# Top

**URL:** https://discuss.elastic.co/top.md?page=1544&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1545

---

## [Logstash:event api to get nested fields with attribute values in ruby filter](https://discuss.elastic.co/t/logstash-event-api-to-get-nested-fields-with-attribute-values-in-ruby-filter/269665)

<div class="topic-metadata">

**Author:** [@prathibha](https://discuss.elastic.co/u/prathibha)\
**Replies:** 1\
**Last updated:** [April 9, 2021, 4:10pm UTC](https://discuss.elastic.co/t/logstash-event-api-to-get-nested-fields-with-attribute-values-in-ruby-filter/269665 "2021-04-09T16:10:12Z")

</div>

Hello Team, I would like to use an event api inside ruby filter to get nested fields with attribute value. I have a sample here as below: "Event1" =\> { "Event2" =\> { …

---

## [Capturing information of an entire call cycle(including multiple API consecutive calls)](https://discuss.elastic.co/t/capturing-information-of-an-entire-call-cycle-including-multiple-api-consecutive-calls/250123)

<div class="topic-metadata">

**Author:** [@mdubey](https://discuss.elastic.co/u/mdubey)\
**Replies:** 7\
**Last updated:** [October 26, 2020, 8:38pm UTC](https://discuss.elastic.co/t/capturing-information-of-an-entire-call-cycle-including-multiple-api-consecutive-calls/250123 "2020-10-26T20:38:34Z")

</div>

Hello everyone, In our project we have a server which works as a router (i.e. routers calls from one server to other appropriate servers). We have APIs as action API and callback APIs. This means, server1 would call ro…

---

## [Elastic search won't start with java 11 on ubuntu 18.04](https://discuss.elastic.co/t/elastic-search-wont-start-with-java-11-on-ubuntu-18-04/195003)

<div class="topic-metadata">

**Author:** [@Shiva\_Shahu](https://discuss.elastic.co/u/Shiva_Shahu)\
**Replies:** 1\
**Last updated:** [August 13, 2019, 10:37am UTC](https://discuss.elastic.co/t/elastic-search-wont-start-with-java-11-on-ubuntu-18-04/195003 "2019-08-13T10:37:31Z")

</div>

When I start the elasticsearch service i got below error that are attached - I have ElasticSearch 7.2 and JDK 11. Please help me to solve this issue.

---

## [Find average of max in each bucket](https://discuss.elastic.co/t/find-average-of-max-in-each-bucket/175934)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 4:13pm UTC](https://discuss.elastic.co/t/find-average-of-max-in-each-bucket/175934 "2019-04-12T16:13:32Z")

</div>

Hi, having trouble using Sibling aggregation in Kibana () I have records like following: { “EventId”: “123”, “intPayloadNumber”: 234, “someField”: “someValue” } I can have multiple records in Kibana for the same e…

---

## [Correct use of dissect](https://discuss.elastic.co/t/correct-use-of-dissect/163438)

<div class="topic-metadata">

**Author:** [@Callahan](https://discuss.elastic.co/u/Callahan)\
**Replies:** 1\
**Last updated:** [January 8, 2019, 10:21pm UTC](https://discuss.elastic.co/t/correct-use-of-dissect/163438 "2019-01-08T22:21:17Z")

</div>

I've coded my input for some FW logs. I initially sent those logs to a simple syslog server so I could code my config for it. The syslog input looks like this: 10.50.255.34 Jan 8 13:38:09 firewall.hostname.com user info…

---

## [Elasticsearch + MySQL](https://discuss.elastic.co/t/elasticsearch-mysql/158211)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 7\
**Last updated:** [December 1, 2018, 3:56am UTC](https://discuss.elastic.co/t/elasticsearch-mysql/158211 "2018-12-01T03:56:43Z")

</div>

Hello, Getting logs from ntopng - was thinking sending it to MySQL and then using Elasticsearch to query it and obviously visualize it in Kibana. Is this ideal? Im looking to keep 1 year worth of logs. On top of ntopng…

---

## [How to drop known errors in logstash](https://discuss.elastic.co/t/how-to-drop-known-errors-in-logstash/144476)

<div class="topic-metadata">

**Author:** [@psuvarna](https://discuss.elastic.co/u/psuvarna)\
**Replies:** 1\
**Last updated:** [August 15, 2018, 9:26am UTC](https://discuss.elastic.co/t/how-to-drop-known-errors-in-logstash/144476 "2018-08-15T09:26:59Z")

</div>

Hello, I am new to logstash and ELK stack. We are getting lot of errors in Kibana most of which are known to us. In order to concentrate on new errors while monitoring, we want a way to drop the known errors from logsta…

---

## [Downgrading Elasticsearch and Kibana 6.3.2 to 6.2 under Windows](https://discuss.elastic.co/t/downgrading-elasticsearch-and-kibana-6-3-2-to-6-2-under-windows/144130)

<div class="topic-metadata">

**Author:** [@aeimbeck](https://discuss.elastic.co/u/aeimbeck)\
**Replies:** 1\
**Last updated:** [August 14, 2018, 9:04pm UTC](https://discuss.elastic.co/t/downgrading-elasticsearch-and-kibana-6-3-2-to-6-2-under-windows/144130 "2018-08-14T21:04:37Z")

</div>

For testing purposes, I want to install Canvas to my ES 6.3.2 installation. As I get the error message, that I need a lower version of Kibana, I need to downgrade my ES 6.3.2 to 6.2 installation. As I do not want to lose…

---

## [Logstash outout to Elastic search](https://discuss.elastic.co/t/logstash-outout-to-elastic-search/113472)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 1\
**Last updated:** [December 31, 2017, 10:04am UTC](https://discuss.elastic.co/t/logstash-outout-to-elastic-search/113472 "2017-12-31T10:04:55Z")

</div>

Hi All, I am trying to send logstash output to Elastic Search Cluster , below the i am defining output { elasticsearch { hosts =\> \["node1:9200 , node2:9200 , node3:9200"\] …

---

## [How to to jump from a histogram on dashboard to it's query](https://discuss.elastic.co/t/how-to-to-jump-from-a-histogram-on-dashboard-to-its-query/52041)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [June 7, 2016, 7:20pm UTC](https://discuss.elastic.co/t/how-to-to-jump-from-a-histogram-on-dashboard-to-its-query/52041 "2016-06-07T19:20:42Z")

</div>

Hi all, currently we are using kibana 3. We have a dashboard with many histograms to monitor our system. If we find an anomaly we would like to jump to into that query to do deeper analysis. Is that possible in kibana…

---

## [Setting up an n-gram analyzer](https://discuss.elastic.co/t/setting-up-an-n-gram-analyzer/31313)

<div class="topic-metadata">

**Author:** [@evvo](https://discuss.elastic.co/u/evvo)\
**Replies:** 1\
**Last updated:** [September 29, 2015, 8:54am UTC](https://discuss.elastic.co/t/setting-up-an-n-gram-analyzer/31313 "2015-09-29T08:54:57Z")

</div>

hi im wanting to include a bigram option within my index for searching on... i realise i need to add this at the point of indexing but am not sure how... heres my existing index create clientTEST.CreateIndex(c =\> c …

---

## [SNMP action?](https://discuss.elastic.co/t/snmp-action/29341)

<div class="topic-metadata">

**Author:** [@aochsner](https://discuss.elastic.co/u/aochsner)\
**Replies:** 1\
**Last updated:** [September 15, 2015, 10:27pm UTC](https://discuss.elastic.co/t/snmp-action/29341 "2015-09-15T22:27:56Z")

</div>

Any thoughts about adding an snmp trap action?

---

## [Upgrade to elasticsearch 1.0 now ClassCastException: class ElasticSearch090PostingsFormat](https://discuss.elastic.co/t/upgrade-to-elasticsearch-1-0-now-classcastexception-class-elasticsearch090postingsformat/16001)

<div class="topic-metadata">

**Author:** [@Kevin\_J\_Smith](https://discuss.elastic.co/u/Kevin_J_Smith)\
**Replies:** 7\
**Last updated:** [February 27, 2014, 1:18pm UTC](https://discuss.elastic.co/t/upgrade-to-elasticsearch-1-0-now-classcastexception-class-elasticsearch090postingsformat/16001 "2014-02-27T13:18:05Z")

</div>

Hi, I am using elasticsearch embedded in a tomcat 7 webapp container (everything running under java 7.) All libs for elasticsearch are in WEB-INF/lib. In v0.90 everything is running swimmingly. We upgraded to v1.0…

---

## [Kibana alerts](https://discuss.elastic.co/t/kibana-alerts/321349)

<div class="topic-metadata">

**Author:** [@Anandhu\_R\_K](https://discuss.elastic.co/u/Anandhu_R_K)\
**Replies:** 5\
**Last updated:** [December 22, 2022, 3:03pm UTC](https://discuss.elastic.co/t/kibana-alerts/321349 "2022-12-22T15:03:49Z")

</div>

Hi Team, I have an elasticsearch query type rule configured for my index to detect certain fields with particular values. Also i have an corresponding email connector configured in which I am configuring my custom conte…

---

## [Issue with getting rspec test output to use Junit XML format](https://discuss.elastic.co/t/issue-with-getting-rspec-test-output-to-use-junit-xml-format/39665)

<div class="topic-metadata">

**Author:** [@amtux](https://discuss.elastic.co/u/amtux)\
**Replies:** 0\
**Last updated:** [January 20, 2016, 2:27pm UTC](https://discuss.elastic.co/t/issue-with-getting-rspec-test-output-to-use-junit-xml-format/39665 "2016-01-20T14:27:12Z")

</div>

I'm trying to install a rspec\_junit\_formatter gem to write rspec output to file as JUnit XML so that Jenkins CI can read the generated XML I'm using an Ubuntu 14.04 docker container and installing Logstash 1.5.2: Insta…

---

## [Elasticsearch Kibana](https://discuss.elastic.co/t/elasticsearch-kibana/346944)

<div class="topic-metadata">

**Author:** [@VijayIQA](https://discuss.elastic.co/u/VijayIQA)\
**Replies:** 5\
**Last updated:** [November 14, 2023, 3:31am UTC](https://discuss.elastic.co/t/elasticsearch-kibana/346944 "2023-11-14T03:31:34Z")

</div>

Hi Team, I was deployed Elasticsearch cluster with one master node one data node on docker with version of 8.8.1 When i am trying to add that into Kibana I am getting an error. \[2023-11-13T04:55:05.704+00:00\]\[WARN \]\[sav…

---

## [Moving indices to Docker](https://discuss.elastic.co/t/moving-indices-to-docker/320069)

<div class="topic-metadata">

**Author:** [@Jozef](https://discuss.elastic.co/u/Jozef)\
**Replies:** 5\
**Last updated:** [December 5, 2022, 7:56pm UTC](https://discuss.elastic.co/t/moving-indices-to-docker/320069 "2022-12-05T19:56:09Z")

</div>

Hi, I am currently trying to test the overhead a docker container adds to query latency, among other tests requiring a containerized ES. In order to do this I am creating a container and mounting the folder containing th…

---

## [How can we add dynamic templates in existing elastic index](https://discuss.elastic.co/t/how-can-we-add-dynamic-templates-in-existing-elastic-index/264282)

<div class="topic-metadata">

**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\
**Replies:** 5\
**Last updated:** [February 21, 2021, 9:16pm UTC](https://discuss.elastic.co/t/how-can-we-add-dynamic-templates-in-existing-elastic-index/264282 "2021-02-21T21:16:22Z")

</div>

I have a need to add more dynamic templates in my existing index mappings, how can I do that Tried doing below, but it didn't worked PUT {$indexname}\_mappings { "mappings" : { "dynamic\_templates" : \[ { "strings"…

---

## [Logstash HA](https://discuss.elastic.co/t/logstash-ha/258979)

<div class="topic-metadata">

**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\
**Replies:** 5\
**Last updated:** [December 31, 2020, 3:51pm UTC](https://discuss.elastic.co/t/logstash-ha/258979 "2020-12-31T15:51:20Z")

</div>

Hi, Can anyone please provide what are the various options of implementing Logstash High Availability? I am aware of using at least two Logstash instance for Logstash HA. Is there any other way by which I can achieve L…

---

## [Kibana 7.6: set uiState doesn't seems to work](https://discuss.elastic.co/t/kibana-7-6-set-uistate-doesnt-seems-to-work/219844)

<div class="topic-metadata">

**Author:** [@pchakour](https://discuss.elastic.co/u/pchakour)\
**Replies:** 5\
**Last updated:** [March 13, 2020, 8:47pm UTC](https://discuss.elastic.co/t/kibana-7-6-set-uistate-doesnt-seems-to-work/219844 "2020-03-13T20:47:49Z")

</div>

Hello everybody, I'm working in the migration of a visualization for Kibana 7.6.0. This visualization use the AngularVisController. I use the function uiStateVal from the scope to make some changes on my visualizatio…

---

## [Unacceptable Logstash startup times](https://discuss.elastic.co/t/unacceptable-logstash-startup-times/169708)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 5\
**Last updated:** [February 24, 2019, 9:26pm UTC](https://discuss.elastic.co/t/unacceptable-logstash-startup-times/169708 "2019-02-24T21:26:11Z")

</div>

There has been a disturbing trend with Logstash performance and stability. Including stability issues (6.1.3 is the last version that can run a long time on MacOS without crashing), the 6.6.x containers crash within minu…

---

## [Keyword type schema difference Elasticsearch 5.1 with 5.5](https://discuss.elastic.co/t/keyword-type-schema-difference-elasticsearch-5-1-with-5-5/100173)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 5\
**Last updated:** [September 13, 2017, 3:12pm UTC](https://discuss.elastic.co/t/keyword-type-schema-difference-elasticsearch-5-1-with-5-5/100173 "2017-09-13T15:12:12Z")

</div>

I have been using elasticsearch 2.X to 5.1 for quite some time for aggregation. The business logic does not need the string fields to be analysed. In 5.1 when I set the field type as follows in the mapping template: …

---

## [Native script in ES](https://discuss.elastic.co/t/native-script-in-es/18562)

<div class="topic-metadata">

**Author:** [@Adrian\_M](https://discuss.elastic.co/u/Adrian_M)\
**Replies:** 5\
**Last updated:** [July 10, 2014, 10:11pm UTC](https://discuss.elastic.co/t/native-script-in-es/18562 "2014-07-10T22:11:35Z")

</div>

Hi, I'm curious how scripts work in ES. I've created a simple script which checks if a field in a record is equal to a certain value then return 1 otherwise return 0. I used AbstractDoubleSearchScript as the super …

---

## [How to achieve good performance (huge daily indices)](https://discuss.elastic.co/t/how-to-achieve-good-performance-huge-daily-indices/214270)

<div class="topic-metadata">

**Author:** [@Naseem](https://discuss.elastic.co/u/Naseem)\
**Replies:** 6\
**Last updated:** [January 10, 2020, 6:14am UTC](https://discuss.elastic.co/t/how-to-achieve-good-performance-huge-daily-indices/214270 "2020-01-10T06:14:37Z")

</div>

Hello, Our free text search is unusable. We have a 3 master + 4 data/ingester setup. We have 1 primary shard and 1 replica per index. Indices are appended by date, and a new one is created every day (typical). The da…

---

## [Error opening machine learning](https://discuss.elastic.co/t/error-opening-machine-learning/126302)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 6\
**Last updated:** [April 2, 2018, 1:50pm UTC](https://discuss.elastic.co/t/error-opening-machine-learning/126302 "2018-04-02T13:50:58Z")

</div>

Hi, I want to try the machine learning features in kibana.But when I create a new job and open it, it shows the error \[image\] How can I do ? thanks a lot!

---

## [Field \[gcp.audit.response.status.conditions.lastHeartbeatTime\] of type \[flattened\] doesn't support formats](https://discuss.elastic.co/t/field-gcp-audit-response-status-conditions-lastheartbeattime-of-type-flattened-doesnt-support-formats/315028)

<div class="topic-metadata">

**Author:** [@AndreiRD](https://discuss.elastic.co/u/AndreiRD)\
**Replies:** 2\
**Last updated:** [September 26, 2022, 9:08am UTC](https://discuss.elastic.co/t/field-gcp-audit-response-status-conditions-lastheartbeattime-of-type-flattened-doesnt-support-formats/315028 "2022-09-26T09:08:46Z")

</div>

So, I have enabled GCP Audit logs collection using the GCP integration from Elastic Agent 8.3.3. I've had no problems so far running searches in this dataset, but as of today the next error keeps appearing, and now I ca…

---

## [Find logstash compatibility with kafka](https://discuss.elastic.co/t/find-logstash-compatibility-with-kafka/244490)

<div class="topic-metadata">

**Author:** [@satish92](https://discuss.elastic.co/u/satish92)\
**Replies:** 2\
**Last updated:** [August 25, 2020, 3:45pm UTC](https://discuss.elastic.co/t/find-logstash-compatibility-with-kafka/244490 "2020-08-25T15:45:22Z")

</div>

Hello, I upgraded logstash from 2.4 to 7.5 and also kafka from 0.10 to 2.5 Im facing few issues here when pushing logs through logstash issue background information: Im using the same logstash config files in /etc/lo…

---

## [Interested to contribute to EUI for GSoC 2020](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2020/220383)

<div class="topic-metadata">

**Author:** [@RisingGeek](https://discuss.elastic.co/u/RisingGeek)\
**Replies:** 2\
**Last updated:** [February 22, 2020, 11:51am UTC](https://discuss.elastic.co/t/interested-to-contribute-to-eui-for-gsoc-2020/220383 "2020-02-22T11:51:56Z")

</div>

Hi, I am Bhavay Puri. I would love to contribute to Elastic as part of GSoC 2020. I am interested in the following project idea: https://github.com/elastic/gsoc#playground--toggle-system-for-live-documentation Can anyo…

---

## [Error on create a custom metricbeat](https://discuss.elastic.co/t/error-on-create-a-custom-metricbeat/188537)

<div class="topic-metadata">

**Author:** [@fdmsantos](https://discuss.elastic.co/u/fdmsantos)\
**Replies:** 2\
**Last updated:** [July 12, 2019, 4:22am UTC](https://discuss.elastic.co/t/error-on-create-a-custom-metricbeat/188537 "2019-07-12T04:22:20Z")

</div>

Hello, I'm trying create a beat based on metricbeat. I have the following errors: grep: ../libbeat/docs/version.asciidoc: No such file or directory and: cp: cannot stat 'module/\*/\_meta/kibana/\*': No such file or dir…

---

## [Showing Kibana server is not ready yet](https://discuss.elastic.co/t/showing-kibana-server-is-not-ready-yet/182938)

<div class="topic-metadata">

**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\
**Replies:** 2\
**Last updated:** [May 27, 2019, 4:13pm UTC](https://discuss.elastic.co/t/showing-kibana-server-is-not-ready-yet/182938 "2019-05-27T16:13:53Z")

</div>

HI , My elasticsearch is running fine in port 9200 but my kibana port 5601 is showing Kibana server is not ready yet and im so clueless where it went wrong please help me solve it. output of port number 9200 nam…

---

## [Encontrar miles de elementos que hacen match con miles](https://discuss.elastic.co/t/encontrar-miles-de-elementos-que-hacen-match-con-miles/121563)

<div class="topic-metadata">

**Author:** [@willypol](https://discuss.elastic.co/u/willypol)\
**Replies:** 2\
**Last updated:** [February 28, 2018, 7:52pm UTC](https://discuss.elastic.co/t/encontrar-miles-de-elementos-que-hacen-match-con-miles/121563 "2018-02-28T19:52:33Z")

</div>

Hola! Me gustaría saber si alguien se ha encontrado con un problema similar que al planteo y como lo ha resuelto. Imaginemos que tenemos miles de peticiones de navegación (packetbeat) en ES. Los índices tienen unos tam…

---

## [Elasticsearch multi node failover](https://discuss.elastic.co/t/elasticsearch-multi-node-failover/98842)

<div class="topic-metadata">

**Author:** [@jogoinar10](https://discuss.elastic.co/u/jogoinar10)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 11:04am UTC](https://discuss.elastic.co/t/elasticsearch-multi-node-failover/98842 "2017-08-30T11:04:13Z")

</div>

I have 2 nodes in a cluster. I tried to disconnect one node and the other node was also disconnected/cannot access. I thought that one of the advantage of multiple nodes is that, I can use one node if the other node is …

---

## [Filter: error message and string comparison](https://discuss.elastic.co/t/filter-error-message-and-string-comparison/86853)

<div class="topic-metadata">

**Author:** [@pir1981](https://discuss.elastic.co/u/pir1981)\
**Replies:** 2\
**Last updated:** [June 13, 2017, 7:45pm UTC](https://discuss.elastic.co/t/filter-error-message-and-string-comparison/86853 "2017-06-13T19:45:59Z")

</div>

Hi I have an error message that I would like to drop. But my filter does not seem to ever trigger. Message 2017-05-23T18:24:47.644Z -- ERROR -- \[main\] ERROR de.komoot.photon.elasticsearch.Server - cannot install pl…

---

## [Kibana plugins development and D3js](https://discuss.elastic.co/t/kibana-plugins-development-and-d3js/88837)

<div class="topic-metadata">

**Author:** [@Corine](https://discuss.elastic.co/u/Corine)\
**Replies:** 2\
**Last updated:** [June 12, 2017, 7:39am UTC](https://discuss.elastic.co/t/kibana-plugins-development-and-d3js/88837 "2017-06-12T07:39:16Z")

</div>

Hello, I have to develop some kibana 5 plugins based on D3js visualization. How is it possible to add D3js visualization into Kibana. There are some d3js libraries for that? Regards,

---

## [Heavy CPU usage during queries/dashboards loadings - normal behaviour?](https://discuss.elastic.co/t/heavy-cpu-usage-during-queries-dashboards-loadings-normal-behaviour/64905)

<div class="topic-metadata">

**Author:** [@Houss](https://discuss.elastic.co/u/Houss)\
**Replies:** 2\
**Last updated:** [November 5, 2016, 10:11am UTC](https://discuss.elastic.co/t/heavy-cpu-usage-during-queries-dashboards-loadings-normal-behaviour/64905 "2016-11-05T10:11:04Z")

</div>

Hello, We have a cluster with four elasticsearch nodes (v2.4), each having 4 cpu and 8gb of ram. At the moment, we have a load of about 500 messages a second. Everytime we load a dashboard or use a query, the cpu usa…

---

## [Kibana service loop and unable to access Kibana web page](https://discuss.elastic.co/t/kibana-service-loop-and-unable-to-access-kibana-web-page/65029)

<div class="topic-metadata">

**Author:** [@Greenie](https://discuss.elastic.co/u/Greenie)\
**Replies:** 2\
**Last updated:** [November 4, 2016, 8:47pm UTC](https://discuss.elastic.co/t/kibana-service-loop-and-unable-to-access-kibana-web-page/65029 "2016-11-04T20:47:27Z")

</div>

Let me start off saying that I am new to ELK and am very interested in getting the ELK stack up and running, but have run into an issue that I can't seem to get past. Any help would be greatly appreciated. I have newly…

---

## [How to handle date related log files?](https://discuss.elastic.co/t/how-to-handle-date-related-log-files/33725)

<div class="topic-metadata">

**Author:** [@Yzord](https://discuss.elastic.co/u/Yzord)\
**Replies:** 2\
**Last updated:** [November 5, 2015, 1:34pm UTC](https://discuss.elastic.co/t/how-to-handle-date-related-log-files/33725 "2015-11-05T13:34:37Z")

</div>

I am installing an ELK server for all the logfiles we have in our network. Configuring logstash-forwarder isn't that hard. I use for example to push dhcpd.log to my ELK server. But now i have a server which has logfil…

---

## [How to put my logs in different types document?](https://discuss.elastic.co/t/how-to-put-my-logs-in-different-types-document/24774)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 2\
**Last updated:** [July 2, 2015, 12:08pm UTC](https://discuss.elastic.co/t/how-to-put-my-logs-in-different-types-document/24774 "2015-07-02T12:08:16Z")

</div>

Hi everybody!!! I have my output in config file: elasticsearch { host =\> "myServer.com" port =\> 9200 index =\> "events” protocol =\> "http" } and I want to direct all logs with message "Logged in" and "Lo…

---

## [How to Enable OCR in Elasticsearch for Enhanced PDF Readability?](https://discuss.elastic.co/t/how-to-enable-ocr-in-elasticsearch-for-enhanced-pdf-readability/351249)

<div class="topic-metadata">

**Author:** [@Chenko](https://discuss.elastic.co/u/Chenko)\
**Replies:** 1\
**Last updated:** [January 17, 2024, 9:59am UTC](https://discuss.elastic.co/t/how-to-enable-ocr-in-elasticsearch-for-enhanced-pdf-readability/351249 "2024-01-17T09:59:25Z")

</div>

Hello, We're facing a challenge with a client regarding the upload and processing of PDF files to make them text-searchable. Initially, we implemented an ingest pipeline with Elasticsearch's attachment processor, levera…

---

## [Failed sending events! DOMException: The user aborted a request](https://discuss.elastic.co/t/failed-sending-events-domexception-the-user-aborted-a-request/336257)

<div class="topic-metadata">

**Author:** [@Thiago\_Medeiros](https://discuss.elastic.co/u/Thiago_Medeiros)\
**Replies:** 1\
**Last updated:** [June 19, 2023, 8:00am UTC](https://discuss.elastic.co/t/failed-sending-events-domexception-the-user-aborted-a-request/336257 "2023-06-19T08:00:00Z")

</div>

I have APM and RUM configured as documentation says, and Vue in the frontend. APM Server version: 8.8.1 This is my whole apm-server.yml: host: 0.0.0.0:8200 output.elasticsearch: hosts: - elasticsearch:9200 …

---

## [Primary term and sequence number VS \_version meta field](https://discuss.elastic.co/t/primary-term-and-sequence-number-vs-version-meta-field/315733)

<div class="topic-metadata">

**Author:** [@bhavya](https://discuss.elastic.co/u/bhavya)\
**Replies:** 1\
**Last updated:** [October 4, 2022, 4:58am UTC](https://discuss.elastic.co/t/primary-term-and-sequence-number-vs-version-meta-field/315733 "2022-10-04T04:58:50Z")

</div>

Consider that there are three primary shards in my index. For indexing and update requests, the primary shards are used. Elasticsearch can distribute incoming requests (such as massive bulk requests) to various primary s…

---

## [Elasticsearch check if key exist in document](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816)

<div class="topic-metadata">

**Author:** [@Hovo\_Baghdasaryan](https://discuss.elastic.co/u/Hovo_Baghdasaryan)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 2:23am UTC](https://discuss.elastic.co/t/elasticsearch-check-if-key-exist-in-document/303816 "2022-05-05T02:23:48Z")

</div>

Hi All. I have key "field1" in the document of Elasticsearch. With mapping, a field is an object. sometimes field does not exist, sometimes the field exists but is empty (\[\]), sometimes the field has the correct value -…

---

## [Check if env variable is set](https://discuss.elastic.co/t/check-if-env-variable-is-set/232328)

<div class="topic-metadata">

**Author:** [@alxsss](https://discuss.elastic.co/u/alxsss)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 11:28pm UTC](https://discuss.elastic.co/t/check-if-env-variable-is-set/232328 "2020-05-12T23:28:17Z")

</div>

Is it possible to check if an env variable is set? I tired a workaround like this In bash $set DATE=a filter{ if (\["{DATE:a}"\]=="a") { mutate { add\_field =\> { "startTime" =\> "2019-10-19" }} } else{ …

---

## [Issue with grok pattern which doesn't work](https://discuss.elastic.co/t/issue-with-grok-pattern-which-doesnt-work/219406)

<div class="topic-metadata">

**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 10:59am UTC](https://discuss.elastic.co/t/issue-with-grok-pattern-which-doesnt-work/219406 "2020-02-18T10:59:46Z")

</div>

Hello, I need to create a grok into Elasticsearch/Kibana/Filebeat to parse my message field. I find myself with two issues : Here is my pipeline : PUT /\_ingest/pipeline/filebeat-7.6.2-system-syslog-pipeline { "desc…

---

## [How to view the XML in Kibana](https://discuss.elastic.co/t/how-to-view-the-xml-in-kibana/213680)

<div class="topic-metadata">

**Author:** [@Chandan1989](https://discuss.elastic.co/u/Chandan1989)\
**Replies:** 1\
**Last updated:** [January 5, 2020, 4:30am UTC](https://discuss.elastic.co/t/how-to-view-the-xml-in-kibana/213680 "2020-01-05T04:30:05Z")

</div>

Hi, I want to see the the whole XML which I am trying to send from Cloud Foundry as input and the output is also converted into XML. Any suggestions to view the both XML. Regards, Chandan

---

## [CORS configuration for authenticated users through access\_by\_lua\_file](https://discuss.elastic.co/t/cors-configuration-for-authenticated-users-through-access-by-lua-file/134183)

<div class="topic-metadata">

**Author:** [@bialy\_rb](https://discuss.elastic.co/u/bialy_rb)\
**Replies:** 1\
**Last updated:** [June 1, 2018, 3:17pm UTC](https://discuss.elastic.co/t/cors-configuration-for-authenticated-users-through-access-by-lua-file/134183 "2018-06-01T15:17:29Z")

</div>

Apologies if this post shouldn't be here and would be grateful;l if you point me in the right direction. I hope I can get some help here as I'm struggling to get it solved. We're using openresty as proxy service to ela…

---

## [Renaming dynamic nested json message fields](https://discuss.elastic.co/t/renaming-dynamic-nested-json-message-fields/75799)

<div class="topic-metadata">

**Author:** [@pbData](https://discuss.elastic.co/u/pbData)\
**Replies:** 1\
**Last updated:** [February 23, 2017, 6:39am UTC](https://discuss.elastic.co/t/renaming-dynamic-nested-json-message-fields/75799 "2017-02-23T06:39:24Z")

</div>

I have the following json data { "parent" : { "child\_1" : { "field\_1":123, "field\_2":"my\_child\_1\_string" }, "child\_2" : { "field\_1":456, "field\_2":"my\_child\_2\_string" } } } I need to be able to …

---

## [Query Boosts don't seem to correctly affect Aggregations?](https://discuss.elastic.co/t/query-boosts-dont-seem-to-correctly-affect-aggregations/42648)

<div class="topic-metadata">

**Author:** [@aaa572](https://discuss.elastic.co/u/aaa572)\
**Replies:** 1\
**Last updated:** [February 24, 2016, 11:10pm UTC](https://discuss.elastic.co/t/query-boosts-dont-seem-to-correctly-affect-aggregations/42648 "2016-02-24T23:10:09Z")

</div>

I have a scenario where I am using match queries boosting various terms. This in the normal search sense has a great result of limiting the results. However the boost doesn't have the same affect when used in an aggregat…

---

## [How to Use Multiple Remote Hosts for Reindexing](https://discuss.elastic.co/t/how-to-use-multiple-remote-hosts-for-reindexing/307060)

<div class="topic-metadata">

**Author:** [@robromo](https://discuss.elastic.co/u/robromo)\
**Replies:** 0\
**Last updated:** [June 13, 2022, 6:10pm UTC](https://discuss.elastic.co/t/how-to-use-multiple-remote-hosts-for-reindexing/307060 "2022-06-13T18:10:25Z")

</div>

I'm just trying to get some clarification on how to use multiple remote hosts for reindexing. It seems (from the official docs) you can list multiple old servers in your reindex.remote.whitelist easily with: reindex.re…

---

## [Stopping Elasticsearch causes Windows Server to crash/restart](https://discuss.elastic.co/t/stopping-elasticsearch-causes-windows-server-to-crash-restart/271608)

<div class="topic-metadata">

**Author:** [@mbalzary](https://discuss.elastic.co/u/mbalzary)\
**Replies:** 3\
**Last updated:** [May 3, 2021, 8:35am UTC](https://discuss.elastic.co/t/stopping-elasticsearch-causes-windows-server-to-crash-restart/271608 "2021-05-03T08:35:00Z")

</div>

Hi, we installed Elasticsearch 7.10 on a Windows Server 2016. Only configuration changes made are regarding cluster.name and node.name. Elasticsearch can be started without a problem and runs, but when it is stopped it …

[Previous page](https://discuss.elastic.co/top.md?page=1543&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1545&per_page=50&period=all)
