# Top

**URL:** https://discuss.elastic.co/top.md?page=1560&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1561

---

## [How vector based text similarity works under the hood?](https://discuss.elastic.co/t/how-vector-based-text-similarity-works-under-the-hood/237498)

<div class="topic-metadata">

**Author:** [@yash\_budukh](https://discuss.elastic.co/u/yash_budukh)\
**Replies:** 3\
**Last updated:** [June 17, 2020, 7:35pm UTC](https://discuss.elastic.co/t/how-vector-based-text-similarity-works-under-the-hood/237498 "2020-06-17T19:35:32Z")

</div>

This blog says that we’ve provided a match\_all query, which means the script will be run over all documents in the index. This is a current limitation of vector similarity in Elasticsearch — vectors can be used for scor…

---

## [Clarification on using date ranges for URI searches](https://discuss.elastic.co/t/clarification-on-using-date-ranges-for-uri-searches/190815)

<div class="topic-metadata">

**Author:** [@Jason\_Baumgartner](https://discuss.elastic.co/u/Jason_Baumgartner)\
**Replies:** 3\
**Last updated:** [July 16, 2019, 9:20pm UTC](https://discuss.elastic.co/t/clarification-on-using-date-ranges-for-uri-searches/190815 "2019-07-16T21:20:33Z")

</div>

I am currently experimenting with using a Raspberry Pi 4 to ingest Reddit data in real-time. It is working very well, but I'm having a hard time finding concise documentation on how to use date ranges for a URI search. F…

---

## [Multiple matches in Grok filter](https://discuss.elastic.co/t/multiple-matches-in-grok-filter/182667)

<div class="topic-metadata">

**Author:** [@f4fe5bb60e3686943680](https://discuss.elastic.co/u/f4fe5bb60e3686943680)\
**Replies:** 3\
**Last updated:** [May 28, 2019, 7:08am UTC](https://discuss.elastic.co/t/multiple-matches-in-grok-filter/182667 "2019-05-28T07:08:34Z")

</div>

Hello! I trying to parse search requests to one of my elastic database and i don\`t know what to do when a two- or more-word search come. Config: input { beats { port =\> 5044 } } filter { if "bulk" in \[url\]\[path\]…

---

## [How to move ruby code from logstash.conf into ingest pipeline?](https://discuss.elastic.co/t/how-to-move-ruby-code-from-logstash-conf-into-ingest-pipeline/167690)

<div class="topic-metadata">

**Author:** [@apaulsen](https://discuss.elastic.co/u/apaulsen)\
**Replies:** 3\
**Last updated:** [February 11, 2019, 11:56am UTC](https://discuss.elastic.co/t/how-to-move-ruby-code-from-logstash-conf-into-ingest-pipeline/167690 "2019-02-11T11:56:51Z")

</div>

I've a logstash configuration file which contains ruby code. How can I script the ruby part of the logstash filter in ingest pipeline? It's a server with filebeat. All part except the ruby code I "moved" into the inge…

---

## [Logstash grok extract error messages from nifi logs](https://discuss.elastic.co/t/logstash-grok-extract-error-messages-from-nifi-logs/142251)

<div class="topic-metadata">

**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\
**Replies:** 3\
**Last updated:** [July 31, 2018, 2:59pm UTC](https://discuss.elastic.co/t/logstash-grok-extract-error-messages-from-nifi-logs/142251 "2018-07-31T14:59:36Z")

</div>

How do I extract error messages from nifi logs? log 1: 2018-07-30 18:43:32,656 ERROR \[Timer-Driven Process Thread-8\] o.a.n.p.a.storage.ListAzureBlobStorage ListAzureBlobStorage\[id=1c111111-0164-1000-ca9e-6d37fd307870\] …

---

## [Расчет системных требований](https://discuss.elastic.co/t/topic/130968)

<div class="topic-metadata">

**Author:** [@voffko](https://discuss.elastic.co/u/voffko)\
**Replies:** 3\
**Last updated:** [May 10, 2018, 1:57pm UTC](https://discuss.elastic.co/t/topic/130968 "2018-05-10T13:57:34Z")

</div>

Коллеги, привет! Подскажите пожалуйста, есть ли какие-нибудь методы расчета (хотя бы приблизительного) потребления ресурсов? К примеру, как мне понять, что в работе ElasticSearch и Logstash начинаются задержки?

---

## [Elasticsearch query to compute boolean conditions](https://discuss.elastic.co/t/elasticsearch-query-to-compute-boolean-conditions/72285)

<div class="topic-metadata">

**Author:** [@siddharthgoel88](https://discuss.elastic.co/u/siddharthgoel88)\
**Replies:** 3\
**Last updated:** [January 22, 2017, 3:39pm UTC](https://discuss.elastic.co/t/elasticsearch-query-to-compute-boolean-conditions/72285 "2017-01-22T15:39:03Z")

</div>

We want to write an Elasticsearch search template something like following : { "query": { "filtered": { "filter": { "bool": { "must": \[ { "term": { …

---

## [How to save JSON output in seperate index](https://discuss.elastic.co/t/how-to-save-json-output-in-seperate-index/37831)

<div class="topic-metadata">

**Author:** [@nivetha](https://discuss.elastic.co/u/nivetha)\
**Replies:** 3\
**Last updated:** [December 28, 2015, 7:53pm UTC](https://discuss.elastic.co/t/how-to-save-json-output-in-seperate-index/37831 "2015-12-28T19:53:41Z")

</div>

I have wriiten JSON query.. how do I save this output to a new index?? myquery: GET /pps\_trans/\_search? { "query": { "filtered": { "query": { "bool": { "must\_not": \[ {"ter…

---

## [ES 1.3.4: sometimes plugins return empty page](https://discuss.elastic.co/t/es-1-3-4-sometimes-plugins-return-empty-page/20416)

<div class="topic-metadata">

**Author:** [@msbreuer](https://discuss.elastic.co/u/msbreuer)\
**Replies:** 3\
**Last updated:** [November 1, 2014, 4:38am UTC](https://discuss.elastic.co/t/es-1-3-4-sometimes-plugins-return-empty-page/20416 "2014-11-01T04:38:27Z")

</div>

Some days ago I updated my 2-node ES Cluster to 1.3.4. Since the update the installed plugins sometimes are not applicable and for http://localhost:9200/\_plugin/head returns an empty page. This effect is seen very…

---

## [Base64 strings and range](https://discuss.elastic.co/t/base64-strings-and-range/15229)

<div class="topic-metadata">

**Author:** [@dunaeth](https://discuss.elastic.co/u/dunaeth)\
**Replies:** 3\
**Last updated:** [January 14, 2014, 9:40pm UTC](https://discuss.elastic.co/t/base64-strings-and-range/15229 "2014-01-14T21:40:53Z")

</div>

Hi, Would there be any way to analyze base64 string fields so that one can execute range queries on them. I want to store IPs (v4 and v6) as base64 encoded strings and be able to retrieve those within a given rang…

---

## [UDP input queue monitoring](https://discuss.elastic.co/t/udp-input-queue-monitoring/93926)

<div class="topic-metadata">

**Author:** [@Mr.Flakes](https://discuss.elastic.co/u/Mr.Flakes)\
**Replies:** 2\
**Last updated:** [July 20, 2017, 12:38pm UTC](https://discuss.elastic.co/t/udp-input-queue-monitoring/93926 "2017-07-20T12:38:03Z")

</div>

Hello guys, I was wondering if anyone knows how to monitor UDP input plugin queue? My config is: input { udp { codec =\> elog { elog\_definitions =\> "XXX" } port =\> XXX que…

---

## [Ingesting nanoseconds into elasticsearch](https://discuss.elastic.co/t/ingesting-nanoseconds-into-elasticsearch/202159)

<div class="topic-metadata">

**Author:** [@st3inbeiss](https://discuss.elastic.co/u/st3inbeiss)\
**Replies:** 1\
**Last updated:** [October 29, 2019, 2:40pm UTC](https://discuss.elastic.co/t/ingesting-nanoseconds-into-elasticsearch/202159 "2019-10-29T14:40:24Z")

</div>

I'm trying to get a long of nanoseconds since Unix Epoch through logstash into a date\_nanos field in elasticsearch. Since elasticsearch has this datatype, I assumed logstash does have it aswell. However, the date-filter…

---

## [Winlogbeat SSL connection to ES\\Kibana](https://discuss.elastic.co/t/winlogbeat-ssl-connection-to-es-kibana/316645)

<div class="topic-metadata">

**Author:** [@EExisT](https://discuss.elastic.co/u/EExisT)\
**Replies:** 4\
**Last updated:** [October 18, 2022, 3:27pm UTC](https://discuss.elastic.co/t/winlogbeat-ssl-connection-to-es-kibana/316645 "2022-10-18T15:27:38Z")

</div>

Hello, i have an Ubuntu VM where I run ES and Kibana and a Windows VM where i want to run Winlogbeat. The idea is to send windows events to ES and visualise it with Kibana. Kibana is reachable by browser from both VMs…

---

## [Subfield query not returning any data](https://discuss.elastic.co/t/subfield-query-not-returning-any-data/311561)

<div class="topic-metadata">

**Author:** [@Baerswords](https://discuss.elastic.co/u/Baerswords)\
**Replies:** 4\
**Last updated:** [August 5, 2022, 6:44pm UTC](https://discuss.elastic.co/t/subfield-query-not-returning-any-data/311561 "2022-08-05T18:44:21Z")

</div>

New to Elasticsearch, so please bear with me if this is a simple question that I should know. I have an index with fairly simple documents. When I try to query against anything in AppDataDict, though, I don't ever get …

---

## [KQL bar limitation](https://discuss.elastic.co/t/kql-bar-limitation/292184)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 4\
**Last updated:** [December 20, 2021, 3:33pm UTC](https://discuss.elastic.co/t/kql-bar-limitation/292184 "2021-12-20T15:33:00Z")

</div>

Hi, what is the maximum number of values I can use to match in KQL query? I have index which contains milions of rows of names and many columns related to them and I want to filter out lets say 50 names, but to click a…

---

## [Docker swarm deployment: master\_not\_discovered\_exception](https://discuss.elastic.co/t/docker-swarm-deployment-master-not-discovered-exception/290348)

<div class="topic-metadata">

**Author:** [@AlanSBN](https://discuss.elastic.co/u/AlanSBN)\
**Replies:** 4\
**Last updated:** [November 28, 2021, 7:24pm UTC](https://discuss.elastic.co/t/docker-swarm-deployment-master-not-discovered-exception/290348 "2021-11-28T19:24:14Z")

</div>

I am basing my deployment off of the docker-compose.yml file found here. My modified yml file is pasted below. The docker swarm gets all three services running (only one replicated container per service) but the logs …

---

## [Kibana Query DSL Sorting and size does not work](https://discuss.elastic.co/t/kibana-query-dsl-sorting-and-size-does-not-work/263078)

<div class="topic-metadata">

**Author:** [@Sudarshan\_Reddy](https://discuss.elastic.co/u/Sudarshan_Reddy)\
**Replies:** 4\
**Last updated:** [February 8, 2021, 7:14am UTC](https://discuss.elastic.co/t/kibana-query-dsl-sorting-and-size-does-not-work/263078 "2021-02-08T07:14:27Z")

</div>

Hi , how to make sorting works in kibana Query DSL . i am using the following script.

---

## [How to modify date/time in timelion canvas workpad?](https://discuss.elastic.co/t/how-to-modify-date-time-in-timelion-canvas-workpad/251975)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 4\
**Last updated:** [October 15, 2020, 10:04pm UTC](https://discuss.elastic.co/t/how-to-modify-date-time-in-timelion-canvas-workpad/251975 "2020-10-15T22:04:59Z")

</div>

Hello Due to a bug in canvas workpads, date/time are showing in UTC. There is a workaround for ESQL. More details - https://discuss.elastic.co/t/wrong-canvas-timezone/190221 Is there a workaround for timelion visuali…

---

## [Proper APM setup](https://discuss.elastic.co/t/proper-apm-setup/184380)

<div class="topic-metadata">

**Author:** [@AdamBoi](https://discuss.elastic.co/u/AdamBoi)\
**Replies:** 4\
**Last updated:** [June 7, 2019, 6:59am UTC](https://discuss.elastic.co/t/proper-apm-setup/184380 "2019-06-07T06:59:22Z")

</div>

Kibana version: 7.1.0 Elasticsearch version: 7.1.0 APM Server version: 7.1.0 APM Agent language and version: ruby, ~\> 2.8 Original install method (e.g. download page, yum, deb, from source, etc.) and version: all se…

---

## [Индексация с использованием Hunspell работает медленно](https://discuss.elastic.co/t/hunspell/182188)

<div class="topic-metadata">

**Author:** [@Surovyi](https://discuss.elastic.co/u/Surovyi)\
**Replies:** 4\
**Last updated:** [May 23, 2019, 2:47pm UTC](https://discuss.elastic.co/t/hunspell/182188 "2019-05-23T14:47:30Z")

</div>

Добрый день. Мы хотим начать использовать ElasticSearch для поиска на нашем сайте. Сейчас используется Sphinx. Но сразу столкнулись с проблемой, при поиске слова "лосось", выводится: "лосьон" "лось" "лос" Мы попро…

---

## [Painless Scripted Field](https://discuss.elastic.co/t/painless-scripted-field/100052)

<div class="topic-metadata">

**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\
**Replies:** 4\
**Last updated:** [September 12, 2017, 3:13pm UTC](https://discuss.elastic.co/t/painless-scripted-field/100052 "2017-09-12T15:13:43Z")

</div>

Hello, I can't make it work my scripted painless field. Here some lines example : xxx|code\_z|octets|xxx|xxx X|11|500|X|X X|12|40|X|X X|13|5|X|X X|14,4|240|X|X 11,12,13,14 =\> Same zone but she has différents c…

---

## [Lowercase hashtag twitter field](https://discuss.elastic.co/t/lowercase-hashtag-twitter-field/98290)

<div class="topic-metadata">

**Author:** [@Singa\_Forever](https://discuss.elastic.co/u/Singa_Forever)\
**Replies:** 4\
**Last updated:** [August 25, 2017, 1:28pm UTC](https://discuss.elastic.co/t/lowercase-hashtag-twitter-field/98290 "2017-08-25T13:28:38Z")

</div>

Hello, I'm collecting tweets from twitter using ELK 5.X, In order to handle my application, I need to : 1- Convert all collected twitter hashtags to lowercase : I used mutate in logstash file filter{ mutate { …

---

## [Extracting JSON and Parsing it](https://discuss.elastic.co/t/extracting-json-and-parsing-it/85536)

<div class="topic-metadata">

**Author:** [@Vedran\_Maricevic](https://discuss.elastic.co/u/Vedran_Maricevic)\
**Replies:** 4\
**Last updated:** [May 12, 2017, 1:13pm UTC](https://discuss.elastic.co/t/extracting-json-and-parsing-it/85536 "2017-05-12T13:13:08Z")

</div>

I have a JSON log that comes to Logstash. It looks like this: \[{"orderNumber":"xxxxxxxx","externalOrderNumber":"07efc4c7d3113453427f7fe525e22a61e","operation":{"name":"CAPTURE","amount":990,"status":"PENDING","create…

---

## [Elasticsearch-oss:6.6.2 Java Security Manager enabled by default?](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364)

<div class="topic-metadata">

**Author:** [@tjemmettal](https://discuss.elastic.co/u/tjemmettal)\
**Replies:** 1\
**Last updated:** [December 20, 2021, 12:40am UTC](https://discuss.elastic.co/t/elasticsearch-oss-6-6-2-java-security-manager-enabled-by-default/292364 "2021-12-20T00:40:22Z")

</div>

Hello, I'm trying to verify that Java Security Manager is enabled by default in oss images, particularly in: docker.elastic.co/elasticsearch/elasticsearch-oss:6.6.2 and docker.elastic.co/elasticsearch/elasticsearch-oss…

---

## [Query to calculate login success and failure rates](https://discuss.elastic.co/t/query-to-calculate-login-success-and-failure-rates/270787)

<div class="topic-metadata">

**Author:** [@Venkatesh\_Sridharan](https://discuss.elastic.co/u/Venkatesh_Sridharan)\
**Replies:** 1\
**Last updated:** [April 26, 2021, 12:45pm UTC](https://discuss.elastic.co/t/query-to-calculate-login-success-and-failure-rates/270787 "2021-04-26T12:45:21Z")

</div>

Hello All, I have a list of login events on the index which has the following fields. ip\_address: \<text\> login\_success: \<bool\> Now I want to query the logs and get a count of number of success and failed logins from e…

---

## [Send only some fields of processor 'add\_host\_metadata'](https://discuss.elastic.co/t/send-only-some-fields-of-processor-add-host-metadata/227778)

<div class="topic-metadata">

**Author:** [@felixbarbeira](https://discuss.elastic.co/u/felixbarbeira)\
**Replies:** 1\
**Last updated:** [April 13, 2020, 5:27pm UTC](https://discuss.elastic.co/t/send-only-some-fields-of-processor-add-host-metadata/227778 "2020-04-13T17:27:05Z")

</div>

I'm using filebeat and I only need a couple of fields from the processor "add\_host\_metadata". The only way I found to send those events is the following: processors: - add\_host\_metadata: ~ And then on Elasticsearch i…

---

## [Tanuki java wrapper - standalone java application](https://discuss.elastic.co/t/tanuki-java-wrapper-standalone-java-application/186885)

<div class="topic-metadata">

**Author:** [@tmihaldinec](https://discuss.elastic.co/u/tmihaldinec)\
**Replies:** 1\
**Last updated:** [June 23, 2019, 5:29am UTC](https://discuss.elastic.co/t/tanuki-java-wrapper-standalone-java-application/186885 "2019-06-23T05:29:39Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 7.1.…

---

## [How to Force shutdown running Logstash in windows using command prompt](https://discuss.elastic.co/t/how-to-force-shutdown-running-logstash-in-windows-using-command-prompt/148648)

<div class="topic-metadata">

**Author:** [@gowt](https://discuss.elastic.co/u/gowt)\
**Replies:** 1\
**Last updated:** [September 14, 2018, 5:09pm UTC](https://discuss.elastic.co/t/how-to-force-shutdown-running-logstash-in-windows-using-command-prompt/148648 "2018-09-14T17:09:20Z")

</div>

Hi I am running logstash with '1' worker process to load data from sql to elastic using command line 'bin/logstash -f logstash.conf' on regular intervals. it is executing fin with no issues in positive scenarios. Somet…

---

## [Duplicating the documents](https://discuss.elastic.co/t/duplicating-the-documents/122874)

<div class="topic-metadata">

**Author:** [@sivap](https://discuss.elastic.co/u/sivap)\
**Replies:** 1\
**Last updated:** [March 7, 2018, 4:14pm UTC](https://discuss.elastic.co/t/duplicating-the-documents/122874 "2018-03-07T16:14:03Z")

</div>

Hi Team, we are trying to index logs from a file to elasticsearch using fluentd when we use logstash\_format : true in our fluent config file we are getting duplicate documents in elasticsearch(viewing from kibana) if …

---

## [Can I monitor SQL server ERRORLOG in ES without using Logstash?](https://discuss.elastic.co/t/can-i-monitor-sql-server-errorlog-in-es-without-using-logstash/100060)

<div class="topic-metadata">

**Author:** [@rkpotdar](https://discuss.elastic.co/u/rkpotdar)\
**Replies:** 1\
**Last updated:** [September 12, 2017, 3:04am UTC](https://discuss.elastic.co/t/can-i-monitor-sql-server-errorlog-in-es-without-using-logstash/100060 "2017-09-12T03:04:30Z")

</div>

In my setup, the SQL server resides on a Windows machine and it generates ERRORLOG which records for any errors occurring in SQL server. I'd like these logs to be pushed on to an Ubuntu machine (where I currently run ES …

---

## [Slack Configurations on Elastic Cloud](https://discuss.elastic.co/t/slack-configurations-on-elastic-cloud/90883)

<div class="topic-metadata">

**Author:** [@nileshgattani](https://discuss.elastic.co/u/nileshgattani)\
**Replies:** 1\
**Last updated:** [June 26, 2017, 11:34pm UTC](https://discuss.elastic.co/t/slack-configurations-on-elastic-cloud/90883 "2017-06-26T23:34:45Z")

</div>

Hi there, I was trying to hook up slack with watcher on our elastic cloud instance and have run into some issues. Here is how I updated elasticsearch.yml : xpack.notification.slack: account: monitoring: …

---

## [Recommended flow of logs from Docker containers to Elasticsearch](https://discuss.elastic.co/t/recommended-flow-of-logs-from-docker-containers-to-elasticsearch/67613)

<div class="topic-metadata">

**Author:** [@mchippo](https://discuss.elastic.co/u/mchippo)\
**Replies:** 1\
**Last updated:** [December 14, 2016, 11:44am UTC](https://discuss.elastic.co/t/recommended-flow-of-logs-from-docker-containers-to-elasticsearch/67613 "2016-12-14T11:44:35Z")

</div>

We are currently using GELF to transfer logs from docker containers to RabbitMQ via logstash. Messages are then read from RabbitMQ to Elasticsearch using another logstash instance. I am worried that logstash/GELF may d…

---

## [Topbeat configuration documentation](https://discuss.elastic.co/t/topbeat-configuration-documentation/53938)

<div class="topic-metadata">

**Author:** [@matanster](https://discuss.elastic.co/u/matanster)\
**Replies:** 1\
**Last updated:** [June 25, 2016, 9:03pm UTC](https://discuss.elastic.co/t/topbeat-configuration-documentation/53938 "2016-06-25T21:03:15Z")

</div>

Hi, I am trying to fathom whether topbeat (until deprecated by something from version 5 or otherwise), can monitor free disk space. The marketing page at https://www.elastic.co/products/beats/topbeat refers to a rather…

---

## [Groovy scripting security issue since 2.2.0](https://discuss.elastic.co/t/groovy-scripting-security-issue-since-2-2-0/42610)

<div class="topic-metadata">

**Author:** [@cwinkler](https://discuss.elastic.co/u/cwinkler)\
**Replies:** 1\
**Last updated:** [February 25, 2016, 3:18pm UTC](https://discuss.elastic.co/t/groovy-scripting-security-issue-since-2-2-0/42610 "2016-02-25T15:18:52Z")

</div>

Since Elastic version 2.2.0 my Groovy script that is using JsonSlurper no longer works due to permission checking. I found no way of getting it running except with disabling the new security policy checking with the de…

---

## [How to create a new ElasticsearchHttpClient class implementing org.elasticache.client.Client to enable ES applications to run against AWS Elasticsearch?](https://discuss.elastic.co/t/how-to-create-a-new-elasticsearchhttpclient-class-implementing-org-elasticache-client-client-to-enable-es-applications-to-run-against-aws-elasticsearch/39348)

<div class="topic-metadata">

**Author:** [@Ingo\_Jaeckel](https://discuss.elastic.co/u/Ingo_Jaeckel)\
**Replies:** 1\
**Last updated:** [January 19, 2016, 9:26pm UTC](https://discuss.elastic.co/t/how-to-create-a-new-elasticsearchhttpclient-class-implementing-org-elasticache-client-client-to-enable-es-applications-to-run-against-aws-elasticsearch/39348 "2016-01-19T21:26:27Z")

</div>

I am trying to add Elasticsearch HTTP access to the Titan ES client using JEST. titan-es only supports ES' local and transport (TCP) mode. But I would like to support communication over ES' HTTP interface. That would all…

---

## [Elasticsearch word frequency and relations](https://discuss.elastic.co/t/elasticsearch-word-frequency-and-relations/23519)

<div class="topic-metadata">

**Author:** [@redserpent7](https://discuss.elastic.co/u/redserpent7)\
**Replies:** 1\
**Last updated:** [May 4, 2015, 3:32am UTC](https://discuss.elastic.co/t/elasticsearch-word-frequency-and-relations/23519 "2015-05-04T03:32:47Z")

</div>

Hi, I am wondering if it is possible at all to get the top ten most frequent words in an Elasticsearch field across an entire index or alias. Here is what I'm trying to do: I am indexing text documents extract…

---

## [ODBC Driver for elasticsearch](https://discuss.elastic.co/t/odbc-driver-for-elasticsearch/351783)

<div class="topic-metadata">

**Author:** [@muhammad\_qassem](https://discuss.elastic.co/u/muhammad_qassem)\
**Replies:** 8\
**Last updated:** [January 29, 2024, 8:11am UTC](https://discuss.elastic.co/t/odbc-driver-for-elasticsearch/351783 "2024-01-29T08:11:57Z")

</div>

Hi, I am trying to configure the elastic odbc driver for Elasticsearch to then get data to power bi but when i test the connection for that it gives me error i dont know this error is related to what certificate or autho…

---

## [Detecting a DDoS attack](https://discuss.elastic.co/t/detecting-a-ddos-attack/302941)

<div class="topic-metadata">

**Author:** [@quim.gomez](https://discuss.elastic.co/u/quim.gomez)\
**Replies:** 0\
**Last updated:** [April 21, 2022, 3:49pm UTC](https://discuss.elastic.co/t/detecting-a-ddos-attack/302941 "2022-04-21T15:49:35Z")

</div>

Hello, Today I would like to ask about DDoS and ELK security. I replicated a (modest) DDoS attack on my systems, and I got the correspondent logs and views. In Packetbeat Flows Dashboard it can be seen the moment wher…

---

## [Update logstash to specific version](https://discuss.elastic.co/t/update-logstash-to-specific-version/274503)

<div class="topic-metadata">

**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Replies:** 0\
**Last updated:** [May 31, 2021, 12:43pm UTC](https://discuss.elastic.co/t/update-logstash-to-specific-version/274503 "2021-05-31T12:43:06Z")

</div>

Hello, I'm upgrading my stack from 7.9.3 to 7.12.1 using yum. For elasticsearch and filebeat I can update for the specific version without any problem using: yum install filebeat-7.12.1 yum install elasticsearch-7.12.…

---

## [Painless compile error using regex pattern](https://discuss.elastic.co/t/painless-compile-error-using-regex-pattern/264623)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Rabioglio](https://discuss.elastic.co/u/Rodrigo_Rabioglio)\
**Replies:** 2\
**Last updated:** [February 18, 2021, 6:00pm UTC](https://discuss.elastic.co/t/painless-compile-error-using-regex-pattern/264623 "2021-02-18T18:00:09Z")

</div>

Hello, I'm getting a compile error when using regex patterns inside a scripted field. I couldn't figure out why this error is happening though, since I'm pretty sure the script is right, based on the docs. Here is the …

---

## [SQL INTERVAL question](https://discuss.elastic.co/t/sql-interval-question/203485)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [October 14, 2019, 5:58pm UTC](https://discuss.elastic.co/t/sql-interval-question/203485 "2019-10-14T17:58:03Z")

</div>

I'm trying to write a simple Elastic SQL that polls the temperature value in the last 3 minutes but i'm not able to select such a small timeframe. It should be as simple as NOW() - INTERVAL 3 MINUTES but that returns not…

---

## [Curator-\>Error:Skipping action “delete\_indices” due to empty list!](https://discuss.elastic.co/t/curator-error-skipping-action-delete-indices-due-to-empty-list/169314)

<div class="topic-metadata">

**Author:** [@npalanis](https://discuss.elastic.co/u/npalanis)\
**Replies:** 2\
**Last updated:** [February 25, 2019, 10:46am UTC](https://discuss.elastic.co/t/curator-error-skipping-action-delete-indices-due-to-empty-list/169314 "2019-02-25T10:46:55Z")

</div>

Hi, i tried to do the same but receiving following error message: \[elasticsearch@testelstd01 ~\] ./opt/elasticsearch-curator/curator --dry-run .curator/delete-logstash-older-90-days.yml 2019-02-20 09:13:43,748 ERROR Sch…

---

## [Split Series の使い方で悩んでいます](https://discuss.elastic.co/t/split-series/167221)

<div class="topic-metadata">

**Author:** [@osamu036](https://discuss.elastic.co/u/osamu036)\
**Replies:** 2\
**Last updated:** [February 7, 2019, 4:24am UTC](https://discuss.elastic.co/t/split-series/167221 "2019-02-07T04:24:18Z")

</div>

周波数で値が変化する測定値の折れ線グラフの描画で悩んでいます。 測定日が異なるデータが複数あります。 グラフ化の対象のデータは以下のようなJSONで記録されています。 { "timestamp": "2019-01-27T16:53:36.000Z", "frequency": 1780, "spectrum\_value": 1328.41992, "sampleNo": 1, "ndays": 2 } グラフは、以下のよう…

---

## [Is there a major difference in ES5 queries and ES6?](https://discuss.elastic.co/t/is-there-a-major-difference-in-es5-queries-and-es6/165498)

<div class="topic-metadata">

**Author:** [@pferrel](https://discuss.elastic.co/u/pferrel)\
**Replies:** 2\
**Last updated:** [January 26, 2019, 1:29am UTC](https://discuss.elastic.co/t/is-there-a-major-difference-in-es5-queries-and-es6/165498 "2019-01-26T01:29:29Z")

</div>

I am making a recommender with Elasticsearch. I know what people have bought and this forms the query. The index is of items and has a field that contains items bought in common. In previous versions of ES (\<= 5.6) the …

---

## [Logstash does not process multiple filebeat inputs](https://discuss.elastic.co/t/logstash-does-not-process-multiple-filebeat-inputs/164712)

<div class="topic-metadata">

**Author:** [@victoravr](https://discuss.elastic.co/u/victoravr)\
**Replies:** 2\
**Last updated:** [January 17, 2019, 11:07pm UTC](https://discuss.elastic.co/t/logstash-does-not-process-multiple-filebeat-inputs/164712 "2019-01-17T23:07:29Z")

</div>

G'day! I'm new to ELK - please forgive me if it's something obvious. I'd like filebeat to ship two different type of logs to logstash, logstash to process it with different grok filters and output to elasticsearch in t…

---

## [Best way to visualize Canary / AB comparison deployment](https://discuss.elastic.co/t/best-way-to-visualize-canary-ab-comparison-deployment/142621)

<div class="topic-metadata">

**Author:** [@agirbal](https://discuss.elastic.co/u/agirbal)\
**Replies:** 2\
**Last updated:** [August 7, 2018, 6:07pm UTC](https://discuss.elastic.co/t/best-way-to-visualize-canary-ab-comparison-deployment/142621 "2018-08-07T18:07:53Z")

</div>

I've been trying to figure out the best way to visualize differences (besides just eyeing them) in a typical AB test. The typical setup: a list of servers pairs gets selected, each within a given site. Each server gets…

---

## [Elasticsearch 7](https://discuss.elastic.co/t/elasticsearch-7/117499)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [January 31, 2018, 1:01pm UTC](https://discuss.elastic.co/t/elasticsearch-7/117499 "2018-01-31T13:01:53Z")

</div>

Since Elastic moves so fast with its version updates, I was hoping to just skip over ES6 as I have to start getting ready for next fall. I see the Master documents have been updated with 7.0 alpha details but when I …

---

## [Good configuration for logstash](https://discuss.elastic.co/t/good-configuration-for-logstash/90219)

<div class="topic-metadata">

**Author:** [@Benjamin\_Peere](https://discuss.elastic.co/u/Benjamin_Peere)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 8:28am UTC](https://discuss.elastic.co/t/good-configuration-for-logstash/90219 "2017-06-21T08:28:57Z")

</div>

Hello, i am new to use logstash, i've just installed it and configured like in the Getting started video, i have also installed elasticsearch and when i try to make the hello word (like in the video), i run logstash with…

---

## [Converting SQL datetime2 field to UNIX epoch](https://discuss.elastic.co/t/converting-sql-datetime2-field-to-unix-epoch/51603)

<div class="topic-metadata">

**Author:** [@ads95](https://discuss.elastic.co/u/ads95)\
**Replies:** 2\
**Last updated:** [January 3, 2017, 4:53am UTC](https://discuss.elastic.co/t/converting-sql-datetime2-field-to-unix-epoch/51603 "2017-01-03T04:53:55Z")

</div>

I'm ingesting a SQL datetime2 field from a SQL Server 2012 instance via JDBC and I'm looking to convert the field to UNIX epoch format. Ruby is not playing nicely with the fact that the original field being ingested from…

---

## [Weird cluster failure (unresponsive node + unresponsive load balancer)](https://discuss.elastic.co/t/weird-cluster-failure-unresponsive-node-unresponsive-load-balancer/12759)

<div class="topic-metadata">

**Author:** [@James\_Smith](https://discuss.elastic.co/u/James_Smith)\
**Replies:** 2\
**Last updated:** [July 16, 2013, 6:45am UTC](https://discuss.elastic.co/t/weird-cluster-failure-unresponsive-node-unresponsive-load-balancer/12759 "2013-07-16T06:45:42Z")

</div>

Hi all, We have recently experienced a weird failure whereby one node became unresponsive (maxed inode table?), but then even more worryingly, the 'no data' load balancer node didn't balance the traffic off to the…

[Previous page](https://discuss.elastic.co/top.md?page=1559&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1561&per_page=50&period=all)
