# Top

**URL:** https://discuss.elastic.co/top.md?page=1611&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1612

---

## [Ann: Elasticsearch Index Termlist Plugin](https://discuss.elastic.co/t/ann-elasticsearch-index-termlist-plugin/7115)

<div class="topic-metadata">

**Author:** [@jprante](https://discuss.elastic.co/u/jprante)\
**Replies:** 5\
**Last updated:** [March 26, 2012, 7:42pm UTC](https://discuss.elastic.co/t/ann-elasticsearch-index-termlist-plugin/7115 "2012-03-26T19:42:41Z")

</div>

Hi, almost forgot to release a new plugin, the Termlist plugin, but here it is. You can find it here: https://github.com/jprante/elasticsearch-index-termlist This plugin extends Elasticsearch with a term list …

---

## [APM StartTransaction not working](https://discuss.elastic.co/t/apm-starttransaction-not-working/309343)

<div class="topic-metadata">

**Author:** [@Ruben\_Marinho](https://discuss.elastic.co/u/Ruben_Marinho)\
**Replies:** 3\
**Last updated:** [July 12, 2022, 10:31am UTC](https://discuss.elastic.co/t/apm-starttransaction-not-working/309343 "2022-07-12T10:31:58Z")

</div>

Kibana version: v8.3.2 APM Server version: 8.3.2 Hi, I have a .net project that is using a really old Elastic.APM dll (version 1.2.0). In this version, I was able to create transactions "manually" with a name and typ…

---

## [Set custom Transform schedule time in kibana](https://discuss.elastic.co/t/set-custom-transform-schedule-time-in-kibana/298794)

<div class="topic-metadata">

**Author:** [@dash5000](https://discuss.elastic.co/u/dash5000)\
**Replies:** 3\
**Last updated:** [March 4, 2022, 3:01pm UTC](https://discuss.elastic.co/t/set-custom-transform-schedule-time-in-kibana/298794 "2022-03-04T15:01:12Z")

</div>

Hello Everyone, I just started using transform in kibana UI to aggregate data and also to have a longer retention period for visualization. The data collections work fine, my transform basically collectors two fields w…

---

## [How we can attach a document with the alert to teams action?](https://discuss.elastic.co/t/how-we-can-attach-a-document-with-the-alert-to-teams-action/289790)

<div class="topic-metadata">

**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\
**Replies:** 3\
**Last updated:** [December 8, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-we-can-attach-a-document-with-the-alert-to-teams-action/289790 "2021-12-08T18:34:08Z")

</div>

Document means some dashboard as pdf likewise. Currently, We are using webhook for sending alerts to the team's channels from the watcher. same functionality we are able to perform in email action. eg: "actions": { …

---

## [How to create elasticsearch template in logstash pipeline](https://discuss.elastic.co/t/how-to-create-elasticsearch-template-in-logstash-pipeline/287898)

<div class="topic-metadata">

**Author:** [@gokulnath112](https://discuss.elastic.co/u/gokulnath112)\
**Replies:** 3\
**Last updated:** [November 3, 2021, 9:11am UTC](https://discuss.elastic.co/t/how-to-create-elasticsearch-template-in-logstash-pipeline/287898 "2021-11-03T09:11:58Z")

</div>

Hi Team, Greetings..! Is there any way to create Elasticsearch index template in logstash pipeline? I want push csv data to Elasticsearch via logstash, but I want to store data in custom data type. Please help me to cr…

---

## [How can I match multimatch with NEST in elasticsearch?](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304)

<div class="topic-metadata">

**Author:** [@Celal\_Poyraz](https://discuss.elastic.co/u/Celal_Poyraz)\
**Replies:** 3\
**Last updated:** [March 25, 2021, 11:23am UTC](https://discuss.elastic.co/t/how-can-i-match-multimatch-with-nest-in-elasticsearch/268304 "2021-03-25T11:23:44Z")

</div>

I want to search with RegisterNumber and Title at the same time. But how can I match both at the same time? Also, when I press the space character, I cannot make calls after the space. How can I solve this? Currently sea…

---

## [Watcher alerts email issue](https://discuss.elastic.co/t/watcher-alerts-email-issue/212008)

<div class="topic-metadata">

**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\
**Replies:** 3\
**Last updated:** [December 17, 2019, 12:11pm UTC](https://discuss.elastic.co/t/watcher-alerts-email-issue/212008 "2019-12-17T12:11:54Z")

</div>

Hi, actually i created watcher alerts in my ml jobs anomaly score reaches above 70 but i am not getting email notification showing the socket timed out exception how to resolve this issue ? elasticsearch .yml watche…

---

## [Metricbeat 7.3.0 add\_host\_metadata](https://discuss.elastic.co/t/metricbeat-7-3-0-add-host-metadata/210384)

<div class="topic-metadata">

**Author:** [@raged](https://discuss.elastic.co/u/raged)\
**Replies:** 3\
**Last updated:** [December 3, 2019, 4:35pm UTC](https://discuss.elastic.co/t/metricbeat-7-3-0-add-host-metadata/210384 "2019-12-03T16:35:27Z")

</div>

I am trying to implement a way to get host meta data pushed from my clients. I have followed this link, however I do not see any fields get added to the event. Here is my current metricbeat.yml configuration file: #==…

---

## [Backslash in the if statement - LogStash](https://discuss.elastic.co/t/backslash-in-the-if-statement-logstash/151292)

<div class="topic-metadata">

**Author:** [@VietCong](https://discuss.elastic.co/u/VietCong)\
**Replies:** 3\
**Last updated:** [October 6, 2018, 9:44am UTC](https://discuss.elastic.co/t/backslash-in-the-if-statement-logstash/151292 "2018-10-06T09:44:50Z")

</div>

Hi, I would like to know how to write an if statement with the condition of a (backslash) being in the string like below: if ( \\backslash\\ in \[field1\] ) { Do\_something {} } I have tried: if ( "\\" in \[field1\] ) {} i…

---

## [Auditbeat - map changes to users](https://discuss.elastic.co/t/auditbeat-map-changes-to-users/134703)

<div class="topic-metadata">

**Author:** [@nwed](https://discuss.elastic.co/u/nwed)\
**Replies:** 3\
**Last updated:** [September 10, 2018, 12:01pm UTC](https://discuss.elastic.co/t/auditbeat-map-changes-to-users/134703 "2018-09-10T12:01:58Z")

</div>

Hello, we are looking at leveraging auditbeat to replace a commercial FIM solution in use. One of our requirements is that any changes initiated by users, are mapped and notated in the logs. Is anyone aware of an easy wa…

---

## [More Like This Query for field that called type](https://discuss.elastic.co/t/more-like-this-query-for-field-that-called-type/73955)

<div class="topic-metadata">

**Author:** [@fix2015](https://discuss.elastic.co/u/fix2015)\
**Replies:** 3\
**Last updated:** [February 5, 2017, 11:27am UTC](https://discuss.elastic.co/t/more-like-this-query-for-field-that-called-type/73955 "2017-02-05T11:27:56Z")

</div>

Hy i get this query and need add type(field of poject) = 2 and can't understand where i should put debug: \`similarProjects\`, index: \`project\`, type: \`project\`, query: { more\_…

---

## [Excluding bind mounts](https://discuss.elastic.co/t/excluding-bind-mounts/71509)

<div class="topic-metadata">

**Author:** [@abraxxa](https://discuss.elastic.co/u/abraxxa)\
**Replies:** 3\
**Last updated:** [January 16, 2017, 4:48pm UTC](https://discuss.elastic.co/t/excluding-bind-mounts/71509 "2017-01-16T16:48:14Z")

</div>

We'd like to exclude all bind mounts so they available and used space isn't counted multiple times but the filesystem type is currently not collected. Knowing the filesystem type is useful for more thing I'd like to open…

---

## [How to make visualization on kibana](https://discuss.elastic.co/t/how-to-make-visualization-on-kibana/59481)

<div class="topic-metadata">

**Author:** [@k3-ota](https://discuss.elastic.co/u/k3-ota)\
**Replies:** 3\
**Last updated:** [September 2, 2016, 9:09pm UTC](https://discuss.elastic.co/t/how-to-make-visualization-on-kibana/59481 "2016-09-02T21:09:57Z")

</div>

Hello, I'm KO. I have one question about function making graph on kibana. I registered the following index and data. \[ec2-user@ip-10-0-0-240 stats\]$ curl -XGET http://localhost:9200/test1/test/1 {"index":"test1","typ…

---

## [Getting ClusterBlockException while running queries using node client](https://discuss.elastic.co/t/getting-clusterblockexception-while-running-queries-using-node-client/39463)

<div class="topic-metadata">

**Author:** [@anjith.p](https://discuss.elastic.co/u/anjith.p)\
**Replies:** 3\
**Last updated:** [January 19, 2016, 9:55am UTC](https://discuss.elastic.co/t/getting-clusterblockexception-while-running-queries-using-node-client/39463 "2016-01-19T09:55:35Z")

</div>

My elasticsearch cluster(version 2.0) is started and the node client is built successfully, but for some reason I'm getting the following error while running queries using node client. 20:15:15.479 \[Pool:entitytasksch…

---

## [Kibana dashboard tabs visualization/panel](https://discuss.elastic.co/t/kibana-dashboard-tabs-visualization-panel/39322)

<div class="topic-metadata">

**Author:** [@iflo](https://discuss.elastic.co/u/iflo)\
**Replies:** 0\
**Last updated:** [January 15, 2016, 12:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-tabs-visualization-panel/39322 "2016-01-15T12:32:54Z")

</div>

Hello, I'd like to accomplish a tabbed panel for Kibana with functionality like illustrated here: Another tab: Can anybody advise on how to do this? Either by something pluggable into Kibana, custom app or hacking …

---

## [Elasticsearchのデータ格納について](https://discuss.elastic.co/t/elasticsearch/28078)

<div class="topic-metadata">

**Author:** [@konchan](https://discuss.elastic.co/u/konchan)\
**Replies:** 0\
**Last updated:** [August 26, 2015, 8:35am UTC](https://discuss.elastic.co/t/elasticsearch/28078 "2015-08-26T08:35:37Z")

</div>

こんにちは javaでファイルを取得してからデータを格納しているのですが Kibanaで確認してみるとほとんどデータが保存されてません ログを確認してみるとたまにエラー？を吐き出しているせいですか？ エラー？ログはこんな感じです org.elasticsearch.transport.SendRequestTransportException: \[Cain\]\[inet\[/:9300\]\]\[internal:cluster/shar…

---

## [NoNodeAvailableException and endless stacktrace in log4j when using TransportClient](https://discuss.elastic.co/t/nonodeavailableexception-and-endless-stacktrace-in-log4j-when-using-transportclient/4823)

<div class="topic-metadata">

**Author:** [@TimOnGmail](https://discuss.elastic.co/u/TimOnGmail)\
**Replies:** 3\
**Last updated:** [July 11, 2011, 4:23pm UTC](https://discuss.elastic.co/t/nonodeavailableexception-and-endless-stacktrace-in-log4j-when-using-transportclient/4823 "2011-07-11T16:23:16Z")

</div>

Hi all... The following code, when I attempt to connect to a host that is down, throws a NoNodeAvailableException. No problem there - however, in getting to that point ElasticSearch apparently recurses quite a lo…

---

## [How to use elasticsearch 8.x ingest-attachment with Python](https://discuss.elastic.co/t/how-to-use-elasticsearch-8-x-ingest-attachment-with-python/323286)

<div class="topic-metadata">

**Author:** [@garami](https://discuss.elastic.co/u/garami)\
**Replies:** 2\
**Last updated:** [January 17, 2023, 7:45am UTC](https://discuss.elastic.co/t/how-to-use-elasticsearch-8-x-ingest-attachment-with-python/323286 "2023-01-17T07:45:34Z")

</div>

I am trying to read a pdf from python and send it to elasticsearch. I tried to use ingest-attachment to help with that, but I don't know how. When I followed the official documentation, it worked. However, there doesn…

---

## [How to configure Data table visualization as drilldown in Line graph visualization](https://discuss.elastic.co/t/how-to-configure-data-table-visualization-as-drilldown-in-line-graph-visualization/249770)

<div class="topic-metadata">

**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\
**Replies:** 2\
**Last updated:** [September 25, 2020, 9:12am UTC](https://discuss.elastic.co/t/how-to-configure-data-table-visualization-as-drilldown-in-line-graph-visualization/249770 "2020-09-25T09:12:55Z")

</div>

Hi Team, Is it possible to provide data table visualization as drilldown upon clicking any line in line graph visualization in Kibana? For example, I have a line graph(built based on number of method calls on Y-axis an…

---

## [Bulk ingest example for Elasticsearch](https://discuss.elastic.co/t/bulk-ingest-example-for-elasticsearch/123944)

<div class="topic-metadata">

**Author:** [@protzman](https://discuss.elastic.co/u/protzman)\
**Replies:** 2\
**Last updated:** [March 16, 2018, 8:51pm UTC](https://discuss.elastic.co/t/bulk-ingest-example-for-elasticsearch/123944 "2018-03-16T20:51:27Z")

</div>

Brand new here. I am working through the example for bulk ingest into elastic search found here and I cannot seem to get the commands to execute. I have the accounts.json file in the directory I am executing the curl com…

---

## [Filebeat output per prospector](https://discuss.elastic.co/t/filebeat-output-per-prospector/101579)

<div class="topic-metadata">

**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\
**Replies:** 2\
**Last updated:** [September 26, 2017, 6:19pm UTC](https://discuss.elastic.co/t/filebeat-output-per-prospector/101579 "2017-09-26T18:19:05Z")

</div>

Hi, Here is the use case that I have some well-formed JSON data such as metrics I'd like to go straight into Elasticsearch, whereas other logs need Logstash pipeline to process then shipping to Elasticsearch. Sounds li…

---

## [Curator very slow when creating index](https://discuss.elastic.co/t/curator-very-slow-when-creating-index/89967)

<div class="topic-metadata">

**Author:** [@Barrett\_Strausser](https://discuss.elastic.co/u/Barrett_Strausser)\
**Replies:** 2\
**Last updated:** [June 20, 2017, 12:54pm UTC](https://discuss.elastic.co/t/curator-very-slow-when-creating-index/89967 "2017-06-20T12:54:15Z")

</div>

Below is the result when I run my curator action file 2017-06-19 16:05:34,455 INFO Preparing Action ID: 1, "create\_index" 2017-06-19 16:05:34,465 INFO Trying Action ID: 1, "create\_index": Create index for a…

---

## [Template file with environment variables?](https://discuss.elastic.co/t/template-file-with-environment-variables/86714)

<div class="topic-metadata">

**Author:** [@BDeus](https://discuss.elastic.co/u/BDeus)\
**Replies:** 2\
**Last updated:** [May 23, 2017, 7:46am UTC](https://discuss.elastic.co/t/template-file-with-environment-variables/86714 "2017-05-23T07:46:54Z")

</div>

Hello, i use lots of beat and logstash in docker and i'm wonder if there are any possibilities to use some environments variables in a template index file. Modify index template pattern with an environment variable would…

---

## [Kibana 5.0 Alpha 3 error issues](https://discuss.elastic.co/t/kibana-5-0-alpha-3-error-issues/53729)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 2\
**Last updated:** [June 24, 2016, 6:54pm UTC](https://discuss.elastic.co/t/kibana-5-0-alpha-3-error-issues/53729 "2016-06-24T18:54:43Z")

</div>

Hi, I have installed Kibana 5.0 Alpha 3 Version on another machine and I have come across with this issues after logging into the Kibana. I have followed all the documentation required for installing X-Pack and ES and Ki…

---

## [Kibana 4.5 and 4.5.1](https://discuss.elastic.co/t/kibana-4-5-and-4-5-1/49139)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 2\
**Last updated:** [May 4, 2016, 1:22pm UTC](https://discuss.elastic.co/t/kibana-4-5-and-4-5-1/49139 "2016-05-04T13:22:35Z")

</div>

After testing the new released Kibana 4.5 I found that is far from being a stable version. Two main bugs make it unusable and unstable. I don't get how some features are not retested before releasing new versions. Bugs…

---

## [Help to refine a grok parser](https://discuss.elastic.co/t/help-to-refine-a-grok-parser/42671)

<div class="topic-metadata">

**Author:** [@nzHillNet](https://discuss.elastic.co/u/nzHillNet)\
**Replies:** 2\
**Last updated:** [February 27, 2016, 11:23pm UTC](https://discuss.elastic.co/t/help-to-refine-a-grok-parser/42671 "2016-02-27T23:23:27Z")

</div>

Hi all, Logstash v2.2.2 I'm not that strong with grok and regex's, but have managed to create a working grok parser as follows: Log excerpt: 2016-02-25 19:06:23 msg 3/3 (4575 bytes) msgid 0000178e55c5dc45 from \<obs…

---

## [SNMP Trap forward to logstash server?](https://discuss.elastic.co/t/snmp-trap-forward-to-logstash-server/42469)

<div class="topic-metadata">

**Author:** [@stefansaye](https://discuss.elastic.co/u/stefansaye)\
**Replies:** 2\
**Last updated:** [February 23, 2016, 6:43pm UTC](https://discuss.elastic.co/t/snmp-trap-forward-to-logstash-server/42469 "2016-02-23T18:43:00Z")

</div>

Hi all I'm looking for how to forward SNMP Trap to logstash server. SNMP trap have received from embedded devices . but how to forward these snmp trap to logstash server in real-time ? What would you suggest please? …

---

## [Is there a way to copy the term to a field?](https://discuss.elastic.co/t/is-there-a-way-to-copy-the-term-to-a-field/42057)

<div class="topic-metadata">

**Author:** [@Guill](https://discuss.elastic.co/u/Guill)\
**Replies:** 2\
**Last updated:** [February 17, 2016, 11:10pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-copy-the-term-to-a-field/42057 "2016-02-17T23:10:41Z")

</div>

if copy\_to "It is the field value which is copied, not the terms (which result from the analysis process)." is there a way to copy the term so that it is searchable on "\_all" Thank you

---

## [Junk characters!](https://discuss.elastic.co/t/junk-characters/28092)

<div class="topic-metadata">

**Author:** [@sreeram](https://discuss.elastic.co/u/sreeram)\
**Replies:** 2\
**Last updated:** [August 26, 2015, 11:19am UTC](https://discuss.elastic.co/t/junk-characters/28092 "2015-08-26T11:19:54Z")

</div>

I'm using ELK for centralized logging, in kibanna I'm seeing junk characters (for first 2 hits) as shown in image Log file encoding format is UCS-2 How to avoid this junk characters?!

---

## [Problem with json in multi-search request!](https://discuss.elastic.co/t/problem-with-json-in-multi-search-request/9825)

<div class="topic-metadata">

**Author:** [@Camilo\_Sierra](https://discuss.elastic.co/u/Camilo_Sierra)\
**Replies:** 2\
**Last updated:** [November 26, 2012, 1:05pm UTC](https://discuss.elastic.co/t/problem-with-json-in-multi-search-request/9825 "2012-11-26T13:05:48Z")

</div>

Hi all, I try to use queries \_msearch but I can't create a valid JSON! this is what I try: /\_msearch \[ { "query": { "bool": { "must": \[ { "term": { …

---

## [\[Kubernetes Integration\] Custom ingest pipeline for subset of k8s cluster's container's logs](https://discuss.elastic.co/t/kubernetes-integration-custom-ingest-pipeline-for-subset-of-k8s-clusters-containers-logs/314601)

<div class="topic-metadata">

**Author:** [@woodywoodsta](https://discuss.elastic.co/u/woodywoodsta)\
**Replies:** 2\
**Last updated:** [September 17, 2022, 12:44pm UTC](https://discuss.elastic.co/t/kubernetes-integration-custom-ingest-pipeline-for-subset-of-k8s-clusters-containers-logs/314601 "2022-09-17T12:44:50Z")

</div>

I'm using the Kubernetes Integration managed via fleet to collect container logs from my k8s cluster. At the moment, logs from all containers are passed through the same pipeline by means of the integration. I have a ne…

---

## [Are there no msi installers for new Elasticsearch versions](https://discuss.elastic.co/t/are-there-no-msi-installers-for-new-elasticsearch-versions/306012)

<div class="topic-metadata">

**Author:** [@runegronkjaer](https://discuss.elastic.co/u/runegronkjaer)\
**Replies:** 4\
**Last updated:** [June 15, 2022, 10:36am UTC](https://discuss.elastic.co/t/are-there-no-msi-installers-for-new-elasticsearch-versions/306012 "2022-06-15T10:36:21Z")

</div>

Hi, I installed Elasticsearch 7 with an msi installer last year and now that I need to install it again there's no msi installer on the newer versions. Will there not be msi installers from now on? And if that is the…

---

## [Configuring auth with AD users](https://discuss.elastic.co/t/configuring-auth-with-ad-users/293007)

<div class="topic-metadata">

**Author:** [@Kirill\_Gofman](https://discuss.elastic.co/u/Kirill_Gofman)\
**Replies:** 1\
**Last updated:** [December 28, 2021, 9:34pm UTC](https://discuss.elastic.co/t/configuring-auth-with-ad-users/293007 "2021-12-28T21:34:14Z")

</div>

Hey, we are currently have elastic cloud with Elasticsearch and kibana on it. The login process atm is via deployments. We are looking to configure AD auth to kibana. I'm a little bit confused with all the guides. What …

---

## [Multiple Winlogbeat Agents on WEF Collectors](https://discuss.elastic.co/t/multiple-winlogbeat-agents-on-wef-collectors/245424)

<div class="topic-metadata">

**Author:** [@stranjer](https://discuss.elastic.co/u/stranjer)\
**Replies:** 4\
**Last updated:** [August 25, 2020, 5:48pm UTC](https://discuss.elastic.co/t/multiple-winlogbeat-agents-on-wef-collectors/245424 "2020-08-25T17:48:32Z")

</div>

I have an environment that has pretty high Windows EPS and am looking at best how to alleviate bottlenecks in processing Windows Event Logs. Overall, I'm getting around 100k EPS Windows events sustained on average, with …

---

## [Cisco syslogs showing up as grokparsefailure when sent to Logstash](https://discuss.elastic.co/t/cisco-syslogs-showing-up-as-grokparsefailure-when-sent-to-logstash/240587)

<div class="topic-metadata">

**Author:** [@jabberwalker](https://discuss.elastic.co/u/jabberwalker)\
**Replies:** 4\
**Last updated:** [July 14, 2020, 8:39pm UTC](https://discuss.elastic.co/t/cisco-syslogs-showing-up-as-grokparsefailure-when-sent-to-logstash/240587 "2020-07-14T20:39:31Z")

</div>

I am working through a Udemy course to familiarize myself with Elasticsearch but I've ran into a wall when applying it to our current environment when it comes to Logstash. I am trying to send data from Cisco syslog but…

---

## [Kibana not work with custom tilemap](https://discuss.elastic.co/t/kibana-not-work-with-custom-tilemap/165262)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 4\
**Last updated:** [January 29, 2019, 11:37am UTC](https://discuss.elastic.co/t/kibana-not-work-with-custom-tilemap/165262 "2019-01-29T11:37:53Z")

</div>

Hi I am using kibana map visualizations, as my server is not connected to internet, I setup a tile server which works like: http://192.168.50.1/tiles/0/0/0.png. It takes about 24H for me to setup the tile server. So I…

---

## [Unique count matching specific criteria](https://discuss.elastic.co/t/unique-count-matching-specific-criteria/132327)

<div class="topic-metadata">

**Author:** [@mikeage](https://discuss.elastic.co/u/mikeage)\
**Replies:** 4\
**Last updated:** [May 21, 2018, 2:43pm UTC](https://discuss.elastic.co/t/unique-count-matching-specific-criteria/132327 "2018-05-21T14:43:15Z")

</div>

Hi, I have data consisting of the following three fields: jobId, subJobId, and outcome, where each jobId has several subJobs, each with one outcome. I want to show a graph indicating how many jobs had at least one fail…

---

## [How to Seperate docs in Logstash to different ES index](https://discuss.elastic.co/t/how-to-seperate-docs-in-logstash-to-different-es-index/87249)

<div class="topic-metadata">

**Author:** [@yasvanth](https://discuss.elastic.co/u/yasvanth)\
**Replies:** 4\
**Last updated:** [May 26, 2017, 1:19pm UTC](https://discuss.elastic.co/t/how-to-seperate-docs-in-logstash-to-different-es-index/87249 "2017-05-26T13:19:20Z")

</div>

Hi All, I am inserting data to logstash(collector) via nxlog(sender) to single port. The logs are already parsed on nxlog side from .xml to json , these parsed doc contains logs from different application such as apach…

---

## [Where to change the Kibana Logs path?](https://discuss.elastic.co/t/where-to-change-the-kibana-logs-path/223584)

<div class="topic-metadata">

**Author:** [@Jorge\_Hernandez](https://discuss.elastic.co/u/Jorge_Hernandez)\
**Replies:** 1\
**Last updated:** [March 13, 2020, 11:30pm UTC](https://discuss.elastic.co/t/where-to-change-the-kibana-logs-path/223584 "2020-03-13T23:30:28Z")

</div>

Hey guys, kibana.log is growing very rapidly, so I decided to change where it stores its logs, so I changed: logging.dest from stdout to /new/location, but it won't start after that, so how can I change the logs folder…

---

## [Elasticsearch ingest pipeline drop processor no worky :(](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904)

<div class="topic-metadata">

**Author:** [@nilsenj](https://discuss.elastic.co/u/nilsenj)\
**Replies:** 1\
**Last updated:** [September 11, 2019, 12:55pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-pipeline-drop-processor-no-worky/198904 "2019-09-11T12:55:12Z")

</div>

Hello fellow log ingestors, I have an ingest pipeline to ingest logs however I want to drop the document if it contains a certain string in the message field. I am trying to use the drop processor for this but the docum…

---

## [Bulk process stuck](https://discuss.elastic.co/t/bulk-process-stuck/179007)

<div class="topic-metadata">

**Author:** [@happy5035](https://discuss.elastic.co/u/happy5035)\
**Replies:** 1\
**Last updated:** [April 30, 2019, 5:14am UTC](https://discuss.elastic.co/t/bulk-process-stuck/179007 "2019-04-30T05:14:14Z")

</div>

when bulk document ,Bulk operation stuck in running state. What may be the reason? elasticsearch:6.4.2 3 nodes indices:data/write/bulk CpJ4Sde5TXqvPG\_UKFSRZQ:233020 - …

---

## [Disable HTTP to HTTPS redirection on Kibana and only use HTTPS](https://discuss.elastic.co/t/disable-http-to-https-redirection-on-kibana-and-only-use-https/135302)

<div class="topic-metadata">

**Author:** [@JuanjiJG](https://discuss.elastic.co/u/JuanjiJG)\
**Replies:** 1\
**Last updated:** [June 11, 2018, 8:06am UTC](https://discuss.elastic.co/t/disable-http-to-https-redirection-on-kibana-and-only-use-https/135302 "2018-06-11T08:06:34Z")

</div>

Hi everyone! I've got a question about Kibana configuration. Is there any way to remove the HTTP to HTTPS redirection on the Kibana interface, and make it work only with HTTPS requests? Thanks in advance! Regards, Ju…

---

## [Elasticsearch snapshot creation with exclude list](https://discuss.elastic.co/t/elasticsearch-snapshot-creation-with-exclude-list/132263)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 1\
**Last updated:** [May 17, 2018, 6:39am UTC](https://discuss.elastic.co/t/elasticsearch-snapshot-creation-with-exclude-list/132263 "2018-05-17T06:39:44Z")

</div>

Hi ElasticSearch 1.7.2 Is there a possibility to specify exclude indices list during snaphot creaton, rather than indices list to backup..? I'd prefer exclude\_list rather than indices list, because, we rename our indi…

---

## [Shard relocation failed due to filesystem read-only](https://discuss.elastic.co/t/shard-relocation-failed-due-to-filesystem-read-only/107709)

<div class="topic-metadata">

**Author:** [@xlc](https://discuss.elastic.co/u/xlc)\
**Replies:** 1\
**Last updated:** [November 15, 2017, 10:33am UTC](https://discuss.elastic.co/t/shard-relocation-failed-due-to-filesystem-read-only/107709 "2017-11-15T10:33:07Z")

</div>

Hi, I'm using elasticsearch2.3.2,many warning log detail appered start from yesterday，like \[track\_report\_idmonitor\_hour\_17\]\[29\] received shard failed for target shard \[\[track\_report\_idmonitor\_hour\_17\]\[29\], node\[77MLQRO…

---

## [Add Gem to Logstash production](https://discuss.elastic.co/t/add-gem-to-logstash-production/92761)

<div class="topic-metadata">

**Author:** [@kitz99](https://discuss.elastic.co/u/kitz99)\
**Replies:** 1\
**Last updated:** [July 14, 2017, 2:58pm UTC](https://discuss.elastic.co/t/add-gem-to-logstash-production/92761 "2017-07-14T14:58:35Z")

</div>

Hello. I have installed a logstash 5.4 in a production env (RHEL 7) and now I need to add a new config, a new gem and some ruby classes to this logstash. Where I need to put my ruby code, and how can I install new gems? …

---

## [Logstash drop filter is not dropping events](https://discuss.elastic.co/t/logstash-drop-filter-is-not-dropping-events/27396)

<div class="topic-metadata">

**Author:** [@Rubaiyat\_Islam\_Sadat](https://discuss.elastic.co/u/Rubaiyat_Islam_Sadat)\
**Replies:** 1\
**Last updated:** [June 23, 2017, 6:14am UTC](https://discuss.elastic.co/t/logstash-drop-filter-is-not-dropping-events/27396 "2017-06-23T06:14:11Z")

</div>

I am having a very strange situation where I have the following filter rule if \[logger\_name\] == "REPORT" { drop {} } and I expect that any events with my field\_name == "logger\_name" with that specific value will be d…

---

## [Tribe node set up](https://discuss.elastic.co/t/tribe-node-set-up/48621)

<div class="topic-metadata">

**Author:** [@chinmoyd](https://discuss.elastic.co/u/chinmoyd)\
**Replies:** 1\
**Last updated:** [April 28, 2016, 6:41pm UTC](https://discuss.elastic.co/t/tribe-node-set-up/48621 "2016-04-28T18:41:57Z")

</div>

Hello, I am trying to set up a tribe node. My elasticsearch.yml is as below. Elastic search version is 2.2.0: tribe: t1: cluster.name: pr\_site discovery.zen.ping.multicast.enabled: false discovery.zen.ping.unicast.…

---

## [More Like This in a boolean query](https://discuss.elastic.co/t/more-like-this-in-a-boolean-query/9760)

<div class="topic-metadata">

**Author:** [@Nick\_Dunn](https://discuss.elastic.co/u/Nick_Dunn)\
**Replies:** 1\
**Last updated:** [November 19, 2012, 5:13pm UTC](https://discuss.elastic.co/t/more-like-this-in-a-boolean-query/9760 "2012-11-19T17:13:03Z")

</div>

I'm wanting to use ES to build a list of related documents for a given document. However I don't want to rely on the default more like this result — I'd like a little more control. Each of my documents has three sets…

---

## [Using the Cloud URL instead of ID to connect .NET client app to Elastic Cloud](https://discuss.elastic.co/t/using-the-cloud-url-instead-of-id-to-connect-net-client-app-to-elastic-cloud/322362)

<div class="topic-metadata">

**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\
**Replies:** 0\
**Last updated:** [January 3, 2023, 11:06am UTC](https://discuss.elastic.co/t/using-the-cloud-url-instead-of-id-to-connect-net-client-app-to-elastic-cloud/322362 "2023-01-03T11:06:03Z")

</div>

Hi, we had an issue after applying Azure private link traffic filter to our deployment, authenticating with Cloud Id no longer works. We are considering to use URL instead but we see it is not recommended: When connec…

---

## [Coordinating nodes cpu usage dropped down while data nodes rise up after upgrade elastic 7.4.0 to 7.8.1](https://discuss.elastic.co/t/coordinating-nodes-cpu-usage-dropped-down-while-data-nodes-rise-up-after-upgrade-elastic-7-4-0-to-7-8-1/252228)

<div class="topic-metadata">

**Author:** [@hadars](https://discuss.elastic.co/u/hadars)\
**Replies:** 0\
**Last updated:** [October 15, 2020, 3:40pm UTC](https://discuss.elastic.co/t/coordinating-nodes-cpu-usage-dropped-down-while-data-nodes-rise-up-after-upgrade-elastic-7-4-0-to-7-8-1/252228 "2020-10-15T15:40:25Z")

</div>

Hey, A year +- we decided to change our ingesting pipeline to work with coordinating nodes. (https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-node.html#coordinating-node) This helped us a lot, al…

[Previous page](https://discuss.elastic.co/top.md?page=1610&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1612&per_page=50&period=all)
