# Top **URL:** https://discuss.elastic.co/top.md?page=1598&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1599 --- ## [Cidr Plugin - Warn and skipping data... Missing Data](https://discuss.elastic.co/t/cidr-plugin-warn-and-skipping-data-missing-data/242875)
**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\ **Replies:** 3\ **Last updated:** [July 29, 2020, 3:57pm UTC](https://discuss.elastic.co/t/cidr-plugin-warn-and-skipping-data-missing-data/242875 "2020-07-29T15:57:57Z")
Hello, I've been playing around with the logstash cidr filter plugin and have been coming into a couple of issues. For the most part, with most of the data sets that are coming in, this filter is working well and is doi… --- ## [Email alerts from machine learning, bucket and record anomalies](https://discuss.elastic.co/t/email-alerts-from-machine-learning-bucket-and-record-anomalies/231588)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 3\ **Last updated:** [May 10, 2020, 5:35pm UTC](https://discuss.elastic.co/t/email-alerts-from-machine-learning-bucket-and-record-anomalies/231588 "2020-05-10T17:35:20Z")
Hi, I have created a mail watch alert for machine learning and choose the lower Severity threshold for it In the execution history of the watch I have several entries, but I dont get email alerts I enter in the edi… --- ## [Curator configuation](https://discuss.elastic.co/t/curator-configuation/214279)
**Author:** [@Dev\_Chakraborty](https://discuss.elastic.co/u/Dev_Chakraborty)\ **Replies:** 3\ **Last updated:** [January 9, 2020, 4:41pm UTC](https://discuss.elastic.co/t/curator-configuation/214279 "2020-01-09T16:41:14Z")
Hi Team, I am using curator version 5.8.1 and I have setup the config file as below: curator.yml client: hosts: — serverIP or localhost port: 9200 url\_prefix: use\_ssl: False certificate: client\_cert: client\_ke… --- ## [Unhandled java.lang.NoClassDefFoundError in Elasticsearch High-Level RestClientBuilder](https://discuss.elastic.co/t/unhandled-java-lang-noclassdeffounderror-in-elasticsearch-high-level-restclientbuilder/196013)
**Author:** [@pavocristatus](https://discuss.elastic.co/u/pavocristatus)\ **Replies:** 0\ **Last updated:** [August 20, 2019, 11:27pm UTC](https://discuss.elastic.co/t/unhandled-java-lang-noclassdeffounderror-in-elasticsearch-high-level-restclientbuilder/196013 "2019-08-20T23:27:26Z")
Hi All, I get the following error when running "sbt test" (scalatest with matchers) that helps with unit testing a method written in scala. The method creates an instance of Elasticsearch REST High-Level client followe… --- ## [How to set a range in Logs UI](https://discuss.elastic.co/t/how-to-set-a-range-in-logs-ui/164244)
**Author:** [@makefriend7](https://discuss.elastic.co/u/makefriend7)\ **Replies:** 3\ **Last updated:** [January 18, 2019, 8:41am UTC](https://discuss.elastic.co/t/how-to-set-a-range-in-logs-ui/164244 "2019-01-18T08:41:41Z")
In es we can do this GET \_search { "\_source":\["message"\], "query": { "range" : { "my.time": { "gte" : "20190113-09:15:57", "lte" : "20190114-10:15:57" } } } } Is it possible in Logs UI? --- ## [I got this error when i did sudo service logstash configtest](https://discuss.elastic.co/t/i-got-this-error-when-i-did-sudo-service-logstash-configtest/80069)
**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\ **Replies:** 3\ **Last updated:** [March 27, 2017, 6:03am UTC](https://discuss.elastic.co/t/i-got-this-error-when-i-did-sudo-service-logstash-configtest/80069 "2017-03-27T06:03:30Z")
Error: Expected one of #, if, ", ', } at line 49, column 2 (byte 1331) after filter { {:level=\>:error} --- ## [Parsing custom Tomcat access log](https://discuss.elastic.co/t/parsing-custom-tomcat-access-log/46362)
**Author:** [@venediger](https://discuss.elastic.co/u/venediger)\ **Replies:** 3\ **Last updated:** [April 5, 2016, 2:18pm UTC](https://discuss.elastic.co/t/parsing-custom-tomcat-access-log/46362 "2016-04-05T14:18:28Z")
Hi, I have the following log line from tomcat access log: 192.123.120.11 (192.33.211.131) - USER123 \[23/Mar/2015:00:00:12 +0000\] GET /rest/url/v1/state?appStateOnly=true HTTP/1.1 200 111 7 rest.api.package:443 192.… --- ## [\[ANN\] Elasticsearch experimental highlighter](https://discuss.elastic.co/t/ann-elasticsearch-experimental-highlighter/16935)
**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\ **Replies:** 3\ **Last updated:** [May 30, 2014, 2:44pm UTC](https://discuss.elastic.co/t/ann-elasticsearch-experimental-highlighter/16935 "2014-05-30T14:44:16Z")
I've been working on a new highlighter on and off for a few weeks and I'd love for other folks to try it out: https://github.com/wikimedia/search-highlighter You should try it because: 1. Its pretty quick. 2. It… --- ## [Add and remove alias timeout](https://discuss.elastic.co/t/add-and-remove-alias-timeout/138900)
**Author:** [@ooooldman](https://discuss.elastic.co/u/ooooldman)\ **Replies:** 5\ **Last updated:** [July 16, 2018, 2:49am UTC](https://discuss.elastic.co/t/add-and-remove-alias-timeout/138900 "2018-07-16T02:49:19Z")
es : 5.6.3 1 master and 4 datanode OS : centos 6.9 x86\_64 JAVA : java version "1.8.0\_66" Java(TM) SE Runtime Environment (build 1.8.0\_66-b17) Java HotSpot(TM) 64-Bit Server VM (build 25.66-b17, mixed mode) request r… --- ## [How to generate Kibana pie chart for mentioned logs](https://discuss.elastic.co/t/how-to-generate-kibana-pie-chart-for-mentioned-logs/124309)
**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 5:58pm UTC](https://discuss.elastic.co/t/how-to-generate-kibana-pie-chart-for-mentioned-logs/124309 "2018-03-20T17:58:31Z")
log row one: {"ORDER\_TYPE":"New","COUNT\_ROWS":"4"} log row two: {"ORDER\_TYPE":"Change","COUNT\_ROWS":"10"} log row two: {"ORDER\_TYPE":"Delete","COUNT\_ROWS":"50"} I want to view above data in Pie like each section to be… --- ## [Multiple fields with different values in a same document](https://discuss.elastic.co/t/multiple-fields-with-different-values-in-a-same-document/32079)
**Author:** [@living\_jordi](https://discuss.elastic.co/u/living_jordi)\ **Replies:** 5\ **Last updated:** [October 15, 2015, 6:56am UTC](https://discuss.elastic.co/t/multiple-fields-with-different-values-in-a-same-document/32079 "2015-10-15T06:56:20Z")
I'd like to know a bit more about the next situation. I'm trying to index a document like this: PUT 'server/index/test/1' { to: "to1", to: "to2", to: "to3" } Seemingly, elasticsearch swallows this document… --- ## [Configuring both TLS 1.2 and TLS 1.3 in Logstash 8.8](https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280)
**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\ **Replies:** 1\ **Last updated:** [November 2, 2023, 12:37pm UTC](https://discuss.elastic.co/t/configuring-both-tls-1-2-and-tls-1-3-in-logstash-8-8/346280 "2023-11-02T12:37:10Z")
In my Logstash8.8 syslog configuration file, I want to configure two TLS versions: TLS 1.2 and TLS 1.3, but it doesn't work. Can you provide the correct way to configure it? Should I create two separate inputs? tcp { i… --- ## [Heartbeat subcommands unable to run on 7.17.x and 8.0.x docker images](https://discuss.elastic.co/t/heartbeat-subcommands-unable-to-run-on-7-17-x-and-8-0-x-docker-images/299630)
**Author:** [@cdavid15](https://discuss.elastic.co/u/cdavid15)\ **Replies:** 7\ **Last updated:** [April 4, 2022, 1:45pm UTC](https://discuss.elastic.co/t/heartbeat-subcommands-unable-to-run-on-7-17-x-and-8-0-x-docker-images/299630 "2022-04-04T13:45:17Z")
Hi all, I am trying to run the heartbeat setup but I am getting the following error only on the 7.17.0, 7.17.1 and 8.0.0 docker images: /usr/local/bin/docker-entrypoint: line 25: exec: setup: not found It appears the … --- ## [Reindex 2.4 to 5.6](https://discuss.elastic.co/t/reindex-2-4-to-5-6/295642)
**Author:** [@mario12](https://discuss.elastic.co/u/mario12)\ **Replies:** 7\ **Last updated:** [January 28, 2022, 7:17am UTC](https://discuss.elastic.co/t/reindex-2-4-to-5-6/295642 "2022-01-28T07:17:19Z")
We are in the process of re-indexing 2.4 to 5.6. During the re-indexing process the application is able to perform inserts/updates/delete operation to 2.4. So, we are planning to re-index again to copy the missing docume… --- ## [APM Server specification- Recommendations](https://discuss.elastic.co/t/apm-server-specification-recommendations/273781)
**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\ **Replies:** 7\ **Last updated:** [June 14, 2021, 3:33am UTC](https://discuss.elastic.co/t/apm-server-specification-recommendations/273781 "2021-06-14T03:33:34Z")
Can anybody help me in getting below information: - APM Server Specification APM Recommendations --- ## [Elk requirement](https://discuss.elastic.co/t/elk-requirement/269441)
**Author:** [@dddddddddddddddd](https://discuss.elastic.co/u/dddddddddddddddd)\ **Replies:** 7\ **Last updated:** [April 7, 2021, 1:33pm UTC](https://discuss.elastic.co/t/elk-requirement/269441 "2021-04-07T13:33:51Z")
hi , i hope this message finds you well, so How much cpu(GHz) /memory/storage at least I need to use ELK stack . regards. --- ## [Case sensitivity question](https://discuss.elastic.co/t/case-sensitivity-question/183737)
**Author:** [@jamesgrobertson](https://discuss.elastic.co/u/jamesgrobertson)\ **Replies:** 1\ **Last updated:** [May 31, 2019, 4:28pm UTC](https://discuss.elastic.co/t/case-sensitivity-question/183737 "2019-05-31T16:28:39Z")
I have a question about case sensitivity in autocomplete searches vs. in search filters. If I type "search term", "Search Term", or "SEARCH TERM" in the autocomplete (implemented using the Swiftype jQuery autocomplete p… --- ## [How can I save a data with type Array\[String\] to Es with painless script](https://discuss.elastic.co/t/how-can-i-save-a-data-with-type-array-string-to-es-with-painless-script/182584)
**Author:** [@huolongguo007](https://discuss.elastic.co/u/huolongguo007)\ **Replies:** 1\ **Last updated:** [May 27, 2019, 3:36am UTC](https://discuss.elastic.co/t/how-can-i-save-a-data-with-type-array-string-to-es-with-painless-script/182584 "2019-05-27T03:36:24Z")
In my project, i tried to save the data from spark-stream to ES, to be exact, it is to update a struct table. I don't known is there any better way to update data in ES? Well, I used the painless script to update, like … --- ## [Select and Update matching docs](https://discuss.elastic.co/t/select-and-update-matching-docs/180038)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 7\ **Last updated:** [May 11, 2019, 1:56am UTC](https://discuss.elastic.co/t/select-and-update-matching-docs/180038 "2019-05-11T01:56:59Z")
Hi. We are trying to do the following and any help would be appreciated. Say you make a search and 100,000 documents match. We would like to increment a counter in each document that matched. Then at the same time sel… --- ## [JSON parse error on valid JSON](https://discuss.elastic.co/t/json-parse-error-on-valid-json/176221)
**Author:** [@Miao](https://discuss.elastic.co/u/Miao)\ **Replies:** 1\ **Last updated:** [April 10, 2019, 1:25pm UTC](https://discuss.elastic.co/t/json-parse-error-on-valid-json/176221 "2019-04-10T13:25:42Z")
Here is my logstash.conf file: input { http { host =\> "127.0.0.1" port =\> 31311 ssl =\> false } } filter { mutate { split =\> { "\[headers\]\[request\_path\]" =\> "/"} add\_field =\> { "index\_id" =\> "%{\[headers\]\[re… --- ## [Auid value not set properly](https://discuss.elastic.co/t/auid-value-not-set-properly/174553)
**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 3:19pm UTC](https://discuss.elastic.co/t/auid-value-not-set-properly/174553 "2019-04-01T15:19:59Z")
The auid field is set to "unset" in many documents. A sample document is here. Here in the "message" field there is value for auid. but in the parsed section, the auid is set as "unset". { "process": { … --- ## [Logstash/ long datatype returning String](https://discuss.elastic.co/t/logstash-long-datatype-returning-string/151789)
**Author:** [@Lakshmi\_Deepak\_Katar](https://discuss.elastic.co/u/Lakshmi_Deepak_Katar)\ **Replies:** 1\ **Last updated:** [October 11, 2018, 7:00am UTC](https://discuss.elastic.co/t/logstash-long-datatype-returning-string/151789 "2018-10-11T07:00:57Z")
Hi, Please help me, I am very new to ELK, I am trying to change file-size field value to long data type but it is returning as string. log message: 19-09-2018 18:25:12.676 type:interface::filename:AccountsDetails.csv:… --- ## [Disable/Hide Management from Kibana console](https://discuss.elastic.co/t/disable-hide-management-from-kibana-console/112853)
**Author:** [@sshingarapu](https://discuss.elastic.co/u/sshingarapu)\ **Replies:** 1\ **Last updated:** [December 21, 2017, 6:05pm UTC](https://discuss.elastic.co/t/disable-hide-management-from-kibana-console/112853 "2017-12-21T18:05:05Z")
Hi, Is there any way found to disable/hide Management section in kibana console for non-admin users? We are running Elasticsearch & kibana with version 5.4.1 and would like to display "Management" section only for admi… --- ## [Logstash Filter - GeoIP2-ISP](https://discuss.elastic.co/t/logstash-filter-geoip2-isp/105446)
**Author:** [@rsmoorthy](https://discuss.elastic.co/u/rsmoorthy)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 1:28am UTC](https://discuss.elastic.co/t/logstash-filter-geoip2-isp/105446 "2017-11-09T01:28:51Z")
Hello, Does the logstash-filter-geoip support GeoIP2-ISP database (commercial database from Maxmind)? Their documentation at https://github.com/logstash-plugins/logstash-filter-geoip/blob/master/docs/index.asciidoc sug… --- ## [Extract source filename in logstash received from Filebeat](https://discuss.elastic.co/t/extract-source-filename-in-logstash-received-from-filebeat/101108)
**Author:** [@hasan\_sharekhan](https://discuss.elastic.co/u/hasan_sharekhan)\ **Replies:** 1\ **Last updated:** [September 23, 2017, 6:08pm UTC](https://discuss.elastic.co/t/extract-source-filename-in-logstash-received-from-filebeat/101108 "2017-09-23T18:08:58Z")
I am using ELK v5.5 How do i extract only log file name from the source log file name send by filebeat to logstash I am processing dozens of logs files and will be having different paths and log file names, I just want… --- ## [X-pack basic license duration](https://discuss.elastic.co/t/x-pack-basic-license-duration/87094)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 1\ **Last updated:** [May 25, 2017, 9:12am UTC](https://discuss.elastic.co/t/x-pack-basic-license-duration/87094 "2017-05-25T09:12:54Z")
Hi, I want to use X-pack basic license just for monitoring and I was wondering what will the process of renewing it after a year. Will it still be free? Basic Version License. Subject to the terms and conditions of t… --- ## [Fuzzy queries relevance score detailed explanation](https://discuss.elastic.co/t/fuzzy-queries-relevance-score-detailed-explanation/39597)
**Author:** [@full\_vlad](https://discuss.elastic.co/u/full_vlad)\ **Replies:** 1\ **Last updated:** [January 20, 2016, 10:56am UTC](https://discuss.elastic.co/t/fuzzy-queries-relevance-score-detailed-explanation/39597 "2016-01-20T10:56:52Z")
In what step of the relevance scoring phase do fuzzy-queries apply the Levenstein formula? I am asking this because I read here that the steps for relevance scoring include TF-IDF, vector space model and other feature… --- ## [Insert into logstash select data from database](https://discuss.elastic.co/t/insert-into-logstash-select-data-from-database/38600)
**Author:** [@Architha](https://discuss.elastic.co/u/Architha)\ **Replies:** 1\ **Last updated:** [January 8, 2016, 5:53am UTC](https://discuss.elastic.co/t/insert-into-logstash-select-data-from-database/38600 "2016-01-08T05:53:55Z")
Hi All, I have been following the article on inserting select data from database to Logstash by Tal Levy. (URL: https://www.elastic.co/blog/logstash-jdbc-input-plugin ) My query is can we include multiple query stateme… --- ## [How index distributed into ElasticSearch cluster](https://discuss.elastic.co/t/how-index-distributed-into-elasticsearch-cluster/10565)
**Author:** [@dean\_2](https://discuss.elastic.co/u/dean_2)\ **Replies:** 1\ **Last updated:** [January 31, 2013, 1:08pm UTC](https://discuss.elastic.co/t/how-index-distributed-into-elasticsearch-cluster/10565 "2013-01-31T13:08:37Z")
There are 3 nodes of my ES cluster. The shard number is 5. There are 2 shards existing on 2 of the nodes and the last shard existing on the last node. I use TransportClient.addTransportAddress(...) to add all these … --- ## [Registering S3 repository from private subnet fails with "Unauthorized"](https://discuss.elastic.co/t/registering-s3-repository-from-private-subnet-fails-with-unauthorized/352527)
**Author:** [@strophy](https://discuss.elastic.co/u/strophy)\ **Replies:** 4\ **Last updated:** [February 5, 2024, 12:56pm UTC](https://discuss.elastic.co/t/registering-s3-repository-from-private-subnet-fails-with-unauthorized/352527 "2024-02-05T12:56:05Z")
I'm trying to register an S3 repository for a test cluster of two instances running Elasticsearch 8.12.0 in a private AWS subnet using IAM instance profiles instead of access keys. The subnet security group has outgoing … --- ## [Attribute Based Security](https://discuss.elastic.co/t/attribute-based-security/280592)
**Author:** [@workenehg](https://discuss.elastic.co/u/workenehg)\ **Replies:** 4\ **Last updated:** [August 13, 2021, 1:46am UTC](https://discuss.elastic.co/t/attribute-based-security/280592 "2021-08-13T01:46:42Z")
I have a use case where I need to restrict access to documents in an Elasticsearch index based on the user executing the query ACL and the security attributes on the document. i was told to use Attribute based Security … --- ## [Connection to ES on a remote single server too slow](https://discuss.elastic.co/t/connection-to-es-on-a-remote-single-server-too-slow/213189)
**Author:** [@weiwei107](https://discuss.elastic.co/u/weiwei107)\ **Replies:** 4\ **Last updated:** [December 27, 2019, 1:11pm UTC](https://discuss.elastic.co/t/connection-to-es-on-a-remote-single-server-too-slow/213189 "2019-12-27T13:11:02Z")
The connection with ES is Ok locally. Then we put the ES on a single server of Aliyun. The search speed becomes very slow. Everything else is the same except the difference between local and remote. The ES version is 5.… --- ## [Error when Reindex from 2.4.6 to 5.x (enabled) - Reindex helper](https://discuss.elastic.co/t/error-when-reindex-from-2-4-6-to-5-x-enabled-reindex-helper/108996)
**Author:** [@juanito](https://discuss.elastic.co/u/juanito)\ **Replies:** 4\ **Last updated:** [November 27, 2017, 12:40pm UTC](https://discuss.elastic.co/t/error-when-reindex-from-2-4-6-to-5-x-enabled-reindex-helper/108996 "2017-11-27T12:40:34Z")
Hi I am migrating from 2.4.6 to 5.x, and I am using the migration tool (https://github.com/elastic/elasticsearch-migration/tree/2.x), but when i using the Reindex Helper, its throw a error, see below: “PUT http://local… --- ## [Highlighting in Elasticsearch](https://discuss.elastic.co/t/highlighting-in-elasticsearch/107224)
**Author:** [@Akshay\_Deep\_Lamba](https://discuss.elastic.co/u/Akshay_Deep_Lamba)\ **Replies:** 4\ **Last updated:** [November 10, 2017, 6:19pm UTC](https://discuss.elastic.co/t/highlighting-in-elasticsearch/107224 "2017-11-10T18:19:42Z")
I am using the Below Query GET books/\_search { "query" : { "query\_string": { "query": "java scala" } }, "aggs": { "my\_agg": { "terms": { "fiel… --- ## [Any way that stop reload when switch between diff apps](https://discuss.elastic.co/t/any-way-that-stop-reload-when-switch-between-diff-apps/87086)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 4\ **Last updated:** [May 31, 2017, 9:21pm UTC](https://discuss.elastic.co/t/any-way-that-stop-reload-when-switch-between-diff-apps/87086 "2017-05-31T21:21:02Z")
kibana version: 5.4 any way that stop reload when switch between diff app plugins, its really slow --- ## [When replication occurs?](https://discuss.elastic.co/t/when-replication-occurs/75234)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 4\ **Last updated:** [February 17, 2017, 9:33am UTC](https://discuss.elastic.co/t/when-replication-occurs/75234 "2017-02-17T09:33:28Z")
Hello, I have several indexes with replication=1. yellow open test-2017-02-15 rrmzk-O7QdSB2Ac83-Nf9g 7 1 832869232 0 363.9gb 363.9gb green open test-2017-02-14 LV5lotK3S… --- ## [Alpha 4 new java http client](https://discuss.elastic.co/t/alpha-4-new-java-http-client/54933)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 4\ **Last updated:** [July 7, 2016, 7:33pm UTC](https://discuss.elastic.co/t/alpha-4-new-java-http-client/54933 "2016-07-07T19:33:32Z")
Hi, I am playing around with the new java client introduced in alpha 4. I was wondering why in the performRequest method there are all these mandatory fields. I need to provide a Map with params, I need to provide at lea… --- ## [Accessing elasticsearch api url](https://discuss.elastic.co/t/accessing-elasticsearch-api-url/363877)
**Author:** [@mealbert23](https://discuss.elastic.co/u/mealbert23)\ **Replies:** 2\ **Last updated:** [August 2, 2024, 9:03pm UTC](https://discuss.elastic.co/t/accessing-elasticsearch-api-url/363877 "2024-08-02T21:03:30Z")
Hi, I have recently setup an elasticsearch and kibana system on aws eks. Everything seems to be running without issues. fleet server/agents and elastic agents are running, kibana is accessible from a public url, and e… --- ## [Importing data to elasticsearch from multiple dynamic databases](https://discuss.elastic.co/t/importing-data-to-elasticsearch-from-multiple-dynamic-databases/288317)
**Author:** [@enricog84](https://discuss.elastic.co/u/enricog84)\ **Replies:** 2\ **Last updated:** [November 4, 2021, 8:31am UTC](https://discuss.elastic.co/t/importing-data-to-elasticsearch-from-multiple-dynamic-databases/288317 "2021-11-04T08:31:37Z")
Hi, I am currently evaluating (and have no further experience so far) the ELK stack. I am wondering if it would be possible to import data from multiple dynamic created MariaDB databases into Elasticsearch. Short back… --- ## [How do I configure line codec to output plain events?](https://discuss.elastic.co/t/how-do-i-configure-line-codec-to-output-plain-events/278791)
**Author:** [@albgus](https://discuss.elastic.co/u/albgus)\ **Replies:** 2\ **Last updated:** [July 16, 2021, 7:08am UTC](https://discuss.elastic.co/t/how-do-i-configure-line-codec-to-output-plain-events/278791 "2021-07-16T07:08:45Z")
Hello, I assumed that the plain and line plugins would output the event message unmodified, but this does not appear to be the case, as a bunch of "garbage" data I don't care about is prepended to the event. 2021-07-15… --- ## [Kibana Monitoring says Missing Primary Shards](https://discuss.elastic.co/t/kibana-monitoring-says-missing-primary-shards/274548)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 2\ **Last updated:** [May 31, 2021, 11:52pm UTC](https://discuss.elastic.co/t/kibana-monitoring-says-missing-primary-shards/274548 "2021-05-31T23:52:44Z")
Hello, I've just update my cluster from 7.9.3 to 7.12.1 and in the monitoring for Kibana it says that the status is Red and that it is Missing Primary Shards. The elasticsearch monitoring part is green, this is the res… --- ## [Don't see logs in kibana stack montoring](https://discuss.elastic.co/t/dont-see-logs-in-kibana-stack-montoring/254433)
**Author:** [@JC83](https://discuss.elastic.co/u/JC83)\ **Replies:** 2\ **Last updated:** [November 6, 2020, 3:51pm UTC](https://discuss.elastic.co/t/dont-see-logs-in-kibana-stack-montoring/254433 "2020-11-06T15:51:02Z")
No structured logs found Check if the var.paths setting \[points to JSON logs\] Here is my elasticsearch.yml (Filebeat -elasticsearch Module) - module: elasticsearch # Server log server: enabled: true # Set… --- ## [Unable to find image 'docker.elastic.co/cloud-enterprise/elastic-cloud-enterprise:2.6.1' locally](https://discuss.elastic.co/t/unable-to-find-image-docker-elastic-co-cloud-enterprise-elastic-cloud-enterprise-2-6-1-locally/248066)
**Author:** [@dkangel37](https://discuss.elastic.co/u/dkangel37)\ **Replies:** 2\ **Last updated:** [September 11, 2020, 4:04am UTC](https://discuss.elastic.co/t/unable-to-find-image-docker-elastic-co-cloud-enterprise-elastic-cloud-enterprise-2-6-1-locally/248066 "2020-09-11T04:04:58Z")
I am trying to install ECE until AWS EC2 instances. I have run into the below error both while using the github ECE role and via the manual install method using this cmd " bash \<(curl -fsSL https://download.elastic.co/cl… --- ## [How to view cloudwatch log in Kibana after deploying via functionbeat](https://discuss.elastic.co/t/how-to-view-cloudwatch-log-in-kibana-after-deploying-via-functionbeat/244473)
**Author:** [@JamaesTiger](https://discuss.elastic.co/u/JamaesTiger)\ **Replies:** 2\ **Last updated:** [August 13, 2020, 1:06am UTC](https://discuss.elastic.co/t/how-to-view-cloudwatch-log-in-kibana-after-deploying-via-functionbeat/244473 "2020-08-13T01:06:38Z")
I am testing how to stream to elastic service cloudwatch log via lambda function. Deployment seem to be fine but i couldn't create(define) index pattern. Please let me know what was problem of my tested configuration(f… --- ## [Sync Kibana settings across multiple elasticsearch clusters](https://discuss.elastic.co/t/sync-kibana-settings-across-multiple-elasticsearch-clusters/215141)
**Author:** [@raulgs](https://discuss.elastic.co/u/raulgs)\ **Replies:** 2\ **Last updated:** [January 17, 2020, 3:05am UTC](https://discuss.elastic.co/t/sync-kibana-settings-across-multiple-elasticsearch-clusters/215141 "2020-01-17T03:05:28Z")
I am running multiple kubernetes Clusters that run EFK-Stack. Each cluster runs its own elasticsearch cluster and a Kibana pod which includes the elaticsearch cluster of the other kubernetes clusters as remote cluster. N… --- ## [Mapping CPE IDs to ECS?](https://discuss.elastic.co/t/mapping-cpe-ids-to-ecs/210573)
**Author:** [@jasenj1](https://discuss.elastic.co/u/jasenj1)\ **Replies:** 2\ **Last updated:** [December 5, 2019, 3:45pm UTC](https://discuss.elastic.co/t/mapping-cpe-ids-to-ecs/210573 "2019-12-05T15:45:14Z")
My customers use CPE IDs (Common Platform Enumeration) quite a bit. For operating systems, the CPE ID can be dismantled into fields for ECS pretty 1-to-1 if desired, but for applications, I don't see a similar object. "… --- ## [Consistency date of Search-result](https://discuss.elastic.co/t/consistency-date-of-search-result/88940)
**Author:** [@benroll](https://discuss.elastic.co/u/benroll)\ **Replies:** 2\ **Last updated:** [June 11, 2017, 9:35am UTC](https://discuss.elastic.co/t/consistency-date-of-search-result/88940 "2017-06-11T09:35:42Z")
How to have Elasticsearch search (API) deal with a time for which it would be consistent with ? Elastic search API is eventually consistent, in favour of query response times. Eventual consistency is not an issue as lo… --- ## [Persistent Cluster Update Settings not work](https://discuss.elastic.co/t/persistent-cluster-update-settings-not-work/82969)
**Author:** [@ginger](https://discuss.elastic.co/u/ginger)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 12:09pm UTC](https://discuss.elastic.co/t/persistent-cluster-update-settings-not-work/82969 "2017-04-20T12:09:08Z")
Hi. I have a question about "Cluster Update Settings" in the reference: https://www.elastic.co/guide/en/elasticsearch/reference/5.3/cluster-update-settings.html I create a 2-node cluster and write some data into it. … --- ## [Drop\_event equals condition does not work on floats](https://discuss.elastic.co/t/drop-event-equals-condition-does-not-work-on-floats/82433)
**Author:** [@Darien\_Rrushi](https://discuss.elastic.co/u/Darien_Rrushi)\ **Replies:** 2\ **Last updated:** [April 14, 2017, 7:11pm UTC](https://discuss.elastic.co/t/drop-event-equals-condition-does-not-work-on-floats/82433 "2017-04-14T19:11:32Z")
In using the metricbeat with the system module, I'm trying to drop process events where certain conditions are true. I have configured my yml file with the below processor and the configuration tests ok. However the even… --- ## [Help with function\_score](https://discuss.elastic.co/t/help-with-function-score/66551)
**Author:** [@Alkalit](https://discuss.elastic.co/u/Alkalit)\ **Replies:** 2\ **Last updated:** [December 15, 2016, 2:35pm UTC](https://discuss.elastic.co/t/help-with-function-score/66551 "2016-12-15T14:35:52Z")
I need to tune search relevance for ads. In the project we are not deleting ads in time. But we need to show up more-or-less fresh ads for users. So I decided to use the function\_score query. But it does not works - rele… [Previous page](https://discuss.elastic.co/top.md?page=1597&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1599&per_page=50&period=all)