# Top

**URL:** https://discuss.elastic.co/top.md?page=1567&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1568

---

## [Aggregation enrichment in Logstash with Elasticsearch filter](https://discuss.elastic.co/t/aggregation-enrichment-in-logstash-with-elasticsearch-filter/69308)

<div class="topic-metadata">

**Author:** [@cscsabai](https://discuss.elastic.co/u/cscsabai)\
**Replies:** 1\
**Last updated:** [December 18, 2016, 8:57pm UTC](https://discuss.elastic.co/t/aggregation-enrichment-in-logstash-with-elasticsearch-filter/69308 "2016-12-18T20:57:54Z")

</div>

Hi, I'd like to make an aggregated value enrichment every time when new log entry generated. This is a performance value and I'd like to expand it with "average of this value in the past 4 weeks in this time period" valu…

---

## [Text box and button to filter by index](https://discuss.elastic.co/t/text-box-and-button-to-filter-by-index/60894)

<div class="topic-metadata">

**Author:** [@maarthala](https://discuss.elastic.co/u/maarthala)\
**Replies:** 1\
**Last updated:** [September 19, 2016, 2:49pm UTC](https://discuss.elastic.co/t/text-box-and-button-to-filter-by-index/60894 "2016-09-19T14:49:45Z")

</div>

HI, As part of my requirement, i am thinking to place a text box and button on the dashboad to filter data by index name. Index name is same as RunID and I would like show dashboard data only for the entered Index name.…

---

## [Unifiedbeat fails to start with configuration error, although --checkconfig doesn't find any errors](https://discuss.elastic.co/t/unifiedbeat-fails-to-start-with-configuration-error-although-checkconfig-doesnt-find-any-errors/46585)

<div class="topic-metadata">

**Author:** [@utilitynerd](https://discuss.elastic.co/u/utilitynerd)\
**Replies:** 1\
**Last updated:** [April 7, 2016, 11:30am UTC](https://discuss.elastic.co/t/unifiedbeat-fails-to-start-with-configuration-error-although-checkconfig-doesnt-find-any-errors/46585 "2016-04-07T11:30:35Z")

</div>

If you get the following error while trying to start unifiedbeat, with a valid YML config file, I 2016/04/06 18:20:40.501879 u2beat.go:97: CRIT Setup: ERROR: required path to 'gen\_msg\_map\_path' not specified in YAML co…

---

## [Any idea why I can't get an Average on a float type field when I want to visualize my data?](https://discuss.elastic.co/t/any-idea-why-i-cant-get-an-average-on-a-float-type-field-when-i-want-to-visualize-my-data/41980)

<div class="topic-metadata">

**Author:** [@teewhey](https://discuss.elastic.co/u/teewhey)\
**Replies:** 1\
**Last updated:** [February 17, 2016, 7:41am UTC](https://discuss.elastic.co/t/any-idea-why-i-cant-get-an-average-on-a-float-type-field-when-i-want-to-visualize-my-data/41980 "2016-02-17T07:41:27Z")

</div>

Any idea why can't Kibana get an Average on a float type field when I want to visualize my data? I got this error when trying to select Average on one of my field. Visualize: Expected numeric type on field \[request\_ti…

---

## [Cluster Stats Total On Disk Storage Used](https://discuss.elastic.co/t/cluster-stats-total-on-disk-storage-used/41207)

<div class="topic-metadata">

**Author:** [@texlnghorn](https://discuss.elastic.co/u/texlnghorn)\
**Replies:** 1\
**Last updated:** [February 9, 2016, 6:48am UTC](https://discuss.elastic.co/t/cluster-stats-total-on-disk-storage-used/41207 "2016-02-09T06:48:43Z")

</div>

I'm trying to figure out the total on disk storage used by my cluster. The cluster stats api provides the indices store size\_in\_bytes as well as nodes fs total and free metrics. I think I'm more concerned with the nod…

---

## [Logstash error "exception in filterworker"](https://discuss.elastic.co/t/logstash-error-exception-in-filterworker/26406)

<div class="topic-metadata">

**Author:** [@nguafogu78](https://discuss.elastic.co/u/nguafogu78)\
**Replies:** 1\
**Last updated:** [July 28, 2015, 12:13pm UTC](https://discuss.elastic.co/t/logstash-error-exception-in-filterworker/26406 "2015-07-28T12:13:47Z")

</div>

Hi, Does someone encountered the following error before: Jul 28 08:56:32 syslog1-ctr logstash: {:timestamp=\>"2015-07-28T08:56:32.481000+0200", :message=\>"Exception in filterworker", "exception"=\>#, "backtrace"=\>\["org…

---

## [Term query no hits was Re: No parser for element \[term\]](https://discuss.elastic.co/t/term-query-no-hits-was-re-no-parser-for-element-term/18707)

<div class="topic-metadata">

**Author:** [@jackpark](https://discuss.elastic.co/u/jackpark)\
**Replies:** 7\
**Last updated:** [July 16, 2014, 11:29pm UTC](https://discuss.elastic.co/t/term-query-no-hits-was-re-no-parser-for-element-term/18707 "2014-07-16T23:29:01Z")

</div>

Thank you very much. I was in the process of drafting a message that I found that and made the query to look like these: {"query":{"term":{"label":""First instance node""}}} {"query":{"term":{"inOf":"NodeBuilderType"}…

---

## [Problem with SearchRequestBuilder.setSize](https://discuss.elastic.co/t/problem-with-searchrequestbuilder-setsize/10286)

<div class="topic-metadata">

**Author:** [@Sean\_Bowman](https://discuss.elastic.co/u/Sean_Bowman)\
**Replies:** 1\
**Last updated:** [January 9, 2013, 9:15pm UTC](https://discuss.elastic.co/t/problem-with-searchrequestbuilder-setsize/10286 "2013-01-09T21:15:26Z")

</div>

For some reason, when I'm using the Java API, the setSize method on SearchRequestBuilder appears to be ignored completely. After building my request, I print it out and get this: Query: # "size" : 1, "query" …

---

## [Object in arrays are not well supported Error](https://discuss.elastic.co/t/object-in-arrays-are-not-well-supported-error/131925)

<div class="topic-metadata">

**Author:** [@Dhivya\_Buvanesh](https://discuss.elastic.co/u/Dhivya_Buvanesh)\
**Replies:** 0\
**Last updated:** [May 15, 2018, 12:12pm UTC](https://discuss.elastic.co/t/object-in-arrays-are-not-well-supported-error/131925 "2018-05-15T12:12:36Z")

</div>

Hi Team I have upload a JSON file to the elastic and in below data format, "which has a list of dict", After uploading to elastic we see error as "Object in arrays are not well supported" and data is not mapped properl…

---

## [Elasticsearch client for Elixir](https://discuss.elastic.co/t/elasticsearch-client-for-elixir/95020)

<div class="topic-metadata">

**Author:** [@Roopa\_Chandrasekarai](https://discuss.elastic.co/u/Roopa_Chandrasekarai)\
**Replies:** 0\
**Last updated:** [July 28, 2017, 11:13pm UTC](https://discuss.elastic.co/t/elasticsearch-client-for-elixir/95020 "2017-07-28T23:13:35Z")

</div>

Can anyone suggest me a good elasticsearch client for the language Elixir? I came across elastix (https://github.com/werbitzky/elastix) and tirexs(https://github.com/Zatvobor/tirexs). But they do not seem to show any exa…

---

## [ECK using Docker for Operator Container Registry docker.instead of elastic.co](https://discuss.elastic.co/t/eck-using-docker-for-operator-container-registry-docker-instead-of-elastic-co/287842)

<div class="topic-metadata">

**Author:** [@cj11](https://discuss.elastic.co/u/cj11)\
**Replies:** 2\
**Last updated:** [November 4, 2021, 4:33pm UTC](https://discuss.elastic.co/t/eck-using-docker-for-operator-container-registry-docker-instead-of-elastic-co/287842 "2021-11-04T16:33:34Z")

</div>

I'm using the ECK Stack as described in this tutorial - Deploy an Elasticsearch cluster | Elastic Cloud on Kubernetes \[1.8\] for a basic ECK setup. I want to change the container registry for operator to use the docker h…

---

## [How to get license key to use ML feature?](https://discuss.elastic.co/t/how-to-get-license-key-to-use-ml-feature/285749)

<div class="topic-metadata">

**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\
**Replies:** 2\
**Last updated:** [October 2, 2021, 6:59pm UTC](https://discuss.elastic.co/t/how-to-get-license-key-to-use-ml-feature/285749 "2021-10-02T18:59:47Z")

</div>

I install Elasticsearch, Kibana and Logstash in Ubuntu 18.04. I already used a 30-day free trial and everything went well. Now I need the license key to continue using the ML feature in the future. But don't know to get…

---

## [Connect application dotNet to APM (Cloud)](https://discuss.elastic.co/t/connect-application-dotnet-to-apm-cloud/238705)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 6:38am UTC](https://discuss.elastic.co/t/connect-application-dotnet-to-apm-cloud/238705 "2020-06-26T06:38:51Z")

</div>

Good morning, I'm using the trial version and i would like connect my .net application to APM. I followed the steps that appears in the documentation but is not running. I didn't change anything about the configuration…

---

## [Kibana Data Table Date Histogram Aggregation Useless labels](https://discuss.elastic.co/t/kibana-data-table-date-histogram-aggregation-useless-labels/182495)

<div class="topic-metadata">

**Author:** [@david-cunningham-rez](https://discuss.elastic.co/u/david-cunningham-rez)\
**Replies:** 2\
**Last updated:** [June 21, 2019, 8:11am UTC](https://discuss.elastic.co/t/kibana-data-table-date-histogram-aggregation-useless-labels/182495 "2019-06-21T08:11:14Z")

</div>

So when I add the following split table aggregation to my data, instead of giving me the month name for my labels, it gives me the milliseconds for the timestamp. I also don't see a way to edit it. Here's what it look…

---

## [How to change the Logo of Kibana Version 7.1.0](https://discuss.elastic.co/t/how-to-change-the-logo-of-kibana-version-7-1-0/182199)

<div class="topic-metadata">

**Author:** [@Nishar\_shaik](https://discuss.elastic.co/u/Nishar_shaik)\
**Replies:** 2\
**Last updated:** [May 23, 2019, 12:40pm UTC](https://discuss.elastic.co/t/how-to-change-the-logo-of-kibana-version-7-1-0/182199 "2019-05-23T12:40:57Z")

</div>

Hi all, I am working on Kibana . I just want to change the logo of Kibana.I found some articles where they have given the path to change the logo, but they are for older versions like 5 and above till 6.8.0. I am workin…

---

## [Winlogbeat not capturing specific event id's in windows server 2012](https://discuss.elastic.co/t/winlogbeat-not-capturing-specific-event-ids-in-windows-server-2012/134540)

<div class="topic-metadata">

**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\
**Replies:** 2\
**Last updated:** [June 5, 2018, 7:17pm UTC](https://discuss.elastic.co/t/winlogbeat-not-capturing-specific-event-ids-in-windows-server-2012/134540 "2018-06-05T19:17:19Z")

</div>

Hi All, I have installed winlogbeat 5.6.5 version in the windows server 2012 machine and to capture only specific event id's from the machine, I have given the event id's in the winlogbeat.yml file winlogbeat.event\_log…

---

## [Elasticsearch et hibernate search sont sur un bateau](https://discuss.elastic.co/t/elasticsearch-et-hibernate-search-sont-sur-un-bateau/122981)

<div class="topic-metadata">

**Author:** [@alexis-puska](https://discuss.elastic.co/u/alexis-puska)\
**Replies:** 2\
**Last updated:** [April 18, 2018, 12:06pm UTC](https://discuss.elastic.co/t/elasticsearch-et-hibernate-search-sont-sur-un-bateau/122981 "2018-04-18T12:06:30Z")

</div>

Ou se battent pour le gouvernail. Bonjour, Excusez moi pour ce sujet accrocheur, mais je ne trouve pas grand monde pour m'aider dans mon soucis. J'ai vu cette video elasticserch et hibernatesearch sont sur un bateau. h…

---

## [Execute script after dashboard loads](https://discuss.elastic.co/t/execute-script-after-dashboard-loads/114801)

<div class="topic-metadata">

**Author:** [@Karan\_Sharma](https://discuss.elastic.co/u/Karan_Sharma)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 10:09am UTC](https://discuss.elastic.co/t/execute-script-after-dashboard-loads/114801 "2018-01-11T10:09:20Z")

</div>

I have some code in hack.js which needs to be executed ONLY AFTER the dashboard had loaded, is there any event emitted when a dashboard finishes loading? Some more detail: I need to access dashboard name using $route.c…

---

## [ElasticSearch Search functionality with filesystem cache](https://discuss.elastic.co/t/elasticsearch-search-functionality-with-filesystem-cache/96775)

<div class="topic-metadata">

**Author:** [@san88922](https://discuss.elastic.co/u/san88922)\
**Replies:** 2\
**Last updated:** [August 31, 2017, 5:38am UTC](https://discuss.elastic.co/t/elasticsearch-search-functionality-with-filesystem-cache/96775 "2017-08-31T05:38:03Z")

</div>

Hi Everyone, I am curious about the search capability of ES, suppose i am indexing bulk data and according to documentation data will be flushed for every 5 minutes(translog\_Flush\_config), and file system cache and tran…

---

## [Offline Install Logstash Translate Plugin 5.4](https://discuss.elastic.co/t/offline-install-logstash-translate-plugin-5-4/89711)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 2\
**Last updated:** [June 16, 2017, 7:04pm UTC](https://discuss.elastic.co/t/offline-install-logstash-translate-plugin-5-4/89711 "2017-06-16T19:04:16Z")

</div>

Where can logstash translate plugin 5.4 be located for download and offline install. I use to download them from ruby gems but is that still the location to get offline installs of community plugins? Thanks

---

## [Severity / Log Level](https://discuss.elastic.co/t/severity-log-level/74628)

<div class="topic-metadata">

**Author:** [@Brendao](https://discuss.elastic.co/u/Brendao)\
**Replies:** 2\
**Last updated:** [February 10, 2017, 12:26pm UTC](https://discuss.elastic.co/t/severity-log-level/74628 "2017-02-10T12:26:13Z")

</div>

Bonjour, Je voudrais savoir quels sont les différents stades pour la severity sur LogStash ? Car pour mon affichage dans Kibana j'ai trier comme cela mais je ne sais pas si j'ai mis les bonnes références : Severit…

---

## [When i use logstash-gelf to provide log messages, i find some messages lost](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211)

<div class="topic-metadata">

**Author:** [@swelltt0576](https://discuss.elastic.co/u/swelltt0576)\
**Replies:** 2\
**Last updated:** [December 17, 2015, 12:51am UTC](https://discuss.elastic.co/t/when-i-use-logstash-gelf-to-provide-log-messages-i-find-some-messages-lost/37211 "2015-12-17T00:51:59Z")

</div>

i sent 100,000 message, but there are only about 80,000 messages in the logstash. what happend? this is my log4j2 configuration: \<Gelf name="gelf" host="${log4j.logstash}" port="12201" version="1.1" extractSt…

---

## [Nested Document - Created with null](https://discuss.elastic.co/t/nested-document-created-with-null/27153)

<div class="topic-metadata">

**Author:** [@jdb70](https://discuss.elastic.co/u/jdb70)\
**Replies:** 2\
**Last updated:** [August 11, 2015, 3:28pm UTC](https://discuss.elastic.co/t/nested-document-created-with-null/27153 "2015-08-11T15:28:39Z")

</div>

Hello, I have a nested document and I am using scripted upsert to add nested document. The first entry in the nested document is always an 'null' string value. My input to ES is '{"script\_file": "update-messages","scrip…

---

## [Securing ElasticSearch Cluster](https://discuss.elastic.co/t/securing-elasticsearch-cluster/19923)

<div class="topic-metadata">

**Author:** [@Pradeep\_Narayan](https://discuss.elastic.co/u/Pradeep_Narayan)\
**Replies:** 2\
**Last updated:** [September 22, 2014, 9:56pm UTC](https://discuss.elastic.co/t/securing-elasticsearch-cluster/19923 "2014-09-22T21:56:42Z")

</div>

Hi - I went over the following article on securing elasticsearch: http://www.elasticsearch.org/blog/scripting-security/ I have a question on the specific point below: 1\*. Don’t run Elasticsearch open to the publ…

---

## [Visualizations on Dashboard going grey from time to time (all 2-5 seconds)](https://discuss.elastic.co/t/visualizations-on-dashboard-going-grey-from-time-to-time-all-2-5-seconds/245869)

<div class="topic-metadata">

**Author:** [@BoKu](https://discuss.elastic.co/u/BoKu)\
**Replies:** 4\
**Last updated:** [August 25, 2020, 9:03am UTC](https://discuss.elastic.co/t/visualizations-on-dashboard-going-grey-from-time-to-time-all-2-5-seconds/245869 "2020-08-25T09:03:43Z")

</div>

Hello, as mentoined in the Topic, since the update to 7.9.0 visualizations on a dashboard are going grey every few seconds. What is the reason for that behavior and what can i do about it? Thanks in advance! Boris

---

## [I'm linking ELK to Snort. but there's been an error with the logstash](https://discuss.elastic.co/t/im-linking-elk-to-snort-but-theres-been-an-error-with-the-logstash/238563)

<div class="topic-metadata">

**Author:** [@arse\_nal](https://discuss.elastic.co/u/arse_nal)\
**Replies:** 4\
**Last updated:** [June 25, 2020, 4:06pm UTC](https://discuss.elastic.co/t/im-linking-elk-to-snort-but-theres-been-an-error-with-the-logstash/238563 "2020-06-25T16:06:47Z")

</div>

I'm linking ELK to Snort. there's been an error with the logstash But I can't figure out a way to deal with this error. Help me. I Use ELK 6.2.2, Centos 7, and snort 2.9.16. configure file code!

---

## [Kibana 6.4 shutdown abnormally](https://discuss.elastic.co/t/kibana-6-4-shutdown-abnormally/148774)

<div class="topic-metadata">

**Author:** [@Chunbo\_Liao](https://discuss.elastic.co/u/Chunbo_Liao)\
**Replies:** 4\
**Last updated:** [September 19, 2018, 7:22am UTC](https://discuss.elastic.co/t/kibana-6-4-shutdown-abnormally/148774 "2018-09-19T07:22:05Z")

</div>

Hi, I have update my Kibana to 6.4, and run with X-pack is open. after running one week, kibana shutdown abnormally. and the error logs is as follow: /home/11thone/elk/kibana/node\_modules/x-pack/plugins/monitoring/ser…

---

## [How to write this equation in LogStash lat = lat\_min + (Y \* lat\_range / y\_range) long = long\_min + (X \* long\_range / x\_range)](https://discuss.elastic.co/t/how-to-write-this-equation-in-logstash-lat-lat-min-y-lat-range-y-range-long-long-min-x-long-range-x-range/93572)

<div class="topic-metadata">

**Author:** [@Alex\_S](https://discuss.elastic.co/u/Alex_S)\
**Replies:** 4\
**Last updated:** [July 18, 2017, 12:21pm UTC](https://discuss.elastic.co/t/how-to-write-this-equation-in-logstash-lat-lat-min-y-lat-range-y-range-long-long-min-x-long-range-x-range/93572 "2017-07-18T12:21:43Z")

</div>

Hello Geeks , I have a formula I want to write into LogStash but I don't know the syntax lat = lat\_min + (Y \* lat\_range / y\_range) long = long\_min + (X \* long\_range / x\_range) Thanks :))

---

## [User and role authentication](https://discuss.elastic.co/t/user-and-role-authentication/80267)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 4\
**Last updated:** [March 28, 2017, 12:29pm UTC](https://discuss.elastic.co/t/user-and-role-authentication/80267 "2017-03-28T12:29:20Z")

</div>

Hi All, We have purchased x-pack and we were creating users and roles in the kibana interface. But only the super user works ,I created a new role like below I then logged out and i logged using the created user ,a…

---

## [Error Importing Objects in Kibana 4.3.1 \[solved\]](https://discuss.elastic.co/t/error-importing-objects-in-kibana-4-3-1-solved/75800)

<div class="topic-metadata">

**Author:** [@mstewart](https://discuss.elastic.co/u/mstewart)\
**Replies:** 4\
**Last updated:** [February 24, 2017, 4:15pm UTC](https://discuss.elastic.co/t/error-importing-objects-in-kibana-4-3-1-solved/75800 "2017-02-24T16:15:53Z")

</div>

All, I have a standard gold image that includes a pre-configured ELK installation put together by another group. This is my first time working with the software, so I'm trying to see if I'm maybe I'm just doing somethin…

---

## [Error in creating a snapshot in elasticsearch 2.4.0?](https://discuss.elastic.co/t/error-in-creating-a-snapshot-in-elasticsearch-2-4-0/71133)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 4\
**Last updated:** [January 11, 2017, 7:05am UTC](https://discuss.elastic.co/t/error-in-creating-a-snapshot-in-elasticsearch-2-4-0/71133 "2017-01-11T07:05:16Z")

</div>

Hi everyone, For creating a snapshot i have create a path.repo in elasticsearch.yml . I want to know where i have to add path.repo line in elasticsearch.yml. When i tried adding in the last line of elasticsearch.yml t…

---

## [No logs from Java client?](https://discuss.elastic.co/t/no-logs-from-java-client/7718)

<div class="topic-metadata">

**Author:** [@jschelle\_2](https://discuss.elastic.co/u/jschelle_2)\
**Replies:** 4\
**Last updated:** [May 16, 2012, 4:20pm UTC](https://discuss.elastic.co/t/no-logs-from-java-client/7718 "2012-05-16T16:20:33Z")

</div>

I'm trying to debug why I get NoNodeAvailableExceptions after my client has been running for a few minutes. I found a post on here that suggested turning up the logging level for org.elasticsearch.discovery but I ca…

---

## [RefreshPolicy WAIT\_UNTIL does not work when using BulkProcessor in Java Client](https://discuss.elastic.co/t/refreshpolicy-wait-until-does-not-work-when-using-bulkprocessor-in-java-client/337857)

<div class="topic-metadata">

**Author:** [@ChiMu\_Yuan](https://discuss.elastic.co/u/ChiMu_Yuan)\
**Replies:** 5\
**Last updated:** [July 27, 2023, 4:53am UTC](https://discuss.elastic.co/t/refreshpolicy-wait-until-does-not-work-when-using-bulkprocessor-in-java-client/337857 "2023-07-27T04:53:47Z")

</div>

Hello everyone, I am a beginner, and my English is not very good. I am using ES 7.10 with the Java programming language, so I am using the Java High-Level REST Client. I want to be able to search for relevant content i…

---

## [How to migrate from version 7.12 to version 7.16.2?](https://discuss.elastic.co/t/how-to-migrate-from-version-7-12-to-version-7-16-2/293964)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 5\
**Last updated:** [January 21, 2022, 7:52am UTC](https://discuss.elastic.co/t/how-to-migrate-from-version-7-12-to-version-7-16-2/293964 "2022-01-21T07:52:31Z")

</div>

7.12 cluster 7.16 I made a snapshot on the 7.12 cluster, shared the snapshot using NFS, then created a new 7.16 cluster, mounted the nfs path, and registered the warehouse with the same name on kibana. After …

---

## [Grok filter for a custom message](https://discuss.elastic.co/t/grok-filter-for-a-custom-message/163527)

<div class="topic-metadata">

**Author:** [@mrashid](https://discuss.elastic.co/u/mrashid)\
**Replies:** 5\
**Last updated:** [January 10, 2019, 7:41pm UTC](https://discuss.elastic.co/t/grok-filter-for-a-custom-message/163527 "2019-01-10T19:41:32Z")

</div>

\*\* The build ID of the run is : 104 \*\* I have the above line in the message field . I am trying to use Grok filter to extract the entire line to a new field by the name of "filteredValue". WHat I have tried : filt…

---

## [Combining Multiple Records in Logstash](https://discuss.elastic.co/t/combining-multiple-records-in-logstash/142378)

<div class="topic-metadata">

**Author:** [@Jack\_McAleese](https://discuss.elastic.co/u/Jack_McAleese)\
**Replies:** 5\
**Last updated:** [July 31, 2018, 3:28pm UTC](https://discuss.elastic.co/t/combining-multiple-records-in-logstash/142378 "2018-07-31T15:28:04Z")

</div>

I am working on ingesting pricing logs. A sample of the data I am ingesting looks like this: D|535|00846U101|256||100|0.0001 1 0.01 B|1|1523318400.0108|62.28|1|72.21|1|0|k||200000005449000 B|2|1523318400.0245|62.28|1|…

---

## [Kibana logs is full](https://discuss.elastic.co/t/kibana-logs-is-full/307903)

<div class="topic-metadata">

**Author:** [@ptang](https://discuss.elastic.co/u/ptang)\
**Replies:** 3\
**Last updated:** [July 7, 2022, 2:55pm UTC](https://discuss.elastic.co/t/kibana-logs-is-full/307903 "2022-07-07T14:55:47Z")

</div>

can anyone help me how to cleanup the kibana.log files under /var/log/kibana directory. kibana.log filled my diskspace and no space to write the logs. Thanks, pradeep

---

## [Pass an array data as a variable to URL of http logstash plugin](https://discuss.elastic.co/t/pass-an-array-data-as-a-variable-to-url-of-http-logstash-plugin/307186)

<div class="topic-metadata">

**Author:** [@santhoshi.p](https://discuss.elastic.co/u/santhoshi.p)\
**Replies:** 3\
**Last updated:** [June 14, 2022, 4:45pm UTC](https://discuss.elastic.co/t/pass-an-array-data-as-a-variable-to-url-of-http-logstash-plugin/307186 "2022-06-14T16:45:56Z")

</div>

Hi, I am trying to pass an array to a URL as a loop could you please help me to acheive this in logstash pipeline. Any suggestions that is provided is helpful . My response is below: nodeId: 9 "datasource" =\> \[ \[ …

---

## [Java API requires GPL code](https://discuss.elastic.co/t/java-api-requires-gpl-code/292936)

<div class="topic-metadata">

**Author:** [@Alain\_Desilets](https://discuss.elastic.co/u/Alain_Desilets)\
**Replies:** 3\
**Last updated:** [January 3, 2022, 2:11pm UTC](https://discuss.elastic.co/t/java-api-requires-gpl-code/292936 "2022-01-03T14:11:28Z")

</div>

I would like to use the new Java API described here: But when I include it in my pom and try to generate a JAR with all dependencies included, licensescan-maven-plugin tells me that there are two GPL dependencies: \[W…

---

## [How to compare the current event with the previous 2 events in logstash?](https://discuss.elastic.co/t/how-to-compare-the-current-event-with-the-previous-2-events-in-logstash/249864)

<div class="topic-metadata">

**Author:** [@subash](https://discuss.elastic.co/u/subash)\
**Replies:** 3\
**Last updated:** [September 25, 2020, 2:53pm UTC](https://discuss.elastic.co/t/how-to-compare-the-current-event-with-the-previous-2-events-in-logstash/249864 "2020-09-25T14:53:22Z")

</div>

I am receiving logs every 5 minutes from many devices. In the log, there is field called crc\_error which holds numeric value For a particular Device, if the value of the crc\_error field increases consecutively for 3 lo…

---

## [Table Aggregating On Text Field](https://discuss.elastic.co/t/table-aggregating-on-text-field/202588)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [October 31, 2019, 9:30pm UTC](https://discuss.elastic.co/t/table-aggregating-on-text-field/202588 "2019-10-31T21:30:10Z")

</div>

Ive got two tables of URLs, one of them counts the number of visits for the root path of a URL and the other is a list of all URLs visited. The field, url.path, is indexed as both a text and keyword field. I would like…

---

## [Is it possible to integrate SQL query into ElasticSearch Java API](https://discuss.elastic.co/t/is-it-possible-to-integrate-sql-query-into-elasticsearch-java-api/179063)

<div class="topic-metadata">

**Author:** [@Barun\_Kumar](https://discuss.elastic.co/u/Barun_Kumar)\
**Replies:** 3\
**Last updated:** [May 15, 2019, 10:11am UTC](https://discuss.elastic.co/t/is-it-possible-to-integrate-sql-query-into-elasticsearch-java-api/179063 "2019-05-15T10:11:12Z")

</div>

I have to search some data using JAVA API. I can do the same using X\_PACK Sql query. Same needs to be done through JAVA API. I have searched a lot but didn't find the reult. My Sql Query is like: select map.serviceName…

---

## [More Logstash threads?](https://discuss.elastic.co/t/more-logstash-threads/104084)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 3\
**Last updated:** [October 17, 2017, 11:17am UTC](https://discuss.elastic.co/t/more-logstash-threads/104084 "2017-10-17T11:17:07Z")

</div>

HI, our Logstash does a lot of calculations and is getting stuck under a lot of info. The question is how to fix this, one way we saw was to raise the Xms and Xmx. Is there a way to give the logstash to work with more t…

---

## [Logstash JDBC Output to postgreSQL](https://discuss.elastic.co/t/logstash-jdbc-output-to-postgresql/72119)

<div class="topic-metadata">

**Author:** [@Phi1001](https://discuss.elastic.co/u/Phi1001)\
**Replies:** 0\
**Last updated:** [January 19, 2017, 6:36am UTC](https://discuss.elastic.co/t/logstash-jdbc-output-to-postgresql/72119 "2017-01-19T06:36:32Z")

</div>

i would like to put a json in my database It works fine but i would like to convert the json "properties" in string to store it in 1 column "name":"Product", "properties": { …

---

## [Data Snapshot of ES 1.5.2 on Google Cloud Storage](https://discuss.elastic.co/t/data-snapshot-of-es-1-5-2-on-google-cloud-storage/55778)

<div class="topic-metadata">

**Author:** [@Hanish\_Bansal](https://discuss.elastic.co/u/Hanish_Bansal)\
**Replies:** 3\
**Last updated:** [July 18, 2016, 9:02pm UTC](https://discuss.elastic.co/t/data-snapshot-of-es-1-5-2-on-google-cloud-storage/55778 "2016-07-18T21:02:27Z")

</div>

We are using ElasticSearch 1.5.2 version on production. On daily basis we take backup of data on Amazon S3 using plugin https://github.com/elasticsearch/elasticsearch-cloud-aws#s3-repository. We are moving form AWS to Go…

---

## [Marvel Index Taking too much disk space](https://discuss.elastic.co/t/marvel-index-taking-too-much-disk-space/21254)

<div class="topic-metadata">

**Author:** [@Cheten\_Dev](https://discuss.elastic.co/u/Cheten_Dev)\
**Replies:** 3\
**Last updated:** [May 25, 2016, 7:02am UTC](https://discuss.elastic.co/t/marvel-index-taking-too-much-disk-space/21254 "2016-05-25T07:02:59Z")

</div>

Hi, I installed the plugin for marvel , but its creating its own indexes which are even larger than my original indexed data. is there a way to delete these indexes on daily basis or any other way ? Thanks -…

---

## [Search query based on the document's different field value's comparison](https://discuss.elastic.co/t/search-query-based-on-the-documents-different-field-values-comparison/8371)

<div class="topic-metadata">

**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\
**Replies:** 3\
**Last updated:** [July 14, 2012, 4:57am UTC](https://discuss.elastic.co/t/search-query-based-on-the-documents-different-field-values-comparison/8371 "2012-07-14T04:57:54Z")

</div>

Hi Shay, Can you please guide me to the following problem, suppose i am having the following document structure, { "name":"narinder", "guid" : "345435", "parent\_guid": "544333", "country\_guid": "45…

---

## [Issue enrolling elastic agent in docker](https://discuss.elastic.co/t/issue-enrolling-elastic-agent-in-docker/325511)

<div class="topic-metadata">

**Author:** [@Anon](https://discuss.elastic.co/u/Anon)\
**Replies:** 1\
**Last updated:** [March 10, 2023, 8:05pm UTC](https://discuss.elastic.co/t/issue-enrolling-elastic-agent-in-docker/325511 "2023-03-10T20:05:23Z")

</div>

I have "successfully" enrolled elastic agent. Kibana shows that the agent is Healthy for some time, until Endpoint Security starts communication with Elasticsearch. In logs I get following error. {"@timestamp":"2023-0…

---

## [Upload csv fle in elasticsearch using filebeat](https://discuss.elastic.co/t/upload-csv-fle-in-elasticsearch-using-filebeat/306018)

<div class="topic-metadata">

**Author:** [@safaeaz](https://discuss.elastic.co/u/safaeaz)\
**Replies:** 1\
**Last updated:** [June 27, 2022, 3:09pm UTC](https://discuss.elastic.co/t/upload-csv-fle-in-elasticsearch-using-filebeat/306018 "2022-06-27T15:09:53Z")

</div>

i'm trying to load csv file in Elasticsearch using filebeat here is my filebeat.yml filebeat.inputs: #- type: log - type: stdin setup.template.overwrite: true enabled: true close\_eof: true paths: - /usr/sh…

---

## [Import text file to logstash](https://discuss.elastic.co/t/import-text-file-to-logstash/286303)

<div class="topic-metadata">

**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\
**Replies:** 1\
**Last updated:** [October 9, 2021, 6:45pm UTC](https://discuss.elastic.co/t/import-text-file-to-logstash/286303 "2021-10-09T18:45:24Z")

</div>

I had some text files with formats like this. 10/09-22:09:34.989323 \[\*\*\] \[1:100000015:3\] "OR SQL Injection Detected" \[\*\*\] \[Priority: 0\] {TCP} 192.168.186.25:44748 -\> 192.168.186.162:80 10/09-22:09:34.989323 \[\*\*\] \[1:1000…

[Previous page](https://discuss.elastic.co/top.md?page=1566&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1568&per_page=50&period=all)
