](https://discuss.elastic.co/u/msugas19)\ **Replies:** 1\ **Last updated:** [March 29, 2018, 5:07pm UTC](https://discuss.elastic.co/t/delete-document-in-elasticsearch-output-plugin-using-script/126128 "2018-03-29T17:07:02Z")
I am trying to delete documents using a scripted query in Elastic Search through Logstash, however whenever I do I get the following error: \[2018-03-28T22:06:17,681\]\[ERROR\]\[logstash.outputs.elasticsearch\] Encountered a … --- ## [Elasticsearch (Java) - Integration tests](https://discuss.elastic.co/t/elasticsearch-java-integration-tests/123750)
**Author:** [@Nikita\_Krasnov](https://discuss.elastic.co/u/Nikita_Krasnov)\ **Replies:** 1\ **Last updated:** [March 13, 2018, 3:00pm UTC](https://discuss.elastic.co/t/elasticsearch-java-integration-tests/123750 "2018-03-13T15:00:49Z")
I use Java 8, Elasticsearch High level client 6.1.1 and Maven and want to write some integration tests. Here my java class for tests: @ESIntegTestCase.ClusterScope(scope = ESIntegTestCase.Scope.SUITE, numDataNodes=1) p… --- ## [Beginner question grok + pattern matching + different line format](https://discuss.elastic.co/t/beginner-question-grok-pattern-matching-different-line-format/85974)
**Author:** [@Goudal](https://discuss.elastic.co/u/Goudal)\ **Replies:** 1\ **Last updated:** [May 17, 2017, 7:08am UTC](https://discuss.elastic.co/t/beginner-question-grok-pattern-matching-different-line-format/85974 "2017-05-17T07:08:55Z")
Hello, I'm new to elk and I'm trying to figure out how the grok match keyword works. What I wonder is if I want to parse different line format, do I have to put multiple grok filters one after the other one and the firs… --- ## [Partial update a field of nested object in list of nested object](https://discuss.elastic.co/t/partial-update-a-field-of-nested-object-in-list-of-nested-object/63033)
**Author:** [@Prannoy\_Mittal](https://discuss.elastic.co/u/Prannoy_Mittal)\ **Replies:** 1\ **Last updated:** [October 14, 2016, 2:58pm UTC](https://discuss.elastic.co/t/partial-update-a-field-of-nested-object-in-list-of-nested-object/63033 "2016-10-14T14:58:06Z")
Suppose i have a field list of users: One sample document in particular index { "\_id":100, "users" : {'name':'manu','age':20,'followers':\[3,2,4\]},{'name':'prannoy','age':24,'followers':\[3,4,53,23,56\]}} For following … --- ## [Custom relevance scoring by term frequency averages](https://discuss.elastic.co/t/custom-relevance-scoring-by-term-frequency-averages/17708)
**Author:** [@Chris\_H\_3](https://discuss.elastic.co/u/Chris_H_3)\ **Replies:** 1\ **Last updated:** [May 24, 2014, 2:48pm UTC](https://discuss.elastic.co/t/custom-relevance-scoring-by-term-frequency-averages/17708 "2014-05-24T14:48:31Z")
Hi, I want to calculate relevance scores in a different way from the default TFIDF scoring in ES. In particular I want to calculate it simply as: AVG( tf(term) / ttf(term) ) where the average is over all matc… --- ## [Unfreeze, Read-Only, Move to Cold/Frozen](https://discuss.elastic.co/t/unfreeze-read-only-move-to-cold-frozen/322395)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 2\ **Last updated:** [January 4, 2023, 6:40pm UTC](https://discuss.elastic.co/t/unfreeze-read-only-move-to-cold-frozen/322395 "2023-01-04T18:40:33Z")
Team, I'm working through the Elastic Upgrade Assistant and its telling me I have 38 Warnings, all the same warning, that I need to, "Index \[XYZ\] is frozen. Frozen indices no longer offer any advantages. Instead, unfree… --- ## [RKE/Rancker 2.0 and Filebeat not sending logs](https://discuss.elastic.co/t/rke-rancker-2-0-and-filebeat-not-sending-logs/235406)
**Author:** [@wrender](https://discuss.elastic.co/u/wrender)\ **Replies:** 2\ **Last updated:** [June 10, 2020, 6:57am UTC](https://discuss.elastic.co/t/rke-rancker-2-0-and-filebeat-not-sending-logs/235406 "2020-06-10T06:57:08Z")
I have a single server RKE cluster, with Rancher on top for testing. I then deployed elasticsearch and kibana using the helm charts to a namespace called elasticsearch. I then install filebeat using the official elastic… --- ## [No lines drawn in "Time spent by span time", although data is available](https://discuss.elastic.co/t/no-lines-drawn-in-time-spent-by-span-time-although-data-is-available/199792)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 2\ **Last updated:** [October 7, 2019, 1:13pm UTC](https://discuss.elastic.co/t/no-lines-drawn-in-time-spent-by-span-time-although-data-is-available/199792 "2019-10-07T13:13:02Z")
Hi, The "Time spent by span type" doesn't show lines if any of data is N/A, in most cases it is http. Kibana version: 7.3.1 Elasticsearch version: 7.3.1 APM Server version: 7.3.1 APM Agent language and version: Java… --- ## [Remove unused Kibana fields/filters](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135)
**Author:** [@markov](https://discuss.elastic.co/u/markov)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 9:48am UTC](https://discuss.elastic.co/t/remove-unused-kibana-fields-filters/174135 "2019-03-28T09:48:23Z")
hi, can someone please tell me how i can keep just my grok filters and remove those 62 fields, i tried using mutate plugin but not working. mutate { remove\_field =\> \[ "beat.name", "beat.version", "data", "host.archite… --- ## [Large Capacity Sizing: Single Cluster vs Multiple Clusters, Index Sizing, Memory Problems](https://discuss.elastic.co/t/large-capacity-sizing-single-cluster-vs-multiple-clusters-index-sizing-memory-problems/160812)
**Author:** [@thehybridtech](https://discuss.elastic.co/u/thehybridtech)\ **Replies:** 2\ **Last updated:** [December 13, 2018, 9:42pm UTC](https://discuss.elastic.co/t/large-capacity-sizing-single-cluster-vs-multiple-clusters-index-sizing-memory-problems/160812 "2018-12-13T21:42:31Z")
Hiya all... Some quick scaling questions to get best practices. We deal with a very large pipeline of events every second and doing another round of evaluation now that we have moved to ES6. I will share our current s… --- ## [How to save next line with ruby filter](https://discuss.elastic.co/t/how-to-save-next-line-with-ruby-filter/107773)
**Author:** [@cy8el1us](https://discuss.elastic.co/u/cy8el1us)\ **Replies:** 2\ **Last updated:** [November 15, 2017, 3:23pm UTC](https://discuss.elastic.co/t/how-to-save-next-line-with-ruby-filter/107773 "2017-11-15T15:23:07Z")
I wanted to know if it's possible to write an advanced ruby code into a logstash filter in order to keep specific value. I have something like: ruby { code =\> " \_isInCyclic = false \_isJump = false \_loggerName … --- ## [Packetbeat & MySQL username](https://discuss.elastic.co/t/packetbeat-mysql-username/95446)
**Author:** [@tonybreak](https://discuss.elastic.co/u/tonybreak)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 10:15am UTC](https://discuss.elastic.co/t/packetbeat-mysql-username/95446 "2017-08-02T10:15:03Z")
I found that the MySQL packetbeat has no username of database. I crawled network traffic to test, and found that there was no username in it. So, do you plan to add the username of database in MySQL packetbeat? --- ## [Error on update Logstash 5.2 =\> 5.3](https://discuss.elastic.co/t/error-on-update-logstash-5-2-5-3/80740)
**Author:** [@zokratez](https://discuss.elastic.co/u/zokratez)\ **Replies:** 2\ **Last updated:** [March 31, 2017, 5:00pm UTC](https://discuss.elastic.co/t/error-on-update-logstash-5-2-5-3/80740 "2017-03-31T17:00:42Z")
After the update I get the following error: \[2017-03-30T17:17:21,667\]\[ERROR\]\[logstash.filters.kv \] Unknown setting 'trim' for kv \[2017-03-30T17:17:21,692\]\[ERROR\]\[logstash.agent \] Cannot load an invalid … --- ## [Put name in Y-Axis in a Chart](https://discuss.elastic.co/t/put-name-in-y-axis-in-a-chart/40583)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 2\ **Last updated:** [February 3, 2016, 8:07am UTC](https://discuss.elastic.co/t/put-name-in-y-axis-in-a-chart/40583 "2016-02-03T08:07:42Z")
Hi , Can I put a name or something else (except count , sum , ... ) in Y-Axis ? My purpose is to tern chart so the count will be at X-Axis and at Y-Axis the name of the test case. Is it possible ? BR, Chen --- ## [Access document score or script\_field in a scripted\_metric aggregation](https://discuss.elastic.co/t/access-document-score-or-script-field-in-a-scripted-metric-aggregation/38689)
**Author:** [@AOzoukou](https://discuss.elastic.co/u/AOzoukou)\ **Replies:** 2\ **Last updated:** [January 10, 2016, 11:38pm UTC](https://discuss.elastic.co/t/access-document-score-or-script-field-in-a-scripted-metric-aggregation/38689 "2016-01-10T23:38:21Z")
Hi, is it possible to access a document score , and/or a scripted\_field (dynamic field) in a aggregation script (scripted\_metric) ???? Thank you very much. --- ## [Ideal setup of Elasticsearch](https://discuss.elastic.co/t/ideal-setup-of-elasticsearch/32470)
**Author:** [@chaos\_theory](https://discuss.elastic.co/u/chaos_theory)\ **Replies:** 2\ **Last updated:** [October 19, 2015, 12:29pm UTC](https://discuss.elastic.co/t/ideal-setup-of-elasticsearch/32470 "2015-10-19T12:29:15Z")
I have around 15GB of data in ES, which is running on a single machine, having 5 shards and currently no replication. I am thinking of adding another machine to the cluster, as I am facing data corruption problems. Can a… --- ## [Logstash unresponsive after new grok pattern added](https://discuss.elastic.co/t/logstash-unresponsive-after-new-grok-pattern-added/1552)
**Author:** [@PeterF](https://discuss.elastic.co/u/PeterF)\ **Replies:** 2\ **Last updated:** [June 2, 2015, 7:37am UTC](https://discuss.elastic.co/t/logstash-unresponsive-after-new-grok-pattern-added/1552 "2015-06-02T07:37:54Z")
Hello, Logstash hangs after processing a few log files. Consumes 100% CPU, ignores SIGTERM and systemctl commands and can only be stopped with kill -9. It stops processing events being sent to it and outputs nothing t… --- ## [Cluster data migration to another system](https://discuss.elastic.co/t/cluster-data-migration-to-another-system/9552)
**Author:** [@Pasha](https://discuss.elastic.co/u/Pasha)\ **Replies:** 2\ **Last updated:** [November 11, 2012, 5:39am UTC](https://discuss.elastic.co/t/cluster-data-migration-to-another-system/9552 "2012-11-11T05:39:53Z")
I have the ES cluster with 9 shards and replicas, where all the data is stored locally on the nodes. We have the process complete data migration from one system to another. Since introduction of ES - we need to be able… --- ## [Snapshot and Restore for ES Cluster with Remote FTP Address](https://discuss.elastic.co/t/snapshot-and-restore-for-es-cluster-with-remote-ftp-address/160838)
**Author:** [@preraktiwari](https://discuss.elastic.co/u/preraktiwari)\ **Replies:** 0\ **Last updated:** [December 14, 2018, 4:35am UTC](https://discuss.elastic.co/t/snapshot-and-restore-for-es-cluster-with-remote-ftp-address/160838 "2018-12-14T04:35:37Z")
I have a 3 node elastic cluster on production. Out of 3, 2 nodes are in Primary site and 1 Node is in DR site. We are already using Commonvalut as our file system backup solution, but the Elastic documentation got us in… --- ## [Adding a "double" dropdown control in canvas](https://discuss.elastic.co/t/adding-a-double-dropdown-control-in-canvas/168832)
**Author:** [@Ranakel](https://discuss.elastic.co/u/Ranakel)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 3:30pm UTC](https://discuss.elastic.co/t/adding-a-double-dropdown-control-in-canvas/168832 "2019-02-18T15:30:34Z")
Hi I try to add a double dropdown control (2 levels of filter) in canvas but I do not succeed. All works with one dropdown but when I add the second one, I can not select anything, it always stays on "Any". Is there a … --- ## [Metricbeat Missing Data](https://discuss.elastic.co/t/metricbeat-missing-data/320285)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 5\ **Last updated:** [December 1, 2022, 9:49pm UTC](https://discuss.elastic.co/t/metricbeat-missing-data/320285 "2022-12-01T21:49:37Z")
I have Metricbeat receiving data from Perfmon counters, including Process \> % Processor Time. this is configured to collect every 10 seconds. However, we are missing processes for some reason. In other words, the events … --- ## [Question about installing APM server on Windows Platform](https://discuss.elastic.co/t/question-about-installing-apm-server-on-windows-platform/281655)
**Author:** [@afan](https://discuss.elastic.co/u/afan)\ **Replies:** 5\ **Last updated:** [August 18, 2021, 9:25am UTC](https://discuss.elastic.co/t/question-about-installing-apm-server-on-windows-platform/281655 "2021-08-18T09:25:17Z")
Hi all, I'm a newbie here and trying to setup APM server on Windows platform. ElasticSearch and kibana both were setup already and when I am trying to install the APM server, I found below error when I check the APM se… --- ## [Logstash performance for indexing to ES](https://discuss.elastic.co/t/logstash-performance-for-indexing-to-es/79155)
**Author:** [@Sharat\_Jagannath](https://discuss.elastic.co/u/Sharat_Jagannath)\ **Replies:** 5\ **Last updated:** [March 21, 2017, 6:09am UTC](https://discuss.elastic.co/t/logstash-performance-for-indexing-to-es/79155 "2017-03-21T06:09:17Z")
I'm trying to index docs to elasticsearch from logstash with kafka input. I see the indexing takes a long time and i am looking to index around 3 million documents as fast as possible. My logstash conf is - in… --- ## [How would you compare ES, Lucene with Enterprise Search?](https://discuss.elastic.co/t/how-would-you-compare-es-lucene-with-enterprise-search/12063)
**Author:** [@paul\_3](https://discuss.elastic.co/u/paul_3)\ **Replies:** 5\ **Last updated:** [August 17, 2014, 11:42am UTC](https://discuss.elastic.co/t/how-would-you-compare-es-lucene-with-enterprise-search/12063 "2014-08-17T11:42:45Z")
Hi, How would you compare community-based search engines (ES, Apache Lucene) with Commercial Enterprise Search (IBM, EMC, Oracle Endeca - MDEX Engine, etc) ? Thanks. Paul -- You received this message bec… --- ## [TransportClient & Authentication](https://discuss.elastic.co/t/transportclient-authentication/7235)
**Author:** [@Eric\_Jain](https://discuss.elastic.co/u/Eric_Jain)\ **Replies:** 5\ **Last updated:** [April 11, 2012, 6:03pm UTC](https://discuss.elastic.co/t/transportclient-authentication/7235 "2012-04-11T18:03:49Z")
If the elasticsearch nodes are running on a different network (or in a different ec2 security group), how do I connect using the Java TransportClient? --- ## [Elastic/ELK to a Use Case Framework (UCF) like Magma & Mitre Framework](https://discuss.elastic.co/t/elastic-elk-to-a-use-case-framework-ucf-like-magma-mitre-framework/236517)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 1\ **Last updated:** [June 10, 2020, 4:11pm UTC](https://discuss.elastic.co/t/elastic-elk-to-a-use-case-framework-ucf-like-magma-mitre-framework/236517 "2020-06-10T16:11:20Z")
hi folks, anyone have written/implemented logic to best make use of tagging and alerting SIEM outcomes to a use case framework. I was mostly looking for MaGMa framework which is getting popularity Any help or implement… --- ## [Elastic.elasticsearch role and Ansible Tower Dynamic Inventory](https://discuss.elastic.co/t/elastic-elasticsearch-role-and-ansible-tower-dynamic-inventory/218269)
**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\ **Replies:** 1\ **Last updated:** [February 10, 2020, 5:55am UTC](https://discuss.elastic.co/t/elastic-elasticsearch-role-and-ansible-tower-dynamic-inventory/218269 "2020-02-10T05:55:13Z")
Hi, I am trying to configure Elasticsearch cluster over Ansible using official Elastic Ansible role elastic.elasticsearch. I set up Ansible tower and Dynamic Inventory for my AWS instances. I tagged my instances and hav… --- ## [How to download Canvas datatable as CSV?](https://discuss.elastic.co/t/how-to-download-canvas-datatable-as-csv/189177)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 1\ **Last updated:** [July 9, 2019, 6:16pm UTC](https://discuss.elastic.co/t/how-to-download-canvas-datatable-as-csv/189177 "2019-07-09T18:16:10Z")
Is there any way to download Canvas datatable as CSV file ? I know that CSV is available for discover and visualiaze but I want to download the data table which is created using rich math function of Canvas. Looks like… --- ## [Logstash Filter for Parsing Mule Log](https://discuss.elastic.co/t/logstash-filter-for-parsing-mule-log/129787)
**Author:** [@Dhanashree](https://discuss.elastic.co/u/Dhanashree)\ **Replies:** 1\ **Last updated:** [May 4, 2018, 11:36am UTC](https://discuss.elastic.co/t/logstash-filter-for-parsing-mule-log/129787 "2018-05-04T11:36:29Z")
Hi, I wish to load data from a mule log file to elasticsearch via logstash. The following is my log data pattern: 2018-04-26 14:35:51,016 \[\[cif\].HTTP\_Listener\_Configuration.worker.01\] INFO org.mule.api.processor.Logg… --- ## [Allow multivalued/array for all fields?](https://discuss.elastic.co/t/allow-multivalued-array-for-all-fields/107060)
**Author:** [@ghukill](https://discuss.elastic.co/u/ghukill)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 4:06pm UTC](https://discuss.elastic.co/t/allow-multivalued-array-for-all-fields/107060 "2017-11-09T16:06:59Z")
I'm attempting to write a Hadoop RDD to ElasticSearch, without the luxury of seeing the fields before they are created. So far, dynamic mapping has been working well when the values for fields are singular. But, when I… --- ## [Comparing data from a RDBMS to Elasticsearch](https://discuss.elastic.co/t/comparing-data-from-a-rdbms-to-elasticsearch/97723)
**Author:** [@newbie\_here](https://discuss.elastic.co/u/newbie_here)\ **Replies:** 1\ **Last updated:** [August 25, 2017, 11:41am UTC](https://discuss.elastic.co/t/comparing-data-from-a-rdbms-to-elasticsearch/97723 "2017-08-25T11:41:52Z")
Hi All, We have a RDBMS source, from where we are indexing the data into indices in elasticsearch. For reconcillation, we have run few sum and count aggregations on both the source and destination data, but found few d… --- ## [Another kind of data.path bug?](https://discuss.elastic.co/t/another-kind-of-data-path-bug/85371)
**Author:** [@LmYjQ](https://discuss.elastic.co/u/LmYjQ)\ **Replies:** 1\ **Last updated:** [May 11, 2017, 10:55am UTC](https://discuss.elastic.co/t/another-kind-of-data-path-bug/85371 "2017-05-11T10:55:08Z")
kibana crashed suddenly in this afternoon I found the log info: Caused by: java.lang.IllegalStateException: detected index data in default.path.data \[/var/lib/elasticsearch\] where there should not be any; check the … --- ## [Histogram aggregation on ip addresses](https://discuss.elastic.co/t/histogram-aggregation-on-ip-addresses/79175)
**Author:** [@any\_any\_drop](https://discuss.elastic.co/u/any_any_drop)\ **Replies:** 1\ **Last updated:** [March 24, 2017, 9:41am UTC](https://discuss.elastic.co/t/histogram-aggregation-on-ip-addresses/79175 "2017-03-24T09:41:22Z")
Hi there, in ES 2 I've been using histogram aggregations to count the number of ip addresses in class c (/24) networks like so: "aggs": { "NETWORKS": { "histogram": { "field": "ip", "interval"… --- ## [Document Level Security through Kibana](https://discuss.elastic.co/t/document-level-security-through-kibana/72789)
**Author:** [@gsb](https://discuss.elastic.co/u/gsb)\ **Replies:** 1\ **Last updated:** [January 25, 2017, 9:02pm UTC](https://discuss.elastic.co/t/document-level-security-through-kibana/72789 "2017-01-25T21:02:21Z")
There is a native user configured in elasticshield with document level security configured for associated role with that user. When query data from elasticsearch using curl with this user it returns data and works perf… --- ## [Moving away from logstash-forwarder, and missing a couple of options](https://discuss.elastic.co/t/moving-away-from-logstash-forwarder-and-missing-a-couple-of-options/44202)
**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\ **Replies:** 1\ **Last updated:** [March 11, 2016, 11:44pm UTC](https://discuss.elastic.co/t/moving-away-from-logstash-forwarder-and-missing-a-couple-of-options/44202 "2016-03-11T23:44:56Z")
I was able to get the installation and configuration of filebeats working fine with one exception. I am trying to set the output of my beats to follow the following logstash-forwarder configuration: "files": \[ … --- ## [Search on multidimensional array](https://discuss.elastic.co/t/search-on-multidimensional-array/5757)
**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\ **Replies:** 1\ **Last updated:** [November 3, 2011, 8:27am UTC](https://discuss.elastic.co/t/search-on-multidimensional-array/5757 "2011-11-03T08:27:34Z")
Hi I want to search a\* multidimensional array element\*. How to access it in elasticsearch. As for example: id\_like : \[ { "id" : 777, "title":"abc" }, { "id" : 597, "title":"xyz" } \] Now I want t… --- ## [App search - Filters - Arrays](https://discuss.elastic.co/t/app-search-filters-arrays/316881)
**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\ **Replies:** 4\ **Last updated:** [October 19, 2022, 7:26am UTC](https://discuss.elastic.co/t/app-search-filters-arrays/316881 "2022-10-19T07:26:08Z")
Hi there :wave: I want to know what is the best filtering approach for my scenario. (Search API Filters) Scenario: Intro: I have arrays of values on the client side, and on the engine document schema one. I want docum… --- ## [Docker can't pull Kibana 7.15.2 using docker-compose up](https://discuss.elastic.co/t/docker-cant-pull-kibana-7-15-2-using-docker-compose-up/298748)
**Author:** [@marone](https://discuss.elastic.co/u/marone)\ **Replies:** 4\ **Last updated:** [March 3, 2022, 8:21pm UTC](https://discuss.elastic.co/t/docker-cant-pull-kibana-7-15-2-using-docker-compose-up/298748 "2022-03-03T20:21:31Z")
Hey, I am trying to setup an ELK + APM to test it using docker, I followed along with the steps APM quick start with docker, but when I do docker-compose up, docker is stuck when pulling Kibana image 7.15.2, I checked on… --- ## [LogStash, GeoJSON and Kibana](https://discuss.elastic.co/t/logstash-geojson-and-kibana/277450)
**Author:** [@f4d0](https://discuss.elastic.co/u/f4d0)\ **Replies:** 4\ **Last updated:** [July 2, 2021, 2:24am UTC](https://discuss.elastic.co/t/logstash-geojson-and-kibana/277450 "2021-07-02T02:24:43Z")
I have successfully (I think) ingested logs using Logstash. Used the geoip filter and all the data looks good and well strucutred. When I index it in Kibana, the coordinates are set as float. This is what I can observe i… --- ## [Сортировка результатов по максимальному числу совпадащих фильтров](https://discuss.elastic.co/t/topic/275406)
**Author:** [@itmariacchi](https://discuss.elastic.co/u/itmariacchi)\ **Replies:** 4\ **Last updated:** [June 11, 2021, 11:17am UTC](https://discuss.elastic.co/t/topic/275406 "2021-06-11T11:17:22Z")
Здравствуйте! Есть индекс специалистов, у специалистов есть, например, ключевые навыки (множественное поле). Пользователь в фильтре выбирает ключевые навыки - например, PHP, JS, Java. Так вот специалисты, у которых напр… --- ## [JSON Parsing Issue](https://discuss.elastic.co/t/json-parsing-issue/265219)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [February 23, 2021, 6:54pm UTC](https://discuss.elastic.co/t/json-parsing-issue/265219 "2021-02-23T18:54:13Z")
Running Logstash 7.10 and having an issue with parsing a JSON-ish field. Here's my filter config: if \[vpn\]\[tunnel\_type\] { mutate { gsub =\> \[ "\[vpn\]\[tunnel\_type\]", '\\=\\\>', ':' \] … [Previous page](https://discuss.elastic.co/top.md?page=1530&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1532&per_page=50&period=all)