# Top

**URL:** https://discuss.elastic.co/top.md?page=1621&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1622

---

## [Analyzer to keep integers/numeric inputs](https://discuss.elastic.co/t/analyzer-to-keep-integers-numeric-inputs/102835)

<div class="topic-metadata">

**Author:** [@ebsaral](https://discuss.elastic.co/u/ebsaral)\
**Replies:** 4\
**Last updated:** [October 5, 2017, 2:02pm UTC](https://discuss.elastic.co/t/analyzer-to-keep-integers-numeric-inputs/102835 "2017-10-05T14:02:58Z")

</div>

How can I create an analyzer to keep integers? I am using simple analyzer to get tokens, but hello1 becomes \[hello\] but I wanna keep 1 as well like \[hello1\] when getting tokenized. Any way of doing this?

---

## [Cross-index parent/child support?](https://discuss.elastic.co/t/cross-index-parent-child-support/6593)

<div class="topic-metadata">

**Author:** [@Greg](https://discuss.elastic.co/u/Greg)\
**Replies:** 4\
**Last updated:** [November 27, 2013, 8:20am UTC](https://discuss.elastic.co/t/cross-index-parent-child-support/6593 "2013-11-27T08:20:43Z")

</div>

Hi all Does Elasticsearch support mapping a child to a parent in a different index? Thanks Greg

---

## [Java api elastic text search help](https://discuss.elastic.co/t/java-api-elastic-text-search-help/6626)

<div class="topic-metadata">

**Author:** [@steam](https://discuss.elastic.co/u/steam)\
**Replies:** 4\
**Last updated:** [February 8, 2012, 9:53am UTC](https://discuss.elastic.co/t/java-api-elastic-text-search-help/6626 "2012-02-08T09:53:37Z")

</div>

Hello, Please help me construct by java api elastic text search. I have search like SearchRequestBuilder searchRequestBuilder = client.prepareSearch("items") .setSearchType(SearchType.DFS\_QUERY\_THEN\_FETCH)…

---

## [Logstash file input not processing (windows)](https://discuss.elastic.co/t/logstash-file-input-not-processing-windows/281720)

<div class="topic-metadata">

**Author:** [@alejandroalv87](https://discuss.elastic.co/u/alejandroalv87)\
**Replies:** 5\
**Last updated:** [August 18, 2021, 12:23pm UTC](https://discuss.elastic.co/t/logstash-file-input-not-processing-windows/281720 "2021-08-18T12:23:43Z")

</div>

I am trying to process an apache log file to logstash and file is not getting process. My config file here: input { file { path =\> "C:\\Users\\alejandro.alvarez\\Downloads\\elasticsearch\_kibana\\data\\logs\\apache\_access.lo…

---

## [Filebeat Autogenerating Index Name When I Specified: sample-%](https://discuss.elastic.co/t/filebeat-autogenerating-index-name-when-i-specified-sample/219038)

<div class="topic-metadata">

**Author:** [@daz1761](https://discuss.elastic.co/u/daz1761)\
**Replies:** 3\
**Last updated:** [February 14, 2020, 7:46pm UTC](https://discuss.elastic.co/t/filebeat-autogenerating-index-name-when-i-specified-sample/219038 "2020-02-14T19:46:29Z")

</div>

I have specified the index in my filebeat.yml as sample-%{+YYY.MM.dd} but when I check my indices via /\_cat/indices?vmyindexlooks like a some form of autogenerated name like:filebeat-7.5.2-2020.02.12-000001\` # setup fil…

---

## [Nested Field exists check not working as expected](https://discuss.elastic.co/t/nested-field-exists-check-not-working-as-expected/356859)

<div class="topic-metadata">

**Author:** [@Sankar\_S](https://discuss.elastic.co/u/Sankar_S)\
**Replies:** 8\
**Last updated:** [July 22, 2024, 3:28pm UTC](https://discuss.elastic.co/t/nested-field-exists-check-not-working-as-expected/356859 "2024-07-22T15:28:37Z")

</div>

GET index1/\_search { "query": { "bool": { "must\_not": \[ { "nested": { "path": "publish\_details", "query": { "bool": { "must\_not": \[ …

---

## [Logstash Kafka input and output with oauth](https://discuss.elastic.co/t/logstash-kafka-input-and-output-with-oauth/304886)

<div class="topic-metadata">

**Author:** [@Jockj](https://discuss.elastic.co/u/Jockj)\
**Replies:** 3\
**Last updated:** [May 17, 2022, 10:02pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-and-output-with-oauth/304886 "2022-05-17T22:02:08Z")

</div>

Does anyone know how to use the logstash Kafka input/output plugin with oauth2? I couldn't find any settings with the current plugins. and I'm trying to develop one with the Kafka Java client. It failed with the followin…

---

## [Run ingress nginx as a reverse proxy for kibana with appid oauth2 provider (on ECK)](https://discuss.elastic.co/t/run-ingress-nginx-as-a-reverse-proxy-for-kibana-with-appid-oauth2-provider-on-eck/301959)

<div class="topic-metadata">

**Author:** [@David\_O\_Connor](https://discuss.elastic.co/u/David_O_Connor)\
**Replies:** 0\
**Last updated:** [April 8, 2022, 11:19am UTC](https://discuss.elastic.co/t/run-ingress-nginx-as-a-reverse-proxy-for-kibana-with-appid-oauth2-provider-on-eck/301959 "2022-04-08T11:19:35Z")

</div>

I've read a number of similar questions on here and blogs online, I've tried a number of configuration changes but cannot seem to get anything to work. I'm using ECK to manage an elastic & kibana stack on IBM cloud IKS (…

---

## [Intermittent search querying issues](https://discuss.elastic.co/t/intermittent-search-querying-issues/259471)

<div class="topic-metadata">

**Author:** [@Sajjan\_Kumar\_Jain](https://discuss.elastic.co/u/Sajjan_Kumar_Jain)\
**Replies:** 8\
**Last updated:** [December 24, 2020, 9:25am UTC](https://discuss.elastic.co/t/intermittent-search-querying-issues/259471 "2020-12-24T09:25:06Z")

</div>

Hi, We are using elastic search in our backend hosted on AWS. And our backend is in Java. We have seen a pattern where queries start failing for a brief period of time with the following error: cannot write time value …

---

## [Configuring Packetbeat with Logstash and GeoIP](https://discuss.elastic.co/t/configuring-packetbeat-with-logstash-and-geoip/239208)

<div class="topic-metadata">

**Author:** [@chancewwr](https://discuss.elastic.co/u/chancewwr)\
**Replies:** 3\
**Last updated:** [June 30, 2020, 8:29am UTC](https://discuss.elastic.co/t/configuring-packetbeat-with-logstash-and-geoip/239208 "2020-06-30T08:29:53Z")

</div>

First, hello all! I am a bit new to the elastic stack as a whole but am learning quickly thanks to the great documentation available. One piece of documentation I've found lacking is how exactly to configure packetbeat t…

---

## [Logstash file input not reparsing file](https://discuss.elastic.co/t/logstash-file-input-not-reparsing-file/211854)

<div class="topic-metadata">

**Author:** [@konan\_pustolov](https://discuss.elastic.co/u/konan_pustolov)\
**Replies:** 3\
**Last updated:** [December 14, 2019, 7:10pm UTC](https://discuss.elastic.co/t/logstash-file-input-not-reparsing-file/211854 "2019-12-14T19:10:54Z")

</div>

I have the following problem, I need logstash to reparse already parsed files: Scenario that doesn't work but should: upload file to watched folder logstash processes it, saves to elastic, removes it (file\_complet…

---

## [New Control visualization with scripted field](https://discuss.elastic.co/t/new-control-visualization-with-scripted-field/196284)

<div class="topic-metadata">

**Author:** [@Chris\_Sarkkinen](https://discuss.elastic.co/u/Chris_Sarkkinen)\
**Replies:** 3\
**Last updated:** [August 23, 2019, 9:01pm UTC](https://discuss.elastic.co/t/new-control-visualization-with-scripted-field/196284 "2019-08-23T21:01:15Z")

</div>

I’m currently pulling data from Pipedrive and would like to make a new control filter that would be based on string values in my data. My index contains Deal\_title that is in the form - CompanyName Ltd (xxxx) The inform…

---

## [Important factor on the required time for opening a closed shard?](https://discuss.elastic.co/t/important-factor-on-the-required-time-for-opening-a-closed-shard/191469)

<div class="topic-metadata">

**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\
**Replies:** 8\
**Last updated:** [July 22, 2019, 10:19am UTC](https://discuss.elastic.co/t/important-factor-on-the-required-time-for-opening-a-closed-shard/191469 "2019-07-22T10:19:34Z")

</div>

I'd like to know the important factor on the time of opening a closed shard. I've run a few tests, but I got unreasonable results: No of Shards, Size of Each Shard, Opening Time 50, 10 MB, 5 s 50, 150 MB, 12 s 50, 2 …

---

## [Struggling to get elastic running on k8](https://discuss.elastic.co/t/struggling-to-get-elastic-running-on-k8/174595)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 3\
**Last updated:** [March 30, 2019, 4:53am UTC](https://discuss.elastic.co/t/struggling-to-get-elastic-running-on-k8/174595 "2019-03-30T04:53:17Z")

</div>

For the last year Ive been running elastic on a single host as a POC of sorts. Runs great but is out of disk space. It certainly keeps up with any load that I throw at it. 24 cores 64 Gb RAM Recently I received 5 shin…

---

## [How to do OR query using wildcard](https://discuss.elastic.co/t/how-to-do-or-query-using-wildcard/153368)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 3\
**Last updated:** [October 25, 2018, 2:27pm UTC](https://discuss.elastic.co/t/how-to-do-or-query-using-wildcard/153368 "2018-10-25T14:27:47Z")

</div>

Hi all, I'm trying to use a wildcard query inside my watcher to look for either or one of the following: "wildcard": { "raw\_event\_log": \[ "\*{ :;};\*", …

---

## [Logstash throwing error while index data into elastic search](https://discuss.elastic.co/t/logstash-throwing-error-while-index-data-into-elastic-search/142496)

<div class="topic-metadata">

**Author:** [@Sudeendra\_G](https://discuss.elastic.co/u/Sudeendra_G)\
**Replies:** 3\
**Last updated:** [August 1, 2018, 10:59am UTC](https://discuss.elastic.co/t/logstash-throwing-error-while-index-data-into-elastic-search/142496 "2018-08-01T10:59:57Z")

</div>

Hello , I got following exception while index data into Elasticsearch using logstash Could not index event to elasticsearch error"=\>{"type"=\>"strict\_dynamic\_mapping\_exception", "reason"=\>"mapping set to strict, dynami…

---

## [ES 6.2.4 Coordinator node sudden OutOfMemory](https://discuss.elastic.co/t/es-6-2-4-coordinator-node-sudden-outofmemory/131488)

<div class="topic-metadata">

**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\
**Replies:** 0\
**Last updated:** [May 11, 2018, 2:28pm UTC](https://discuss.elastic.co/t/es-6-2-4-coordinator-node-sudden-outofmemory/131488 "2018-05-11T14:28:51Z")

</div>

Hi Team, I'm trying to figure out the reason for the sudden death of one of my coordinator nodes. I did not change any JVM default settings and set -Xms4g -Xmx4g. The coordinator node has been working fine for months …

---

## [Getting data from Cosmos DB to Elasticsearch](https://discuss.elastic.co/t/getting-data-from-cosmos-db-to-elasticsearch/128695)

<div class="topic-metadata">

**Author:** [@Kjartan\_Andreassen](https://discuss.elastic.co/u/Kjartan_Andreassen)\
**Replies:** 0\
**Last updated:** [April 19, 2018, 12:23pm UTC](https://discuss.elastic.co/t/getting-data-from-cosmos-db-to-elasticsearch/128695 "2018-04-19T12:23:37Z")

</div>

Hi, We are creating a highly dynamic system that uses Cosmos DB as the main database. But with growing number of records, the search in Cosmos DB is way too slow. How would we get the data from Cosmos DB to Elasticsear…

---

## [How to run two instances on different ports with different configs](https://discuss.elastic.co/t/how-to-run-two-instances-on-different-ports-with-different-configs/115631)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 3\
**Last updated:** [January 17, 2018, 6:09am UTC](https://discuss.elastic.co/t/how-to-run-two-instances-on-different-ports-with-different-configs/115631 "2018-01-17T06:09:15Z")

</div>

Hi there! I would like to run two instances of Kibana on a single server. What is the best method to do so? Preferably without using Docker. Thanks!

---

## [Kibana dashbboard times out with large ES data](https://discuss.elastic.co/t/kibana-dashbboard-times-out-with-large-es-data/108369)

<div class="topic-metadata">

**Author:** [@antoine.brun](https://discuss.elastic.co/u/antoine.brun)\
**Replies:** 3\
**Last updated:** [November 27, 2017, 2:02pm UTC](https://discuss.elastic.co/t/kibana-dashbboard-times-out-with-large-es-data/108369 "2017-11-27T14:02:07Z")

</div>

Hello, we have a production ES cluster (v2.4) with 4 data nodes (24Gb, 4CPU) (a screenshot below shows the full cluster details. \[image\] There are 2,668,920,207 docs in the cluster, these are syslogs collected from a …

---

## [Elasticsearch javascript api](https://discuss.elastic.co/t/elasticsearch-javascript-api/89357)

<div class="topic-metadata">

**Author:** [@jshraddha](https://discuss.elastic.co/u/jshraddha)\
**Replies:** 3\
**Last updated:** [June 15, 2017, 7:41am UTC](https://discuss.elastic.co/t/elasticsearch-javascript-api/89357 "2017-06-15T07:41:01Z")

</div>

Hi, I am using elasticsearch javascript api for searching data. Forming a search query after getting the search word from the input text client.search({ index: 'my-index, …

---

## [Ask for suggestion for synonym design](https://discuss.elastic.co/t/ask-for-suggestion-for-synonym-design/83447)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 5:37pm UTC](https://discuss.elastic.co/t/ask-for-suggestion-for-synonym-design/83447 "2017-04-25T17:37:20Z")

</div>

We are using Elasticsearch building our own site search engine and using Elasticsearch built-in synonym solution to provide better search relevance. In my option, the key part of the synonym solution is how to build the …

---

## [Creating single index only](https://discuss.elastic.co/t/creating-single-index-only/48949)

<div class="topic-metadata">

**Author:** [@Gaurav\_Harsola](https://discuss.elastic.co/u/Gaurav_Harsola)\
**Replies:** 3\
**Last updated:** [May 3, 2016, 3:40am UTC](https://discuss.elastic.co/t/creating-single-index-only/48949 "2016-05-03T03:40:12Z")

</div>

Hi , I have following conf file. It create only one index (auth1) in my elastisearch not the other one . input { file { type =\> "Apache" path =\> "/home/test/test1.log" start…

---

## [Elastic Search Query TimeOut not working](https://discuss.elastic.co/t/elastic-search-query-timeout-not-working/45417)

<div class="topic-metadata">

**Author:** [@rraghuvittal](https://discuss.elastic.co/u/rraghuvittal)\
**Replies:** 0\
**Last updated:** [March 25, 2016, 5:55am UTC](https://discuss.elastic.co/t/elastic-search-query-timeout-not-working/45417 "2016-03-25T05:55:49Z")

</div>

Hi All we are using Elastic Search RESt api I am passing the timeout as query parameter. When i set the timeout value "search " query is not getting timeout always. GET \_search?timeout=1ms { "took": 41, "time…

---

## [TransportClient + MasterNotDiscoveredException + Split Brain](https://discuss.elastic.co/t/transportclient-masternotdiscoveredexception-split-brain/43723)

<div class="topic-metadata">

**Author:** [@ronakmshah](https://discuss.elastic.co/u/ronakmshah)\
**Replies:** 3\
**Last updated:** [March 8, 2016, 8:49pm UTC](https://discuss.elastic.co/t/transportclient-masternotdiscoveredexception-split-brain/43723 "2016-03-08T20:49:53Z")

</div>

Hi, I am using ES 2.2 with Java client 2.2. I have 3 node ES cluster. 2 Master + Data. 1 dedicated Data node. I have set the discovery.zen.minimum\_master\_nodes: 2 to avoid split brain. In my transport-client I have …

---

## [Issue with elastic search TransportClient of java API](https://discuss.elastic.co/t/issue-with-elastic-search-transportclient-of-java-api/19974)

<div class="topic-metadata">

**Author:** [@Vijay\_Tiwary](https://discuss.elastic.co/u/Vijay_Tiwary)\
**Replies:** 8\
**Last updated:** [September 26, 2014, 8:53pm UTC](https://discuss.elastic.co/t/issue-with-elastic-search-transportclient-of-java-api/19974 "2014-09-26T20:53:57Z")

</div>

I am having a instance of "TransportClient" which is singleton in my web application. In one of the flow I have to query elastic search twice one after the other. However, first call to elastic search cluster is w…

---

## [Upgrade Java on existing nodes](https://discuss.elastic.co/t/upgrade-java-on-existing-nodes/11039)

<div class="topic-metadata">

**Author:** [@Manuel\_Gomez](https://discuss.elastic.co/u/Manuel_Gomez)\
**Replies:** 3\
**Last updated:** [March 6, 2013, 6:15pm UTC](https://discuss.elastic.co/t/upgrade-java-on-existing-nodes/11039 "2013-03-06T18:15:57Z")

</div>

Hey guys, I have 3 nodes, one of which I just added recently, ever since I keep seeing this error "Failed to deserialize exception response from stream". The only thing I see different in the new node is the java …

---

## [Paramedic - what do the the values in the index shard details mean?](https://discuss.elastic.co/t/paramedic-what-do-the-the-values-in-the-index-shard-details-mean/10279)

<div class="topic-metadata">

**Author:** [@timbunce](https://discuss.elastic.co/u/timbunce)\
**Replies:** 3\
**Last updated:** [January 10, 2013, 7:27pm UTC](https://discuss.elastic.co/t/paramedic-what-do-the-the-values-in-the-index-shard-details-mean/10279 "2013-01-10T19:27:47Z")

</div>

We're using Paramedic (https://github.com/karmi/elasticsearch-paramedic) and finding it helpful to monitor our ElasticSearch cluster. At the bottom of the display it shows a summary line for each index with a Show D…

---

## [Error running Logstash 7.16.1 OSS](https://discuss.elastic.co/t/error-running-logstash-7-16-1-oss/291677)

<div class="topic-metadata">

**Author:** [@BenSeb](https://discuss.elastic.co/u/BenSeb)\
**Replies:** 2\
**Last updated:** [December 13, 2021, 4:54pm UTC](https://discuss.elastic.co/t/error-running-logstash-7-16-1-oss/291677 "2021-12-13T16:54:53Z")

</div>

We're getting the following errors when trying to run 7.16.1 OSS \[2021-12-13T14:53:22,775\]\[INFO \]\[logstash.runner \] Log4j configuration path used is: /etc/logstash/log4j2.properties \[2021-12-13T14:53:22,790\]\[I…

---

## [Dropdown in canvas does not filter visualization from 'Add from Kibana"](https://discuss.elastic.co/t/dropdown-in-canvas-does-not-filter-visualization-from-add-from-kibana/284631)

<div class="topic-metadata">

**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\
**Replies:** 2\
**Last updated:** [September 21, 2021, 7:01am UTC](https://discuss.elastic.co/t/dropdown-in-canvas-does-not-filter-visualization-from-add-from-kibana/284631 "2021-09-21T07:01:49Z")

</div>

Hi, I am working with canvas where I have several visualizations and a dropdown. I imported a treemap from lens to canvas but the treemap is not being filtered by the canvas dropdown. Am I missing something, or is this …

---

## [\[Elastic Cloud/ Elasticsearch service\] Latest change to Elasticsearch configuration failed](https://discuss.elastic.co/t/elastic-cloud-elasticsearch-service-latest-change-to-elasticsearch-configuration-failed/247781)

<div class="topic-metadata">

**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 9:55am UTC](https://discuss.elastic.co/t/elastic-cloud-elasticsearch-service-latest-change-to-elasticsearch-configuration-failed/247781 "2020-09-10T09:55:13Z")

</div>

Hello, ELK 7.9.1 After a long weekend ... Have noticed something on our current deployment on Elastic Cloud/ Elasticsearch service. The below health warning as been issued and I am a little confused as to yet at the mo…

---

## [GCP VPC Flows in SIEM](https://discuss.elastic.co/t/gcp-vpc-flows-in-siem/208259)

<div class="topic-metadata">

**Author:** [@numbersix](https://discuss.elastic.co/u/numbersix)\
**Replies:** 2\
**Last updated:** [November 19, 2019, 2:16pm UTC](https://discuss.elastic.co/t/gcp-vpc-flows-in-siem/208259 "2019-11-19T14:16:08Z")

</div>

I have GCP VPC Flows in Elasticsearch but what is the easiest way to integrate them into the SIEM? I see net flow integrations available for other sources but not GCP. I'm using the Google Cloud Module for Filebeat cur…

---

## [Failing shards during indexing. Storage issue or misconfiguration? Using kubernetes](https://discuss.elastic.co/t/failing-shards-during-indexing-storage-issue-or-misconfiguration-using-kubernetes/190021)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [July 11, 2019, 1:58pm UTC](https://discuss.elastic.co/t/failing-shards-during-indexing-storage-issue-or-misconfiguration-using-kubernetes/190021 "2019-07-11T13:58:30Z")

</div>

Hi, I've setup kubernetes on baremetal and try to run a three node cluster there. In my dev environment I am currently using glusterfs which also runs in kubernetes for storage. I am getting these kinds of errors: "ty…

---

## [Ruby Code out of Logstash Pipeline](https://discuss.elastic.co/t/ruby-code-out-of-logstash-pipeline/171743)

<div class="topic-metadata">

**Author:** [@Michael.Swiss](https://discuss.elastic.co/u/Michael.Swiss)\
**Replies:** 2\
**Last updated:** [March 12, 2019, 7:22am UTC](https://discuss.elastic.co/t/ruby-code-out-of-logstash-pipeline/171743 "2019-03-12T07:22:21Z")

</div>

Dear all I am building a filter plugin that calls a ruby .rb code file. The filter itself is well documented. The issues I have is with ruby gems and the transmission of variables: The documentation says that ruby gem…

---

## [Adding custom fields doesn't work in Winlogbeat](https://discuss.elastic.co/t/adding-custom-fields-doesnt-work-in-winlogbeat/140588)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 2\
**Last updated:** [July 23, 2018, 3:33pm UTC](https://discuss.elastic.co/t/adding-custom-fields-doesnt-work-in-winlogbeat/140588 "2018-07-23T15:33:09Z")

</div>

Hi, I am trying to add custom fields and I don't see field added to the event. Winlogbeat logs show following logs WARN EventLog\[CustomLog\] Open() error. No events will be read from this source. The specified channel c…

---

## [Logging form folder with subfolders](https://discuss.elastic.co/t/logging-form-folder-with-subfolders/95907)

<div class="topic-metadata">

**Author:** [@Alex\_Kovalyov](https://discuss.elastic.co/u/Alex_Kovalyov)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 1:27pm UTC](https://discuss.elastic.co/t/logging-form-folder-with-subfolders/95907 "2017-08-08T13:27:29Z")

</div>

Hello! I have the next structure of logs /var/log/stash/site1/.log /var/log/stash/site1/accounts/account1/.log /var/log/stash/site1/otherKind1/.log /var/log/stash/site1/otherKind2/.log so in site can be many subfol…

---

## [Get Document lock using java api](https://discuss.elastic.co/t/get-document-lock-using-java-api/95689)

<div class="topic-metadata">

**Author:** [@Harender\_Dudi](https://discuss.elastic.co/u/Harender_Dudi)\
**Replies:** 2\
**Last updated:** [August 3, 2017, 12:39pm UTC](https://discuss.elastic.co/t/get-document-lock-using-java-api/95689 "2017-08-03T12:39:03Z")

</div>

Hi, can anyone help me with how to get Elasticsearch document lock using java api?

---

## [Proxying beats outputs](https://discuss.elastic.co/t/proxying-beats-outputs/80283)

<div class="topic-metadata">

**Author:** [@Mihai-CMM](https://discuss.elastic.co/u/Mihai-CMM)\
**Replies:** 2\
**Last updated:** [March 29, 2017, 9:02am UTC](https://discuss.elastic.co/t/proxying-beats-outputs/80283 "2017-03-29T09:02:45Z")

</div>

Hi community I want to send elasticsearch.output through an nginx proxy. If i set that nginx IP i get: 2017-03-28T10:50:51-04:00 ERR Connecting error publishing events (retrying): Failed to parse JSON response: inva…

---

## [Logstash high CPU usage with no running config](https://discuss.elastic.co/t/logstash-high-cpu-usage-with-no-running-config/76272)

<div class="topic-metadata">

**Author:** [@orhiee](https://discuss.elastic.co/u/orhiee)\
**Replies:** 2\
**Last updated:** [February 24, 2017, 10:43am UTC](https://discuss.elastic.co/t/logstash-high-cpu-usage-with-no-running-config/76272 "2017-02-24T10:43:10Z")

</div>

hello, Yesterday i installed elk on my laptop as a vm, so i have a local server to play with when i go home from work :slight\_smile: its centos 7 x64 with elk all 5.2.1 and the latest java as of yesterday. i alrea…

---

## [Index Pattern Matching](https://discuss.elastic.co/t/index-pattern-matching/63516)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 2\
**Last updated:** [October 23, 2016, 2:32pm UTC](https://discuss.elastic.co/t/index-pattern-matching/63516 "2016-10-23T14:32:11Z")

</div>

I am having an issue with index patterns in Kibana 4.5. I had an index pattern named bro, I deleted the index pattern then tried to recreate it but I am getting: "Unable to fetch mapping. Do you have indices matching…

---

## [How to update my ELK server?](https://discuss.elastic.co/t/how-to-update-my-elk-server/33874)

<div class="topic-metadata">

**Author:** [@Yzord](https://discuss.elastic.co/u/Yzord)\
**Replies:** 2\
**Last updated:** [November 6, 2015, 3:10pm UTC](https://discuss.elastic.co/t/how-to-update-my-elk-server/33874 "2015-11-06T15:10:05Z")

</div>

I am almost finished building my ELK server which i found exiting to do. I have pushed already 12 logs to my ELK server and have almost 5GB of indexes. All runs fine and i am now exploring how to proper use this neat too…

---

## [How to create Location object in Groovy/Java](https://discuss.elastic.co/t/how-to-create-location-object-in-groovy-java/31602)

<div class="topic-metadata">

**Author:** [@rajeshdommati](https://discuss.elastic.co/u/rajeshdommati)\
**Replies:** 2\
**Last updated:** [October 9, 2015, 5:28pm UTC](https://discuss.elastic.co/t/how-to-create-location-object-in-groovy-java/31602 "2015-10-09T17:28:52Z")

</div>

I am getting latitude and longitude values from a rest API and i want to create a location object in groovy/java(may be using double arrays) and store it to Elasticsearch with other parameters. I know how to do this thro…

---

## [Mapping ndjson](https://discuss.elastic.co/t/mapping-ndjson/209617)

<div class="topic-metadata">

**Author:** [@111228](https://discuss.elastic.co/u/111228)\
**Replies:** 1\
**Last updated:** [November 27, 2019, 11:19am UTC](https://discuss.elastic.co/t/mapping-ndjson/209617 "2019-11-27T11:19:38Z")

</div>

Good day How can I import .ndjson file by a command without GUI

---

## [Kibana & Elastic search both showing running on 9200 & 5601 but UI not opening](https://discuss.elastic.co/t/kibana-elastic-search-both-showing-running-on-9200-5601-but-ui-not-opening/160850)

<div class="topic-metadata">

**Author:** [@tushar89](https://discuss.elastic.co/u/tushar89)\
**Replies:** 1\
**Last updated:** [December 14, 2018, 9:51am UTC](https://discuss.elastic.co/t/kibana-elastic-search-both-showing-running-on-9200-5601-but-ui-not-opening/160850 "2018-12-14T09:51:17Z")

</div>

AWS EC2 Linux 2 boxes SG open on 9200 for ES & 5601 for Kibana & HTTP &HTTPS for both. Kibana has an elastic IP. Curl @ 9200 works for ES. Kibana listening on 5601 but UI of kibana not opening. Have put the Private I…

---

## [ES Multicast Not Working, Multicasting enabled and working otherwise](https://discuss.elastic.co/t/es-multicast-not-working-multicasting-enabled-and-working-otherwise/26684)

<div class="topic-metadata">

**Author:** [@ryan](https://discuss.elastic.co/u/ryan)\
**Replies:** 1\
**Last updated:** [August 2, 2015, 2:47am UTC](https://discuss.elastic.co/t/es-multicast-not-working-multicasting-enabled-and-working-otherwise/26684 "2015-08-02T02:47:15Z")

</div>

Hello, Are there any particular steps to debugging zen discovery using multicasting? I'm able to send multicast traffic between two nodes following these steps: http://taosecurity.blogspot.com/2006/09/generating-mult…

---

## [\[Elastic APM\] transaction(xxx, xxx, custom) was discarded! The page was hidden during the transaction!](https://discuss.elastic.co/t/elastic-apm-transaction-xxx-xxx-custom-was-discarded-the-page-was-hidden-during-the-transaction/282671)

<div class="topic-metadata">

**Author:** [@Sibi\_John](https://discuss.elastic.co/u/Sibi_John)\
**Replies:** 1\
**Last updated:** [September 1, 2021, 7:36am UTC](https://discuss.elastic.co/t/elastic-apm-transaction-xxx-xxx-custom-was-discarded-the-page-was-hidden-during-the-transaction/282671 "2021-09-01T07:36:40Z")

</div>

Hi, We are trying to capture a long running custom transaction where the user might be inactive for a while, switch tabs/windows etc. We could not see these logs on kibana. so we turned on the debug log level and in suc…

---

## [Filebeat multiline json](https://discuss.elastic.co/t/filebeat-multiline-json/306287)

<div class="topic-metadata">

**Author:** [@Panda\_Free](https://discuss.elastic.co/u/Panda_Free)\
**Replies:** 0\
**Last updated:** [June 3, 2022, 6:03am UTC](https://discuss.elastic.co/t/filebeat-multiline-json/306287 "2022-06-03T06:03:28Z")

</div>

Hi, please help, spent more one week and cannot get correct parse settings. I have file from AWS Athena query, csv, but coverted to pure multiline json. Structure: \[{ "useridentity":"{type=somevalue={attributes={…

---

## [How to remove expired SSL certificate](https://discuss.elastic.co/t/how-to-remove-expired-ssl-certificate/364280)

<div class="topic-metadata">

**Author:** [@Chuck\_Reynolds](https://discuss.elastic.co/u/Chuck_Reynolds)\
**Replies:** 6\
**Last updated:** [August 8, 2024, 1:28am UTC](https://discuss.elastic.co/t/how-to-remove-expired-ssl-certificate/364280 "2024-08-08T01:28:00Z")

</div>

I have a ssl cert that our webops team created for me a year ago and now it has expired. I've added copied the new ssl cert to each server and pointed this line to in the elasticsearch.yml file xpack.security.http.ssl.…

---

## [JSON timestamp coming as text](https://discuss.elastic.co/t/json-timestamp-coming-as-text/345633)

<div class="topic-metadata">

**Author:** [@ataylor](https://discuss.elastic.co/u/ataylor)\
**Replies:** 6\
**Last updated:** [October 27, 2023, 12:45am UTC](https://discuss.elastic.co/t/json-timestamp-coming-as-text/345633 "2023-10-27T00:45:25Z")

</div>

Basically I am not getting a @timestamp field that is a date - its coming through as text. #this is my .conf file (with some stuff excluded for security) input{ beats{ port =\> 5048 } } filter { json { …

---

## [Canvas doesn't support Type "IP"](https://discuss.elastic.co/t/canvas-doesnt-support-type-ip/259568)

<div class="topic-metadata">

**Author:** [@Abdelhalim](https://discuss.elastic.co/u/Abdelhalim)\
**Replies:** 6\
**Last updated:** [January 6, 2021, 3:01pm UTC](https://discuss.elastic.co/t/canvas-doesnt-support-type-ip/259568 "2021-01-06T15:01:50Z")

</div>

Hello, I tried to add a table which contains some suspicious IP addresses and I am getting an error Canvas doesn't not support type IP So as it's till now a limitation on canvas, I decided to create a dashboard, and th…

[Previous page](https://discuss.elastic.co/top.md?page=1620&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1622&per_page=50&period=all)
