# Top **URL:** https://discuss.elastic.co/top.md?page=1601&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1602 --- ## [How to append a document without knowing it's id?](https://discuss.elastic.co/t/how-to-append-a-document-without-knowing-its-id/89596)
**Author:** [@kaushah](https://discuss.elastic.co/u/kaushah)\ **Replies:** 3\ **Last updated:** [June 16, 2017, 12:47am UTC](https://discuss.elastic.co/t/how-to-append-a-document-without-knowing-its-id/89596 "2017-06-16T00:47:48Z")
What should I do if I don't know the id of the doc? Here is my case: I have a nested doc like: { "Name" : "ABC", "Tag" : { "Tag1" : "DEF", "Tag2" : "GHI" } } and another doc like: { … --- ## [Percolator queries get lost after restart](https://discuss.elastic.co/t/percolator-queries-get-lost-after-restart/68165)
**Author:** [@oachoor](https://discuss.elastic.co/u/oachoor)\ **Replies:** 3\ **Last updated:** [December 12, 2016, 7:43am UTC](https://discuss.elastic.co/t/percolator-queries-get-lost-after-restart/68165 "2016-12-12T07:43:54Z")
Hello, All percolator queries disappear from the index after restarting Elasticsearch. For now all percolator queries are stored in the database, then a command is triggered to recreate these queries whenever Elastic… --- ## [Elasticsearch io wait](https://discuss.elastic.co/t/elasticsearch-io-wait/63085)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 0\ **Last updated:** [October 14, 2016, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-io-wait/63085 "2016-10-14T21:03:58Z")
I have a 4 nodes elasticsearch cluster (64G RAM, 8 CPUs), data stream in at the speed of 800-3000 messages per second, mainly usage is for aggregation. It was working very well for a few month without problem, but today… --- ## [Heap Problem](https://discuss.elastic.co/t/heap-problem/61250)
**Author:** [@Buddhi\_Rathore](https://discuss.elastic.co/u/Buddhi_Rathore)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 2:47pm UTC](https://discuss.elastic.co/t/heap-problem/61250 "2016-09-22T14:47:18Z")
Hello, we using elastic search to process analytic data, we got daily basis analytic dump from our system, we need to do some analysis on analytic data, for this we push analytic data from log files to elastic search us… --- ## [Elastic](https://discuss.elastic.co/t/elastic/51290)
**Author:** [@sylv](https://discuss.elastic.co/u/sylv)\ **Replies:** 3\ **Last updated:** [May 30, 2016, 7:48pm UTC](https://discuss.elastic.co/t/elastic/51290 "2016-05-30T19:48:15Z")
Hello i set a base of 20000 lines which ones are visualized correctly on kibana when i add 1 line elastic read again all the lines then on kibana there are 40001 lines and of course it is not what i expected. why and how… --- ## [How to search in elasticsearch using prefix?](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-using-prefix/29035)
**Author:** [@Petr\_Sokolnikov](https://discuss.elastic.co/u/Petr_Sokolnikov)\ **Replies:** 3\ **Last updated:** [September 10, 2015, 2:01pm UTC](https://discuss.elastic.co/t/how-to-search-in-elasticsearch-using-prefix/29035 "2015-09-10T14:01:40Z")
Hello. I'm newbie in elasticsearch. Before I used Sphinx, and now decide to learn elasticsearch. So, I have some index named test, and type named country with several documents. I have run first query: curl -XGET… --- ## [Regexp query for phrase](https://discuss.elastic.co/t/regexp-query-for-phrase/296026)
**Author:** [@Divyank\_Garg](https://discuss.elastic.co/u/Divyank_Garg)\ **Replies:** 6\ **Last updated:** [February 3, 2022, 12:50pm UTC](https://discuss.elastic.co/t/regexp-query-for-phrase/296026 "2022-02-03T12:50:27Z")
I need to search for two signature pattern with 'and' operator between two phrase. How to write the query for that. In these two phrase I as shown below the \* means any number or value between 0-9 can be taken into consi… --- ## [ES are creating indexes for a year ago](https://discuss.elastic.co/t/es-are-creating-indexes-for-a-year-ago/70942)
**Author:** [@it2](https://discuss.elastic.co/u/it2)\ **Replies:** 6\ **Last updated:** [January 9, 2017, 1:38pm UTC](https://discuss.elastic.co/t/es-are-creating-indexes-for-a-year-ago/70942 "2017-01-09T13:38:14Z")
Hi there. I have ES 1.7.5 cluster with 8 nodes. After the New Year, I see that there are indexes like logstash-2016.01.04,logstash-2016.01.05,logstash-2016.01.06 etc And they have some data about 200mb. They were create… --- ## [Can I disable replicas in when index is getting data from logstash?](https://discuss.elastic.co/t/can-i-disable-replicas-in-when-index-is-getting-data-from-logstash/286647)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 5:10pm UTC](https://discuss.elastic.co/t/can-i-disable-replicas-in-when-index-is-getting-data-from-logstash/286647 "2021-10-13T17:10:15Z")
Hi, I have a large quantity of data being indexed in elastic, is taking a long time to do it, so it is posible to disable replicas when data is being indexed to Elasticsearch? can this create any problem? it will speed u… --- ## [Getting error while making asynchronous call into es.search() from Flask python API](https://discuss.elastic.co/t/getting-error-while-making-asynchronous-call-into-es-search-from-flask-python-api/282703)
**Author:** [@SCode](https://discuss.elastic.co/u/SCode)\ **Replies:** 2\ **Last updated:** [August 30, 2021, 12:13pm UTC](https://discuss.elastic.co/t/getting-error-while-making-asynchronous-call-into-es-search-from-flask-python-api/282703 "2021-08-30T12:13:48Z")
Error message looks like Error occurred: '\<' not supported between instances of 'AIOHttpConnection' and 'AIOHttpConnection' Also, at times it throws this error Error occurred: ConnectionError(Event loop is closed) cau… --- ## [Kibana fails after several days or hours of work due to reaching nofile ulimit](https://discuss.elastic.co/t/kibana-fails-after-several-days-or-hours-of-work-due-to-reaching-nofile-ulimit/150898)
**Author:** [@vara0855](https://discuss.elastic.co/u/vara0855)\ **Replies:** 2\ **Last updated:** [October 4, 2018, 9:28am UTC](https://discuss.elastic.co/t/kibana-fails-after-several-days-or-hours-of-work-due-to-reaching-nofile-ulimit/150898 "2018-10-04T09:28:17Z")
I have such ulimits on my server: address space limit (Kibytes) (-M) unlimited core file size (blocks) (-c) unlimited cpu time (seconds) (-t) unlimited data size (Kibytes) (-d) unlimited file size (blocks) (-f) unl… --- ## [Query works in elastic search but does not work in Kibana discover](https://discuss.elastic.co/t/query-works-in-elastic-search-but-does-not-work-in-kibana-discover/148120)
**Author:** [@Malay\_Peaas](https://discuss.elastic.co/u/Malay_Peaas)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 5:16am UTC](https://discuss.elastic.co/t/query-works-in-elastic-search-but-does-not-work-in-kibana-discover/148120 "2018-09-12T05:16:02Z")
I've an index of dummy logs having a field called "sequence" I want to sort on basis of this field, so while getting the data in ElasticSearch I use the following query { "query": { "match": { "trace\_id": "5… --- ## [Not connecting http://localhost:9200 on Windows 2016 and Elasticsearch 5.6](https://discuss.elastic.co/t/not-connecting-http-localhost-9200-on-windows-2016-and-elasticsearch-5-6/103078)
**Author:** [@MISMIS](https://discuss.elastic.co/u/MISMIS)\ **Replies:** 2\ **Last updated:** [October 11, 2017, 11:01am UTC](https://discuss.elastic.co/t/not-connecting-http-localhost-9200-on-windows-2016-and-elasticsearch-5-6/103078 "2017-10-11T11:01:29Z")
Installation went well and elasticsearch service is running. http://localhost is good. http://localhost:9200 - I received IE browser username and password prompt. I tried to reduce security, but that is not going away… --- ## [Logstash filters elasticsearch :: Cannot get new connection from pool](https://discuss.elastic.co/t/logstash-filters-elasticsearch-cannot-get-new-connection-from-pool/84087)
**Author:** [@michaeleino](https://discuss.elastic.co/u/michaeleino)\ **Replies:** 2\ **Last updated:** [May 5, 2017, 3:31pm UTC](https://discuss.elastic.co/t/logstash-filters-elasticsearch-cannot-get-new-connection-from-pool/84087 "2017-05-05T15:31:59Z")
I'm hitting this error logs randomly while using "logstash filters elasticsearch" \[2017-04-29T16:13:16,826\]\[WARN \]\[logstash.filters.elasticsearch\] Failed to query elasticsearch for previous event {:index=\>"logstash-\*",… --- ## [Is it possible to shorten / give an alias to Timelion query?](https://discuss.elastic.co/t/is-it-possible-to-shorten-give-an-alias-to-timelion-query/81939)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 2\ **Last updated:** [April 11, 2017, 9:59am UTC](https://discuss.elastic.co/t/is-it-possible-to-shorten-give-an-alias-to-timelion-query/81939 "2017-04-11T09:59:26Z")
Hi, i am using ELK GA 5.0.0. In my Timelion, I have a query like below; .es(index=mylogsA-\*, timefield=time, q='action:ActionA|ActionB|ActionC|ActionD|ActionE|ActionF|ActionG|ActionH|ActionI|ActionJ|ActionK|ActionL|A… --- ## [Watcher for Elasticsearch 2.3](https://discuss.elastic.co/t/watcher-for-elasticsearch-2-3/74145)
**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\ **Replies:** 2\ **Last updated:** [February 7, 2017, 8:30pm UTC](https://discuss.elastic.co/t/watcher-for-elasticsearch-2-3/74145 "2017-02-07T20:30:55Z")
Hello, I am unable to list all existing Watch ID's in Elasticsearch 2.3. I use the following query: GET /.watches/\_search { "fields" : \[\], "query" : {"match\_all" : { } } } I get a hit of 42, but … --- ## [Start\_position: beggining](https://discuss.elastic.co/t/start-position-beggining/66763)
**Author:** [@chromechris](https://discuss.elastic.co/u/chromechris)\ **Replies:** 2\ **Last updated:** [November 21, 2016, 9:18pm UTC](https://discuss.elastic.co/t/start-position-beggining/66763 "2016-11-21T21:18:07Z")
Hello, I am wondering if I set my in my Logstash configuration, if I restart Logstash, will files that have already been processed be reprocessed, or will sincedb protect from reprocessing previously processed files, … --- ## [Elasticsearch Retweet Value is Always False](https://discuss.elastic.co/t/elasticsearch-retweet-value-is-always-false/29910)
**Author:** [@owardman](https://discuss.elastic.co/u/owardman)\ **Replies:** 2\ **Last updated:** [May 29, 2016, 5:10am UTC](https://discuss.elastic.co/t/elasticsearch-retweet-value-is-always-false/29910 "2016-05-29T05:10:23Z")
Hi. ES 1.6.2 Logstash 1.5.4 Kibana 4.1.2 I am accessing Twitter using the logstash twitter plugin and notice that retweeted is always set to false even though the tweet has often been retweeted. Has anyone else come… --- ## [Logstash + Elasticsearch + Windows Server](https://discuss.elastic.co/t/logstash-elasticsearch-windows-server/44691)
**Author:** [@Vakhtang\_Badzhadze](https://discuss.elastic.co/u/Vakhtang_Badzhadze)\ **Replies:** 2\ **Last updated:** [March 19, 2016, 3:26pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-windows-server/44691 "2016-03-19T15:26:32Z")
Hi ? I have windows server 2012 and installed logstash 2.2 and elastic 2.2 on it. Log stash config: input { file { start\_position =\> "beginning" type =\> "log4net" path =\> \["D:/Other Programms/ELK/logstash/bin/log… --- ## [Issue with asciiFolding filter and accents](https://discuss.elastic.co/t/issue-with-asciifolding-filter-and-accents/31422)
**Author:** [@jb95](https://discuss.elastic.co/u/jb95)\ **Replies:** 2\ **Last updated:** [September 30, 2015, 3:52pm UTC](https://discuss.elastic.co/t/issue-with-asciifolding-filter-and-accents/31422 "2015-09-30T15:52:08Z")
Hi, i have an issue with the how asciiFolding filter works ... I explain : I have an analyzer "folding": { "tokenizer": "standard", "filter": \["asciifolding" \] } I thought (in french) the tokens f… --- ## [How to create Alerts for cluster health (green/yellow/red) and Circuit Breaker errors?](https://discuss.elastic.co/t/how-to-create-alerts-for-cluster-health-green-yellow-red-and-circuit-breaker-errors/341842)
**Author:** [@Craig\_Rodrigues](https://discuss.elastic.co/u/Craig_Rodrigues)\ **Replies:** 1\ **Last updated:** [September 5, 2023, 1:12pm UTC](https://discuss.elastic.co/t/how-to-create-alerts-for-cluster-health-green-yellow-red-and-circuit-breaker-errors/341842 "2023-09-05T13:12:59Z")
In Kibana 8.9.0, I managed to successfully create an alert for Cluster Health, so that if cluster health transitions from green to yellow or red, I receive an alert. I did the following: Go to Stack Monitoring In th… --- ## [Logstash: retrying failed action with response code: 403; reason=\> blocked by: FORBIDDEN/5/index read-only (api)](https://discuss.elastic.co/t/logstash-retrying-failed-action-with-response-code-403-reason-blocked-by-forbidden-5-index-read-only-api/225405)
**Author:** [@pavank](https://discuss.elastic.co/u/pavank)\ **Replies:** 1\ **Last updated:** [March 30, 2020, 2:47pm UTC](https://discuss.elastic.co/t/logstash-retrying-failed-action-with-response-code-403-reason-blocked-by-forbidden-5-index-read-only-api/225405 "2020-03-30T14:47:47Z")
We have set up our production environment with a 5 ES node cluster (3 hot and 2 warm) with a curator executing cronjob to push older logs into the warm nodes. As per industry regulations, curator password expired and was… --- ## [Optimizing Grok patterns](https://discuss.elastic.co/t/optimizing-grok-patterns/123256)
**Author:** [@burnersk](https://discuss.elastic.co/u/burnersk)\ **Replies:** 1\ **Last updated:** [March 14, 2018, 3:01am UTC](https://discuss.elastic.co/t/optimizing-grok-patterns/123256 "2018-03-14T03:01:37Z")
I have the following Grok pattern for parsing nginx's error log file: input { file { id =\> "nginx\_error\_file\_input" codec =\> "plain" tags =\> \[ "nginx", "nginx\_errors" \] type =\> "nginx\_error\_log" pa… --- ## [Replicating from mongoDB to elasticsearch and vice-versa](https://discuss.elastic.co/t/replicating-from-mongodb-to-elasticsearch-and-vice-versa/87678)
**Author:** [@monika\_maheshwari](https://discuss.elastic.co/u/monika_maheshwari)\ **Replies:** 1\ **Last updated:** [May 31, 2017, 7:04am UTC](https://discuss.elastic.co/t/replicating-from-mongodb-to-elasticsearch-and-vice-versa/87678 "2017-05-31T07:04:47Z")
I want to replicate same set of data from mongoDB server to elasticSearch server and vice versa. What should i use? --- ## [쿼리 도움 요청드립니다](https://discuss.elastic.co/t/topic/83640)
**Author:** [@Jason\_Park](https://discuss.elastic.co/u/Jason_Park)\ **Replies:** 1\ **Last updated:** [April 27, 2017, 1:09am UTC](https://discuss.elastic.co/t/topic/83640 "2017-04-27T01:09:29Z")
아래 쿼리문을 심플하게 변경하는 방법이 있을 것 같습니다. metric data고 동작은 잘 하는데 가독성이 너무 않좋아서요. 쿼리 내용은 (SUM of HTTP status code 200 COUNT) / (SUM of HTTP method(get+post+delete) COUNT) 입니다. 즉 HTTP request에 대한 응답코드 200 OK의 비율을 구하고자 합니다. 감사 합니다… --- ## [Issues manually loading a template to ES](https://discuss.elastic.co/t/issues-manually-loading-a-template-to-es/62972)
**Author:** [@mcasa](https://discuss.elastic.co/u/mcasa)\ **Replies:** 1\ **Last updated:** [October 14, 2016, 10:06am UTC](https://discuss.elastic.co/t/issues-manually-loading-a-template-to-es/62972 "2016-10-14T10:06:19Z")
So I upgraded winlogbeats to 5.x alpha to get a more granular view of my sys logs but I cant get the new json template loaded into elastic search. currently files are still getting shipped from winlogbeats to LS and eve… --- ## [Packetbeat not generating logs for port mirrored traffic](https://discuss.elastic.co/t/packetbeat-not-generating-logs-for-port-mirrored-traffic/47927)
**Author:** [@kirann42](https://discuss.elastic.co/u/kirann42)\ **Replies:** 1\ **Last updated:** [April 20, 2016, 4:51pm UTC](https://discuss.elastic.co/t/packetbeat-not-generating-logs-for-port-mirrored-traffic/47927 "2016-04-20T16:51:12Z")
Hi, This might be a silly question but we are facing few issues with packetbeat when using port mirroring. We have 2 hosts Host1 and Host2 and we are mirroring the traffic between these hosts on to the host3(Packetbeat… --- ## [Logstash filter VMware access\_log](https://discuss.elastic.co/t/logstash-filter-vmware-access-log/46381)
**Author:** [@maher](https://discuss.elastic.co/u/maher)\ **Replies:** 1\ **Last updated:** [April 5, 2016, 5:28pm UTC](https://discuss.elastic.co/t/logstash-filter-vmware-access-log/46381 "2016-04-05T17:28:44Z")
HI, I am trying to parse an apache access\_log. The log format includes the VMware name and port so using the grok %{ COMBINEDAPACHELOG} I always have a wrong result. I was trying to use a custom filter without a us… --- ## [ElasticLowLevelClient Documentation](https://discuss.elastic.co/t/elasticlowlevelclient-documentation/45374)
**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\ **Replies:** 1\ **Last updated:** [March 24, 2016, 7:21pm UTC](https://discuss.elastic.co/t/elasticlowlevelclient-documentation/45374 "2016-03-24T19:21:57Z")
Can anyone point me to new documentation for ElasticSearchLowLevelClient? The new version 2.0.5 appears to have several breaking changes from the 1.0 client. Especially around the search call. Specifically: Elastic… --- ## [Translating Kibana to el](https://discuss.elastic.co/t/translating-kibana-to-el/277195)
**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\ **Replies:** 5\ **Last updated:** [July 12, 2021, 11:08am UTC](https://discuss.elastic.co/t/translating-kibana-to-el/277195 "2021-07-12T11:08:05Z")
Hi there! I started localization for el (Greek language). I did everything according to guidelines. I extracted the en.json file from kibana after clone it from git. On kibana downloaded from here (v.7.6.2), I made t… --- ## [Elasticsearch v2.2 Java version](https://discuss.elastic.co/t/elasticsearch-v2-2-java-version/239990)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 7:51am UTC](https://discuss.elastic.co/t/elasticsearch-v2-2-java-version/239990 "2020-07-07T07:51:22Z")
Hi everybody, I know that Elasticsearch v.2.2 is out of support, it is dead and so on but I was using for a small project. I have a plan to create it from scratch with a new version while for the moment I would like to … --- ## [Elasticsearch heap management and GC question](https://discuss.elastic.co/t/elasticsearch-heap-management-and-gc-question/233089)
**Author:** [@renzokuken](https://discuss.elastic.co/u/renzokuken)\ **Replies:** 5\ **Last updated:** [May 18, 2020, 2:24pm UTC](https://discuss.elastic.co/t/elasticsearch-heap-management-and-gc-question/233089 "2020-05-18T14:24:00Z")
Background: We have 32 ES instances running in a bare metal server, all with the same dataset replicated, and namespaced from each other (think containers). Recently we've been noticing a gradual increase in CPU load in … --- ## [Why node uuid replace by {bootstrap-placeholder}-{NodeName}](https://discuss.elastic.co/t/why-node-uuid-replace-by-bootstrap-placeholder-nodename/225869)
**Author:** [@yc1024](https://discuss.elastic.co/u/yc1024)\ **Replies:** 5\ **Last updated:** [April 1, 2020, 7:58am UTC](https://discuss.elastic.co/t/why-node-uuid-replace-by-bootstrap-placeholder-nodename/225869 "2020-04-01T07:58:12Z")
ES version: 7.6.0 I have 3 master and 3 node in my cluster. This is the first time i start the cluster,i have configed discovery.seed\_hosts and cluster.initial\_master\_nodes as follow: discovery.seed\_hosts: ipOfMaster1… --- ## [Setting Up an Advanced Logstash Pipeline](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472)
**Author:** [@Architha](https://discuss.elastic.co/u/Architha)\ **Replies:** 5\ **Last updated:** [January 6, 2016, 8:11am UTC](https://discuss.elastic.co/t/setting-up-an-advanced-logstash-pipeline/38472 "2016-01-06T08:11:22Z")
Hi All, I am new to Logstash and i was referring to the document on Setting Up an Advanced Logstash Pipeline (link:https://www.elastic.co/guide/en/logstash/current/advanced-pipeline.html#advanced-pipeline) I have done … --- ## [TransportClient and NoNodeAvailableException](https://discuss.elastic.co/t/transportclient-and-nonodeavailableexception/11880)
**Author:** [@Paul\_Sanwald\_2](https://discuss.elastic.co/u/Paul_Sanwald_2)\ **Replies:** 5\ **Last updated:** [May 9, 2013, 8:12pm UTC](https://discuss.elastic.co/t/transportclient-and-nonodeavailableexception/11880 "2013-05-09T20:12:44Z")
I have an application (a java jersey based REST service) that uses an ElasticSearch index; it fetches data out of ElasticSearch using a TransportClient to use as part of the data its serving. My problem is that I … --- ## [IntelliJ settings for Elasticsearch (JAR shading issue)](https://discuss.elastic.co/t/intellij-settings-for-elasticsearch-jar-shading-issue/10191)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 5\ **Last updated:** [December 29, 2012, 5:26pm UTC](https://discuss.elastic.co/t/intellij-settings-for-elasticsearch-jar-shading-issue/10191 "2012-12-29T17:26:18Z")
Hi there, This a question a little bit outside ES scope, but not so far... I'm trying to play with IntelliJ (instead of Eclipse) for Elasticsearch. Everything is fine when I compile/test 0.20 branch in IntelliJ.… --- ## [Overall cluster performance is relation to number of shards](https://discuss.elastic.co/t/overall-cluster-performance-is-relation-to-number-of-shards/131540)
**Author:** [@danielhu](https://discuss.elastic.co/u/danielhu)\ **Replies:** 1\ **Last updated:** [May 12, 2018, 1:00am UTC](https://discuss.elastic.co/t/overall-cluster-performance-is-relation-to-number-of-shards/131540 "2018-05-12T01:00:26Z")
So I'm new to our dev team and I'm trying to trouble shoot our ElasticSearch Performance issues. I noticed that our data retrieval from the ES instance takes 800ms -1200ms for a result-set as small as 1000 records. I'v… --- ## [Add Translation to dashboard visualization](https://discuss.elastic.co/t/add-translation-to-dashboard-visualization/320548)
**Author:** [@User101](https://discuss.elastic.co/u/User101)\ **Replies:** 8\ **Last updated:** [December 12, 2022, 8:33am UTC](https://discuss.elastic.co/t/add-translation-to-dashboard-visualization/320548 "2022-12-12T08:33:22Z")
Hi guys im new to kibana and i want to know can i add translation to visualization custom label in en.json --- ## [Grok Pattern not matching in Logstash, but matches in Grok Debuggger](https://discuss.elastic.co/t/grok-pattern-not-matching-in-logstash-but-matches-in-grok-debuggger/194985)
**Author:** [@man0l](https://discuss.elastic.co/u/man0l)\ **Replies:** 8\ **Last updated:** [August 14, 2019, 2:52pm UTC](https://discuss.elastic.co/t/grok-pattern-not-matching-in-logstash-but-matches-in-grok-debuggger/194985 "2019-08-14T14:52:17Z")
Hi, I have this grok pattern: (?\%{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{TIME})%{SPACE}%{LOGLEVEL:level}%{SPACE}%{NUMBER:pid} --- \\\[%{SPACE}(?\\[A-Za-z0-9-\]+)\\\] \[A-Za-z0-9.\]\*\\.(?\\[A-Za-z0-9#\_\]+)\\s\*:%{S… --- ## ["We Opened X-Pack"](https://discuss.elastic.co/t/we-opened-x-pack/143143)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 8\ **Last updated:** [August 6, 2018, 9:10pm UTC](https://discuss.elastic.co/t/we-opened-x-pack/143143 "2018-08-06T21:10:51Z")
https://www.elastic.co/products/x-pack/open What does it mean? What I see it still requires license to run: https://www.elastic.co/guide/en/elasticsearch/reference/current/configuring-security.html There is no way to … --- ## [Elasticsearch nodes keep restarting on Kubernetes](https://discuss.elastic.co/t/elasticsearch-nodes-keep-restarting-on-kubernetes/125936)
**Author:** [@mightwork](https://discuss.elastic.co/u/mightwork)\ **Replies:** 0\ **Last updated:** [March 28, 2018, 12:47pm UTC](https://discuss.elastic.co/t/elasticsearch-nodes-keep-restarting-on-kubernetes/125936 "2018-03-28T12:47:34Z")
Hi, I have a 8 node cluster setup, with 3 master, 2 ingest and 3 data nodes running on Kubernetes(1.9.2). I am using a custom build image based on the official 6.2.2-x-pack image. The Dockerfile is below: FROM docker.e… --- ## [How can I index only new documents without updating the older ones?](https://discuss.elastic.co/t/how-can-i-index-only-new-documents-without-updating-the-older-ones/336501)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [June 20, 2023, 4:23pm UTC](https://discuss.elastic.co/t/how-can-i-index-only-new-documents-without-updating-the-older-ones/336501 "2023-06-20T16:23:15Z")
I am aware of the create action but when I use it a horrendous WARN log is printed in the logstash screen. The solution of create would fit perfect if it wasn't for it. So I've been wondering if there is another way to a… --- ## [Exponential result in kibana metric visualization when expecting zero](https://discuss.elastic.co/t/exponential-result-in-kibana-metric-visualization-when-expecting-zero/306302)
**Author:** [@Irene](https://discuss.elastic.co/u/Irene)\ **Replies:** 4\ **Last updated:** [June 28, 2022, 7:41am UTC](https://discuss.elastic.co/t/exponential-result-in-kibana-metric-visualization-when-expecting-zero/306302 "2022-06-28T07:41:36Z")
Hello, I am creating some Dashboards in Kibana version 6.8 to compare data from two different environments, depending on the field "tecnologia". In the dashboard I use metric visualizations to count the number of docume… --- ## [Enabling security on production cluster without downtime](https://discuss.elastic.co/t/enabling-security-on-production-cluster-without-downtime/230105)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 4\ **Last updated:** [April 29, 2020, 5:36am UTC](https://discuss.elastic.co/t/enabling-security-on-production-cluster-without-downtime/230105 "2020-04-29T05:36:22Z")
Need advice: is there a way how to enable security on multi-node production cluster without downtime? in tutorial https://www.elastic.co/guide/en/elasticsearch/reference/current/security-getting-started.html it is de… --- ## [IIS Event.Duration Doesn't seem Queryable?](https://discuss.elastic.co/t/iis-event-duration-doesnt-seem-queryable/229363)
**Author:** [@ELKNub](https://discuss.elastic.co/u/ELKNub)\ **Replies:** 4\ **Last updated:** [April 25, 2020, 6:10pm UTC](https://discuss.elastic.co/t/iis-event-duration-doesnt-seem-queryable/229363 "2020-04-25T18:10:06Z")
Hey Folks, So I'm looking to pull EVENT.DURATION out of the Logstash IIS preloaded filter. That's all in place and pulling fine. However, you'll notice that it's pulling as an int, which is exactly what I want. The w… --- ## [Why do I have to put the tls certificate in the elasticsearch path?](https://discuss.elastic.co/t/why-do-i-have-to-put-the-tls-certificate-in-the-elasticsearch-path/189032)
**Author:** [@xodn0812](https://discuss.elastic.co/u/xodn0812)\ **Replies:** 1\ **Last updated:** [July 5, 2019, 12:49pm UTC](https://discuss.elastic.co/t/why-do-i-have-to-put-the-tls-certificate-in-the-elasticsearch-path/189032 "2019-07-05T12:49:20Z")
Why do I have to put the tls certificate in the elasticsearch path? I use the same credentials with kubernetes. At this point, I do not understand why I need to move the root certificate path into elasticsearch. Why i… --- ## [Puppet-elasticsearch service reports as started, but isn't started](https://discuss.elastic.co/t/puppet-elasticsearch-service-reports-as-started-but-isnt-started/174096)
**Author:** [@Alex\_L](https://discuss.elastic.co/u/Alex_L)\ **Replies:** 4\ **Last updated:** [March 27, 2019, 10:53pm UTC](https://discuss.elastic.co/t/puppet-elasticsearch-service-reports-as-started-but-isnt-started/174096 "2019-03-27T22:53:24Z")
I have created a manifest to install and configure elasticsearch via the puppetmodule that is referenced in the official documentation Everything is installed fine, but the service isn't started even though it should … --- ## [Problem with logstash jdbc input plugin. Date field data is incorrect](https://discuss.elastic.co/t/problem-with-logstash-jdbc-input-plugin-date-field-data-is-incorrect/157682)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 4\ **Last updated:** [November 21, 2018, 11:08am UTC](https://discuss.elastic.co/t/problem-with-logstash-jdbc-input-plugin-date-field-data-is-incorrect/157682 "2018-11-21T11:08:41Z")
Hi, I am using ELK GA 6.3.0. I have the logstash configuration like below; input { jdbc { jdbc\_driver\_library =\> "ojdbc6.jar" jdbc\_driver\_class =\> "Java::oracle.jdbc.driver.OracleDriver" jdbc\_connection\_s… --- ## [How we can drop log line using filebeat](https://discuss.elastic.co/t/how-we-can-drop-log-line-using-filebeat/155147)
**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\ **Replies:** 4\ **Last updated:** [November 12, 2018, 5:01am UTC](https://discuss.elastic.co/t/how-we-can-drop-log-line-using-filebeat/155147 "2018-11-12T05:01:26Z")
Hello Team, I am aware how we can exclude a particular log type (line) using filebeat and i have implemented it and its working fine. But now i am getting 20 line of same log type and i want to exclude 19 of them at fi… --- ## [Filebeat index pattern is created in ES. but cant be mapped by kibana](https://discuss.elastic.co/t/filebeat-index-pattern-is-created-in-es-but-cant-be-mapped-by-kibana/112198)
**Author:** [@Ree](https://discuss.elastic.co/u/Ree)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 10:04am UTC](https://discuss.elastic.co/t/filebeat-index-pattern-is-created-in-es-but-cant-be-mapped-by-kibana/112198 "2017-12-21T10:04:46Z")
my file index pattern is created on elasticsearch. but wen i m trying to create a new index pattern in kibana.this is the output: Unable to fetch mapping. Do you have indices matching the pattern? i performed a search… [Previous page](https://discuss.elastic.co/top.md?page=1600&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1602&per_page=50&period=all)