# Top **URL:** https://discuss.elastic.co/top.md?page=1586&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1587 --- ## [Is it possible to add aggregations piecemeal to the Nest .NET Library?](https://discuss.elastic.co/t/is-it-possible-to-add-aggregations-piecemeal-to-the-nest-net-library/143909)
**Author:** [@rgelb](https://discuss.elastic.co/u/rgelb)\ **Replies:** 4\ **Last updated:** [August 15, 2018, 7:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-aggregations-piecemeal-to-the-nest-net-library/143909 "2018-08-15T19:09:10Z")
I have the following code which works: var search = new SearchDescriptor\(); search.Aggregations(agg =\> agg.Cardinality("dedup", cd =\> cd.Field(fi =\> fi.AddressHash).PrecisionThreshold(40000)) .Filter("dontDedu… --- ## [Is that possible use kibana6.0 with es5.3](https://discuss.elastic.co/t/is-that-possible-use-kibana6-0-with-es5-3/103717)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 4\ **Last updated:** [October 16, 2017, 6:08am UTC](https://discuss.elastic.co/t/is-that-possible-use-kibana6-0-with-es5-3/103717 "2017-10-16T06:08:58Z")
is that possible use kibana6 with es5.3? --- ## [How to re-verify data consistency with external RDBMS source](https://discuss.elastic.co/t/how-to-re-verify-data-consistency-with-external-rdbms-source/92799)
**Author:** [@ilyasjaan](https://discuss.elastic.co/u/ilyasjaan)\ **Replies:** 4\ **Last updated:** [July 13, 2017, 1:06pm UTC](https://discuss.elastic.co/t/how-to-re-verify-data-consistency-with-external-rdbms-source/92799 "2017-07-13T13:06:35Z")
Hi, We have got millions (about 50) of data objects stored in normal RDBMS. And we are trying to index these records as documents in ES. All OK, we got job to do that and it looks doable. One question we have is: … --- ## [X-Pack monitoring with tribe node](https://discuss.elastic.co/t/x-pack-monitoring-with-tribe-node/84357)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [May 3, 2017, 6:37am UTC](https://discuss.elastic.co/t/x-pack-monitoring-with-tribe-node/84357 "2017-05-03T06:37:14Z")
Hello. I have configured 2 clusters(dc1 and dc2) with tribe node. However , when I open up the "Monitoring" menu , I only see one cluster dc1 . I was expecting to see dc1 and dc2 at the top. I saw this page in the docu… --- ## [Is there any way to determine what ES doing caused abnormal IO?](https://discuss.elastic.co/t/is-there-any-way-to-determine-what-es-doing-caused-abnormal-io/300527)
**Author:** [@mjikop1231](https://discuss.elastic.co/u/mjikop1231)\ **Replies:** 6\ **Last updated:** [March 28, 2022, 6:19am UTC](https://discuss.elastic.co/t/is-there-any-way-to-determine-what-es-doing-caused-abnormal-io/300527 "2022-03-28T06:19:38Z")
I have a ES cluster with 3 master and 5 data node enabled rebalance and allocation. And in /\_nodes/.../stats doesn't show any thing running in that nodes, and also no tasks in \_tasks. But all data node has near 500 IOPS… --- ## [Referencing to an environment variable for usage inside apm properties file](https://discuss.elastic.co/t/referencing-to-an-environment-variable-for-usage-inside-apm-properties-file/202410)
**Author:** [@Nie](https://discuss.elastic.co/u/Nie)\ **Replies:** 6\ **Last updated:** [October 11, 2019, 2:53pm UTC](https://discuss.elastic.co/t/referencing-to-an-environment-variable-for-usage-inside-apm-properties-file/202410 "2019-10-11T14:53:28Z")
How do we reference to an environment variable inside elasticapm.properties file? I can't find an example here - https://www.elastic.co/guide/en/apm/agent/java/current/configuration.html Is this valid for elasticapm.pro… --- ## [High CPU load during search(elasticsearch 1.2.1)](https://discuss.elastic.co/t/high-cpu-load-during-search-elasticsearch-1-2-1/19624)
**Author:** [@Anton\_A](https://discuss.elastic.co/u/Anton_A)\ **Replies:** 6\ **Last updated:** [October 23, 2014, 6:04pm UTC](https://discuss.elastic.co/t/high-cpu-load-during-search-elasticsearch-1-2-1/19624 "2014-10-23T18:04:39Z")
Hi, Everyone. I have no huge experience with elsticsearch but meet performance problem on our environment and need somehow to resolve it or figure out what is the problem. Some background: we have multiple environm… --- ## [What is the correct way to insert document in elastic search using multiple documents using multiple threads in c#](https://discuss.elastic.co/t/what-is-the-correct-way-to-insert-document-in-elastic-search-using-multiple-documents-using-multiple-threads-in-c/343711)
**Author:** [@mreddy9](https://discuss.elastic.co/u/mreddy9)\ **Replies:** 5\ **Last updated:** [September 28, 2023, 9:41pm UTC](https://discuss.elastic.co/t/what-is-the-correct-way-to-insert-document-in-elastic-search-using-multiple-documents-using-multiple-threads-in-c/343711 "2023-09-28T21:41:14Z")
Hi All, I'm using multiple threads in c# to isert documents in c# as below but some times document is not inserted into elstic search search. var indexResponse = elasticClient.IndexDocument(testReport); But if I try t… --- ## [High CPU load when using vector tile search API](https://discuss.elastic.co/t/high-cpu-load-when-using-vector-tile-search-api/308373)
**Author:** [@thibaultclem](https://discuss.elastic.co/u/thibaultclem)\ **Replies:** 5\ **Last updated:** [June 29, 2022, 1:18pm UTC](https://discuss.elastic.co/t/high-cpu-load-when-using-vector-tile-search-api/308373 "2022-06-29T13:18:45Z")
Hi everyone, We use Elasticsearch mainly for the vector tile search API and we are trying to figure out what could be the best way to configure it for better performance. We have a CPU optimized deployment on Elastic C… --- ## [Need some help understanding filebeat init scripts](https://discuss.elastic.co/t/need-some-help-understanding-filebeat-init-scripts/307032)
**Author:** [@Hermooz](https://discuss.elastic.co/u/Hermooz)\ **Replies:** 5\ **Last updated:** [June 17, 2022, 7:20am UTC](https://discuss.elastic.co/t/need-some-help-understanding-filebeat-init-scripts/307032 "2022-06-17T07:20:56Z")
Hi all. I have been tasked to manage a filebeat installation on a not-so-recent machine - we're talking about a CentOS 6.4 with a filebeat version 7.12, installed by rpm. This is not (yet) a systemd-enabled distro so fil… --- ## [Issues with ILM rollover](https://discuss.elastic.co/t/issues-with-ilm-rollover/284120)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 5\ **Last updated:** [September 13, 2021, 11:59pm UTC](https://discuss.elastic.co/t/issues-with-ilm-rollover/284120 "2021-09-13T23:59:43Z")
version 7.14 I have some indexes that are not rolling over when I expect them to: policy says: \` "max\_primary\_shard\_size": "1gb", and the stats show Storage Size 1.2gb and Primaries 1. Perhaps significantly there … --- ## [Parallel connection hop paths](https://discuss.elastic.co/t/parallel-connection-hop-paths/139788)
**Author:** [@robert.j.foreman](https://discuss.elastic.co/u/robert.j.foreman)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 12:51pm UTC](https://discuss.elastic.co/t/parallel-connection-hop-paths/139788 "2018-07-16T12:51:32Z")
The Explore API supports nesting connections terms, to define a hop path. But it doesn't seem possible to use an array of connection objects. This would allow me to define a tree that has different child node types and… --- ## [Timelion and Kibana disagree on current time](https://discuss.elastic.co/t/timelion-and-kibana-disagree-on-current-time/81648)
**Author:** [@0x4d](https://discuss.elastic.co/u/0x4d)\ **Replies:** 5\ **Last updated:** [April 11, 2017, 9:01am UTC](https://discuss.elastic.co/t/timelion-and-kibana-disagree-on-current-time/81648 "2017-04-11T09:01:17Z")
Hi, I was building a Timelion / Kibana hybrid dashboard and I came across a very weird issue. Timelion graphs seem to think the current time is one hour ahead of what it really is. Other non-Timelion graphs work just fin… --- ## [Fluentd not connected to elasticsearch](https://discuss.elastic.co/t/fluentd-not-connected-to-elasticsearch/245919)
**Author:** [@samra1810](https://discuss.elastic.co/u/samra1810)\ **Replies:** 0\ **Last updated:** [August 21, 2020, 12:49pm UTC](https://discuss.elastic.co/t/fluentd-not-connected-to-elasticsearch/245919 "2020-08-21T12:49:04Z")
I have installed td-agent rpm on linux and trying to connect to elastic search. but however when i am starting td-agent, it is not getting connected to elasticsearch. Elastic Search service is up and running. Error on l… --- ## [Ignore\_inactive does not work in filebeat with filestream config type](https://discuss.elastic.co/t/ignore-inactive-does-not-work-in-filebeat-with-filestream-config-type/349111)
**Author:** [@josepcorrea](https://discuss.elastic.co/u/josepcorrea)\ **Replies:** 7\ **Last updated:** [January 2, 2024, 8:15am UTC](https://discuss.elastic.co/t/ignore-inactive-does-not-work-in-filebeat-with-filestream-config-type/349111 "2024-01-02T08:15:05Z")
When I use the filestream type instead of the log type, filebeat always reads the entire log file from the beginning. - type: filestream id: test\_id enable: true paths: - "/usr/share/filebeat/inputs.d/\*.log" … --- ## [Get Windows Defender logs in Logstash using Winlogbeat](https://discuss.elastic.co/t/get-windows-defender-logs-in-logstash-using-winlogbeat/281538)
**Author:** [@Logstash\_logs](https://discuss.elastic.co/u/Logstash_logs)\ **Replies:** 1\ **Last updated:** [August 17, 2021, 11:39am UTC](https://discuss.elastic.co/t/get-windows-defender-logs-in-logstash-using-winlogbeat/281538 "2021-08-17T11:39:43Z")
Hi, I'm trying to send windows defender logs to logstash using winlogbeat. I added name: Microsoft-Windows-Windows Defender/Operational in winlogbeat.yml file but not getting any logs related to defender only Microsoft… --- ## [Filebeat not able to send data to TLS enabled Kafka cluster](https://discuss.elastic.co/t/filebeat-not-able-to-send-data-to-tls-enabled-kafka-cluster/251701)
**Author:** [@Amritanshu\_Pandey](https://discuss.elastic.co/u/Amritanshu_Pandey)\ **Replies:** 1\ **Last updated:** [October 21, 2020, 1:24pm UTC](https://discuss.elastic.co/t/filebeat-not-able-to-send-data-to-tls-enabled-kafka-cluster/251701 "2020-10-21T13:24:08Z")
Hi Team, We are trying to send some logs from a Windows host using filebeat to a Kafka cluster that uses TLS for encryption and Kerberos for Authentication. Filebeat version: 7.9.2 On the Filebeats logs I get this mes… --- ## [APM - UI transactions page is emtpy](https://discuss.elastic.co/t/apm-ui-transactions-page-is-emtpy/251106)
**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\ **Replies:** 7\ **Last updated:** [October 9, 2020, 8:39pm UTC](https://discuss.elastic.co/t/apm-ui-transactions-page-is-emtpy/251106 "2020-10-09T20:39:11Z")
Hello there, I am trying to monitor my JBOSS Java7\_80 server with APM. I already tried to do so with the apm-server versions 7.9, 7.8, 7.7 and 7.6. Regarding the java attached agent, I have only used the version 1.17. … --- ## [Gelf in Kafka out for logstash](https://discuss.elastic.co/t/gelf-in-kafka-out-for-logstash/238294)
**Author:** [@pointonj](https://discuss.elastic.co/u/pointonj)\ **Replies:** 1\ **Last updated:** [June 23, 2020, 5:06pm UTC](https://discuss.elastic.co/t/gelf-in-kafka-out-for-logstash/238294 "2020-06-23T17:06:16Z")
Im trying to use Logstash with a GELF input and outputting to Kafka and not getting any logs. My config file looks like this - input { udp { host =\> "ip of loadbalancer" port =\> 9900 type =\> gelf … --- ## [Threat Intelligence Platform Integration](https://discuss.elastic.co/t/threat-intelligence-platform-integration/169949)
**Author:** [@andrewjo](https://discuss.elastic.co/u/andrewjo)\ **Replies:** 1\ **Last updated:** [February 27, 2019, 2:43am UTC](https://discuss.elastic.co/t/threat-intelligence-platform-integration/169949 "2019-02-27T02:43:24Z")
Hi Guys, Any idea , how integrate Threat Intelligence Platform with ELK? Or I just create some config in logstash and manually lookup csv from TI data source feed? Thanks. --- ## [Cross Account (AWS) cluster](https://discuss.elastic.co/t/cross-account-aws-cluster/115890)
**Author:** [@chaib](https://discuss.elastic.co/u/chaib)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 4:32pm UTC](https://discuss.elastic.co/t/cross-account-aws-cluster/115890 "2018-01-18T16:32:24Z")
Is it possible to have an ES cluster with nodes in two different accounts (AWS)? Scenario: Account A with VPC peering to Account B. Account B nodes find master in Account A but return a message that failed to send a r… --- ## [Is there a way to change the displayed timezone for one query / dashboard with Timelion](https://discuss.elastic.co/t/is-there-a-way-to-change-the-displayed-timezone-for-one-query-dashboard-with-timelion/67590)
**Author:** [@manuelbernhardt](https://discuss.elastic.co/u/manuelbernhardt)\ **Replies:** 1\ **Last updated:** [November 30, 2016, 10:10am UTC](https://discuss.elastic.co/t/is-there-a-way-to-change-the-displayed-timezone-for-one-query-dashboard-with-timelion/67590 "2016-11-30T10:10:22Z")
I'm in a situation where the data I look at comes from various geographic locations, at it makes sense to plot the graph in local times (the data relates to room temperature, so it is useful to see events as they happen … --- ## [Doc Values in Boolean Field](https://discuss.elastic.co/t/doc-values-in-boolean-field/26747)
**Author:** [@BarryWard](https://discuss.elastic.co/u/BarryWard)\ **Replies:** 1\ **Last updated:** [November 12, 2015, 12:47am UTC](https://discuss.elastic.co/t/doc-values-in-boolean-field/26747 "2015-11-12T00:47:06Z")
Hi, We are having some issues with setting doc value to true on boolean fields, the Elastic documentation says it can be used in the section relating to doc values however the field data section of the manual does not … --- ## [Multiple issues following configuring shard allocation awareness and full cluster restart](https://discuss.elastic.co/t/multiple-issues-following-configuring-shard-allocation-awareness-and-full-cluster-restart/7674)
**Author:** [@Eran\_Kutner\_2](https://discuss.elastic.co/u/Eran_Kutner_2)\ **Replies:** 7\ **Last updated:** [May 25, 2012, 8:51pm UTC](https://discuss.elastic.co/t/multiple-issues-following-configuring-shard-allocation-awareness-and-full-cluster-restart/7674 "2012-05-25T20:51:14Z")
Hi, I've encountered multiple issues after configuring shard allocation awareness and doing a full cluster restart. From previous experience I can say I've already seen such issues so I'm not sure if it's related to… --- ## [How much resource consuming is to get count only from ES ? What are the ways to just count the total documents?](https://discuss.elastic.co/t/how-much-resource-consuming-is-to-get-count-only-from-es-what-are-the-ways-to-just-count-the-total-documents/6423)
**Author:** [@Carl\_Sharma](https://discuss.elastic.co/u/Carl_Sharma)\ **Replies:** 7\ **Last updated:** [January 20, 2012, 3:08pm UTC](https://discuss.elastic.co/t/how-much-resource-consuming-is-to-get-count-only-from-es-what-are-the-ways-to-just-count-the-total-documents/6423 "2012-01-20T15:08:38Z")
I have around 2 million documents in my Index currently. Now I have some pages where i have to show the statistics of the content. I just want the total counts of the documents. But I have to use the complex filters… --- ## [Log4j regex filter to avoid audit logs](https://discuss.elastic.co/t/log4j-regex-filter-to-avoid-audit-logs/226016)
**Author:** [@Javier\_Parrondo](https://discuss.elastic.co/u/Javier_Parrondo)\ **Replies:** 2\ **Last updated:** [April 1, 2020, 3:32pm UTC](https://discuss.elastic.co/t/log4j-regex-filter-to-avoid-audit-logs/226016 "2020-04-01T15:32:08Z")
Hello, I would like to avoid messages like the followings inside my {cluster\_name}\_audit.log: {"@timestamp":"2020-04-01T10:11:54,869", "xxxxxxxxxxxxxxxxxxx"user.name":"kibana", "user.realm":"reserved", "user.roles":\["k… --- ## [After upgrading to 7.3.1 - esaggs can't read doc\_count undefined](https://discuss.elastic.co/t/after-upgrading-to-7-3-1-esaggs-cant-read-doc-count-undefined/197387)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [August 29, 2019, 6:42pm UTC](https://discuss.elastic.co/t/after-upgrading-to-7-3-1-esaggs-cant-read-doc-count-undefined/197387 "2019-08-29T18:42:40Z")
This is just so other people had same problem. Error \*\*\[esaggs\] \> Cannot read property 'doc\_count' of undefined \*\* After upgrade from any version to 7.3.1 your visulize will break if you have use filter because by de… --- ## [Elastic UI Framework Basic Tables Pagination](https://discuss.elastic.co/t/elastic-ui-framework-basic-tables-pagination/187236)
**Author:** [@rndrev](https://discuss.elastic.co/u/rndrev)\ **Replies:** 2\ **Last updated:** [June 27, 2019, 5:49am UTC](https://discuss.elastic.co/t/elastic-ui-framework-basic-tables-pagination/187236 "2019-06-27T05:49:49Z")
I am trying to use Pagination on my table.js (using source code from the examples). However, when I try to click on "Rows per page: " the page crashes with: Uncaught Invariant Violation: React.Children.only expected to… --- ## [Filebeat Kubernetes Autodiscovery Template Problem (6.5.4)](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscovery-template-problem-6-5-4/163916)
**Author:** [@Namik\_Mesic](https://discuss.elastic.co/u/Namik_Mesic)\ **Replies:** 2\ **Last updated:** [January 14, 2019, 11:21am UTC](https://discuss.elastic.co/t/filebeat-kubernetes-autodiscovery-template-problem-6-5-4/163916 "2019-01-14T11:21:31Z")
I am trying to use filebeat kubernetes with autodiscovery and templates just as shown in the documentation, however I am unable to make the templates work. What I am trying to achieve: Send logs only when ceartain ann… --- ## [Timelion offsetting data by two days](https://discuss.elastic.co/t/timelion-offsetting-data-by-two-days/118891)
**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\ **Replies:** 2\ **Last updated:** [February 8, 2018, 6:21pm UTC](https://discuss.elastic.co/t/timelion-offsetting-data-by-two-days/118891 "2018-02-08T18:21:58Z")
Hello, I am trying to display one specific week's data in one of my Timelion graphs. However, when I make the bucket span wider (change from 1h to 1d), the entire data is being offset by 2 whole days. When I put my mous… --- ## [Logstash Http Input overwriting field](https://discuss.elastic.co/t/logstash-http-input-overwriting-field/109065)
**Author:** [@dj50x](https://discuss.elastic.co/u/dj50x)\ **Replies:** 2\ **Last updated:** [November 24, 2017, 8:19pm UTC](https://discuss.elastic.co/t/logstash-http-input-overwriting-field/109065 "2017-11-24T20:19:10Z")
So I recently changed from a TCP to a HTTP listener on logstash. I use Nxlog to transform my logs to Json and send it to a http listener on logstash with the codec json. One of my fields is simply 'host', which the hostn… --- ## [Is it possible to add the 'Fields' sidebar in a Kibana dashboard?](https://discuss.elastic.co/t/is-it-possible-to-add-the-fields-sidebar-in-a-kibana-dashboard/98137)
**Author:** [@nikhilo](https://discuss.elastic.co/u/nikhilo)\ **Replies:** 2\ **Last updated:** [August 23, 2017, 11:31pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-the-fields-sidebar-in-a-kibana-dashboard/98137 "2017-08-23T23:31:32Z")
The 'Fields' sidebar that is provided in the Discover section is very powerful. But the Discover section lacks visualizing capabilities. So, with a bunch of visualizations and a saved search I created a dashboard. But I … --- ## [Java Bool Query not adding "query"{ at the top ( ES version 5.4.1 )](https://discuss.elastic.co/t/java-bool-query-not-adding-query-at-the-top-es-version-5-4-1/88877)
**Author:** [@samdash](https://discuss.elastic.co/u/samdash)\ **Replies:** 2\ **Last updated:** [June 9, 2017, 7:39pm UTC](https://discuss.elastic.co/t/java-bool-query-not-adding-query-at-the-top-es-version-5-4-1/88877 "2017-06-09T19:39:30Z")
BoolQueryBuilder boolQueryBuilder = new BoolQueryBuilder(); if(null != product && !"".equals(product.trim())){ boolQueryBuilder.must(QueryBuilders.termQuery("community.name",product.toLowerCase())); } i… --- ## [Parsing bulk json (text) and dashboards with Kibana](https://discuss.elastic.co/t/parsing-bulk-json-text-and-dashboards-with-kibana/77236)
**Author:** [@viperblack](https://discuss.elastic.co/u/viperblack)\ **Replies:** 2\ **Last updated:** [March 3, 2017, 10:47am UTC](https://discuss.elastic.co/t/parsing-bulk-json-text-and-dashboards-with-kibana/77236 "2017-03-03T10:47:23Z")
In my project i need parse from json files or json objects to elasticsearch, after import json create dashboards for analyse this datas. My first problem: My json files are 80 to 90% similar in most cases but i dont li… --- ## [Logstash service not working?](https://discuss.elastic.co/t/logstash-service-not-working/73900)
**Author:** [@capsno1](https://discuss.elastic.co/u/capsno1)\ **Replies:** 2\ **Last updated:** [February 6, 2017, 9:13pm UTC](https://discuss.elastic.co/t/logstash-service-not-working/73900 "2017-02-06T21:13:13Z")
Can anyone help me with this error? my logstash service is not opening the requested pots in the config files such as port 514. I don't know if that is related. root@fgprd-oncommand-elasticlog-app001:/var/log/logstas… --- ## [Logstash grokparsefailure - message pattern problem](https://discuss.elastic.co/t/logstash-grokparsefailure-message-pattern-problem/72157)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [January 19, 2017, 11:56am UTC](https://discuss.elastic.co/t/logstash-grokparsefailure-message-pattern-problem/72157 "2017-01-19T11:56:21Z")
Hi, I am trying to parse the following message; ##SEVERE 05-Jan-2017 06:02:25.562 Fatal error## I am using grok in Logstash like below; filter { grok { match =\> { "message" =\> "^##(?\(SEVERE|INFO|WARN)… --- ## [Logstash service behaving different than command line](https://discuss.elastic.co/t/logstash-service-behaving-different-than-command-line/63104)
**Author:** [@chrisan](https://discuss.elastic.co/u/chrisan)\ **Replies:** 2\ **Last updated:** [October 15, 2016, 2:45pm UTC](https://discuss.elastic.co/t/logstash-service-behaving-different-than-command-line/63104 "2016-10-15T14:45:52Z")
Hello, I have 2 cloudfront distributions I am looking to analyze. The system is a fresh VM of Ubuntu 16.04 with latest Elasticsearch and Logstash installed via apt-get I have the following 2 configs: In both cas… --- ## [Aggregate logs without special pattern or "flag" for the last of the group](https://discuss.elastic.co/t/aggregate-logs-without-special-pattern-or-flag-for-the-last-of-the-group/53171)
**Author:** [@Akita](https://discuss.elastic.co/u/Akita)\ **Replies:** 2\ **Last updated:** [June 22, 2016, 9:03am UTC](https://discuss.elastic.co/t/aggregate-logs-without-special-pattern-or-flag-for-the-last-of-the-group/53171 "2016-06-22T09:03:07Z")
Might be linked with the discussion from Aggregate data based on some field: Hi everyone, I have incoming logs in Logsash looking like these: id1 valueA, id1 valueB, id1 valueC, id1 valueD, id2 valueAA, id2 valueBB… --- ## [Feature comparison between Watcher 1.x vs current (2.3)](https://discuss.elastic.co/t/feature-comparison-between-watcher-1-x-vs-current-2-3/49801)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 2\ **Last updated:** [May 13, 2016, 6:47am UTC](https://discuss.elastic.co/t/feature-comparison-between-watcher-1-x-vs-current-2-3/49801 "2016-05-13T06:47:03Z")
Hi, Are the features/options of the different versions of watcher documented anywhere, stacked against each other, for easy comparison? Thanks, Casie --- ## [ESTestCase 2.x + Jacoco not working](https://discuss.elastic.co/t/estestcase-2-x-jacoco-not-working/45104)
**Author:** [@cadu.goncalves](https://discuss.elastic.co/u/cadu.goncalves)\ **Replies:** 2\ **Last updated:** [March 28, 2016, 1:20pm UTC](https://discuss.elastic.co/t/estestcase-2-x-jacoco-not-working/45104 "2016-03-28T13:20:59Z")
I've read the Testing Framework Cheatsheet and tried to execute Jacoco coverage over my unit tests as instructed: mvn -Dtests.coverage test jacoco:report But it doesn't work. Maven fails, debugging it I found the excep… --- ## [Logs don't show up on kibana](https://discuss.elastic.co/t/logs-dont-show-up-on-kibana/345930)
**Author:** [@yassinebad](https://discuss.elastic.co/u/yassinebad)\ **Replies:** 8\ **Last updated:** [October 29, 2023, 11:06am UTC](https://discuss.elastic.co/t/logs-dont-show-up-on-kibana/345930 "2023-10-29T11:06:23Z")
Hey I am using winlogbeat on my windows machine with sysmon64. my winlogbeat.yml file is configured correctly. I have checked with the config command. once I run ./winlogbeat.exe setup -e ! my index and dashboards get … --- ## [Grokparsefailure on logstash](https://discuss.elastic.co/t/grokparsefailure-on-logstash/273047)
**Author:** [@srk1](https://discuss.elastic.co/u/srk1)\ **Replies:** 8\ **Last updated:** [May 18, 2021, 5:12pm UTC](https://discuss.elastic.co/t/grokparsefailure-on-logstash/273047 "2021-05-18T17:12:29Z")
Hi ES users, i'm trying to send a simple log using filebeat on to ES via logstash and i'm experiencing grokparsefailure errors on kibana. Can someone please assist on what type of grok filter needs to be used? Below is t… --- ## [Need help in dropping DNS event with packetbeat](https://discuss.elastic.co/t/need-help-in-dropping-dns-event-with-packetbeat/197395)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 8\ **Last updated:** [September 2, 2019, 4:09am UTC](https://discuss.elastic.co/t/need-help-in-dropping-dns-event-with-packetbeat/197395 "2019-09-02T04:09:41Z")
Hi team, I am trying to drop certain events on my AD server since I have packet beat installed and listening for DNS ports. I somehow unable to get it working, and I really appreciate if someone can help me on this? H… --- ## [If there are any config for garbage collection in Elastic search](https://discuss.elastic.co/t/if-there-are-any-config-for-garbage-collection-in-elastic-search/153953)
**Author:** [@dinesh2](https://discuss.elastic.co/u/dinesh2)\ **Replies:** 8\ **Last updated:** [October 25, 2018, 12:10pm UTC](https://discuss.elastic.co/t/if-there-are-any-config-for-garbage-collection-in-elastic-search/153953 "2018-10-25T12:10:40Z")
Please suggest if there are any config for garbage collection. Regards, Dinesh D --- ## [Data node CPU utilization goes very high](https://discuss.elastic.co/t/data-node-cpu-utilization-goes-very-high/245464)
**Author:** [@sheetal.nainwal](https://discuss.elastic.co/u/sheetal.nainwal)\ **Replies:** 3\ **Last updated:** [August 19, 2020, 6:06am UTC](https://discuss.elastic.co/t/data-node-cpu-utilization-goes-very-high/245464 "2020-08-19T06:06:42Z")
I am using AWS ElasticSearch service and the problem I am facing while ingestion happens on one index, it serves Very high CPU utilization (sometimes 1 or 2 master/data node goes down and sometimes ingestion fails). As r… --- ## [How to send headers using http input plugin in logstash](https://discuss.elastic.co/t/how-to-send-headers-using-http-input-plugin-in-logstash/235332)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 3\ **Last updated:** [June 2, 2020, 1:16pm UTC](https://discuss.elastic.co/t/how-to-send-headers-using-http-input-plugin-in-logstash/235332 "2020-06-02T13:16:59Z")
Hi am new in ES and logstash I want to do POST call Url:- https://dm-dev-authenticationservice-serviceapps-use-rg.azurewebsites.net/api/v1/Token Headers:- Content-Type :- application/json Body :- { "ClientId": "sd… --- ## [Set static variable in essql](https://discuss.elastic.co/t/set-static-variable-in-essql/184607)
**Author:** [@ofitz](https://discuss.elastic.co/u/ofitz)\ **Replies:** 3\ **Last updated:** [July 5, 2019, 6:44pm UTC](https://discuss.elastic.co/t/set-static-variable-in-essql/184607 "2019-07-05T18:44:22Z")
Hi everyone, i have this query: I would like to set in my plot defaultStyle{...}... the axisConfig max=10 the max value from a variable as the number from VALUE variable from query. The 10 must not be static, it is … --- ## [Enable inline scripting (painless)](https://discuss.elastic.co/t/enable-inline-scripting-painless/114296)
**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\ **Replies:** 3\ **Last updated:** [January 5, 2018, 6:43pm UTC](https://discuss.elastic.co/t/enable-inline-scripting-painless/114296 "2018-01-05T18:43:10Z")
Hi when trying to write scripted field in kibana i've got an error that says : Scripting disabled: All inline scripting has been disabled in Elasticsearch. You must enable inline scripting for at least one language in o… --- ## [Logstash Index](https://discuss.elastic.co/t/logstash-index/111474)
**Author:** [@ChrisChua](https://discuss.elastic.co/u/ChrisChua)\ **Replies:** 3\ **Last updated:** [December 13, 2017, 7:15pm UTC](https://discuss.elastic.co/t/logstash-index/111474 "2017-12-13T19:15:22Z")
Hi guys, I have a problem with the logstash output, it work fine when I didn't put index, but when I put my custom index name then it won't store in elasticsearch. elasticsearch { hosts =\> \["localhost:9200"\] … --- ## [Get bulk data from elasticsearch](https://discuss.elastic.co/t/get-bulk-data-from-elasticsearch/110489)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 3\ **Last updated:** [December 7, 2017, 12:49pm UTC](https://discuss.elastic.co/t/get-bulk-data-from-elasticsearch/110489 "2017-12-07T12:49:38Z")
I am using scroll API to fetch data from elasticsearch. I have 400000 records in elasticsearch. And it is taking 2min. to fetch from elasticsearch. How can I reduce this time from minutes to seconds. I have attached my … [Previous page](https://discuss.elastic.co/top.md?page=1585&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1587&per_page=50&period=all)