# Top **URL:** https://discuss.elastic.co/top.md?page=1569&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1570 --- ## [Advice on a Master/Slave setup](https://discuss.elastic.co/t/advice-on-a-master-slave-setup/7717)
**Author:** [@anirban2004](https://discuss.elastic.co/u/anirban2004)\ **Replies:** 0\ **Last updated:** [May 16, 2012, 1:23pm UTC](https://discuss.elastic.co/t/advice-on-a-master-slave-setup/7717 "2012-05-16T13:23:01Z")
I have been using Elasticsearch and it works great for what I have needed so far including searching across multiple indexes, custom scoring etc. Now I am faced with a situation where the need is to make things work… --- ## [Custom type field example not work in Elasticsearch 7.6](https://discuss.elastic.co/t/custom-type-field-example-not-work-in-elasticsearch-7-6/220031)
**Author:** [@andrewbien](https://discuss.elastic.co/u/andrewbien)\ **Replies:** 4\ **Last updated:** [February 20, 2020, 8:16am UTC](https://discuss.elastic.co/t/custom-type-field-example-not-work-in-elasticsearch-7-6/220031 "2020-02-20T08:16:28Z")
Hi everyone, I got a problem when I try to run an example of Custom type field section in this tutorial: https://www.elastic.co/guide/en/elasticsearch/reference/7.6/removal-of-types.html#\_custom\_type\_field I executed th… --- ## [Index rollover broken after connectivity issues between nodes in a 3 node ELK cluster](https://discuss.elastic.co/t/index-rollover-broken-after-connectivity-issues-between-nodes-in-a-3-node-elk-cluster/151233)
**Author:** [@Ihjaz](https://discuss.elastic.co/u/Ihjaz)\ **Replies:** 4\ **Last updated:** [October 24, 2018, 1:16pm UTC](https://discuss.elastic.co/t/index-rollover-broken-after-connectivity-issues-between-nodes-in-a-3-node-elk-cluster/151233 "2018-10-24T13:16:23Z")
Hi, I have a 3 node ELK cluster and I have curator scheduled to run every hour using cronjob to rollover the indices. I have run into this issue where a new index is created by the curator packetbeat-6.2.2-2018.08.06-0… --- ## [Setting, to automatically register queries in an "query" Index](https://discuss.elastic.co/t/setting-to-automatically-register-queries-in-an-query-index/60629)
**Author:** [@xavier.tiendeo](https://discuss.elastic.co/u/xavier.tiendeo)\ **Replies:** 4\ **Last updated:** [September 16, 2016, 2:18pm UTC](https://discuss.elastic.co/t/setting-to-automatically-register-queries-in-an-query-index/60629 "2016-09-16T14:18:12Z")
Is there a transitional setting to automatically register queries as documents in an specific index. I see Percolate but is not exactly the same and also slowqueries, but in this case it goes to a file and you have to … --- ## [Elasticsearch template doesnt set doc\_value attribute for index mappings](https://discuss.elastic.co/t/elasticsearch-template-doesnt-set-doc-value-attribute-for-index-mappings/39916)
**Author:** [@Rahul](https://discuss.elastic.co/u/Rahul)\ **Replies:** 4\ **Last updated:** [January 26, 2016, 3:08pm UTC](https://discuss.elastic.co/t/elasticsearch-template-doesnt-set-doc-value-attribute-for-index-mappings/39916 "2016-01-26T15:08:13Z")
Hi, Based on certain suggestion for elastic search performance tunning, we started using doc\_value as true for several fields in our index mapping. This attribute appears in index mappings when we create the index with… --- ## [Logstash behaviour is inconsistent](https://discuss.elastic.co/t/logstash-behaviour-is-inconsistent/34965)
**Author:** [@vijay\_dhaks](https://discuss.elastic.co/u/vijay_dhaks)\ **Replies:** 4\ **Last updated:** [November 30, 2015, 2:01pm UTC](https://discuss.elastic.co/t/logstash-behaviour-is-inconsistent/34965 "2015-11-30T14:01:32Z")
Hi, I have recently started learning logstash by following the tutorials. Currently I am facing a weird problem. I have my config as below, input { file { path =\> "/home/test/project/logstash\_sample\_data… --- ## [When I installed the ELASTICSEARCH 8.8.1, I am not able to change the number of replicas of .security and .security-profile index](https://discuss.elastic.co/t/when-i-installed-the-elasticsearch-8-8-1-i-am-not-able-to-change-the-number-of-replicas-of-security-and-security-profile-index/337597)
**Author:** [@KunwarAkanksha](https://discuss.elastic.co/u/KunwarAkanksha)\ **Replies:** 2\ **Last updated:** [July 13, 2023, 12:10am UTC](https://discuss.elastic.co/t/when-i-installed-the-elasticsearch-8-8-1-i-am-not-able-to-change-the-number-of-replicas-of-security-and-security-profile-index/337597 "2023-07-13T00:10:49Z")
If the Node having the .security index goes down the whole cluster is not functioning. And superuser elastic is unable to edit the setting of this .security index --- ## [Elasticsearch and logstash problem](https://discuss.elastic.co/t/elasticsearch-and-logstash-problem/285540)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 2\ **Last updated:** [October 1, 2021, 11:12am UTC](https://discuss.elastic.co/t/elasticsearch-and-logstash-problem/285540 "2021-10-01T11:12:22Z")
Hello everyone. I have a problem with logstash and Elasticsearch. I would like to explain my problem with an example. I have two conf files, first example\_A.conf and second example\_B.conf. I am loading data from example\_… --- ## [Minor problem with documentation for es debian installation](https://discuss.elastic.co/t/minor-problem-with-documentation-for-es-debian-installation/200172)
**Author:** [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\ **Replies:** 4\ **Last updated:** [September 19, 2019, 1:45pm UTC](https://discuss.elastic.co/t/minor-problem-with-documentation-for-es-debian-installation/200172 "2019-09-19T13:45:20Z")
The documentation for installing the debian package suggests running: echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" | sudo tee -a /etc/apt/sources.list.d/elastic-7.x.list We added this to our che… --- ## [Logstash error attempted to send a bulk request](https://discuss.elastic.co/t/logstash-error-attempted-to-send-a-bulk-request/153722)
**Author:** [@xUmaRix](https://discuss.elastic.co/u/xUmaRix)\ **Replies:** 0\ **Last updated:** [October 24, 2018, 6:02am UTC](https://discuss.elastic.co/t/logstash-error-attempted-to-send-a-bulk-request/153722 "2018-10-24T06:02:43Z")
OS DISTRIB\_ID=Ubuntu DISTRIB\_RELEASE=18.04 DISTRIB\_CODENAME=bionic DISTRIB\_DESCRIPTION="Ubuntu 18.04.1 LTS" NAME="Ubuntu" VERSION="18.04.1 LTS (Bionic Beaver)" ID=ubuntu ID\_LIKE=debian PRETTY\_NAME="Ubuntu 18.04.1 LTS" V… --- ## [Elastic cloud APM server time based index template](https://discuss.elastic.co/t/elastic-cloud-apm-server-time-based-index-template/321076)
**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\ **Replies:** 6\ **Last updated:** [December 13, 2022, 6:55am UTC](https://discuss.elastic.co/t/elastic-cloud-apm-server-time-based-index-template/321076 "2022-12-13T06:55:18Z")
I am running an Elastic cluster 7.17.x on Elastic cloud. I would like to switch to a time-based index template for my APM setup and cannot figure out how to do it. I am looking for a way to include a date in the index na… --- ## [Filebeat sonicwall module not parsing correctly many messages](https://discuss.elastic.co/t/filebeat-sonicwall-module-not-parsing-correctly-many-messages/268232)
**Author:** [@Rodrigo\_Bernardo](https://discuss.elastic.co/u/Rodrigo_Bernardo)\ **Replies:** 6\ **Last updated:** [April 24, 2021, 6:28pm UTC](https://discuss.elastic.co/t/filebeat-sonicwall-module-not-parsing-correctly-many-messages/268232 "2021-04-24T18:28:01Z")
Hello there, Our Sonicwall generates this message: \<110\> id=yyyy sn=C0EAE4F9FB00 time="2021-03-24 14:35:31 UTC" fw=xx.xx.xx.xx pri=6 c=262144 m=98 msg="Connection Opened" app=49177 appName="General HTTPS" n=2185104… --- ## [Racing the patched 6.4.0 source](https://discuss.elastic.co/t/racing-the-patched-6-4-0-source/165587)
**Author:** [@Mikhail\_Khludnev](https://discuss.elastic.co/u/Mikhail_Khludnev)\ **Replies:** 6\ **Last updated:** [February 23, 2019, 1:22pm UTC](https://discuss.elastic.co/t/racing-the-patched-6-4-0-source/165587 "2019-02-23T13:22:29Z")
Hello, Thanks for the great tool. I'm trying to benchmark patched 6.4.0 source, thus I use --revision=current, but it seems like it uses master branch for teams config (~/.rally/benchmarks/teams/default) that pull 7.0 c… --- ## [Woefully slow query; how best to optimise this?](https://discuss.elastic.co/t/woefully-slow-query-how-best-to-optimise-this/68024)
**Author:** [@Ryan\_Berry](https://discuss.elastic.co/u/Ryan_Berry)\ **Replies:** 6\ **Last updated:** [December 5, 2016, 3:35pm UTC](https://discuss.elastic.co/t/woefully-slow-query-how-best-to-optimise-this/68024 "2016-12-05T15:35:41Z")
Hi there, Hoping for some guidance on how to optimise the following query. It's the slowest running query in our app. This is run against some very large indices, one in the region of 1.5B docs. More often than not this… --- ## [Error in updating an existing document field count in Elasticsearch](https://discuss.elastic.co/t/error-in-updating-an-existing-document-field-count-in-elasticsearch/10211)
**Author:** [@Jonathan\_Moo](https://discuss.elastic.co/u/Jonathan_Moo)\ **Replies:** 6\ **Last updated:** [January 3, 2013, 6:17am UTC](https://discuss.elastic.co/t/error-in-updating-an-existing-document-field-count-in-elasticsearch/10211 "2013-01-03T06:17:45Z")
I have indexed a document in Elasticsearch as follows: { \_parent: chow-demo \_index: prototype\_2013.01.02 \_type: chow-clfg \_id: Nx4JcvyxTPujkyy0Jq5BNw \_score: 11.600378 \_source: { chow-clfg: { @typ… --- ## [Metricbeats logging into /var/log/messages](https://discuss.elastic.co/t/metricbeats-logging-into-var-log-messages/315316)
**Author:** [@justinepaulpadayao](https://discuss.elastic.co/u/justinepaulpadayao)\ **Replies:** 1\ **Last updated:** [September 28, 2022, 6:17am UTC](https://discuss.elastic.co/t/metricbeats-logging-into-var-log-messages/315316 "2022-09-28T06:17:18Z")
Hello! I'm trying to redirect my metricbeats logs to /var/log/metricbeats instead of /var/log/messages. I'm using metricbeat 8.0.0 and I've configured the metricbeat.yml logging section to this: #======================… --- ## [FileBeat not running](https://discuss.elastic.co/t/filebeat-not-running/226211)
**Author:** [@Vlad\_Piratov](https://discuss.elastic.co/u/Vlad_Piratov)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 9:10am UTC](https://discuss.elastic.co/t/filebeat-not-running/226211 "2020-04-03T09:10:52Z")
Hi, I recently started working with this product on debian 8. I found the book for version 6.0.0, and set it (ELK). The problem is this: I can't run FileBeat to send syslog logstash logs (FileBeat -\> logstash -\> elastic … --- ## [ECK and ES on EKS 1.12 installation / setup issue](https://discuss.elastic.co/t/eck-and-es-on-eks-1-12-installation-setup-issue/206401)
**Author:** [@sathia.thayathil](https://discuss.elastic.co/u/sathia.thayathil)\ **Replies:** 1\ **Last updated:** [December 2, 2019, 10:47am UTC](https://discuss.elastic.co/t/eck-and-es-on-eks-1-12-installation-setup-issue/206401 "2019-12-02T10:47:05Z")
{"type": "server", "timestamp": "2019-11-04T12:12:27,916Z", "level": "WARN", "component": "o.e.c.c.ClusterFormationFailureHelper", "cluster.name": "elastic", "node.name": "elastic-es-default-0", "message": "master not di… --- ## [Can't login to kibana, login screen keep reappearing](https://discuss.elastic.co/t/cant-login-to-kibana-login-screen-keep-reappearing/209335)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [November 25, 2019, 3:39pm UTC](https://discuss.elastic.co/t/cant-login-to-kibana-login-screen-keep-reappearing/209335 "2019-11-25T15:39:38Z")
I had everything working. then started testing https now I want to go back to http:// connection. I reverted all the changes. I can start elasticsearch and can connect to cluster using username elastic \[root@elktst0… --- ## [EDR in parallel with AV](https://discuss.elastic.co/t/edr-in-parallel-with-av/208946)
**Author:** [@p3464782](https://discuss.elastic.co/u/p3464782)\ **Replies:** 1\ **Last updated:** [November 21, 2019, 7:16pm UTC](https://discuss.elastic.co/t/edr-in-parallel-with-av/208946 "2019-11-21T19:16:38Z")
Is it technically possible to run an Endgame or Elastic Endpoint Security agent in parallel with an existing AV/EPP solution like ESET, or does the agent conflicts with any AV running on the same system? --- ## [Filebeat to Logstash via reverse proxy](https://discuss.elastic.co/t/filebeat-to-logstash-via-reverse-proxy/199760)
**Author:** [@jaiganesh06](https://discuss.elastic.co/u/jaiganesh06)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 5:17am UTC](https://discuss.elastic.co/t/filebeat-to-logstash-via-reverse-proxy/199760 "2019-09-18T05:17:42Z")
Hi All, I am new here. We have configured filebeat to logstash via SSL in our test environment. In our production environment, we are planning for an architecture similar to below: Filebeat \> Secure Apache based revers… --- ## [Dynamic alias remapping for newly created index](https://discuss.elastic.co/t/dynamic-alias-remapping-for-newly-created-index/199389)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 1\ **Last updated:** [September 14, 2019, 9:42am UTC](https://discuss.elastic.co/t/dynamic-alias-remapping-for-newly-created-index/199389 "2019-09-14T09:42:45Z")
When I create the following alias, it maps currently available indexes like apps-2019.09.11, apps-2019.09.12 curl -XPOST 'localhost:9200/\_aliases' -H 'Content-Type: application/json' -d' { "actions" : \[ { … --- ## [Kibana not working- says Cannot connect to the Elasticsearch cluster](https://discuss.elastic.co/t/kibana-not-working-says-cannot-connect-to-the-elasticsearch-cluster/175760)
**Author:** [@gauravb](https://discuss.elastic.co/u/gauravb)\ **Replies:** 1\ **Last updated:** [April 8, 2019, 6:03am UTC](https://discuss.elastic.co/t/kibana-not-working-says-cannot-connect-to-the-elasticsearch-cluster/175760 "2019-04-08T06:03:42Z")
My kibana link in not working, I have also restarted the cluster, it still don't work PFA the screenshot --- ## [Access control about the watcher](https://discuss.elastic.co/t/access-control-about-the-watcher/159315)
**Author:** [@talon](https://discuss.elastic.co/u/talon)\ **Replies:** 1\ **Last updated:** [December 7, 2018, 9:08am UTC](https://discuss.elastic.co/t/access-control-about-the-watcher/159315 "2018-12-07T09:08:44Z")
HI I want to assign user the permission to create watcher and read watcher, and have no permission to delete it. can you tell me how to configure the roles. below is my configuration, but the user not only can create th… --- ## [Issues connecting to logstash on windows server](https://discuss.elastic.co/t/issues-connecting-to-logstash-on-windows-server/114933)
**Author:** [@pranay](https://discuss.elastic.co/u/pranay)\ **Replies:** 1\ **Last updated:** [January 12, 2018, 6:00pm UTC](https://discuss.elastic.co/t/issues-connecting-to-logstash-on-windows-server/114933 "2018-01-12T18:00:51Z")
Hi, I am new to ELK world and started installing ELK stack... elasticsearch and Kibana are up and running and am able to login using the localhost url, but having issues while connecting to logstash.. pls help 0x7cc3f2f… --- ## [ERR Connecting error publishing events (retrying) - help me](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-help-me/91213)
**Author:** [@feelboy](https://discuss.elastic.co/u/feelboy)\ **Replies:** 1\ **Last updated:** [June 29, 2017, 12:07pm UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-help-me/91213 "2017-06-29T12:07:10Z")
HI. I am getting these error messages and I have the most basic configuration of Logstash/FileBeat. error ERR Connecting error publishing events (retrying): Get http://172.30.17.118:5044: read tcp 172.30.17.118:59086… --- ## [Elasticsearch version in Rally benchmark-only](https://discuss.elastic.co/t/elasticsearch-version-in-rally-benchmark-only/84096)
**Author:** [@salazar](https://discuss.elastic.co/u/salazar)\ **Replies:** 1\ **Last updated:** [May 2, 2017, 6:20am UTC](https://discuss.elastic.co/t/elasticsearch-version-in-rally-benchmark-only/84096 "2017-05-02T06:20:00Z")
Hi folks, Suppose I want to benchmark an existing cluster, whose Elasticsearch version is 2.x. If I use "--pipeline=benchmark-only --target-hosts=...", will Rally detect the Elasticsearch version and checkout the appro… --- ## [Elasticsearch 퍼포먼스 관련 질문](https://discuss.elastic.co/t/elasticsearch/70752)
**Author:** [@TaeSung\_Kim](https://discuss.elastic.co/u/TaeSung_Kim)\ **Replies:** 1\ **Last updated:** [February 6, 2017, 7:10am UTC](https://discuss.elastic.co/t/elasticsearch/70752 "2017-02-06T07:10:26Z")
안녕하세요. 한국어 질문방이 있는지 모르고 안되는 영어로 여기저기 문의하고 있었네요. 질문은 아래와 같습니다. 어느 쪽 구성이 더 효과적으로 bulk와 indexing을 처리할 수 있을까요? 스펙 좀 괜찮은 머신 한대 (data + master node) 4core 14GB SSD vs 스펙 안 좋은 머신 2 ~ 3대 (data node) + 1대 (master node) 2c… --- ## [Using elasticsearch to store audit log information](https://discuss.elastic.co/t/using-elasticsearch-to-store-audit-log-information/16124)
**Author:** [@npatil](https://discuss.elastic.co/u/npatil)\ **Replies:** 1\ **Last updated:** [March 3, 2014, 11:52pm UTC](https://discuss.elastic.co/t/using-elasticsearch-to-store-audit-log-information/16124 "2014-03-03T23:52:26Z")
Hello, I have a use-case wherein I need to capture audit trail style information for a large user population (~1 mil) for all their actions within multiple applications and across web and API layers. Questions: 1… --- ## [Combining an 'exact match' with other matches](https://discuss.elastic.co/t/combining-an-exact-match-with-other-matches/8557)
**Author:** [@Matt\_3](https://discuss.elastic.co/u/Matt_3)\ **Replies:** 1\ **Last updated:** [July 30, 2012, 10:34am UTC](https://discuss.elastic.co/t/combining-an-exact-match-with-other-matches/8557 "2012-07-30T10:34:12Z")
I have a search for a string against some 'names'. I want to prioritize an exact match as the first result returned and all other matches, or hits, to following. Could I or should I have a request which combines a… --- ## [Doubts about how exclude events by the process name with filebeat](https://discuss.elastic.co/t/doubts-about-how-exclude-events-by-the-process-name-with-filebeat/290988)
**Author:** [@rdinis](https://discuss.elastic.co/u/rdinis)\ **Replies:** 2\ **Last updated:** [December 10, 2021, 2:00pm UTC](https://discuss.elastic.co/t/doubts-about-how-exclude-events-by-the-process-name-with-filebeat/290988 "2021-12-10T14:00:22Z")
Hi, I'm trying to send logs to elastic from the file /var/logs/messages\* and i have a lot of logs from another agents of elastic. The file messages\* looks like this: Dec 1 16:50:03 machine\_name heartbeat: "status": "u… --- ## [Nested queries don't work as documented](https://discuss.elastic.co/t/nested-queries-dont-work-as-documented/275737)
**Author:** [@titani0us](https://discuss.elastic.co/u/titani0us)\ **Replies:** 2\ **Last updated:** [June 13, 2021, 4:45pm UTC](https://discuss.elastic.co/t/nested-queries-dont-work-as-documented/275737 "2021-06-13T16:45:55Z")
Hello, As documented in your documentation here, the documentation shows using dot-notation to traverse a nested field (user -\> id). However, when using the query dsl this way, no results are returned. Instead, you mus… --- ## [How to know when transaction is finished](https://discuss.elastic.co/t/how-to-know-when-transaction-is-finished/272587)
**Author:** [@the\_duke](https://discuss.elastic.co/u/the_duke)\ **Replies:** 2\ **Last updated:** [May 12, 2021, 2:29pm UTC](https://discuss.elastic.co/t/how-to-know-when-transaction-is-finished/272587 "2021-05-12T14:29:36Z")
Hi All, I was wondering how one can determine if a transaction is finished? I am working on an angular project and want to log how long a user is logged in. When the user logs out, I start a transaction, calculate the… --- ## [Split FQDN](https://discuss.elastic.co/t/split-fqdn/263773)
**Author:** [@Dan\_L](https://discuss.elastic.co/u/Dan_L)\ **Replies:** 2\ **Last updated:** [February 9, 2021, 4:54pm UTC](https://discuss.elastic.co/t/split-fqdn/263773 "2021-02-09T16:54:53Z")
I'm trying to split an FQDN to get the base server name. Currently, the FQDN is stored in "server", so I'd like to split "server" on "." and get the name. Additionally, sometimes the server may not be the FQDN, so it'd … --- ## [Location type geo\_point](https://discuss.elastic.co/t/location-type-geo-point/262059)
**Author:** [@Elves\_Ribeiro](https://discuss.elastic.co/u/Elves_Ribeiro)\ **Replies:** 2\ **Last updated:** [January 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/location-type-geo-point/262059 "2021-01-31T22:48:12Z")
Hi, I am trying to create a map on my environment, but I am not able to create the field location type geo\_point. I am using version 7.10.2 My logstash conf geoip { source =\> "ip\_client" } mutate { add\_field =\> … --- ## [How to keep selected time when opening a link in a new tab?](https://discuss.elastic.co/t/how-to-keep-selected-time-when-opening-a-link-in-a-new-tab/208483)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [November 19, 2019, 12:21pm UTC](https://discuss.elastic.co/t/how-to-keep-selected-time-when-opening-a-link-in-a-new-tab/208483 "2019-11-19T12:21:53Z")
Hi, For easier navigation I use links in markdown visualization: code looks like this: method: \[performance overview\](#/dashboard/5daa37f0-0205-11ea-b4fd-8177e891c938) | \[performance details\](#/dashboard/b6f6dac0-04… --- ## [Automating report generation by PDF or PNG?](https://discuss.elastic.co/t/automating-report-generation-by-pdf-or-png/204826)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [October 24, 2019, 5:43am UTC](https://discuss.elastic.co/t/automating-report-generation-by-pdf-or-png/204826 "2019-10-24T05:43:26Z")
Hello. I believe automatic report generation is available in GOLD subscription . Share & collaborate Embeddable dashboards Object export UI & APIs CSV exports PDF and PNG reports Saved queries However, would there… --- ## [Change data field to date type](https://discuss.elastic.co/t/change-data-field-to-date-type/184185)
**Author:** [@soufiane1](https://discuss.elastic.co/u/soufiane1)\ **Replies:** 2\ **Last updated:** [June 4, 2019, 3:02pm UTC](https://discuss.elastic.co/t/change-data-field-to-date-type/184185 "2019-06-04T15:02:17Z")
Hello everyone, I am trying to load a data into kibana with logstash but still receiving the following error : Here is my config : ( "Date et heure" in my csv is like "24/06/2019 21:56") ############## mutate{ … --- ## [Header issue in logstash csv output](https://discuss.elastic.co/t/header-issue-in-logstash-csv-output/175781)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 2\ **Last updated:** [April 8, 2019, 1:51pm UTC](https://discuss.elastic.co/t/header-issue-in-logstash-csv-output/175781 "2019-04-08T13:51:35Z")
hi all, i am using following logstash configuration: input { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "disp\_2019-04-08" } } filter { mutate { add\_field =\> { "P\_date" =\> "%{PDate}" } } mutate { … --- ## [Elasticsearch YUM Repositories Are Down](https://discuss.elastic.co/t/elasticsearch-yum-repositories-are-down/163405)
**Author:** [@vanjohnson](https://discuss.elastic.co/u/vanjohnson)\ **Replies:** 2\ **Last updated:** [January 11, 2019, 7:43pm UTC](https://discuss.elastic.co/t/elasticsearch-yum-repositories-are-down/163405 "2019-01-11T19:43:45Z")
Elasticsearch Community, The documentation for installing Elasticsearch as an RPM is out of date. Not sure on the status of the YUM repos. I noticed there was ticket(155198) open in Nov, yet was closed with no resolut… --- ## [Logstash CSV Filter: Define Columns from Event Data/Fields](https://discuss.elastic.co/t/logstash-csv-filter-define-columns-from-event-data-fields/163014)
**Author:** [@dm90](https://discuss.elastic.co/u/dm90)\ **Replies:** 2\ **Last updated:** [January 6, 2019, 4:12pm UTC](https://discuss.elastic.co/t/logstash-csv-filter-define-columns-from-event-data-fields/163014 "2019-01-06T16:12:45Z")
This is related to: https://discuss.elastic.co/t/csv-filter-column/122752 Use case: The S3 input plugin can return AWS CloudFront logs from an S3 bucket. The subsequent events include the message (a tab delimited log … --- ## [Error in track preparator (\[Errno 28\] No space left on device)](https://discuss.elastic.co/t/error-in-track-preparator-errno-28-no-space-left-on-device/152653)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 2\ **Last updated:** [October 17, 2018, 5:09am UTC](https://discuss.elastic.co/t/error-in-track-preparator-errno-28-no-space-left-on-device/152653 "2018-10-17T05:09:08Z")
I'm new in elasticsearch and rally. Now I'm trying "Benchmarking an existing cluster" as below. https://esrally.readthedocs.io/en/1.0.1/recipes.html#benchmarking-an-existing-cluster After the following command line was… --- ## [Alternative to curator](https://discuss.elastic.co/t/alternative-to-curator/146942)
**Author:** [@laurent\_telle](https://discuss.elastic.co/u/laurent_telle)\ **Replies:** 2\ **Last updated:** [September 5, 2018, 6:22am UTC](https://discuss.elastic.co/t/alternative-to-curator/146942 "2018-09-05T06:22:42Z")
Hi guys, any plan to integrate curator to kibana ui ? means where we can manage automatically remove of index after certain period of time in kabana ? Tx Laurent --- ## [Simple metric with count not respecting min\_doc\_count parameter](https://discuss.elastic.co/t/simple-metric-with-count-not-respecting-min-doc-count-parameter/98993)
**Author:** [@Alexandre\_Juma](https://discuss.elastic.co/u/Alexandre_Juma)\ **Replies:** 2\ **Last updated:** [August 31, 2017, 2:31pm UTC](https://discuss.elastic.co/t/simple-metric-with-count-not-respecting-min-doc-count-parameter/98993 "2017-08-31T14:31:52Z")
Hi all, I’m trying to set up a dashboard with several metrics with custom colors where the metric is a simple count of documents in the index in a specific time interval. When there are no records in the index, “no res… --- ## [Elasticsearch-hadoop-2.4.2 and Elasticsearch version 5.0.0 support](https://discuss.elastic.co/t/elasticsearch-hadoop-2-4-2-and-elasticsearch-version-5-0-0-support/67348)
**Author:** [@deepankar32](https://discuss.elastic.co/u/deepankar32)\ **Replies:** 2\ **Last updated:** [November 28, 2016, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-2-4-2-and-elasticsearch-version-5-0-0-support/67348 "2016-11-28T13:47:07Z")
Hi, Please let meknow the compatible ES Hadoop version for elasticsearch version 5.0 Caused by: org.elasticsearch.hadoop.EsHadoopIllegalArgumentException: Unsupported/Unknown Elasticsearch version 5.0.0 at … --- ## [Extract integer from syslog](https://discuss.elastic.co/t/extract-integer-from-syslog/28850)
**Author:** [@lwhitworth](https://discuss.elastic.co/u/lwhitworth)\ **Replies:** 2\ **Last updated:** [September 9, 2015, 7:32am UTC](https://discuss.elastic.co/t/extract-integer-from-syslog/28850 "2015-09-09T07:32:14Z")
Hi there, I have a basic syslog input/filter/output that's working fine to ship stuff to elasticsearch and onto kibana. Occasionally though there'll be a line in the syslog for a specific system like: Sep 8 16:35:0… --- ## [SentinelOne integration GeoIP database error](https://discuss.elastic.co/t/sentinelone-integration-geoip-database-error/333262)
**Author:** [@Anton\_H](https://discuss.elastic.co/u/Anton_H)\ **Replies:** 2\ **Last updated:** [May 13, 2023, 2:34pm UTC](https://discuss.elastic.co/t/sentinelone-integration-geoip-database-error/333262 "2023-05-13T14:34:44Z")
Hello, We use the SentinelOne integration through fleet in our Elastic Cloud environment. Events are being received and processed. The issue is we get "\_geoip\_database\_unavailable\_GeoLite2-City.mmdb" errors on all age… --- ## [Kibana dashboards - global filter vs individual filters performance](https://discuss.elastic.co/t/kibana-dashboards-global-filter-vs-individual-filters-performance/319961)
**Author:** [@ARDiver86](https://discuss.elastic.co/u/ARDiver86)\ **Replies:** 2\ **Last updated:** [November 29, 2022, 12:51am UTC](https://discuss.elastic.co/t/kibana-dashboards-global-filter-vs-individual-filters-performance/319961 "2022-11-29T00:51:34Z")
Right now I have three objects on a dashboard (one saved search, two data table lens) that are using the logs-system\* namespace. Each LENs is using this filter: event.dataset:"system.system" Is there any performance … --- ## [Shards setup with app search](https://discuss.elastic.co/t/shards-setup-with-app-search/290610)
**Author:** [@Patrice\_G](https://discuss.elastic.co/u/Patrice_G)\ **Replies:** 3\ **Last updated:** [December 6, 2021, 2:26pm UTC](https://discuss.elastic.co/t/shards-setup-with-app-search/290610 "2021-12-06T14:26:28Z")
I have about 100M documents using App Search. Performance is very bad. I need more elasticsearch nodes (cpu, ram disk,...), and I need to increase the number of elasticsearch shards for my index. I saw app search creat… --- ## [Best config for a massive add and delete documents](https://discuss.elastic.co/t/best-config-for-a-massive-add-and-delete-documents/162353)
**Author:** [@sebidchi](https://discuss.elastic.co/u/sebidchi)\ **Replies:** 8\ **Last updated:** [December 31, 2018, 9:33pm UTC](https://discuss.elastic.co/t/best-config-for-a-massive-add-and-delete-documents/162353 "2018-12-31T21:33:14Z")
Hello, I have a use case where I need to add documents , perform query/ies over that document and delete it as once I have the result the document will no longer needed on the cluster. It's a php app that search for al… [Previous page](https://discuss.elastic.co/top.md?page=1568&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1570&per_page=50&period=all)