# Top **URL:** https://discuss.elastic.co/top.md?page=1580&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1581 --- ## [Ruby exception occurred: Invalid FieldReference: \`eventData\[logReferences\]\`](https://discuss.elastic.co/t/ruby-exception-occurred-invalid-fieldreference-eventdata-logreferences/230558)
**Author:** [@Abinash](https://discuss.elastic.co/u/Abinash)\ **Replies:** 2\ **Last updated:** [May 4, 2020, 12:17pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-invalid-fieldreference-eventdata-logreferences/230558 "2020-05-04T12:17:09Z")
There was issue with lagstash version 7.X version on words. But the my logstash script worked with 6.2.4 with out this kind of this error. Input { "Versions": { "0.1": { "eventData": { … --- ## [Filebeat nginx include custom log field](https://discuss.elastic.co/t/filebeat-nginx-include-custom-log-field/206172)
**Author:** [@George\_Jetson](https://discuss.elastic.co/u/George_Jetson)\ **Replies:** 2\ **Last updated:** [November 1, 2019, 4:21pm UTC](https://discuss.elastic.co/t/filebeat-nginx-include-custom-log-field/206172 "2019-11-01T16:21:51Z")
Nginx: Running latest nginx on Ubuntu. We have added some custom fields to the access log (e.g. server\_name). Filebeat: Just setup 7.4.1 and trying to use the filebeat nginx module to send the log files to our version … --- ## [Time\_file field of S3 ouptut plugin](https://discuss.elastic.co/t/time-file-field-of-s3-ouptut-plugin/182502)
**Author:** [@Mudit\_Mehta1](https://discuss.elastic.co/u/Mudit_Mehta1)\ **Replies:** 2\ **Last updated:** [May 24, 2019, 6:44am UTC](https://discuss.elastic.co/t/time-file-field-of-s3-ouptut-plugin/182502 "2019-05-24T06:44:36Z")
I am using S3 output plugin for logstash version 7.0.1 to ship logs to S3 bucket. I set up a docker container running logstash. But the plugin is creating objects in S3 after 15-20 mins delay. Is this because of the time… --- ## [How to customize data table visualization?](https://discuss.elastic.co/t/how-to-customize-data-table-visualization/90390)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 2\ **Last updated:** [June 23, 2017, 5:22am UTC](https://discuss.elastic.co/t/how-to-customize-data-table-visualization/90390 "2017-06-23T05:22:02Z")
I want give check box for the rows in data table.How can I achive the same. --- ## [ES not working](https://discuss.elastic.co/t/es-not-working/87326)
**Author:** [@r3v3r53](https://discuss.elastic.co/u/r3v3r53)\ **Replies:** 2\ **Last updated:** [May 27, 2017, 11:07am UTC](https://discuss.elastic.co/t/es-not-working/87326 "2017-05-27T11:07:07Z")
Hello my elasticsearch is not active, what am i missing here? from status: elasticsearch.service - LSB: elasticsearch Loaded: loaded (/etc/init.d/elasticsearch) Active: failed (Result: timeout) since Sat 2017-0… --- ## [Help a beginner to build the asciidoc docs :-D](https://discuss.elastic.co/t/help-a-beginner-to-build-the-asciidoc-docs-d/83159)
**Author:** [@JensMadsen](https://discuss.elastic.co/u/JensMadsen)\ **Replies:** 2\ **Last updated:** [April 26, 2017, 12:43pm UTC](https://discuss.elastic.co/t/help-a-beginner-to-build-the-asciidoc-docs-d/83159 "2017-04-26T12:43:37Z")
Dear All I am new to elasticsearch. I want to use the most recent version and I am therefore looking for the most updated version of the "Elasticsearch: The Definitive Guide". I have cloned the repo but when I try to … --- ## [Filebeat is unable to read file for 4 hours every day](https://discuss.elastic.co/t/filebeat-is-unable-to-read-file-for-4-hours-every-day/79436)
**Author:** [@luckyswede](https://discuss.elastic.co/u/luckyswede)\ **Replies:** 2\ **Last updated:** [March 23, 2017, 9:19pm UTC](https://discuss.elastic.co/t/filebeat-is-unable-to-read-file-for-4-hours-every-day/79436 "2017-03-23T21:19:50Z")
Hi all, I have had filebeat 2.3 running successfully for several months on several Ubuntu 16.04 servers. The other week I installed logrotate and configured cron to run it every hour. After logrotate was installed filebe… --- ## [Parsing metricbeat json log in filebeat -\> got processing timestamp, not log timestamp](https://discuss.elastic.co/t/parsing-metricbeat-json-log-in-filebeat-got-processing-timestamp-not-log-timestamp/76610)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [February 28, 2017, 10:23am UTC](https://discuss.elastic.co/t/parsing-metricbeat-json-log-in-filebeat-got-processing-timestamp-not-log-timestamp/76610 "2017-02-28T10:23:07Z")
Hi, I use following workstream: metricbeat for gathering metrics -\> using file output to buffer on disk -\> transfer the log via filebeat to logstash -\> do further enrichment -\> send to elasticsearch. Here is my fil… --- ## [\[Solved\] Environment variable references doesn't seem to work in output](https://discuss.elastic.co/t/solved-environment-variable-references-doesnt-seem-to-work-in-output/63005)
**Author:** [@stachdude](https://discuss.elastic.co/u/stachdude)\ **Replies:** 2\ **Last updated:** [October 28, 2016, 6:30am UTC](https://discuss.elastic.co/t/solved-environment-variable-references-doesnt-seem-to-work-in-output/63005 "2016-10-28T06:30:45Z")
Using 2.4.0 version of Logstash, I ve tried to use environment variable as index name setting of an elasticsearch output plugin as so: I set env var : export ES\_IDX="test" output part of config file output { elasti… --- ## [Failed to load temp](https://discuss.elastic.co/t/failed-to-load-temp/63517)
**Author:** [@Idan](https://discuss.elastic.co/u/Idan)\ **Replies:** 2\ **Last updated:** [October 21, 2016, 2:42pm UTC](https://discuss.elastic.co/t/failed-to-load-temp/63517 "2016-10-21T14:42:42Z")
I'm attempting to load the template for the Metricbeat to the kibana And I'm getting this error: {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"No handler for type \[keyword\] declared on field \[hostn… --- ## [Logstash webhdfs output error](https://discuss.elastic.co/t/logstash-webhdfs-output-error/55832)
**Author:** [@lizhenmxcz](https://discuss.elastic.co/u/lizhenmxcz)\ **Replies:** 2\ **Last updated:** [July 20, 2016, 9:24am UTC](https://discuss.elastic.co/t/logstash-webhdfs-output-error/55832 "2016-07-20T09:24:07Z")
here is the config: input { redis { host =\> "127.0.0.1" port =\> "6379" key =\> "abc" data\_type =\> "list" codec =\> "plain" } } output { webhdfs { host =\> "192.168.xx.xxx" path =\> "/abc.log" … --- ## [Shield Plugin for Kibana](https://discuss.elastic.co/t/shield-plugin-for-kibana/45147)
**Author:** [@Michael1](https://discuss.elastic.co/u/Michael1)\ **Replies:** 2\ **Last updated:** [March 22, 2016, 8:29pm UTC](https://discuss.elastic.co/t/shield-plugin-for-kibana/45147 "2016-03-22T20:29:57Z")
I am running ElasticSearch 2.1.1 and Kibana 4.3.1. I see in the instructions, it lists a download for the Shield Kibana plugin, but it is for 2.2.1. Is there a download somewhere for older versions of the plugin, parti… --- ## [Decay scale depending on a field](https://discuss.elastic.co/t/decay-scale-depending-on-a-field/24706)
**Author:** [@mykola](https://discuss.elastic.co/u/mykola)\ **Replies:** 2\ **Last updated:** [July 1, 2015, 12:02pm UTC](https://discuss.elastic.co/t/decay-scale-depending-on-a-field/24706 "2015-07-01T12:02:17Z")
I have three groups of docs (e.g. docs from registered, verified and unregistered users), and I want to score them using decay function. However, I need to have different speed of decay (scale) for each of this three g… --- ## [Logstash into Elasticsearch Mapping Issues](https://discuss.elastic.co/t/logstash-into-elasticsearch-mapping-issues/20058)
**Author:** [@elorion](https://discuss.elastic.co/u/elorion)\ **Replies:** 2\ **Last updated:** [October 6, 2014, 10:15pm UTC](https://discuss.elastic.co/t/logstash-into-elasticsearch-mapping-issues/20058 "2014-10-06T22:15:17Z")
Anyone have an idea what to do in a situation where I am using the output function in logstash to send it to an Elasticsearch cluster via protocol http and using a JSON template....and the mappings in the JSON templa… --- ## [Prevent logstash from adding additional data on output](https://discuss.elastic.co/t/prevent-logstash-from-adding-additional-data-on-output/307834)
**Author:** [@mikhatanu](https://discuss.elastic.co/u/mikhatanu)\ **Replies:** 6\ **Last updated:** [June 30, 2022, 6:11am UTC](https://discuss.elastic.co/t/prevent-logstash-from-adding-additional-data-on-output/307834 "2022-06-30T06:11:12Z")
Hello, i am using the kafka output and input plugins in logstash. The log route is like this: logstash -\> kafka -\> logstash (indexing) -\> elasticsearch. logstash encodes additional data (such as file path, hostname, etc)… --- ## [Dashboard / Canvas based on two indices](https://discuss.elastic.co/t/dashboard-canvas-based-on-two-indices/258729)
**Author:** [@Itay\_Bittan](https://discuss.elastic.co/u/Itay_Bittan)\ **Replies:** 6\ **Last updated:** [December 17, 2020, 5:04pm UTC](https://discuss.elastic.co/t/dashboard-canvas-based-on-two-indices/258729 "2020-12-17T17:04:35Z")
I have two indices: users & activities. Users index data looks like: { "email": "alice@gmail.com", "Name": "Alice A" }, { "email": "bob@gmail.com", "name": "Bob B" }, ... activity index data looks like… --- ## [Get the node of a Runner](https://discuss.elastic.co/t/get-the-node-of-a-runner/163515)
**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\ **Replies:** 6\ **Last updated:** [January 10, 2019, 9:02am UTC](https://discuss.elastic.co/t/get-the-node-of-a-runner/163515 "2019-01-10T09:02:52Z")
I feel like I must be missing something obvious in the API Reference but can't work out how to find which node a runner is in through the API. Thanks in advance :smile: --- ## [Which is more efficient deleting an Index, or chunk wise bulk delete of docs](https://discuss.elastic.co/t/which-is-more-efficient-deleting-an-index-or-chunk-wise-bulk-delete-of-docs/134920)
**Author:** [@vmandke](https://discuss.elastic.co/u/vmandke)\ **Replies:** 6\ **Last updated:** [June 7, 2018, 8:17am UTC](https://discuss.elastic.co/t/which-is-more-efficient-deleting-an-index-or-chunk-wise-bulk-delete-of-docs/134920 "2018-06-07T08:17:50Z")
ES (1.7.5) From a GC, memeory point of view which is more efficient? I have multiple Indices in an ES cluster one of which has 19,809,064 documents. the cluster has 8 data nodes, and 3 masters. One shard per node per in… --- ## [Real time indexes](https://discuss.elastic.co/t/real-time-indexes/2206)
**Author:** [@ton](https://discuss.elastic.co/u/ton)\ **Replies:** 6\ **Last updated:** [June 10, 2015, 6:56am UTC](https://discuss.elastic.co/t/real-time-indexes/2206 "2015-06-10T06:56:00Z")
does elasticsearch support real time indexes ? --- ## [Number of shards in 4 node Cluster](https://discuss.elastic.co/t/number-of-shards-in-4-node-cluster/22718)
**Author:** [@John\_S](https://discuss.elastic.co/u/John_S)\ **Replies:** 6\ **Last updated:** [March 18, 2015, 8:39pm UTC](https://discuss.elastic.co/t/number-of-shards-in-4-node-cluster/22718 "2015-03-18T20:39:19Z")
Hi All, Is there any best practices of having on the number of shards for a cluster? I have a 4 node cluster and used shards of 20. During any node failure or other events i doubts since the shards number is hi… --- ## [Index template creation: can we parameterize the shards and replica](https://discuss.elastic.co/t/index-template-creation-can-we-parameterize-the-shards-and-replica/268811)
**Author:** [@raja\_augstin](https://discuss.elastic.co/u/raja_augstin)\ **Replies:** 8\ **Last updated:** [March 31, 2021, 7:36am UTC](https://discuss.elastic.co/t/index-template-creation-can-we-parameterize-the-shards-and-replica/268811 "2021-03-31T07:36:04Z")
can't we parameterize index shards and replicas in index template. { "index\_template\_1": { "index\_patterns": \[ "\*" \], "settings": { "index": { "analysis": { "analyzer": { "index\_edgeNGram\_analyzer": { "filter"… --- ## [How to build attribute mapping for text with keyword in Nest C#](https://discuss.elastic.co/t/how-to-build-attribute-mapping-for-text-with-keyword-in-nest-c/169059)
**Author:** [@Nico92](https://discuss.elastic.co/u/Nico92)\ **Replies:** 0\ **Last updated:** [February 19, 2019, 4:02pm UTC](https://discuss.elastic.co/t/how-to-build-attribute-mapping-for-text-with-keyword-in-nest-c/169059 "2019-02-19T16:02:33Z")
Hey guys, I'm building my application with C#. I want to build an field with text and keyword with ignore\_above = int.MaxValue. All of that I want to do with attribute mapping of my model class. \[ElasticsearchTyp… --- ## [Document groups privileges](https://discuss.elastic.co/t/document-groups-privileges/148337)
**Author:** [@zalpany2000](https://discuss.elastic.co/u/zalpany2000)\ **Replies:** 8\ **Last updated:** [September 13, 2018, 9:21pm UTC](https://discuss.elastic.co/t/document-groups-privileges/148337 "2018-09-13T21:21:07Z")
Hello Elasticers have anyone experience with having different groups of documents each have certain access privileges from certain users? I mean for editing or adding new documents into this group? the case is that, we… --- ## [Kibana Terms panel: How to group similar values](https://discuss.elastic.co/t/kibana-terms-panel-how-to-group-similar-values/20382)
**Author:** [@Nicolas](https://discuss.elastic.co/u/Nicolas)\ **Replies:** 0\ **Last updated:** [October 22, 2014, 2:27pm UTC](https://discuss.elastic.co/t/kibana-terms-panel-how-to-group-similar-values/20382 "2014-10-22T14:27:37Z")
Hi, I used the ELK stack to monitor an error log. Using Kibana, I want to see the top errors (count) that are occuring, but I want similar errors to be regroup. For example, among all errors, I have these similar … --- ## [How rollup jobs memorize last processed document?](https://discuss.elastic.co/t/how-rollup-jobs-memorize-last-processed-document/204595)
**Author:** [@isharamadhawa](https://discuss.elastic.co/u/isharamadhawa)\ **Replies:** 3\ **Last updated:** [October 24, 2019, 5:10pm UTC](https://discuss.elastic.co/t/how-rollup-jobs-memorize-last-processed-document/204595 "2019-10-24T17:10:04Z")
I went through my rollup job JSON file and I think current\_position in below config is the way how a rollup job memorizes the last document it processed. "status": { "job\_state": "started", "current\_position": {… --- ## [Agrégation - Demande aide](https://discuss.elastic.co/t/agregation-demande-aide/318307)
**Author:** [@Artefact](https://discuss.elastic.co/u/Artefact)\ **Replies:** 5\ **Last updated:** [November 7, 2022, 2:38pm UTC](https://discuss.elastic.co/t/agregation-demande-aide/318307 "2022-11-07T14:38:18Z")
Bonjour, Pour un projet, mes requêtes d'agrégation ne me renvoient pas toutes les valeurs attendues et je n'arrive pas à comprendre pourquoi, si quelqu'un a une idée ou une piste à me communiquer :wink: L'index et les … --- ## [Establish connection to Filebeat from Logstash](https://discuss.elastic.co/t/establish-connection-to-filebeat-from-logstash/275547)
**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\ **Replies:** 5\ **Last updated:** [June 16, 2021, 8:29pm UTC](https://discuss.elastic.co/t/establish-connection-to-filebeat-from-logstash/275547 "2021-06-16T20:29:18Z")
Hi All, Let's assume an application I would like to monitor is running in a Security-Network-Zone (e.g. DMZ). It should be integrated via Filebeat into the Logstash & Elasticsearch platform running in the internal netwo… --- ## [\[Need help\] Error when installing winlogbeat on Windows Server 2012 R2](https://discuss.elastic.co/t/need-help-error-when-installing-winlogbeat-on-windows-server-2012-r2/259351)
**Author:** [@lachezar.uzunov](https://discuss.elastic.co/u/lachezar.uzunov)\ **Replies:** 5\ **Last updated:** [January 7, 2021, 7:00am UTC](https://discuss.elastic.co/t/need-help-error-when-installing-winlogbeat-on-windows-server-2012-r2/259351 "2021-01-07T07:00:45Z")
Hello everyone I need help debugging what is actually going on. I am installing winlogbeat as mentioned in the documentation (www.elastic.co/guide/en/beats/winlogbeat/7.10/winlogbeat-installation-configuration.html). T… --- ## [Lifecycle error](https://discuss.elastic.co/t/lifecycle-error/248987)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 5\ **Last updated:** [September 24, 2020, 10:00am UTC](https://discuss.elastic.co/t/lifecycle-error/248987 "2020-09-24T10:00:07Z")
Hi, Getting a bit desperate of all things that go wrong. This time I bump into this lifecycle error. I really want to split indexes op since they grow to hundreds of Gb. But... Index lifecycle error illegal\_argument… --- ## [Can a Cluster Reside on more than 1 Allocator?](https://discuss.elastic.co/t/can-a-cluster-reside-on-more-than-1-allocator/188282)
**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\ **Replies:** 5\ **Last updated:** [July 2, 2019, 2:58pm UTC](https://discuss.elastic.co/t/can-a-cluster-reside-on-more-than-1-allocator/188282 "2019-07-02T14:58:25Z")
I currently have a cluster which sits on one allocator. As data grows over time, is it possible for this cluster to be scaled out horizontally over a few allocators? --- ## [Difference regarding custom Namespace Setting via Fleet Policy Setting or Integrations itself?](https://discuss.elastic.co/t/difference-regarding-custom-namespace-setting-via-fleet-policy-setting-or-integrations-itself/345290)
**Author:** [@daniel-san](https://discuss.elastic.co/u/daniel-san)\ **Replies:** 4\ **Last updated:** [October 24, 2023, 1:35pm UTC](https://discuss.elastic.co/t/difference-regarding-custom-namespace-setting-via-fleet-policy-setting-or-integrations-itself/345290 "2023-10-24T13:35:40Z")
Hello there, hope you're doing fine! My question: For configure any custom Namespace to separate ingested Data in its own/specific Data Streams i've seen two different places to do this. One is via the Fleet Policy it… --- ## [Logstash file input performance](https://discuss.elastic.co/t/logstash-file-input-performance/276050)
**Author:** [@seadub](https://discuss.elastic.co/u/seadub)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 2:03pm UTC](https://discuss.elastic.co/t/logstash-file-input-performance/276050 "2021-06-17T14:03:55Z")
Continuing the discussion from Tuning to handle extreme initial ingestion conditions (with logstash): @Christian\_Dahlqvist - I know I'm resurrecting an old thread here but I'd love to confirm a point you'd raised. I hop… --- ## [Winlogbeat unable to connect to ES after enabling x-pack](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-to-es-after-enabling-x-pack/188334)
**Author:** [@K\_B1](https://discuss.elastic.co/u/K_B1)\ **Replies:** 4\ **Last updated:** [July 2, 2019, 2:10pm UTC](https://discuss.elastic.co/t/winlogbeat-unable-to-connect-to-es-after-enabling-x-pack/188334 "2019-07-02T14:10:25Z")
My winlogbeat is on windows server and ELK is on Ubuntu server. After upgrading to 7.1.1 and enabling X-pack , winlogbeat is unable to connect to ES and giving me error: connectex: No connection could be made because th… --- ## [Request URL is not consistent with Transaction name?](https://discuss.elastic.co/t/request-url-is-not-consistent-with-transaction-name/171631)
**Author:** [@fr0der1c](https://discuss.elastic.co/u/fr0der1c)\ **Replies:** 4\ **Last updated:** [March 25, 2019, 9:04am UTC](https://discuss.elastic.co/t/request-url-is-not-consistent-with-transaction-name/171631 "2019-03-25T09:04:24Z")
Kibana version: 6.6.0 Elasticsearch version:6.6.0 APM Server version:6.6.0 APM Agent language and version: python 4.1.0 My application is a Flask web application. When I'm discovering data in Kibana, I found some doc… --- ## [Can Metricbeat gather "waiting MySQL queries"?](https://discuss.elastic.co/t/can-metricbeat-gather-waiting-mysql-queries/103453)
**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\ **Replies:** 4\ **Last updated:** [October 17, 2017, 4:31pm UTC](https://discuss.elastic.co/t/can-metricbeat-gather-waiting-mysql-queries/103453 "2017-10-17T16:31:18Z")
We are troubleshooting an issue and would like to see "waiting MySQL queries" but did not see a metric for this. Is this in the MySQL module? --- ## [Transport create fail. lucene version field exception](https://discuss.elastic.co/t/transport-create-fail-lucene-version-field-exception/70740)
**Author:** [@SteveShin](https://discuss.elastic.co/u/SteveShin)\ **Replies:** 4\ **Last updated:** [January 6, 2017, 7:31am UTC](https://discuss.elastic.co/t/transport-create-fail-lucene-version-field-exception/70740 "2017-01-06T07:31:31Z")
Hi all. I was using ES1.7.4 with transport client. Recently, I tried to upgrade it to 5. but I got exception. TransportClient seek LUCENE\_5\_2\_1 field but failed. My lib folder has full jars about lucene 6.2.1 . I don't … --- ## [Filebeat stops processing files after 1 or 2 days issue](https://discuss.elastic.co/t/filebeat-stops-processing-files-after-1-or-2-days-issue/64402)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [October 31, 2016, 9:05am UTC](https://discuss.elastic.co/t/filebeat-stops-processing-files-after-1-or-2-days-issue/64402 "2016-10-31T09:05:33Z")
Hi, I have Filebeat configured to fetch data from log files in a folder. I have log files, which is sliced to 10 mb log fies in my linux box, and so I configured filebeat to scan the entire folder. There will be approx… --- ## [Make pharse prefix search on whole text of a field](https://discuss.elastic.co/t/make-pharse-prefix-search-on-whole-text-of-a-field/62263)
**Author:** [@prasad\_kp](https://discuss.elastic.co/u/prasad_kp)\ **Replies:** 4\ **Last updated:** [October 5, 2016, 3:20pm UTC](https://discuss.elastic.co/t/make-pharse-prefix-search-on-whole-text-of-a-field/62263 "2016-10-05T15:20:07Z")
Hi I am using the match phrase prefix query { "match" : { "suggestion" : { "query" : "lub\*", "type" : "phrase\_prefix", } } } With this query m getting results as { "na… --- ## [CSV filter plugin config file error](https://discuss.elastic.co/t/csv-filter-plugin-config-file-error/49451)
**Author:** [@gmackers](https://discuss.elastic.co/u/gmackers)\ **Replies:** 4\ **Last updated:** [May 9, 2016, 10:35pm UTC](https://discuss.elastic.co/t/csv-filter-plugin-config-file-error/49451 "2016-05-09T22:35:00Z")
Hi, newbie logstasher here. I'm trying to run my first logstash instance and having a problem with the config file. When I add a "convert" property to my CSV filter config I get an error. This is fine: convert =\> { "Wh… --- ## [Deleting time based document -dummy](https://discuss.elastic.co/t/deleting-time-based-document-dummy/44971)
**Author:** [@lknls](https://discuss.elastic.co/u/lknls)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 1:25pm UTC](https://discuss.elastic.co/t/deleting-time-based-document-dummy/44971 "2016-03-21T13:25:03Z")
Hello; I want to delete my document by date. I read https://www.elastic.co/guide/en/elasticsearch/client/curator/current/examples.html . It's deleting about the INDEX, not the document Lets assume that my index name … --- ## [Multi-Tenant](https://discuss.elastic.co/t/multi-tenant/377944)
**Author:** [@khaled7](https://discuss.elastic.co/u/khaled7)\ **Replies:** 3\ **Last updated:** [May 8, 2025, 2:11pm UTC](https://discuss.elastic.co/t/multi-tenant/377944 "2025-05-08T14:11:43Z")
hello Elastic Team I am detailing my scenario here. iam working with many customer wihth ELK and want a free open source solution to make multi-tenant monitor all those clients from one view internal in my company all… --- ## [Importing dashboards using kibana api through curl](https://discuss.elastic.co/t/importing-dashboards-using-kibana-api-through-curl/323320)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 3\ **Last updated:** [January 19, 2023, 3:29pm UTC](https://discuss.elastic.co/t/importing-dashboards-using-kibana-api-through-curl/323320 "2023-01-19T15:29:14Z")
Hi Community, I want to import metricbeat dashboard , but i can't find the id. ELK version 7.17 command used curl -u user:pass -k -X POST "https://localhost:5601/api/saved\_objects/\_export -H 'kbn-xsrf: true' -H 'Cont… --- ## [Problem overwriting field using json filter plugin](https://discuss.elastic.co/t/problem-overwriting-field-using-json-filter-plugin/299132)
**Author:** [@tstrul](https://discuss.elastic.co/u/tstrul)\ **Replies:** 3\ **Last updated:** [March 8, 2022, 9:17pm UTC](https://discuss.elastic.co/t/problem-overwriting-field-using-json-filter-plugin/299132 "2022-03-08T21:17:10Z")
Hey, I have a log that i want to parse as json. field is "log" I want to decode json but use the same field as the orig message. when i try: json { source =\> "log" target =\> "log" } Im ge… --- ## [Filebeat setup creates more than one write index - ILM](https://discuss.elastic.co/t/filebeat-setup-creates-more-than-one-write-index-ilm/290679)
**Author:** [@JGreene](https://discuss.elastic.co/u/JGreene)\ **Replies:** 3\ **Last updated:** [December 2, 2021, 1:06pm UTC](https://discuss.elastic.co/t/filebeat-setup-creates-more-than-one-write-index-ilm/290679 "2021-12-02T13:06:04Z")
Filebeat should not attempt to create / recreate write index if a write index exists. As indices age out with ILM policies and are deleted, subsequent runs of filebeat setup attempt to create the default index of -000001 … --- ## [Kibana: Kibana's service started but Kibana not launched (Kibana multiple instances configuration)](https://discuss.elastic.co/t/kibana-kibanas-service-started-but-kibana-not-launched-kibana-multiple-instances-configuration/262021)
**Author:** [@ade.syseng](https://discuss.elastic.co/u/ade.syseng)\ **Replies:** 3\ **Last updated:** [January 25, 2021, 1:12pm UTC](https://discuss.elastic.co/t/kibana-kibanas-service-started-but-kibana-not-launched-kibana-multiple-instances-configuration/262021 "2021-01-25T13:12:36Z")
Hi, I'm just learning to implement Elastic Stack on Docker swarm configuration with global mode. My issue is Kibana's service started but Kibana not launched (not working). PS I have followed this guidance. My global … --- ## [ELK стек под 600гб в день](https://discuss.elastic.co/t/elk-600/201055)
**Author:** [@dranovskiydima](https://discuss.elastic.co/u/dranovskiydima)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 2:53pm UTC](https://discuss.elastic.co/t/elk-600/201055 "2019-09-25T14:53:49Z")
Уважаемая команда поддержки Elk, Один момент, который я хотел бы обсудить с вами и попросить вас о помощи, - это требования к оборудованию, которые мы должны использовать для надежной и эффективной работы. У нас есть в… --- ## [APM Java Agent - handshake failure connecting to APM server on Oracle JDK 1.8](https://discuss.elastic.co/t/apm-java-agent-handshake-failure-connecting-to-apm-server-on-oracle-jdk-1-8/190899)
**Author:** [@rkastner](https://discuss.elastic.co/u/rkastner)\ **Replies:** 3\ **Last updated:** [July 17, 2019, 2:36pm UTC](https://discuss.elastic.co/t/apm-java-agent-handshake-failure-connecting-to-apm-server-on-oracle-jdk-1-8/190899 "2019-07-17T14:36:59Z")
APM Server version: 7.2.0 APM Agent language and version: Java (1.7.0) \*\*Description of the problem including expected versus actual behavior. \*\*: While setting up the Java APM Agent manually on Tomcat (-javaagent), t… --- ## [APM UI in Elastic Cloud Kibana not showing up](https://discuss.elastic.co/t/apm-ui-in-elastic-cloud-kibana-not-showing-up/150236)
**Author:** [@alexpereira](https://discuss.elastic.co/u/alexpereira)\ **Replies:** 3\ **Last updated:** [October 15, 2018, 7:21am UTC](https://discuss.elastic.co/t/apm-ui-in-elastic-cloud-kibana-not-showing-up/150236 "2018-10-15T07:21:14Z")
We're running Kibana in Elastic Cloud (on AWS) and I am able to load the APM dashboards, but it looks the "dedicated APM UI" is not showing up. I am testing (in Trial) to decide if we are going to migrate to the elastic… --- ## [Changing Date Format in logstash](https://discuss.elastic.co/t/changing-date-format-in-logstash/123206)
**Author:** [@Janardhan\_Randhi](https://discuss.elastic.co/u/Janardhan_Randhi)\ **Replies:** 3\ **Last updated:** [March 9, 2018, 1:04pm UTC](https://discuss.elastic.co/t/changing-date-format-in-logstash/123206 "2018-03-09T13:04:35Z")
How can i delete the t and z date format in elastic search using through logstash. my input is :2017-05-08 07:27:03.121 after push into elastic search its shows like 2017-05-08T07:27:03.121Z format ,how can i remove … --- ## [Match multiple ip segment Regex](https://discuss.elastic.co/t/match-multiple-ip-segment-regex/100484)
**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\ **Replies:** 3\ **Last updated:** [September 15, 2017, 6:57am UTC](https://discuss.elastic.co/t/match-multiple-ip-segment-regex/100484 "2017-09-15T06:57:52Z")
Below is the if statement which is working fine if \[host\] =~ "^10.255.212.(\[1-9\]|\[1-9\]\[0-9\]|1(\[0-9\]\[0-9\])|2(\[0-4\]\[0-9\]|5\[0-5\]))$" { mutate { add\_field =\> \[ "host\_group", "XXX" \] } } else { mutate { add\_field =\> \[ "h… [Previous page](https://discuss.elastic.co/top.md?page=1579&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1581&per_page=50&period=all)