# Top **URL:** https://discuss.elastic.co/top.md?page=1547&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1548 --- ## [X-pack and sql in python](https://discuss.elastic.co/t/x-pack-and-sql-in-python/242685)
**Author:** [@chezhian](https://discuss.elastic.co/u/chezhian)\ **Replies:** 2\ **Last updated:** [July 27, 2020, 5:57pm UTC](https://discuss.elastic.co/t/x-pack-and-sql-in-python/242685 "2020-07-27T17:57:21Z")
Trying to see how i can call the x-pack sql feature in python. Am I invoking xpack client correctly AttributeError: 'XPackClient' object has no attribute 'sql' from elasticsearch import Elasticsearch, RequestsHttpConne… --- ## [Multiply the values of two fields in the same index, but different lines](https://discuss.elastic.co/t/multiply-the-values-of-two-fields-in-the-same-index-but-different-lines/169918)
**Author:** [@Lemelin](https://discuss.elastic.co/u/Lemelin)\ **Replies:** 2\ **Last updated:** [March 12, 2019, 11:32pm UTC](https://discuss.elastic.co/t/multiply-the-values-of-two-fields-in-the-same-index-but-different-lines/169918 "2019-03-12T23:32:28Z")
Hello, I'm trying to show billing information about a client in Kibana. I have created two indexes under the same index pattern to be able to see the data from both in the same dashboard. The first index represents a tr… --- ## [Wrong path.data and path.logs for filebeat windows in installation script](https://discuss.elastic.co/t/wrong-path-data-and-path-logs-for-filebeat-windows-in-installation-script/164499)
**Author:** [@dennis\_ukhanov](https://discuss.elastic.co/u/dennis_ukhanov)\ **Replies:** 2\ **Last updated:** [January 25, 2019, 12:30pm UTC](https://discuss.elastic.co/t/wrong-path-data-and-path-logs-for-filebeat-windows-in-installation-script/164499 "2019-01-25T12:30:52Z")
I believe Windows PowerShell script install-service-filebeat.ps1contains wrong path for data and logs folder. On my Windows Server 2012R2 I see"C:\\ProgramData\\filebeat"and"C:\\ProgramData\\filebeat\\logs"respectively so ser… --- ## [1 WEF and 2 separate outputs in winlogbeats](https://discuss.elastic.co/t/1-wef-and-2-separate-outputs-in-winlogbeats/130035)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 2\ **Last updated:** [April 30, 2018, 3:05pm UTC](https://discuss.elastic.co/t/1-wef-and-2-separate-outputs-in-winlogbeats/130035 "2018-04-30T15:05:32Z")
Is it possible to set up one windows event forwarder with 2 outputs? I have our production WEF running great but in addition to this I want to use the same WEF to set up a test box for @Cyb3rWard0g 's @THE\_HELK and se… --- ## [Summarized timeseries data creation using timesearies data in one index to another index](https://discuss.elastic.co/t/summarized-timeseries-data-creation-using-timesearies-data-in-one-index-to-another-index/80698)
**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\ **Replies:** 2\ **Last updated:** [March 30, 2017, 5:37pm UTC](https://discuss.elastic.co/t/summarized-timeseries-data-creation-using-timesearies-data-in-one-index-to-another-index/80698 "2017-03-30T17:37:09Z")
Is there a feature available where time series based data could be aggregated for all fields of an index and and stored as another aggregated document in another index. To elaborate, say index1 has time series data and … --- ## [\[ERROR\] SyntaxError: JSON.parse: bad Unicode escape at line 'X' column 'y' of the JSON data](https://discuss.elastic.co/t/error-syntaxerror-json-parse-bad-unicode-escape-at-line-x-column-y-of-the-json-data/67124)
**Author:** [@evert](https://discuss.elastic.co/u/evert)\ **Replies:** 2\ **Last updated:** [November 24, 2016, 6:38pm UTC](https://discuss.elastic.co/t/error-syntaxerror-json-parse-bad-unicode-escape-at-line-x-column-y-of-the-json-data/67124 "2016-11-24T18:38:27Z")
Using ElasticSearch 5.0, with Ingest-Attachment plugin activated I am receiving sometimes the error below: SyntaxError: JSON.parse: bad Unicode escape at line 1 column 1028737 of the JSON data Does anyone having this… --- ## [Does logstash-jmx plugin support wildcards](https://discuss.elastic.co/t/does-logstash-jmx-plugin-support-wildcards/42489)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 2\ **Last updated:** [June 14, 2016, 5:50am UTC](https://discuss.elastic.co/t/does-logstash-jmx-plugin-support-wildcards/42489 "2016-06-14T05:50:53Z")
I am trying to monitor my kafka cluster, I am pulling metrics through logstash-jmx plugin and pushing them to elasticsearch for monitoring. Kafka is providing per topic level metrics which i want to visualize. So is ther… --- ## [Elastic 2 -\> 1.7](https://discuss.elastic.co/t/elastic-2-1-7/37698)
**Author:** [@\_Alexwii](https://discuss.elastic.co/u/_Alexwii)\ **Replies:** 2\ **Last updated:** [December 21, 2015, 3:22pm UTC](https://discuss.elastic.co/t/elastic-2-1-7/37698 "2015-12-21T15:22:24Z")
Hello everyone ! I wanted to try Elasticsearch 2.0 with Kibana and Logstash, but all is not perfect (not choice of color, not ticket etc...) And I want go back in 1.7 for Graylog. But I have some errors! 6 errors at… --- ## [Redis -\> LS -\> ES WRONGTYPE Operation against a key holding the wrong kind of value](https://discuss.elastic.co/t/redis-ls-es-wrongtype-operation-against-a-key-holding-the-wrong-kind-of-value/109255)
**Author:** [@dseixas](https://discuss.elastic.co/u/dseixas)\ **Replies:** 0\ **Last updated:** [November 27, 2017, 5:15pm UTC](https://discuss.elastic.co/t/redis-ls-es-wrongtype-operation-against-a-key-holding-the-wrong-kind-of-value/109255 "2017-11-27T17:15:43Z")
Hi, We're trying to use the combo Redis+LS+ES to try to persist xAPI statements (these statements are JSON strings). So far, we write correctly in redis, but when LS try to do its thing we get this message: WRONGTYPE … --- ## [Office365 input for logstash](https://discuss.elastic.co/t/office365-input-for-logstash/85409)
**Author:** [@mourlos](https://discuss.elastic.co/u/mourlos)\ **Replies:** 0\ **Last updated:** [May 11, 2017, 1:35pm UTC](https://discuss.elastic.co/t/office365-input-for-logstash/85409 "2017-05-11T13:35:01Z")
Hello, Just wanted to ask if anyone has come across/created an input plugin in order to fetch logs/data from office365. Microsoft allows the creation of an API to fetch different kind of metrics (audit logs are one of … --- ## [Monitoring ELK stack -- best practices: how to monitor "flow activity" for the beats and logstash (filter)?](https://discuss.elastic.co/t/monitoring-elk-stack-best-practices-how-to-monitor-flow-activity-for-the-beats-and-logstash-filter/61668)
**Author:** [@Orsius](https://discuss.elastic.co/u/Orsius)\ **Replies:** 0\ **Last updated:** [September 28, 2016, 7:35am UTC](https://discuss.elastic.co/t/monitoring-elk-stack-best-practices-how-to-monitor-flow-activity-for-the-beats-and-logstash-filter/61668 "2016-09-28T07:35:48Z")
Dear All, I'm wondering what are the best practices to monitor my Elastic Stack (beat, redis, logstash, Elasticsearch) health and activity. Therefore, I would be happy to hear your experience on this topic. So far, I'm… --- ## [Conditional sorting on multi-field value](https://discuss.elastic.co/t/conditional-sorting-on-multi-field-value/29844)
**Author:** [@mmelitzer](https://discuss.elastic.co/u/mmelitzer)\ **Replies:** 0\ **Last updated:** [September 23, 2015, 1:28pm UTC](https://discuss.elastic.co/t/conditional-sorting-on-multi-field-value/29844 "2015-09-23T13:28:44Z")
I've a object which has a name, to be able to sort on it I'm using keyword-lowercase analyzer. The sorting on this object itself works perfectly fine using the full path like name.raw. My problem now is that the object i… --- ## [Functionbeats and Role Name Error](https://discuss.elastic.co/t/functionbeats-and-role-name-error/272454)
**Author:** [@gonrial](https://discuss.elastic.co/u/gonrial)\ **Replies:** 0\ **Last updated:** [May 7, 2021, 10:39pm UTC](https://discuss.elastic.co/t/functionbeats-and-role-name-error/272454 "2021-05-07T22:39:33Z")
I have an error when building a functionbeat lambda to ship other lambdas logs to elastic cloud. The reason is that the name is too long. According to the documentation should be ~20 chars long, but in this case is 16 c… --- ## [Can I do an OR logic Filter?](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 0\ **Last updated:** [December 2, 2020, 5:03pm UTC](https://discuss.elastic.co/t/can-i-do-an-or-logic-filter/257395 "2020-12-02T17:03:49Z")
I'm trying to build an OR logic facet (aggregation). From what I understand the best way to filter a query for an aggregation value is to use the filter clause. That is because a filter limits the results without having … --- ## [Zeek module - other logs](https://discuss.elastic.co/t/zeek-module-other-logs/187669)
**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\ **Replies:** 0\ **Last updated:** [June 26, 2019, 8:01pm UTC](https://discuss.elastic.co/t/zeek-module-other-logs/187669 "2019-06-26T20:01:29Z")
hi, i'm using filebeat with the zeek module to transfer logs to logstash then on to ES. as of now it looks like the zeek module only handles about 5 of the zeek logs (the common ones: conn, dns, http, files, ssl, notic… --- ## [What is the behaviour if loadbalance=false is not configured](https://discuss.elastic.co/t/what-is-the-behaviour-if-loadbalance-false-is-not-configured/128175)
**Author:** [@swethamahesh](https://discuss.elastic.co/u/swethamahesh)\ **Replies:** 0\ **Last updated:** [April 16, 2018, 11:19am UTC](https://discuss.elastic.co/t/what-is-the-behaviour-if-loadbalance-false-is-not-configured/128175 "2018-04-16T11:19:38Z")
Hi, we have not configured load balance as false in filebeat.yml as the default value for this is false. But we have configured two hosts in filebeat.yml. observation: the logs are distributed on both the nodes and w… --- ## [Heartbeat HTTP pings fails with 403](https://discuss.elastic.co/t/heartbeat-http-pings-fails-with-403/298289)
**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\ **Replies:** 1\ **Last updated:** [February 28, 2022, 4:32pm UTC](https://discuss.elastic.co/t/heartbeat-http-pings-fails-with-403/298289 "2022-02-28T16:32:05Z")
Hi Team, Strange heartbeat is failing with 403 response but we are getting valid 200 responses via CURL & Browser . Below is the configuration used for setting up the heartbeat any advice here will be helpful. I have … --- ## [How to switch between languages without changes in kibana.yml file?](https://discuss.elastic.co/t/how-to-switch-between-languages-without-changes-in-kibana-yml-file/265099)
**Author:** [@WhatsIsKibana](https://discuss.elastic.co/u/WhatsIsKibana)\ **Replies:** 1\ **Last updated:** [February 22, 2021, 10:34pm UTC](https://discuss.elastic.co/t/how-to-switch-between-languages-without-changes-in-kibana-yml-file/265099 "2021-02-22T22:34:29Z")
Hi, Is it possible to switch between languages in kibana on the fly? At this moment I need to change option i18n.locale in kibana.yml file and restart kibana every time when I want to change language, but it would be mu… --- ## [Terms aggregation on a nested field for calculating stats based on a parent-field](https://discuss.elastic.co/t/terms-aggregation-on-a-nested-field-for-calculating-stats-based-on-a-parent-field/237932)
**Author:** [@Andy1990](https://discuss.elastic.co/u/Andy1990)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 10:01am UTC](https://discuss.elastic.co/t/terms-aggregation-on-a-nested-field-for-calculating-stats-based-on-a-parent-field/237932 "2020-06-22T10:01:58Z")
Hello, in my use case i have documents with a client and a price. The client is a nested object (containing id, and acronym), the price is on the first json level of my source). I would like to calculate metric values (… --- ## [Logstash unable to run conf file in background?](https://discuss.elastic.co/t/logstash-unable-to-run-conf-file-in-background/222633)
**Author:** [@kopilim96](https://discuss.elastic.co/u/kopilim96)\ **Replies:** 7\ **Last updated:** [March 10, 2020, 2:11am UTC](https://discuss.elastic.co/t/logstash-unable-to-run-conf-file-in-background/222633 "2020-03-10T02:11:39Z")
Hi there, how can I run the logstash .conf file in background ? I am using Centos 6.9 and I installed logstash with rpm package. file: /etc/logstash/logstash.yml pipeline.id: logstash\_for\_nagios path.config: "/etc/log… --- ## [Error while configuring multiple JDBC inputs with unique sql\_last\_value in docker-compose](https://discuss.elastic.co/t/error-while-configuring-multiple-jdbc-inputs-with-unique-sql-last-value-in-docker-compose/205227)
**Author:** [@rasmus](https://discuss.elastic.co/u/rasmus)\ **Replies:** 1\ **Last updated:** [October 25, 2019, 10:44am UTC](https://discuss.elastic.co/t/error-while-configuring-multiple-jdbc-inputs-with-unique-sql-last-value-in-docker-compose/205227 "2019-10-25T10:44:07Z")
I am trying to set up multiple JDBC pipelines to be able to use multiple SQL-statements. In these pipelines I want to use unique sql\_last\_value's. I am using docker-compose and have volumed the files correctly (I think).… --- ## [Cannot connect to elasticsearch from hive using Aws instance and Docker Container](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-from-hive-using-aws-instance-and-docker-container/165645)
**Author:** [@sanjayap](https://discuss.elastic.co/u/sanjayap)\ **Replies:** 1\ **Last updated:** [February 11, 2019, 9:40pm UTC](https://discuss.elastic.co/t/cannot-connect-to-elasticsearch-from-hive-using-aws-instance-and-docker-container/165645 "2019-02-11T21:40:19Z")
Hi, I am running 2 different docker containers on AWS instance. One for HDP sandbox and other for elasticsearch. Both the containers are up and running on the respective port (i.e., HDP on 8080 and elasticsearch on 9400… --- ## [Handle Blank data in CSV - Ingest By Using Logstash](https://discuss.elastic.co/t/handle-blank-data-in-csv-ingest-by-using-logstash/131867)
**Author:** [@nandan\_bigdata](https://discuss.elastic.co/u/nandan_bigdata)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 1:50pm UTC](https://discuss.elastic.co/t/handle-blank-data-in-csv-ingest-by-using-logstash/131867 "2018-05-15T13:50:07Z")
Hi, I have CSV file as below col1,col2,col3,col4 A,B,C,D ,,E,F ,G,H ,,,I J,K,,, More then 10 milion records, I am using below config code as :- input { file { path =\> "/home/nandan/data/data.csv" start\_p… --- ## [Aggregation query works, but not in Kibana visualization](https://discuss.elastic.co/t/aggregation-query-works-but-not-in-kibana-visualization/97019)
**Author:** [@nsur1](https://discuss.elastic.co/u/nsur1)\ **Replies:** 1\ **Last updated:** [August 14, 2017, 8:59pm UTC](https://discuss.elastic.co/t/aggregation-query-works-but-not-in-kibana-visualization/97019 "2017-08-14T20:59:00Z")
My elasticsearch records store source and destination AS numbers. I wanted to visualize the top 10 source -\> destination AS numbers. I wanted to know if this was possible to accomplish without having to store another fie… --- ## [RestController send response w/o closing channel if keep alive](https://discuss.elastic.co/t/restcontroller-send-response-w-o-closing-channel-if-keep-alive/84081)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 1\ **Last updated:** [April 29, 2017, 12:48pm UTC](https://discuss.elastic.co/t/restcontroller-send-response-w-o-closing-channel-if-keep-alive/84081 "2017-04-29T12:48:36Z")
Hello, My plugin needs to return a 401 HTTP response code at times. So what I do today is using the channel and send a response: https://github.com/sscarduzio/elasticsearch-readonlyrest-plugin/blob/master/src/main/jav… --- ## [Storing booleans as '0' and '1'](https://discuss.elastic.co/t/storing-booleans-as-0-and-1/63181)
**Author:** [@paul2](https://discuss.elastic.co/u/paul2)\ **Replies:** 1\ **Last updated:** [October 17, 2016, 5:02pm UTC](https://discuss.elastic.co/t/storing-booleans-as-0-and-1/63181 "2016-10-17T17:02:52Z")
Hi, I want to store booleans as '1's and '0's. Is this possible? I've tried storing them as strings but elasticsearch infered they were boolean value. Thanks --- ## [Logstash Log File is Filling Up Disk](https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760)
**Author:** [@Rohit\_Singh](https://discuss.elastic.co/u/Rohit_Singh)\ **Replies:** 1\ **Last updated:** [July 19, 2016, 3:20pm UTC](https://discuss.elastic.co/t/logstash-log-file-is-filling-up-disk/55760 "2016-07-19T15:20:30Z")
Hi, we are using logstash, to forward the logs of docker container with the help of filebeat. However, after 4 days of running the node's disk becomes full which is running logstash container. On debugging found out that… --- ## [Definitive guide for tuning using Marvel?](https://discuss.elastic.co/t/definitive-guide-for-tuning-using-marvel/52346)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 1\ **Last updated:** [June 16, 2016, 7:25pm UTC](https://discuss.elastic.co/t/definitive-guide-for-tuning-using-marvel/52346 "2016-06-16T19:25:08Z")
Is there a definitive guide available for tuning elasticsearch using Marvel ? I have a 6 node cluster with 5 billion docs running over 2 VMs on VMWares vCloud environment. A simple aggregation is taking ~40 seconds -… --- ## [Unable to store index into S3](https://discuss.elastic.co/t/unable-to-store-index-into-s3/52687)
**Author:** [@Kishore](https://discuss.elastic.co/u/Kishore)\ **Replies:** 1\ **Last updated:** [June 14, 2016, 7:05am UTC](https://discuss.elastic.co/t/unable-to-store-index-into-s3/52687 "2016-06-14T07:05:15Z")
While taking back up of .kibana index to S3 bucket getting below error, kindly help. curl -XPUT '1.1.1.1:9200/\_snapshot/siemdefaultrepo/kibana\_14june2016?wait\_for\_completion=true&pretty' -d '{"indices":".kibana","part… --- ## [How to replace %5C with backslash](https://discuss.elastic.co/t/how-to-replace-5c-with-backslash/51866)
**Author:** [@eprst](https://discuss.elastic.co/u/eprst)\ **Replies:** 1\ **Last updated:** [June 8, 2016, 5:52am UTC](https://discuss.elastic.co/t/how-to-replace-5c-with-backslash/51866 "2016-06-08T05:52:14Z")
i need to replace %5C in field some fields with backslash, the problem is that i can't do it with mutate gsub. i've tried replacement string : '\\','\\\\','\\\\\\','\\\\\\\\','\\\\\\\\\\' nothing is working. is there any solution for … --- ## [Remote TransportClient with Transport profile : GRAVE: NoNodeAvailableException](https://discuss.elastic.co/t/remote-transportclient-with-transport-profile-grave-nonodeavailableexception/45428)
**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\ **Replies:** 1\ **Last updated:** [March 29, 2016, 3:04pm UTC](https://discuss.elastic.co/t/remote-transportclient-with-transport-profile-grave-nonodeavailableexception/45428 "2016-03-29T15:04:28Z")
Hi, I have a test serveur with several IP : an internal and a VPN Elasticsearch used to run on the VPN one while we were in development, but now I have to secure it for the production env. After testing lot of co… --- ## [ES takes too much time to index data](https://discuss.elastic.co/t/es-takes-too-much-time-to-index-data/8593)
**Author:** [@ian](https://discuss.elastic.co/u/ian)\ **Replies:** 7\ **Last updated:** [August 9, 2012, 8:44am UTC](https://discuss.elastic.co/t/es-takes-too-much-time-to-index-data/8593 "2012-08-09T08:44:57Z")
Hi I am using java API to index data and my ES version is 0.19.8 .It worked fine and about 155000 data got indexed . After that ES taking too much time to index the data . Code is in following link . https://gis… --- ## [How to check monitoring logs of kibana](https://discuss.elastic.co/t/how-to-check-monitoring-logs-of-kibana/261388)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 3\ **Last updated:** [January 19, 2021, 4:11am UTC](https://discuss.elastic.co/t/how-to-check-monitoring-logs-of-kibana/261388 "2021-01-19T04:11:29Z")
Hi, I have a cluster of 3 master + data nodes and 1 kibana of 7.10.0v. I have enabled SSL and monitoring of the cluster. Now my requirement is:- When I go to stack monitoring page -\> overview of kibana I want to see… --- ## [How to handle "cannot parse empty date"?](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749)
**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\ **Replies:** 0\ **Last updated:** [August 20, 2020, 10:43am UTC](https://discuss.elastic.co/t/how-to-handle-cannot-parse-empty-date/245749 "2020-08-20T10:43:33Z")
Hi all, I had a field that provides date information in String format. I converted it to Date type format using mappings as shown in the below mapping sample. Ex: "stats" : { "properties" : { … --- ## [Logstash should point to Master or Slave?](https://discuss.elastic.co/t/logstash-should-point-to-master-or-slave/153522)
**Author:** [@jibsonline](https://discuss.elastic.co/u/jibsonline)\ **Replies:** 3\ **Last updated:** [October 23, 2018, 8:32am UTC](https://discuss.elastic.co/t/logstash-should-point-to-master-or-slave/153522 "2018-10-23T08:32:27Z")
ES:6.3.2 Below is my Master Conf bootstrap.memory\_lock: true cluster.name: pm\_production\_elasticsearch discovery.zen.minimum\_master\_nodes: 2 http.port: 9200 network.host: 0.0.0.0 node.data: false node.master: tru… --- ## [ElasticSearch Rest High Level Client - Mustache Template Call API Support](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-mustache-template-call-api-support/142810)
**Author:** [@aperavali0326](https://discuss.elastic.co/u/aperavali0326)\ **Replies:** 3\ **Last updated:** [August 3, 2018, 5:04pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-mustache-template-call-api-support/142810 "2018-08-03T17:04:11Z")
Hello , I am trying to test Elasticsearch Rest Highlevel client 6.4 an the official build is not available in maven I have tried to build locally and I get errors like FAILURE: Build failed with an exception. Wher… --- ## [Planning for POC for Security Analytics with Elastic Stack](https://discuss.elastic.co/t/planning-for-poc-for-security-analytics-with-elastic-stack/116855)
**Author:** [@amiyadutta](https://discuss.elastic.co/u/amiyadutta)\ **Replies:** 3\ **Last updated:** [February 3, 2018, 3:34am UTC](https://discuss.elastic.co/t/planning-for-poc-for-security-analytics-with-elastic-stack/116855 "2018-02-03T03:34:18Z")
Hey Folks, I am new with Elastic Stack. We want to do a POC for Security Alalytics with Elastic Stack for our organization. Is there any reference plan or document which will help start with this? --- ## [ELK+FileBeat](https://discuss.elastic.co/t/elk-filebeat/109873)
**Author:** [@vijaygn1990](https://discuss.elastic.co/u/vijaygn1990)\ **Replies:** 3\ **Last updated:** [December 1, 2017, 9:50am UTC](https://discuss.elastic.co/t/elk-filebeat/109873 "2017-12-01T09:50:25Z")
I have been trying to set a ELK stack with file beat installed on all my cluster. Here my config is I am using my PC(host1) as ELK server with file beat agent installed to monitor logs. I have other PC which has install… --- ## [Can I save changes to Kibana source as a plugin?](https://discuss.elastic.co/t/can-i-save-changes-to-kibana-source-as-a-plugin/53680)
**Author:** [@jai.srivastav](https://discuss.elastic.co/u/jai.srivastav)\ **Replies:** 3\ **Last updated:** [June 22, 2016, 5:59pm UTC](https://discuss.elastic.co/t/can-i-save-changes-to-kibana-source-as-a-plugin/53680 "2016-06-22T17:59:22Z")
I've been modifying the Kibana source slightly to add some functionality. I am pretty satisfied with how the modified source is behaving and would like to install my changes on other computers without a patch. Kibana h… --- ## [Search on fields one by one](https://discuss.elastic.co/t/search-on-fields-one-by-one/51781)
**Author:** [@taruntyagi94](https://discuss.elastic.co/u/taruntyagi94)\ **Replies:** 3\ **Last updated:** [June 3, 2016, 11:22am UTC](https://discuss.elastic.co/t/search-on-fields-one-by-one/51781 "2016-06-03T11:22:41Z")
Hello , I am using elastic search in my project .I want to search on fields one by one. means if i want to search fortis hospital then search in first field than search in second field and so on. then i need output lik… --- ## [Reducing heap size with ES 2.1](https://discuss.elastic.co/t/reducing-heap-size-with-es-2-1/48474)
**Author:** [@dvl](https://discuss.elastic.co/u/dvl)\ **Replies:** 3\ **Last updated:** [April 27, 2016, 2:51am UTC](https://discuss.elastic.co/t/reducing-heap-size-with-es-2-1/48474 "2016-04-27T02:51:43Z")
What size heap are you using? We are using Elasticsearch 2.1 after recently upgrading from 1.7. We are using 128GB heaps because we used to get Java out-of-memory errors. Now what we're on 2.1, we are trying to resol… --- ## [An ElasticSearch group on Linkedin](https://discuss.elastic.co/t/an-elasticsearch-group-on-linkedin/3319)
**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\ **Replies:** 3\ **Last updated:** [September 13, 2010, 9:54pm UTC](https://discuss.elastic.co/t/an-elasticsearch-group-on-linkedin/3319 "2010-09-13T21:54:36Z")
Hi, I created an elasticsearch group on linkedin: http://www.linkedin.com/groups?mostPopular=&gid=3393294. You can also follow the open source company elasticsearch here: http://www.linkedin.com/companies/elastic… --- ## [Correct way to only include specific sharepoint sites in Workpspace search](https://discuss.elastic.co/t/correct-way-to-only-include-specific-sharepoint-sites-in-workpspace-search/298335)
**Author:** [@Robin\_Vanderschueren](https://discuss.elastic.co/u/Robin_Vanderschueren)\ **Replies:** 5\ **Last updated:** [March 2, 2022, 9:00pm UTC](https://discuss.elastic.co/t/correct-way-to-only-include-specific-sharepoint-sites-in-workpspace-search/298335 "2022-03-02T21:00:29Z")
I've configured the workspace search following this guide: Customize indexing for a content source | Workplace Search Guide \[8.4\] | Elastic This resulted for me in the following rule: "default\_action": "include… --- ## [Should I move ES to Docker?](https://discuss.elastic.co/t/should-i-move-es-to-docker/109110)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 5\ **Last updated:** [November 25, 2017, 8:58pm UTC](https://discuss.elastic.co/t/should-i-move-es-to-docker/109110 "2017-11-25T20:58:39Z")
I have ES 5.3 and Logstash 5.3 installed on a Centos 7 VM. Lately I've started using Docker for more projects and starting to like it. I need to move ES off of the current host machine onto another so I can use it for an… --- ## [Unable to create snapshots](https://discuss.elastic.co/t/unable-to-create-snapshots/82601)
**Author:** [@jzhang](https://discuss.elastic.co/u/jzhang)\ **Replies:** 5\ **Last updated:** [April 20, 2017, 10:13am UTC](https://discuss.elastic.co/t/unable-to-create-snapshots/82601 "2017-04-20T10:13:43Z")
My cluster is on elasticsearch 2.3, with 3 data nodes and 2 none data nodes, on the data nodes, I setup the NFS mount and added the data.repo to the elasticsearch.yml file. when I issue PUT /\_snapshot/my\_backup { … --- ## [Info on Logstash 2.3.4 and Elasticsearch 2.1.0 compatibility](https://discuss.elastic.co/t/info-on-logstash-2-3-4-and-elasticsearch-2-1-0-compatibility/58649)
**Author:** [@sharath3185](https://discuss.elastic.co/u/sharath3185)\ **Replies:** 5\ **Last updated:** [August 23, 2016, 7:48am UTC](https://discuss.elastic.co/t/info-on-logstash-2-3-4-and-elasticsearch-2-1-0-compatibility/58649 "2016-08-23T07:48:12Z")
I am working with logstash 2.3.4 and elasticsearch 2.1.0 versions for my project where I am doing some performance testing for indexing the data into elasticsearch through logstash. I am working on a search feature on … --- ## [Haystack EU is back! Berlin Oct 28th](https://discuss.elastic.co/t/haystack-eu-is-back-berlin-oct-28th/189520)
**Author:** [@Charlie\_Hull](https://discuss.elastic.co/u/Charlie_Hull)\ **Replies:** 1\ **Last updated:** [July 31, 2019, 10:08am UTC](https://discuss.elastic.co/t/haystack-eu-is-back-berlin-oct-28th/189520 "2019-07-31T10:08:40Z")
Hi all, Haystack, the Search Relevance Conference is back in Europe this autumn - we're coming to Berlin on October 28th (with some of our Think Like A Relevance Engineer training following on the 29th-30th). Tickets ar… --- ## [Error: failed to publish events: temporary bulk send failure](https://discuss.elastic.co/t/error-failed-to-publish-events-temporary-bulk-send-failure/299270)
**Author:** [@samettozbay](https://discuss.elastic.co/u/samettozbay)\ **Replies:** 4\ **Last updated:** [March 16, 2022, 9:00am UTC](https://discuss.elastic.co/t/error-failed-to-publish-events-temporary-bulk-send-failure/299270 "2022-03-16T09:00:39Z")
I have issue about sending logs with filebeat. I have checked all the topics related this issue but i couldn't figure out it yet . I have Elasticsearch v 7.10.2 and i am using filebeat 7.10.0. I created my pipeline as… --- ## [Using Numeral.js in Vega graphs to format numbers](https://discuss.elastic.co/t/using-numeral-js-in-vega-graphs-to-format-numbers/269537)
**Author:** [@walrusVision](https://discuss.elastic.co/u/walrusVision)\ **Replies:** 4\ **Last updated:** [April 8, 2021, 9:30pm UTC](https://discuss.elastic.co/t/using-numeral-js-in-vega-graphs-to-format-numbers/269537 "2021-04-08T21:30:25Z")
I was wondering if its possible to use Numeral.js in custom vega graphs to format results into human readable values, and if so, how to do it. In my use case I want to format bytes to a number with the best prefix as per… --- ## [Unable to start ElasticSearch after install on CENTOS 8](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650)
**Author:** [@Shariq\_Tejar](https://discuss.elastic.co/u/Shariq_Tejar)\ **Replies:** 4\ **Last updated:** [January 11, 2021, 8:23pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-after-install-on-centos-8/259650 "2021-01-11T20:23:36Z")
elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sat 2020-12-26 01:45:20 PKT; 10s ago … [Previous page](https://discuss.elastic.co/top.md?page=1546&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1548&per_page=50&period=all)