# Top **URL:** https://discuss.elastic.co/top.md?page=1533&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1534 --- ## [Ideal method of indexing data into ES from SQL Server?](https://discuss.elastic.co/t/ideal-method-of-indexing-data-into-es-from-sql-server/16232)
**Author:** [@Joshua\_P](https://discuss.elastic.co/u/Joshua_P)\ **Replies:** 1\ **Last updated:** [March 7, 2014, 10:20pm UTC](https://discuss.elastic.co/t/ideal-method-of-indexing-data-into-es-from-sql-server/16232 "2014-03-07T22:20:12Z")
Hey everyone, I'm trying to figure out the best way to implement Elasticsearch in our company. We currently have a SQL Server that houses all of our data and want to get some better search and analytics funct… --- ## [Error loading execution history for alert rules](https://discuss.elastic.co/t/error-loading-execution-history-for-alert-rules/329774)
**Author:** [@Landorks](https://discuss.elastic.co/u/Landorks)\ **Replies:** 2\ **Last updated:** [July 13, 2023, 7:47pm UTC](https://discuss.elastic.co/t/error-loading-execution-history-for-alert-rules/329774 "2023-07-13T19:47:34Z")
Hi, I get the following error in Kibana (8.4.3) when trying to view an alert. It appears that this is causing alerts not to fire at all. Everything was working fine about a week ago. I've already tried creating a new al… --- ## [Region Map on Kibana Vega](https://discuss.elastic.co/t/region-map-on-kibana-vega/203242)
**Author:** [@Ppdpjuju](https://discuss.elastic.co/u/Ppdpjuju)\ **Replies:** 2\ **Last updated:** [October 21, 2019, 7:30am UTC](https://discuss.elastic.co/t/region-map-on-kibana-vega/203242 "2019-10-21T07:30:38Z")
Hello, I work on a map in Vega in Kibana (the map of kibana config=map), and I plot some positions with the projection:"projection". I wan't to add areas to show on the map, like timezones. Similar to the region map vi… --- ## [Little error in Documentation page - mapping parameters - format](https://discuss.elastic.co/t/little-error-in-documentation-page-mapping-parameters-format/57424)
**Author:** [@lupova](https://discuss.elastic.co/u/lupova)\ **Replies:** 2\ **Last updated:** [August 8, 2016, 8:52am UTC](https://discuss.elastic.co/t/little-error-in-documentation-page-mapping-parameters-format/57424 "2016-08-08T08:52:50Z")
Hi, I found little but annoying error in the page https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-date-format.html The right format for date\_time is T: yyyy-MM-dd'T'HH:mm:ss.SSSZZ and not T:… --- ## [Lfd on Server: Suspicious File Alert](https://discuss.elastic.co/t/lfd-on-server-suspicious-file-alert/279541)
**Author:** [@NileYouth](https://discuss.elastic.co/u/NileYouth)\ **Replies:** 3\ **Last updated:** [July 26, 2021, 9:35am UTC](https://discuss.elastic.co/t/lfd-on-server-suspicious-file-alert/279541 "2021-07-26T09:35:44Z")
I have got many suspiction on CSF notfication can any one help in this or how can I exclode this files Time: Sat Jul 24 20:25:39 2021 +0200 File: /tmp/systemd-private-07b3a323be3d4e5e9196051704fa4e9b-elasticsearch.s… --- ## [Kibana Visualization Error using scripted Date field](https://discuss.elastic.co/t/kibana-visualization-error-using-scripted-date-field/235874)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 3\ **Last updated:** [June 15, 2020, 1:58am UTC](https://discuss.elastic.co/t/kibana-visualization-error-using-scripted-date-field/235874 "2020-06-15T01:58:09Z")
I have a scripted Date field (called "yyyy\_mm\_dd") in Kibana 7.7.0 Script Date date = new Date(doc\['ts'\].value.millis); Calendar cal = Calendar.getInstance(); cal.setTime(date); cal.set(Calendar.HOUR\_OF\_DAY, 0); cal.s… --- ## [Navigate from one Dashboard to another and carry filters?](https://discuss.elastic.co/t/navigate-from-one-dashboard-to-another-and-carry-filters/235789)
**Author:** [@joaoS123](https://discuss.elastic.co/u/joaoS123)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 7:21am UTC](https://discuss.elastic.co/t/navigate-from-one-dashboard-to-another-and-carry-filters/235789 "2020-06-12T07:21:19Z")
Hello, using kibana is it possible to navigate from one dashboard to another and carry filters? or input parameters? I currently have 3 similar dashboards. 1- Shows applications Visualizations 2- Shows Screens Visuali… --- ## [Internal Server Error After Update](https://discuss.elastic.co/t/internal-server-error-after-update/226430)
**Author:** [@wingdom](https://discuss.elastic.co/u/wingdom)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 7:43pm UTC](https://discuss.elastic.co/t/internal-server-error-after-update/226430 "2020-04-10T19:43:26Z")
Hello, I updated to 7.6.2 today, and am now greeted with the following error: Version: 7.6.2 Build: 29199 Error: Internal Server Error at fetchResponse$ (http://fluent.dev.brandcoders.com/bundles/commons… --- ## [Importing metricbeat events from json-file to elastic using filebeat](https://discuss.elastic.co/t/importing-metricbeat-events-from-json-file-to-elastic-using-filebeat/212457)
**Author:** [@dimuskin](https://discuss.elastic.co/u/dimuskin)\ **Replies:** 3\ **Last updated:** [December 19, 2019, 3:47pm UTC](https://discuss.elastic.co/t/importing-metricbeat-events-from-json-file-to-elastic-using-filebeat/212457 "2019-12-19T15:47:17Z")
Hi, I have a case when metricbeat can't deliver messages directly to elastic, instead, it writes JSON-style events to a file and later filebeat deliver it to elastic. But unfortunately I can’t use "json.keys\_under\_root… --- ## [Deleted indices manually](https://discuss.elastic.co/t/deleted-indices-manually/211641)
**Author:** [@Nurlan199206](https://discuss.elastic.co/u/Nurlan199206)\ **Replies:** 3\ **Last updated:** [December 12, 2019, 12:49pm UTC](https://discuss.elastic.co/t/deleted-indices-manually/211641 "2019-12-12T12:49:03Z")
disk space fill up on the server. i am manually deleted folders with indices from /var/lib/elasticsearch/nodes/0/indices.. and restarted kibana and elasticsearch, after this kibana web page showing "Kibana server is no… --- ## [Creating a proxy cache registry for docker.elastic.co](https://discuss.elastic.co/t/creating-a-proxy-cache-registry-for-docker-elastic-co/156899)
**Author:** [@roadSurfer](https://discuss.elastic.co/u/roadSurfer)\ **Replies:** 0\ **Last updated:** [November 15, 2018, 3:26pm UTC](https://discuss.elastic.co/t/creating-a-proxy-cache-registry-for-docker-elastic-co/156899 "2018-11-15T15:26:19Z")
Hi, We run Sonatype Nexus 3 to cache various dependencies. As Docker hub doesn't always have the latest Elastic images (for example, at the time of writing not all 6.5 images are available), I'd like to proxy docker.ela… --- ## [Elasticsearch Hot and Warm architecture](https://discuss.elastic.co/t/elasticsearch-hot-and-warm-architecture/92136)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 3\ **Last updated:** [July 7, 2017, 4:31am UTC](https://discuss.elastic.co/t/elasticsearch-hot-and-warm-architecture/92136 "2017-07-07T04:31:06Z")
We are using Master Node, Hot and Warm data nodes and Coordinating nodes. Data is being fed to ES by logstash nodes. Whether the elasticsearch output in logstash should point to the hot nodes or coordinating nodes? I bel… --- ## [What does it mean java node client with secured cluster is not supported?](https://discuss.elastic.co/t/what-does-it-mean-java-node-client-with-secured-cluster-is-not-supported/65894)
**Author:** [@sunileman](https://discuss.elastic.co/u/sunileman)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 5:34am UTC](https://discuss.elastic.co/t/what-does-it-mean-java-node-client-with-secured-cluster-is-not-supported/65894 "2016-11-14T05:34:10Z")
I am slightly a newbie to elastic. I need to create a new coordinating only node to use transport client with x-pack security. I am reading here (https://www.elastic.co/guide/en/x-pack/current/java-clients.html) "Using… --- ## [Indexation fails quitely and make the client hangs](https://discuss.elastic.co/t/indexation-fails-quitely-and-make-the-client-hangs/4516)
**Author:** [@Nicolas\_Lalevee](https://discuss.elastic.co/u/Nicolas_Lalevee)\ **Replies:** 3\ **Last updated:** [June 1, 2011, 2:29pm UTC](https://discuss.elastic.co/t/indexation-fails-quitely-and-make-the-client-hangs/4516 "2011-06-01T14:29:54Z")
Hi, I installed a custom ES plugin into my ES server, to have some custom Lucene analyzers available to index and do text search. I use the released 0.16.1 version. Then I got my java client which is sending json d… --- ## [Upgrade from 7.x to 8.x requires multi upgrades?](https://discuss.elastic.co/t/upgrade-from-7-x-to-8-x-requires-multi-upgrades/327408)
**Author:** [@atdc12](https://discuss.elastic.co/u/atdc12)\ **Replies:** 5\ **Last updated:** [March 15, 2023, 9:36am UTC](https://discuss.elastic.co/t/upgrade-from-7-x-to-8-x-requires-multi-upgrades/327408 "2023-03-15T09:36:38Z")
We have a few production sites running ES 7.16 and would like to upgrade to 8.6: upgrade will be done with full cluster restart all indices were created under ES 7.x we have checked Upgrade Assistant on ES 7.16 and con… --- ## [How to join 2 indexes and the apply Machine LearningX-Pack?](https://discuss.elastic.co/t/how-to-join-2-indexes-and-the-apply-machine-learningx-pack/196786)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 5\ **Last updated:** [August 26, 2019, 7:13pm UTC](https://discuss.elastic.co/t/how-to-join-2-indexes-and-the-apply-machine-learningx-pack/196786 "2019-08-26T19:13:10Z")
Hi I have a list of different indexes (see image). I would like to join 2 of them and then apply the Machine Learning algorithms. I want to join: "humhub-2019.04" with "humhub-2019.05" I thought of saving the search a… --- ## [Reporting not available in Dashboard tab](https://discuss.elastic.co/t/reporting-not-available-in-dashboard-tab/155759)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 5\ **Last updated:** [November 9, 2018, 8:38pm UTC](https://discuss.elastic.co/t/reporting-not-available-in-dashboard-tab/155759 "2018-11-09T20:38:42Z")
Hi, I installed ELK 6.3 with X-Pack basic license. After enabling reporting in Kibana.yml file, I was able to see the reporting option in my Discover tab, but the Dashboard tab does not have the reporting option. I see… --- ## [Disables elastic and kibana users after a while](https://discuss.elastic.co/t/disables-elastic-and-kibana-users-after-a-while/121039)
**Author:** [@Amir\_Salar\_Pourhasan](https://discuss.elastic.co/u/Amir_Salar_Pourhasan)\ **Replies:** 5\ **Last updated:** [February 23, 2018, 8:15am UTC](https://discuss.elastic.co/t/disables-elastic-and-kibana-users-after-a-while/121039 "2018-02-23T08:15:07Z")
After I'm using X--Pack basic authentication setting, it disables elastic and kibana users after some times working on my project? Then I have to reset these user's password then restart Elasticsearch and Kibana, then it… --- ## [Detecting if an index is refreshing](https://discuss.elastic.co/t/detecting-if-an-index-is-refreshing/86828)
**Author:** [@mortenbock](https://discuss.elastic.co/u/mortenbock)\ **Replies:** 5\ **Last updated:** [May 23, 2017, 4:09pm UTC](https://discuss.elastic.co/t/detecting-if-an-index-is-refreshing/86828 "2017-05-23T16:09:09Z")
While indexing our product catalog, we set the RefreshInterval to -1, as long as we are bulk updating the index. When we are done, we set it back to 1 second. After that, I would like to poll the index to see when it… --- ## [Queue size](https://discuss.elastic.co/t/queue-size/22297)
**Author:** [@Christopher\_Bourez](https://discuss.elastic.co/u/Christopher_Bourez)\ **Replies:** 5\ **Last updated:** [February 25, 2015, 3:38pm UTC](https://discuss.elastic.co/t/queue-size/22297 "2015-02-25T15:38:51Z")
I'm having the following problem : "SearchPhaseExecutionException\[Failed to execute phase \[query\], all shards failed; shardFailures {\[rlrweRJAQJqaoKfFB8il5A\]\[stt\_prod\]\[3\]: EsRejectedExecutionException\[rejected ex… --- ## [Kibana setting timepicker:timeDefaults via API is failing in 7.12](https://discuss.elastic.co/t/kibana-setting-timepicker-timedefaults-via-api-is-failing-in-7-12/270770)
**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\ **Replies:** 2\ **Last updated:** [April 22, 2021, 2:06pm UTC](https://discuss.elastic.co/t/kibana-setting-timepicker-timedefaults-via-api-is-failing-in-7-12/270770 "2021-04-22T14:06:54Z")
The following request reports bad request on upgrading to 7.12 api/kibana/settings/timepicker:timeDefaults { "value": { "from": "now-24h", "to": "now", "mode": "quick" } } Error: { "statusCode": 400, … --- ## [How to put filter inside Vega visualization scatter plot](https://discuss.elastic.co/t/how-to-put-filter-inside-vega-visualization-scatter-plot/267618)
**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\ **Replies:** 2\ **Last updated:** [April 5, 2021, 7:19am UTC](https://discuss.elastic.co/t/how-to-put-filter-inside-vega-visualization-scatter-plot/267618 "2021-04-05T07:19:28Z")
hi, I want to present the plots for documents with "group"==a, and I only want to present documents with the latest date of the time range applied by the dashboard. How can I do this? here is my script: { $schema: … --- ## [Vega-lite invalid spec error](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706)
**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\ **Replies:** 2\ **Last updated:** [November 9, 2020, 5:26pm UTC](https://discuss.elastic.co/t/vega-lite-invalid-spec-error/254706 "2020-11-09T17:26:59Z")
I am just trying to do a simple count of all container\_id 's for every state in vega-lite and it thorws an error as invalid spec. What am I doing wrong here? { "$schema": "https://vega.github.io/schema/vega-lite/v2.js… --- ## [App Search Document Limit?](https://discuss.elastic.co/t/app-search-document-limit/236014)
**Author:** [@andrewlavigne](https://discuss.elastic.co/u/andrewlavigne)\ **Replies:** 2\ **Last updated:** [June 17, 2020, 4:31pm UTC](https://discuss.elastic.co/t/app-search-document-limit/236014 "2020-06-17T16:31:32Z")
Continuing the discussion from App Search Limitations: Hello all! This is my first post so I apologize if this question was already answered. I did some searching on this topic and the only article I could find was the… --- ## [How to populate @timestamp and @version when using Elasticsearch API to import json](https://discuss.elastic.co/t/how-to-populate-timestamp-and-version-when-using-elasticsearch-api-to-import-json/154498)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 7:57pm UTC](https://discuss.elastic.co/t/how-to-populate-timestamp-and-version-when-using-elasticsearch-api-to-import-json/154498 "2018-10-29T19:57:26Z")
Question: How do I use Ealsticsearch API to populate @timestamp and @version as part of the elasticsearch documentation when importing json file? More information: In our ELK development process, we are using two diff… --- ## [System module working but not logging all lines in /var/log/messages](https://discuss.elastic.co/t/system-module-working-but-not-logging-all-lines-in-var-log-messages/151524)
**Author:** [@Chris\_Searle](https://discuss.elastic.co/u/Chris_Searle)\ **Replies:** 2\ **Last updated:** [October 9, 2018, 5:34pm UTC](https://discuss.elastic.co/t/system-module-working-but-not-logging-all-lines-in-var-log-messages/151524 "2018-10-09T17:34:35Z")
Running 6.4 on debian stretch. OK - so I think I have the system module configured (default paths etc). New to trying the modules system - it's been filebeats and logstash up to now. In kibana I can see the dashboards … --- ## [Fail to use logstash-output-gelf](https://discuss.elastic.co/t/fail-to-use-logstash-output-gelf/109730)
**Author:** [@jlbassereau](https://discuss.elastic.co/u/jlbassereau)\ **Replies:** 2\ **Last updated:** [December 1, 2017, 10:31am UTC](https://discuss.elastic.co/t/fail-to-use-logstash-output-gelf/109730 "2017-12-01T10:31:53Z")
Hello, I'm trying to use logstash-output-gelf to send logs to a Graylog instance. I've installed a fresh logstash-6.0.0 and installed the plugin with : logstash-plugin install logstash-output-gelf No error at this … --- ## [Old logs needs to be indexed](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511)
**Author:** [@vu\_test](https://discuss.elastic.co/u/vu_test)\ **Replies:** 2\ **Last updated:** [July 6, 2017, 5:51am UTC](https://discuss.elastic.co/t/old-logs-needs-to-be-indexed/91511 "2017-07-06T05:51:55Z")
Hi All, new to ELK environment, I have some old logs (a month old) I want to index it. When on running logstash with OUTPUT as {stdout =\> rubydebug} ..gets the result. But doing the same enabling elasticsearch {} doesn't… --- ## [Using metric with dynamic field names](https://discuss.elastic.co/t/using-metric-with-dynamic-field-names/88441)
**Author:** [@kbop543](https://discuss.elastic.co/u/kbop543)\ **Replies:** 2\ **Last updated:** [June 8, 2017, 3:14pm UTC](https://discuss.elastic.co/t/using-metric-with-dynamic-field-names/88441 "2017-06-08T15:14:16Z")
Hey, So I have been testing how to use metrics to tell me the count of how many times a logfile logged errors. I use indexes to distinguish between logfiles by grabbing the filename from the path in a field called fil… --- ## [Can I turn the path (or parts of it) into a variable?](https://discuss.elastic.co/t/can-i-turn-the-path-or-parts-of-it-into-a-variable/87129)
**Author:** [@jclose](https://discuss.elastic.co/u/jclose)\ **Replies:** 2\ **Last updated:** [May 26, 2017, 12:16pm UTC](https://discuss.elastic.co/t/can-i-turn-the-path-or-parts-of-it-into-a-variable/87129 "2017-05-26T12:16:54Z")
I want to ship some syslog out from our syslog server into Elastic, and obviously Filebeat works for this. But I want to send part of the path as a variable within the beat. So, for instance, my path will look like /… --- ## [Unable to install logstash-output-mongodb on Ubuntu 16.04](https://discuss.elastic.co/t/unable-to-install-logstash-output-mongodb-on-ubuntu-16-04/75855)
**Author:** [@jstar](https://discuss.elastic.co/u/jstar)\ **Replies:** 2\ **Last updated:** [February 23, 2017, 11:11am UTC](https://discuss.elastic.co/t/unable-to-install-logstash-output-mongodb-on-ubuntu-16-04/75855 "2017-02-23T11:11:25Z")
Hi, I was able to install logstash-output-mongodb on ubuntu 14.04 but when I tried that on ubuntu 16.04, it fails with ERROR: Installation aborted, verification failed for logstash-output-mongodb. I'm using logstash 5.… --- ## [Issue with XML filter - xmlparsefailure](https://discuss.elastic.co/t/issue-with-xml-filter-xmlparsefailure/66159)
**Author:** [@Lazypete](https://discuss.elastic.co/u/Lazypete)\ **Replies:** 2\ **Last updated:** [November 16, 2016, 12:27pm UTC](https://discuss.elastic.co/t/issue-with-xml-filter-xmlparsefailure/66159 "2016-11-16T12:27:25Z")
Ok I'm trying to use LEK (logstash, elasticsearch, kibana) to parse and display logs from a IBM datapower appliance. My problem is that whatever XML I send to logstash all I get is The unformatted data and this beauty … --- ## [Searching Logs for tags with "@" Symbol](https://discuss.elastic.co/t/searching-logs-for-tags-with-symbol/65177)
**Author:** [@suaveh](https://discuss.elastic.co/u/suaveh)\ **Replies:** 2\ **Last updated:** [November 7, 2016, 8:01am UTC](https://discuss.elastic.co/t/searching-logs-for-tags-with-symbol/65177 "2016-11-07T08:01:12Z")
Good day, I am trying to search for a string that starts with the "@" symbol, but it seems that the symbol is ignored. For example... I have the following documents with the following data: doc1: "hello world" doc2… --- ## [ElasticSearch Clustering authentication with Nginx](https://discuss.elastic.co/t/elasticsearch-clustering-authentication-with-nginx/46956)
**Author:** [@ghasem1992](https://discuss.elastic.co/u/ghasem1992)\ **Replies:** 2\ **Last updated:** [April 12, 2016, 2:42am UTC](https://discuss.elastic.co/t/elasticsearch-clustering-authentication-with-nginx/46956 "2016-04-12T02:42:43Z")
I have an ElasticSearch cluster with a master node on server 192.168.30.141 and 5 data nodes on some other servers. I have set up a nginx reverse proxy server on server 192.168.30.141 for basic authentication. My cluster… --- ## [Range query on multi-value field?](https://discuss.elastic.co/t/range-query-on-multi-value-field/21973)
**Author:** [@Rural\_Hunter](https://discuss.elastic.co/u/Rural_Hunter)\ **Replies:** 2\ **Last updated:** [February 5, 2015, 3:29am UTC](https://discuss.elastic.co/t/range-query-on-multi-value-field/21973 "2015-02-05T03:29:58Z")
I have a field with multi values like this: "100, 200, 300,1000". I need to get the docs which contains any value from 100 to 500 in this filed. Is it possible to run a range query against this multi-value field? --… --- ## [Enable filebeat caching during unavailablity](https://discuss.elastic.co/t/enable-filebeat-caching-during-unavailablity/308608)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 4\ **Last updated:** [July 23, 2022, 5:15pm UTC](https://discuss.elastic.co/t/enable-filebeat-caching-during-unavailablity/308608 "2022-07-23T17:15:39Z")
Hello, I hope you and your loved ones are safe and healthy. I am running a cluster that collects logs from sources on the internet. I need to enable caching of logs in case the next hop is not reachable as dropping log… --- ## [Kubernetes integration 1.9.0 without Assets](https://discuss.elastic.co/t/kubernetes-integration-1-9-0-without-assets/298406)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 4\ **Last updated:** [March 21, 2022, 9:34am UTC](https://discuss.elastic.co/t/kubernetes-integration-1-9-0-without-assets/298406 "2022-03-21T09:34:46Z")
im using Agent & Fleet , all in version 7.16.2 kubernetes integration 1.9.0 without Assets --- ## [Enterprise Search Pods Fail to Create - Readiness Probe Fails](https://discuss.elastic.co/t/enterprise-search-pods-fail-to-create-readiness-probe-fails/288176)
**Author:** [@thomasrice](https://discuss.elastic.co/u/thomasrice)\ **Replies:** 4\ **Last updated:** [November 2, 2021, 3:49pm UTC](https://discuss.elastic.co/t/enterprise-search-pods-fail-to-create-readiness-probe-fails/288176 "2021-11-02T15:49:48Z")
Hello, I am having some issues deploying Enterprise Search into my K8's cluster. I already have Elasticsearch & Kibana working via the crd & operator files: https://download.elastic.co/downloads/eck/1.8.0/crds.yaml h… --- ## [How to use \_sql (SQL queries) to access Elasticsearch indexes in Logstash input plugin](https://discuss.elastic.co/t/how-to-use-sql-sql-queries-to-access-elasticsearch-indexes-in-logstash-input-plugin/265327)
**Author:** [@Amit\_Singh4](https://discuss.elastic.co/u/Amit_Singh4)\ **Replies:** 4\ **Last updated:** [March 3, 2021, 6:08am UTC](https://discuss.elastic.co/t/how-to-use-sql-sql-queries-to-access-elasticsearch-indexes-in-logstash-input-plugin/265327 "2021-03-03T06:08:07Z")
Hi I want to use \_sql (SQL queries) to access Elasticsearch indexes in Logstash input plugin. Find my logstash config as below: input { http\_poller { urls =\> { test1 =\> { method =\> "POST" user =\> "abc" password =\>… --- ## [Ingestnode Grokにてarraylistの処理について](https://discuss.elastic.co/t/ingestnode-grok-arraylist/222390)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 4\ **Last updated:** [March 10, 2020, 5:56am UTC](https://discuss.elastic.co/t/ingestnode-grok-arraylist/222390 "2020-03-10T05:56:48Z")
お世話になります。 ingest nodeのGrok processorにて、配列の値を処理したいのですがエラーになります。 POST /\_ingest/pipeline/\_simulate { "pipeline": { "processors": \[ { "kv": { "field": "message", "field\_split": """\\s… --- ## [XML parsing- Filter to format a date field](https://discuss.elastic.co/t/xml-parsing-filter-to-format-a-date-field/170036)
**Author:** [@Skwilly](https://discuss.elastic.co/u/Skwilly)\ **Replies:** 4\ **Last updated:** [February 26, 2019, 4:30pm UTC](https://discuss.elastic.co/t/xml-parsing-filter-to-format-a-date-field/170036 "2019-02-26T16:30:07Z")
Hi, I have the following index: "hits" : \[ { "\_index" : "test", "\_type" : "doc", "\_id" : "OWZhKmkBDjX7TOqqZgwX", "\_score" : 1.0, "\_source" : { "@timestamp" : "2019-02-26T15:16:52.527Z" … --- ## [Geo Bounding Box Filter](https://discuss.elastic.co/t/geo-bounding-box-filter/102785)
**Author:** [@Atul\_Harsha](https://discuss.elastic.co/u/Atul_Harsha)\ **Replies:** 4\ **Last updated:** [October 5, 2017, 5:36am UTC](https://discuss.elastic.co/t/geo-bounding-box-filter/102785 "2017-10-05T05:36:52Z")
Hi , While trying geo\_bounding\_box following error is generated. Can you please help me out in resolving the error Code: GET /attractions/restaurant/\_search { "query": { "filtered": { "filt… --- ## [Need to know subscription details of ELK](https://discuss.elastic.co/t/need-to-know-subscription-details-of-elk/93267)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 4\ **Last updated:** [July 17, 2017, 9:10pm UTC](https://discuss.elastic.co/t/need-to-know-subscription-details-of-elk/93267 "2017-07-17T21:10:20Z")
Hi, I want to know the x-pack yearly subscription cost. I Request for Quote multiple times for same on https://www.elastic.co/subscriptions#request-info link but didn't get any response. --- ## [X-pack: gradle task for building custom realm](https://discuss.elastic.co/t/x-pack-gradle-task-for-building-custom-realm/89213)
**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\ **Replies:** 4\ **Last updated:** [June 15, 2017, 5:16pm UTC](https://discuss.elastic.co/t/x-pack-gradle-task-for-building-custom-realm/89213 "2017-06-15T17:16:50Z")
Hi team, I am following the steps mentioned in x-pack custom realm plugin example that is provided here. i have some issues with junits, but i have disbaled junits for now, just commented out the tests methods. whe… --- ## [Logstash creating 2 events for each line in json codec](https://discuss.elastic.co/t/logstash-creating-2-events-for-each-line-in-json-codec/68104)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 4\ **Last updated:** [December 6, 2016, 5:21pm UTC](https://discuss.elastic.co/t/logstash-creating-2-events-for-each-line-in-json-codec/68104 "2016-12-06T17:21:14Z")
I want to stream each json line being written to a log file into Logstash. I am using json codec in file input plugin. If I want to load entire file which is new at once, I can do with start\_position =\> beginning But… --- ## [Beats reporting on Kibana as Standalone Cluster](https://discuss.elastic.co/t/beats-reporting-on-kibana-as-standalone-cluster/240711)
**Author:** [@vishakh](https://discuss.elastic.co/u/vishakh)\ **Replies:** 1\ **Last updated:** [July 10, 2020, 2:33pm UTC](https://discuss.elastic.co/t/beats-reporting-on-kibana-as-standalone-cluster/240711 "2020-07-10T14:33:38Z")
ELK-Stack: 7.8 Beats -\> Logstash -\> ES in my cluster: I'm ingesting both data logs and monitoring stats to same cluster. Installed and configured Filebeat 7.8 on a linux server with the below configuration. Once star… --- ## [Using timestamp processor fails](https://discuss.elastic.co/t/using-timestamp-processor-fails/228348)
**Author:** [@willyaranda\_vonage](https://discuss.elastic.co/u/willyaranda_vonage)\ **Replies:** 1\ **Last updated:** [April 17, 2020, 12:56pm UTC](https://discuss.elastic.co/t/using-timestamp-processor-fails/228348 "2020-04-17T12:56:49Z")
Hi, I have logs that are JSON, and I'm trying to set the @timestamp field based on that. The format is: 2020-04-16 05:45:51,913 with timezone as 'America/Los\_Angeles' I have set this configuration processors: - tim… --- ## [Kibana not receiving data](https://discuss.elastic.co/t/kibana-not-receiving-data/171989)
**Author:** [@DiegoTc](https://discuss.elastic.co/u/DiegoTc)\ **Replies:** 1\ **Last updated:** [March 15, 2019, 5:40pm UTC](https://discuss.elastic.co/t/kibana-not-receiving-data/171989 "2019-03-15T17:40:08Z")
We were having our Kibana running, but by accident a team member change the size of our EC2 and Kibana went down. We had a BAD GATEWAY error Our first step was to restart the service sudo service kibana restart With … --- ## [Filter on specific index on a Dashboard with multiple indices and Visualisations](https://discuss.elastic.co/t/filter-on-specific-index-on-a-dashboard-with-multiple-indices-and-visualisations/109915)
**Author:** [@Sudarsun\_Peru](https://discuss.elastic.co/u/Sudarsun_Peru)\ **Replies:** 1\ **Last updated:** [December 1, 2017, 10:15pm UTC](https://discuss.elastic.co/t/filter-on-specific-index-on-a-dashboard-with-multiple-indices-and-visualisations/109915 "2017-12-01T22:15:52Z")
Hi, I have a Dashboard with mutiple visualisations ( Line, Table, Timelion) with each querying on different indices which do not have the same fields in them. If i filter by a specific field of an index, the remaining… --- ## [\[Resolved\] Logstash Custom Plugin - Unable to create session to Neo4j within Logstash](https://discuss.elastic.co/t/resolved-logstash-custom-plugin-unable-to-create-session-to-neo4j-within-logstash/37890)
**Author:** [@thehybridtech](https://discuss.elastic.co/u/thehybridtech)\ **Replies:** 1\ **Last updated:** [December 24, 2015, 4:25am UTC](https://discuss.elastic.co/t/resolved-logstash-custom-plugin-unable-to-create-session-to-neo4j-within-logstash/37890 "2015-12-24T04:25:12Z")
I am having issues with a custom plugin and not exactly where to turn. I am building a custom Logstash output plugin to build our Neo4j models. Running the code externally with jruby included with Logstash, I have no … [Previous page](https://discuss.elastic.co/top.md?page=1532&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1534&per_page=50&period=all)