# Top

**URL:** https://discuss.elastic.co/top.md?page=1573&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1574

---

## [Should i create restClient thread pool in rest api?](https://discuss.elastic.co/t/should-i-create-restclient-thread-pool-in-rest-api/74589)

<div class="topic-metadata">

**Author:** [@2010](https://discuss.elastic.co/u/2010)\
**Replies:** 2\
**Last updated:** [February 24, 2017, 3:23am UTC](https://discuss.elastic.co/t/should-i-create-restclient-thread-pool-in-rest-api/74589 "2017-02-24T03:23:37Z")

</div>

Now, i creating a restClient to requesting es-server , it is low-peformance?

---

## [How to put mapping by JAVA API](https://discuss.elastic.co/t/how-to-put-mapping-by-java-api/223475)

<div class="topic-metadata">

**Author:** [@SomberOfShadow](https://discuss.elastic.co/u/SomberOfShadow)\
**Replies:** 1\
**Last updated:** [March 13, 2020, 9:40am UTC](https://discuss.elastic.co/t/how-to-put-mapping-by-java-api/223475 "2020-03-13T09:40:37Z")

</div>

hi， guys I met a problem that blockde me several days. I want to put mapping for a field by JAVA API but failed. Following is detailded information: My data struction is : { "mje-test-execution-id": "464b66ea6c914d…

---

## [Price of the gold license?](https://discuss.elastic.co/t/price-of-the-gold-license/187217)

<div class="topic-metadata">

**Author:** [@Bachtiar\_Hendro](https://discuss.elastic.co/u/Bachtiar_Hendro)\
**Replies:** 1\
**Last updated:** [June 25, 2019, 3:04pm UTC](https://discuss.elastic.co/t/price-of-the-gold-license/187217 "2019-06-25T15:04:43Z")

</div>

what is the elastic price of the gold license for 1 user? i just wanna use thresshold and alerting fitur in this software

---

## [Symlinks with Filebeat](https://discuss.elastic.co/t/symlinks-with-filebeat/180679)

<div class="topic-metadata">

**Author:** [@Exocomp](https://discuss.elastic.co/u/Exocomp)\
**Replies:** 1\
**Last updated:** [May 14, 2019, 1:49pm UTC](https://discuss.elastic.co/t/symlinks-with-filebeat/180679 "2019-05-14T13:49:26Z")

</div>

How does filebeat handle the case where the underlying file changes when using Symlinks. I understand that you have to enable "symlinks: true" for it to process symlinks where it reads the actual file. But when the und…

---

## [Request for site-search react demo demonstrating pagination](https://discuss.elastic.co/t/request-for-site-search-react-demo-demonstrating-pagination/179176)

<div class="topic-metadata">

**Author:** [@shameer-rahman](https://discuss.elastic.co/u/shameer-rahman)\
**Replies:** 1\
**Last updated:** [May 1, 2019, 12:19pm UTC](https://discuss.elastic.co/t/request-for-site-search-react-demo-demonstrating-pagination/179176 "2019-05-01T12:19:50Z")

</div>

I'm trying to implement pagination using site-search api on my gatsby website, can you please share me the demo repo for the same like you have it for app-search: GitHub - swiftype/app-search-demo-react: A simple React a…

---

## [Automatic login into Kibana iframe for AD group members](https://discuss.elastic.co/t/automatic-login-into-kibana-iframe-for-ad-group-members/172593)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 2:13pm UTC](https://discuss.elastic.co/t/automatic-login-into-kibana-iframe-for-ad-group-members/172593 "2019-03-18T14:13:39Z")

</div>

Hi , I know this issue has been raised before many times but I was not able to find solution. I am using kibana iframe on our internal website and I want to disable the login screen in kibana for my users. we have de…

---

## [Fieldname.keyword search returns different results](https://discuss.elastic.co/t/fieldname-keyword-search-returns-different-results/162142)

<div class="topic-metadata">

**Author:** [@Ganga\_Lakshmanasamy](https://discuss.elastic.co/u/Ganga_Lakshmanasamy)\
**Replies:** 1\
**Last updated:** [December 26, 2018, 1:06pm UTC](https://discuss.elastic.co/t/fieldname-keyword-search-returns-different-results/162142 "2018-12-26T13:06:26Z")

</div>

I have a field which uses a particular analyzer. For a scenario, i want the field to be matched without any analyzer being applied. So I ma using fielname.keyword for the match query. This query doesn't return value for …

---

## [Cisco Meraki Syslog - Using Two Grok Patterns in the same filter](https://discuss.elastic.co/t/cisco-meraki-syslog-using-two-grok-patterns-in-the-same-filter/152105)

<div class="topic-metadata">

**Author:** [@dts](https://discuss.elastic.co/u/dts)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 4:05am UTC](https://discuss.elastic.co/t/cisco-meraki-syslog-using-two-grok-patterns-in-the-same-filter/152105 "2018-10-12T04:05:38Z")

</div>

Hello, I have created a conf with two grok patterns. When I run the conf it seems to only process the first pattern and not the second one. I have tested both pattens in a couple of online Grok sites and they both work.…

---

## [FileBeat Not Starting in Custom Dockerfile](https://discuss.elastic.co/t/filebeat-not-starting-in-custom-dockerfile/129901)

<div class="topic-metadata">

**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\
**Replies:** 1\
**Last updated:** [April 30, 2018, 7:32am UTC](https://discuss.elastic.co/t/filebeat-not-starting-in-custom-dockerfile/129901 "2018-04-30T07:32:07Z")

</div>

We are trying to create a custom Dockerfile which will include FileBeat as well. When the container is started FileBeat should start automatically. DockerFile FROM microsoft/aspnetcore:2.0.3 WORKDIR /usr/local/filebea…

---

## [Add new field to existing nested](https://discuss.elastic.co/t/add-new-field-to-existing-nested/92124)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 1\
**Last updated:** [July 6, 2017, 5:14pm UTC](https://discuss.elastic.co/t/add-new-field-to-existing-nested/92124 "2017-07-06T17:14:57Z")

</div>

Hello. I have my index mapping with nested: { "index\_test": { "mappings": { "search\_type": { "properties": { "person": { "properties": { "relation": { …

---

## [ElasticSearch Query time - how to decrease the response time](https://discuss.elastic.co/t/elasticsearch-query-time-how-to-decrease-the-response-time/27681)

<div class="topic-metadata">

**Author:** [@puneetm](https://discuss.elastic.co/u/puneetm)\
**Replies:** 1\
**Last updated:** [August 19, 2015, 3:46pm UTC](https://discuss.elastic.co/t/elasticsearch-query-time-how-to-decrease-the-response-time/27681 "2015-08-19T15:46:08Z")

</div>

Hi, I am a newbie to elasticsearch. I am executing some queries on elastic search. Some of the queries are taking long time to execute first time and on rerun response time reduces. However, first time execution is n…

---

## [Try to figure out what kind of hardware I need](https://discuss.elastic.co/t/try-to-figure-out-what-kind-of-hardware-i-need/27207)

<div class="topic-metadata">

**Author:** [@x3rus](https://discuss.elastic.co/u/x3rus)\
**Replies:** 1\
**Last updated:** [August 11, 2015, 11:26pm UTC](https://discuss.elastic.co/t/try-to-figure-out-what-kind-of-hardware-i-need/27207 "2015-08-11T23:26:07Z")

</div>

Hi, I have a project to deploy ELK to manage all OS logs (GNU/Linux , Windows) and network equipments logs. I need to be able to manage : \* 50 Gigs each days \* 750 hosts \* 4500 logs / seconds That's for today , …

---

## [Metaphone3](https://discuss.elastic.co/t/metaphone3/22684)

<div class="topic-metadata">

**Author:** [@kianmobini](https://discuss.elastic.co/u/kianmobini)\
**Replies:** 1\
**Last updated:** [March 16, 2015, 4:45pm UTC](https://discuss.elastic.co/t/metaphone3/22684 "2015-03-16T16:45:54Z")

</div>

Is there any way to add metaphone 3 in elasticsearch as phonetic token filter? there is licence for metaphone3 here. https://code.google.com/p/google-refine/source/browse/trunk/main/src/com/google/refine/clustering/bi…

---

## [EQL date difference function](https://discuss.elastic.co/t/eql-date-difference-function/339420)

<div class="topic-metadata">

**Author:** [@j91321](https://discuss.elastic.co/u/j91321)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 4:30pm UTC](https://discuss.elastic.co/t/eql-date-difference-function/339420 "2023-08-14T16:30:27Z")

</div>

Is there a way how to get diff of two dates in EQL? I checked the EQL functions docs, but neither subtract() nor number() seem to work on datetime fields. I know I can probably achieve what I need with ingest pipeline or…

---

## [Does snapshot and restore has history logs?](https://discuss.elastic.co/t/does-snapshot-and-restore-has-history-logs/310518)

<div class="topic-metadata">

**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\
**Replies:** 1\
**Last updated:** [July 25, 2022, 3:20pm UTC](https://discuss.elastic.co/t/does-snapshot-and-restore-has-history-logs/310518 "2022-07-25T15:20:32Z")

</div>

Hi Elasticsearch Team! Just want to ask if Elasticsearch does have History logs for the restore, where we can see the details used on that restore? Like, if we restore the snapshot, can we see what snapshot name used on…

---

## [Can't get Filebeat and Metricbeat DashBoard Setup](https://discuss.elastic.co/t/cant-get-filebeat-and-metricbeat-dashboard-setup/302655)

<div class="topic-metadata">

**Author:** [@asher-lab](https://discuss.elastic.co/u/asher-lab)\
**Replies:** 1\
**Last updated:** [April 19, 2022, 12:54am UTC](https://discuss.elastic.co/t/cant-get-filebeat-and-metricbeat-dashboard-setup/302655 "2022-04-19T00:54:30Z")

</div>

Hi, I have a problem setting up the dashboards for metricbeat and filebeat on my Kibana dashboard. I am using the OSS Version of ELK, MetricBeat and Filebeat 7.10.2 Here are the specs of my ELK Stack, MetricBeat and F…

---

## [Fallback value for a bucket aggregation](https://discuss.elastic.co/t/fallback-value-for-a-bucket-aggregation/295983)

<div class="topic-metadata">

**Author:** [@Andrew\_Graham-Yooll](https://discuss.elastic.co/u/Andrew_Graham-Yooll)\
**Replies:** 4\
**Last updated:** [February 2, 2022, 7:51am UTC](https://discuss.elastic.co/t/fallback-value-for-a-bucket-aggregation/295983 "2022-02-02T07:51:22Z")

</div>

I know this query works. However it does not work when the value of either "failed" or "declined" is not present. GET /metrics-\*/\_search { "size": 0, "query": { "bool": { "filter": \[ { "t…

---

## [Logtash pid keeps changing](https://discuss.elastic.co/t/logtash-pid-keeps-changing/274073)

<div class="topic-metadata">

**Author:** [@cyberfence](https://discuss.elastic.co/u/cyberfence)\
**Replies:** 4\
**Last updated:** [May 26, 2021, 3:17pm UTC](https://discuss.elastic.co/t/logtash-pid-keeps-changing/274073 "2021-05-26T15:17:54Z")

</div>

I am currently running ubuntu 18 server edition and the following is java / logstash version root@monitor:/usr/share/logstash/bin# ./logstash --version Using JAVA\_HOME defined java: /usr/lib/jvm/java-1.8.0-openjdk-amd6…

---

## [How to get variable names in nested JSON format](https://discuss.elastic.co/t/how-to-get-variable-names-in-nested-json-format/272768)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 4\
**Last updated:** [May 14, 2021, 1:31am UTC](https://discuss.elastic.co/t/how-to-get-variable-names-in-nested-json-format/272768 "2021-05-14T01:31:48Z")

</div>

I am using a JSON plugin to parse logs in JSON format. Eventually, the nested variable names are retrieved along with their parent names. How can I simply get just the variable names? target log: ... snip ... {... sn…

---

## [Metricbeat performance](https://discuss.elastic.co/t/metricbeat-performance/183763)

<div class="topic-metadata">

**Author:** [@fdmsantos](https://discuss.elastic.co/u/fdmsantos)\
**Replies:** 4\
**Last updated:** [June 5, 2019, 3:29pm UTC](https://discuss.elastic.co/t/metricbeat-performance/183763 "2019-06-05T15:29:16Z")

</div>

Hello, I'm developing a beat based on metricbeat. I use the report.Event to send an event. There is any way to improve the performance of this method? Exists any way to send an array of Events to the buffer instead o…

---

## [Filebeat multiline regexp patterns help](https://discuss.elastic.co/t/filebeat-multiline-regexp-patterns-help/170648)

<div class="topic-metadata">

**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\
**Replies:** 4\
**Last updated:** [March 7, 2019, 6:26am UTC](https://discuss.elastic.co/t/filebeat-multiline-regexp-patterns-help/170648 "2019-03-07T06:26:02Z")

</div>

Hi, I'm trying to use multline in filebeat to ship this application log entry as 1 document to logstash. 2019-02-12 00:01:57,302 WARN \[ScheduledTask-1\] \[name=account@domain.com;mid=1513;ds=CAL-11170;\] datasource - Sc…

---

## [Persistent Queue Error after hang up](https://discuss.elastic.co/t/persistent-queue-error-after-hang-up/95143)

<div class="topic-metadata">

**Author:** [@Shaoranlaos](https://discuss.elastic.co/u/Shaoranlaos)\
**Replies:** 4\
**Last updated:** [August 28, 2017, 7:03am UTC](https://discuss.elastic.co/t/persistent-queue-error-after-hang-up/95143 "2017-08-28T07:03:16Z")

</div>

Our Logstash has hung up(not terminated) on the 29.7. 13:55 so that no events where processed. Curiosly on the 30.7. 14:10 it has started again but threw only Errors(see under config decription) until i restarted it on …

---

## [Data node client node interaction](https://discuss.elastic.co/t/data-node-client-node-interaction/80130)

<div class="topic-metadata">

**Author:** [@Utkarsh\_Pyne](https://discuss.elastic.co/u/Utkarsh_Pyne)\
**Replies:** 4\
**Last updated:** [April 17, 2017, 2:43pm UTC](https://discuss.elastic.co/t/data-node-client-node-interaction/80130 "2017-04-17T14:43:20Z")

</div>

We use separate data and client nodes in our cluster, all reads go through the client nodes. So client nodes act as co-ordinating nodes in our case. Now for this given setup I have couple of questions in my mind, Wha…

---

## [Loss of Connection between Nodes](https://discuss.elastic.co/t/loss-of-connection-between-nodes/11044)

<div class="topic-metadata">

**Author:** [@govind201](https://discuss.elastic.co/u/govind201)\
**Replies:** 4\
**Last updated:** [March 11, 2013, 9:06pm UTC](https://discuss.elastic.co/t/loss-of-connection-between-nodes/11044 "2013-03-11T21:06:35Z")

</div>

Every once in a while, one of my master nodes loses connection with the other (primary and slave) nodes. When I execute 'curl -XGET localhost:9200/\_nodes', the cluster just hangs and I get no response (cluster heal…

---

## [Visio stencils](https://discuss.elastic.co/t/visio-stencils/317368)

<div class="topic-metadata">

**Author:** [@bering](https://discuss.elastic.co/u/bering)\
**Replies:** 0\
**Last updated:** [October 25, 2022, 6:20am UTC](https://discuss.elastic.co/t/visio-stencils/317368 "2022-10-25T06:20:09Z")

</div>

Some time ago I was able to download logos and other Elasic figures that could be imported into Visio from this link Trademarks found on Elastic.co | Elastic but that now links to some trademark page. Does anyone know w…

---

## ["Invalid UTF-8 middle byte 0x22](https://discuss.elastic.co/t/invalid-utf-8-middle-byte-0x22/144330)

<div class="topic-metadata">

**Author:** [@Andrea\_Boccaforno](https://discuss.elastic.co/u/Andrea_Boccaforno)\
**Replies:** 0\
**Last updated:** [August 14, 2018, 10:45am UTC](https://discuss.elastic.co/t/invalid-utf-8-middle-byte-0x22/144330 "2018-08-14T10:45:12Z")

</div>

Good morning when I make this request: { "query": { "bool": { "must": { "match": { "titolo": "'.$titolo\_check.'" } }, "filter": \[ { "term": { "superficie": "'.$superficie.'" } }, …

---

## [Grafana with elasticsearch : HTTP 400 bad request issue](https://discuss.elastic.co/t/grafana-with-elasticsearch-http-400-bad-request-issue/142791)

<div class="topic-metadata">

**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\
**Replies:** 0\
**Last updated:** [August 2, 2018, 4:44pm UTC](https://discuss.elastic.co/t/grafana-with-elasticsearch-http-400-bad-request-issue/142791 "2018-08-02T16:44:07Z")

</div>

I am trying to bind Grafana 5.2.1 with ES 5.5. I success to make an ES Data Source and it works perfectly ; index and time field are read correctly without error). Then, I am facing a weird issue ; when I create a dash…

---

## [Import JSON file in ElasticSearch for visualization in Kibana](https://discuss.elastic.co/t/import-json-file-in-elasticsearch-for-visualization-in-kibana/125512)

<div class="topic-metadata">

**Author:** [@bpescador](https://discuss.elastic.co/u/bpescador)\
**Replies:** 0\
**Last updated:** [March 25, 2018, 8:23pm UTC](https://discuss.elastic.co/t/import-json-file-in-elasticsearch-for-visualization-in-kibana/125512 "2018-03-25T20:23:10Z")

</div>

Can someone suggest a strategy for importing json results into ElasticSearch from the AntWeb.org API: https://www.antweb.org/api.do example json (of 630,000 records): "specimens": \[ { "antwebTaxonName": "myrmicinaete…

---

## [Nested script scoring](https://discuss.elastic.co/t/nested-script-scoring/97561)

<div class="topic-metadata">

**Author:** [@sankalp\_gupta](https://discuss.elastic.co/u/sankalp_gupta)\
**Replies:** 0\
**Last updated:** [August 18, 2017, 10:20am UTC](https://discuss.elastic.co/t/nested-script-scoring/97561 "2017-08-18T10:20:14Z")

</div>

Hi This is first time I’m posting so let me know if its less understandable. I have a nested document structure "question":{ "questionId":{"type":"integer"}, "userId":{"type":"integer"}, "action": { …

---

## [Getting "empty text" and "invalid version format" in elasticsearch log](https://discuss.elastic.co/t/getting-empty-text-and-invalid-version-format-in-elasticsearch-log/26177)

<div class="topic-metadata">

**Author:** [@lcampbell](https://discuss.elastic.co/u/lcampbell)\
**Replies:** 0\
**Last updated:** [July 23, 2015, 5:24pm UTC](https://discuss.elastic.co/t/getting-empty-text-and-invalid-version-format-in-elasticsearch-log/26177 "2015-07-23T17:24:39Z")

</div>

Im running ELK stack, and everything seems to be running ok, receiving events from logstash and data is observable in our kibana dashboard, but noticed these in the elasticsearch logs. Is there anything I can do or can I…

---

## [Get records from index based on result from another search](https://discuss.elastic.co/t/get-records-from-index-based-on-result-from-another-search/346074)

<div class="topic-metadata">

**Author:** [@Mhag](https://discuss.elastic.co/u/Mhag)\
**Replies:** 5\
**Last updated:** [November 1, 2023, 10:41am UTC](https://discuss.elastic.co/t/get-records-from-index-based-on-result-from-another-search/346074 "2023-11-01T10:41:01Z")

</div>

Hi, I have an index where we collect the requests to our api somthing like this : myindex: url: /some/path service: someservice uuid: xxx-yyy-zzz-uuu And I have a requirement to get or correlate all urls that…

---

## [Insert multi fields data](https://discuss.elastic.co/t/insert-multi-fields-data/260606)

<div class="topic-metadata">

**Author:** [@mojtaba\_safavi](https://discuss.elastic.co/u/mojtaba_safavi)\
**Replies:** 5\
**Last updated:** [January 13, 2021, 1:04am UTC](https://discuss.elastic.co/t/insert-multi-fields-data/260606 "2021-01-13T01:04:48Z")

</div>

hi, I am looking for a solution that inserts translated data into multi fields for multi-language

---

## [Filebeat folder structured not correct for version 7.10](https://discuss.elastic.co/t/filebeat-folder-structured-not-correct-for-version-7-10/257927)

<div class="topic-metadata">

**Author:** [@kbirhan](https://discuss.elastic.co/u/kbirhan)\
**Replies:** 5\
**Last updated:** [December 12, 2020, 6:18am UTC](https://discuss.elastic.co/t/filebeat-folder-structured-not-correct-for-version-7-10/257927 "2020-12-12T06:18:57Z")

</div>

filebeat bin file location in the service file declared might be in the wrong location for debian platform. after moving the filebeat bin file (located in /usr/ share/filebeat/) to /usr/share/filebeat/bin/ folder everyt…

---

## [Less number of active ML Node in anomaly detection jobs](https://discuss.elastic.co/t/less-number-of-active-ml-node-in-anomaly-detection-jobs/254827)

<div class="topic-metadata">

**Author:** [@heric](https://discuss.elastic.co/u/heric)\
**Replies:** 5\
**Last updated:** [November 10, 2020, 4:15pm UTC](https://discuss.elastic.co/t/less-number-of-active-ml-node-in-anomaly-detection-jobs/254827 "2020-11-10T16:15:31Z")

</div>

Hi, I have 5 nodes elasticsearch cluster and for all of them i activated ML roles. from GET \_nodes i can see ml role for each of the nodes, however in the anomaly detection jobs i saw only 4 active ML nodes "r…

---

## [How send the log to different index in Kibana](https://discuss.elastic.co/t/how-send-the-log-to-different-index-in-kibana/227817)

<div class="topic-metadata">

**Author:** [@Prabhu\_Chinnasamy](https://discuss.elastic.co/u/Prabhu_Chinnasamy)\
**Replies:** 5\
**Last updated:** [April 13, 2020, 9:20pm UTC](https://discuss.elastic.co/t/how-send-the-log-to-different-index-in-kibana/227817 "2020-04-13T21:20:05Z")

</div>

I am new to Elastic stack and trying to see the different logs under different Kiban indexes. for an example, I am trying to place the logs from my dhcp server under a index called "DHCP". My logstash config is as below,…

---

## [Elastic search coordinating-node role - complex aggregations](https://discuss.elastic.co/t/elastic-search-coordinating-node-role-complex-aggregations/225622)

<div class="topic-metadata">

**Author:** [@nages](https://discuss.elastic.co/u/nages)\
**Replies:** 5\
**Last updated:** [March 31, 2020, 10:27am UTC](https://discuss.elastic.co/t/elastic-search-coordinating-node-role-complex-aggregations/225622 "2020-03-31T10:27:06Z")

</div>

I understood coordinate node broadcasts the search request and gathers the results received from data nodes using "query then fetch phase" . Does it do it in one iteration of "query then fetch phase" or a search request…

---

## [Aggregate not working as expected (ES VERSION : 6.2.2)](https://discuss.elastic.co/t/aggregate-not-working-as-expected-es-version-6-2-2/174487)

<div class="topic-metadata">

**Author:** [@sur1029](https://discuss.elastic.co/u/sur1029)\
**Replies:** 5\
**Last updated:** [April 3, 2019, 10:46am UTC](https://discuss.elastic.co/t/aggregate-not-working-as-expected-es-version-6-2-2/174487 "2019-04-03T10:46:32Z")

</div>

Hi, I have putting data in elastic search something like this: Data 1: { "app": "pigeon", "time": "2019-03-28T06:22:02.175517", "email": \[ { "flow\_name" : "AuthOTP", "1": 80, "2": 79, "3": 12, "4": 60 } \] , …

---

## [How to perform user authentication, before going to kibana dashboad?](https://discuss.elastic.co/t/how-to-perform-user-authentication-before-going-to-kibana-dashboad/112991)

<div class="topic-metadata">

**Author:** [@sreenu](https://discuss.elastic.co/u/sreenu)\
**Replies:** 5\
**Last updated:** [December 28, 2017, 5:02pm UTC](https://discuss.elastic.co/t/how-to-perform-user-authentication-before-going-to-kibana-dashboad/112991 "2017-12-28T17:02:27Z")

</div>

Hi, I want to add user authentication using custom html page when someone hits the server on which kibana is running. So when a person hits the server the first page should be the login page, then it will authenticate …

---

## [Mapping](https://discuss.elastic.co/t/mapping/46927)

<div class="topic-metadata">

**Author:** [@Lucky](https://discuss.elastic.co/u/Lucky)\
**Replies:** 5\
**Last updated:** [April 11, 2016, 2:54am UTC](https://discuss.elastic.co/t/mapping/46927 "2016-04-11T02:54:27Z")

</div>

My logstash file, filter { csv { columns =\> \[ "status", "country", "state", "city" \] separator =\> "," } } And I am mapping by using geo\_point data field, "mappings" : { "defaul…

---

## [How to create a filebeat processor?](https://discuss.elastic.co/t/how-to-create-a-filebeat-processor/238417)

<div class="topic-metadata">

**Author:** [@xvdy](https://discuss.elastic.co/u/xvdy)\
**Replies:** 2\
**Last updated:** [June 28, 2020, 2:59am UTC](https://discuss.elastic.co/t/how-to-create-a-filebeat-processor/238417 "2020-06-28T02:59:47Z")

</div>

We want to use filebeat to gather mysql slow log. I want to create a filebeat processor to convert mysql slow log to json format and add a sql fingerprint field. I find a related issue here: https://github.com/elastic/b…

---

## [Passing context to another thread](https://discuss.elastic.co/t/passing-context-to-another-thread/349055)

<div class="topic-metadata">

**Author:** [@johngregg](https://discuss.elastic.co/u/johngregg)\
**Replies:** 3\
**Last updated:** [December 11, 2023, 3:52pm UTC](https://discuss.elastic.co/t/passing-context-to-another-thread/349055 "2023-12-11T15:52:09Z")

</div>

I am using the 1.42.0 java agent. I am working on an app that uses an unsupported threading library. Based on reading some posts here, we decided to use the OTel library like this: import io.opentelemetry.api.trace.Sp…

---

## [Mapping multiple properties to a single one](https://discuss.elastic.co/t/mapping-multiple-properties-to-a-single-one/275966)

<div class="topic-metadata">

**Author:** [@mats990](https://discuss.elastic.co/u/mats990)\
**Replies:** 3\
**Last updated:** [June 28, 2021, 11:21am UTC](https://discuss.elastic.co/t/mapping-multiple-properties-to-a-single-one/275966 "2021-06-28T11:21:18Z")

</div>

Hi, Let's say you have a cluster with application logs. And since multiple applications are sending data to the cluster they have different properties. For example, one application will send a log message in the "messag…

---

## [Logstash 7.10.x version does not start](https://discuss.elastic.co/t/logstash-7-10-x-version-does-not-start/275178)

<div class="topic-metadata">

**Author:** [@Ramya\_Ramamurthy1](https://discuss.elastic.co/u/Ramya_Ramamurthy1)\
**Replies:** 3\
**Last updated:** [June 24, 2021, 6:06am UTC](https://discuss.elastic.co/t/logstash-7-10-x-version-does-not-start/275178 "2021-06-24T06:06:51Z")

</div>

I have downloaded the .tar.gz file and tried bringing up logstash through the logstash script. I am unable to bring up any of the 7.10.2 versions of logstash with the below error. I see posts about the permissions of th…

---

## [Elastic Apm java agent and spring boot with embedded jetty - All transactions get added to application#main](https://discuss.elastic.co/t/elastic-apm-java-agent-and-spring-boot-with-embedded-jetty-all-transactions-get-added-to-application-main/244329)

<div class="topic-metadata">

**Author:** [@rahul.joshi](https://discuss.elastic.co/u/rahul.joshi)\
**Replies:** 3\
**Last updated:** [August 12, 2020, 5:00am UTC](https://discuss.elastic.co/t/elastic-apm-java-agent-and-spring-boot-with-embedded-jetty-all-transactions-get-added-to-application-main/244329 "2020-08-12T05:00:56Z")

</div>

Turning on method tracing for spring-boot application that uses embedded jetty will add all RestController transactions to the "application#main" transaction as opposed to recording each call to the controller as a separ…

---

## [Send logs from native mobile apps to Kibana](https://discuss.elastic.co/t/send-logs-from-native-mobile-apps-to-kibana/226086)

<div class="topic-metadata">

**Author:** [@magdamiu](https://discuss.elastic.co/u/magdamiu)\
**Replies:** 0\
**Last updated:** [April 1, 2020, 4:08pm UTC](https://discuss.elastic.co/t/send-logs-from-native-mobile-apps-to-kibana/226086 "2020-04-01T16:08:03Z")

</div>

Hello, How could I send the logs from a native mobile app (android, ios) to Kibana? What product provided by elastic should I use? Thank you, Magda

---

## [\[Questions ES/Helm charts\] Difference between two types of services](https://discuss.elastic.co/t/questions-es-helm-charts-difference-between-two-types-of-services/204282)

<div class="topic-metadata">

**Author:** [@usamaahmadkhan](https://discuss.elastic.co/u/usamaahmadkhan)\
**Replies:** 3\
**Last updated:** [October 21, 2019, 7:25pm UTC](https://discuss.elastic.co/t/questions-es-helm-charts-difference-between-two-types-of-services/204282 "2019-10-21T19:25:46Z")

</div>

Hi, I was exploring Helm charts for Elasticsearch to deploy on my k8s cluster. I have 2 questions: I successfully deployed 1 master 1 client and 2 data nodes. 6 services were created 2 for each distinct type (normal a…

---

## [Properites file inside java jar](https://discuss.elastic.co/t/properites-file-inside-java-jar/193280)

<div class="topic-metadata">

**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\
**Replies:** 3\
**Last updated:** [August 1, 2019, 11:31am UTC](https://discuss.elastic.co/t/properites-file-inside-java-jar/193280 "2019-08-01T11:31:21Z")

</div>

I'm building a jar file that gets run on a remote server, is the agent jar on that server able to recognise a properties file that sits inside a jar, or does the properties file have to sit alongside the agent jar?

---

## [Create grok for two different kind of logs](https://discuss.elastic.co/t/create-grok-for-two-different-kind-of-logs/180282)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 8\
**Last updated:** [May 13, 2019, 7:58am UTC](https://discuss.elastic.co/t/create-grok-for-two-different-kind-of-logs/180282 "2019-05-13T07:58:04Z")

</div>

Hello Can someone Please guide me how to create grok for two different kind of logs. A help would be highly appreciated. 2019/05/01 00:52:51.301 \< Success 2019/05/01 00:53:04.443 \> GET http://www.testenvironment.com/s…

---

## [Merge 3 CSV files based on related column](https://discuss.elastic.co/t/merge-3-csv-files-based-on-related-column/148755)

<div class="topic-metadata">

**Author:** [@ravi\_yadav1](https://discuss.elastic.co/u/ravi_yadav1)\
**Replies:** 3\
**Last updated:** [September 19, 2018, 5:07am UTC](https://discuss.elastic.co/t/merge-3-csv-files-based-on-related-column/148755 "2018-09-19T05:07:01Z")

</div>

Hi, I am trying to merge 3 csv files which have columns like: 1st CSV: \[oid, symbol, price, qty, side, err1\] 2nd CSV: \[oid, tid, symbol, price, qty, side, err2, error\_msg\] 3rd CSV: \[tid, symbol, price, qty, side, err…

---

## [Shiping logs from kubernetes to elasticsearch using beats - Failed to connect: Get http://xxxxxx.us-central1.gcp.cloud.es.io:9243: read tcp 13.17.4.10:40766-\>31.177.77.2:9243: read: connection reset by peer](https://discuss.elastic.co/t/shiping-logs-from-kubernetes-to-elasticsearch-using-beats-failed-to-connect-get-http-xxxxxx-us-central1-gcp-cloud-es-io-9243-read-tcp-13-17-4-10-40766-31-177-77-2-9243-read-connection-reset-by-peer/112236)

<div class="topic-metadata">

**Author:** [@dinaWork](https://discuss.elastic.co/u/dinaWork)\
**Replies:** 3\
**Last updated:** [December 20, 2017, 10:45am UTC](https://discuss.elastic.co/t/shiping-logs-from-kubernetes-to-elasticsearch-using-beats-failed-to-connect-get-http-xxxxxx-us-central1-gcp-cloud-es-io-9243-read-tcp-13-17-4-10-40766-31-177-77-2-9243-read-connection-reset-by-peer/112236 "2017-12-20T10:45:38Z")

</div>

following beats fails to ship logs get the following log: ERR Failed to connect: Get http://xxxxxx.us-central1.gcp.cloud.es.io:9243: read tcp 13.17.4.10:40766-\>31.177.77.2:9243: read: connection reset by peer 11:38…

[Previous page](https://discuss.elastic.co/top.md?page=1572&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1574&per_page=50&period=all)
