# Top **URL:** https://discuss.elastic.co/top.md?page=1642&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1643 --- ## [Elasticsearch helm](https://discuss.elastic.co/t/elasticsearch-helm/330391)
**Author:** [@thirumoorthy](https://discuss.elastic.co/u/thirumoorthy)\ **Replies:** 4\ **Last updated:** [April 21, 2023, 4:26am UTC](https://discuss.elastic.co/t/elasticsearch-helm/330391 "2023-04-21T04:26:45Z")
Warning Unhealthy 11s (x31 over 4m50s) kubelet Readiness probe failed: Waiting for elasticsearch cluster to become ready (request params: "wait\_for\_status=green&timeout=2s" ) Cluster is not yet ready (requ… --- ## [Aggregation across multiple indexes/indices - significant terms](https://discuss.elastic.co/t/aggregation-across-multiple-indexes-indices-significant-terms/296787)
**Author:** [@anthonyfps](https://discuss.elastic.co/u/anthonyfps)\ **Replies:** 4\ **Last updated:** [February 17, 2022, 1:25pm UTC](https://discuss.elastic.co/t/aggregation-across-multiple-indexes-indices-significant-terms/296787 "2022-02-17T13:25:30Z")
Hi, we have indexes that are split by date for manageability but contain the same mappings. I'm currently trying to use the significant terms aggregation to identify new terms, by specifying the foreground as e.g. the l… --- ## [API Endpoint to initiate crawl of single page](https://discuss.elastic.co/t/api-endpoint-to-initiate-crawl-of-single-page/276296)
**Author:** [@tchocky](https://discuss.elastic.co/u/tchocky)\ **Replies:** 4\ **Last updated:** [June 17, 2021, 7:49pm UTC](https://discuss.elastic.co/t/api-endpoint-to-initiate-crawl-of-single-page/276296 "2021-06-17T19:49:21Z")
Hi all - I am looking for a way to initiate the crawl of a single page on demand via an API call. While looking through the docs I was lead to this page on the Swiftype site. This is exactly what I am looking for but it… --- ## [All index missing every 1-2 days. What is happening?](https://discuss.elastic.co/t/all-index-missing-every-1-2-days-what-is-happening/243152)
**Author:** [@Oh\_Chee\_Peng](https://discuss.elastic.co/u/Oh_Chee_Peng)\ **Replies:** 4\ **Last updated:** [July 30, 2020, 7:50am UTC](https://discuss.elastic.co/t/all-index-missing-every-1-2-days-what-is-happening/243152 "2020-07-30T07:50:13Z")
I created an instance on Google Cloud, using Elasticsearch Certified by Bitnami. There is no issue with creating index, but every 1 or 2 days, all index will be mysteriously missing, and I am having hard time troublesho… --- ## [Can set the Watcher with Time period in 2 Codition](https://discuss.elastic.co/t/can-set-the-watcher-with-time-period-in-2-codition/212825)
**Author:** [@maddog](https://discuss.elastic.co/u/maddog)\ **Replies:** 4\ **Last updated:** [January 15, 2020, 8:27am UTC](https://discuss.elastic.co/t/can-set-the-watcher-with-time-period-in-2-codition/212825 "2020-01-15T08:27:20Z")
Topic : How to set Watcher to support 2 condition on 1 day?? Time 00.00 - 06.00 check-in Condition 1 "condition": { "compare": { "ctx.payload.hits.total": { "gte": 10 } } Time 06.01-23.59 Check-in Condition … --- ## [Geo\_point issue, need help in identifying the issue](https://discuss.elastic.co/t/geo-point-issue-need-help-in-identifying-the-issue/207801)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 4\ **Last updated:** [November 28, 2019, 3:29am UTC](https://discuss.elastic.co/t/geo-point-issue-need-help-in-identifying-the-issue/207801 "2019-11-28T03:29:09Z")
Hey Folks, Can someone please help me on geo\_point? I am using OSS version 7.2.1 and my data is properly being parsed and can see geo information however when I am plotting the geo map on Kibana this is giving me an err… --- ## [How will i know that elasticsearch has crashed or stopped working?](https://discuss.elastic.co/t/how-will-i-know-that-elasticsearch-has-crashed-or-stopped-working/140988)
**Author:** [@Shrimp-Fried-Rice](https://discuss.elastic.co/u/Shrimp-Fried-Rice)\ **Replies:** 4\ **Last updated:** [July 23, 2018, 5:54am UTC](https://discuss.elastic.co/t/how-will-i-know-that-elasticsearch-has-crashed-or-stopped-working/140988 "2018-07-23T05:54:45Z")
i have few questions in mind, Is there way to get notified if elasticsearch crashes or stops working ? is there system in place to auto start elasticsearch if it crashes ? just like in mysql ? can i start elasti… --- ## [Problem With ES Upgrade(2.x to 5.x)](https://discuss.elastic.co/t/problem-with-es-upgrade-2-x-to-5-x/98065)
**Author:** [@abhiCR7](https://discuss.elastic.co/u/abhiCR7)\ **Replies:** 4\ **Last updated:** [August 24, 2017, 9:30am UTC](https://discuss.elastic.co/t/problem-with-es-upgrade-2-x-to-5-x/98065 "2017-08-24T09:30:27Z")
I have currently v2.4 Elasticsearch in production and in process to upgrade it to v5.5. I’m facing problem with index.mapping.total\_fields.limit: 1000 index.mapping.nested\_fields.limit: 50 My current total fields is … --- ## [Kibana 5.5.0 wrong docker image](https://discuss.elastic.co/t/kibana-5-5-0-wrong-docker-image/93552)
**Author:** [@dulman](https://discuss.elastic.co/u/dulman)\ **Replies:** 4\ **Last updated:** [July 18, 2017, 11:48am UTC](https://discuss.elastic.co/t/kibana-5-5-0-wrong-docker-image/93552 "2017-07-18T11:48:59Z")
Hello, pulling docker.elastic.co/kibana/kibana:5.5.0 results in a 5.2.1 kibana docker image? --- ## [Dicover tab is defunt when loading visualizations using CURL at command line](https://discuss.elastic.co/t/dicover-tab-is-defunt-when-loading-visualizations-using-curl-at-command-line/86290)
**Author:** [@raazeev64](https://discuss.elastic.co/u/raazeev64)\ **Replies:** 4\ **Last updated:** [May 20, 2017, 1:58pm UTC](https://discuss.elastic.co/t/dicover-tab-is-defunt-when-loading-visualizations-using-curl-at-command-line/86290 "2017-05-20T13:58:53Z")
I have been trying to achieve one click delpoyment of ELK(with some sample dashboard) using some shell scripts. Things work out fine except for glitches at the end. The discover tab does not load anything at all. It appe… --- ## [Configure elasticsearch to query files on file system](https://discuss.elastic.co/t/configure-elasticsearch-to-query-files-on-file-system/16140)
**Author:** [@Nitesh\_Earkara](https://discuss.elastic.co/u/Nitesh_Earkara)\ **Replies:** 4\ **Last updated:** [March 5, 2014, 8:11am UTC](https://discuss.elastic.co/t/configure-elasticsearch-to-query-files-on-file-system/16140 "2014-03-05T08:11:48Z")
Hi, I have been trying to configure ElasticSearch to query/search files in file system on a Windows 7 Operating system. I have installed ElasticSearch and its up and running. I have been trying to install fsriver … --- ## [Converting IndexResponse to SearchResponse](https://discuss.elastic.co/t/converting-indexresponse-to-searchresponse/10277)
**Author:** [@Janusz\_Dalecki](https://discuss.elastic.co/u/Janusz_Dalecki)\ **Replies:** 4\ **Last updated:** [January 10, 2013, 3:02am UTC](https://discuss.elastic.co/t/converting-indexresponse-to-searchresponse/10277 "2013-01-10T03:02:45Z")
Hi, I am trying to use JSON builder to get some documents from elasticsearch db. IndexResponse response = client.prepareIndex("asset\_index", "Asset" ).setSource( \*jsonBuilder\*().startObject()… --- ## [(no subject)](https://discuss.elastic.co/t/no-subject/6907)
**Author:** [@Abhishek\_Jajoria](https://discuss.elastic.co/u/Abhishek_Jajoria)\ **Replies:** 4\ **Last updated:** [March 7, 2012, 5:40am UTC](https://discuss.elastic.co/t/no-subject/6907 "2012-03-07T05:40:12Z")
I am working with elasticsearch query string Here is what I did SearchRequestBuilder builder = client.prepareSearch("indexname"); QueryStringQueryBuilder qb5 = QueryBuilders.queryString("some text") … --- ## [Date and mutate filter performance](https://discuss.elastic.co/t/date-and-mutate-filter-performance/40638)
**Author:** [@matejzero](https://discuss.elastic.co/u/matejzero)\ **Replies:** 0\ **Last updated:** [February 1, 2016, 2:18pm UTC](https://discuss.elastic.co/t/date-and-mutate-filter-performance/40638 "2016-02-01T14:18:39Z")
Hello, I'm doing a little bit of performance testing and optimizations with my current setup and I'm seeing weird performance drops with mutate and date filter. My setup: Logstash node with 6 CPUs (VM) and I run logs… --- ## [Horizontal Bar Chart in Kibana](https://discuss.elastic.co/t/horizontal-bar-chart-in-kibana/23330)
**Author:** [@Vijay\_Nagendrarao](https://discuss.elastic.co/u/Vijay_Nagendrarao)\ **Replies:** 0\ **Last updated:** [April 20, 2015, 6:43pm UTC](https://discuss.elastic.co/t/horizontal-bar-chart-in-kibana/23330 "2015-04-20T18:43:54Z")
Hi, I need to implement horizontal bar chart in Kibana 4. I need help regarding. Please let me know. Thanks, Vijay.C.N -- You received this message because you are subscribed to the Google Groups "elasti… --- ## [Limit data retention on the hosted product?](https://discuss.elastic.co/t/limit-data-retention-on-the-hosted-product/214606)
**Author:** [@jsumners\_knock](https://discuss.elastic.co/u/jsumners_knock)\ **Replies:** 5\ **Last updated:** [January 14, 2020, 8:33am UTC](https://discuss.elastic.co/t/limit-data-retention-on-the-hosted-product/214606 "2020-01-14T08:33:10Z")
How can I limit the data retention on our hosted plan? Is there an easy way to limit to, for example, 30 days of data? --- ## [Parsing multiline unstructured log..Please give grok for this below log\\](https://discuss.elastic.co/t/parsing-multiline-unstructured-log-please-give-grok-for-this-below-log/203224)
**Author:** [@smr](https://discuss.elastic.co/u/smr)\ **Replies:** 5\ **Last updated:** [October 15, 2019, 9:58pm UTC](https://discuss.elastic.co/t/parsing-multiline-unstructured-log-please-give-grok-for-this-below-log/203224 "2019-10-15T21:58:00Z")
INFO 2019-04-23 01:57:00,258 \[AsyncHttpClient-Callback\] org.mule.runtime.core.internal.util.queue.QueueXaResourceManager: Starting ResourceManager INFO 2019-04-23 01:57:00,258 \[AsyncHttpClient-Callback\] org.mule.runti… --- ## [Metricbeat 5.3.0 reporting strange memory value](https://discuss.elastic.co/t/metricbeat-5-3-0-reporting-strange-memory-value/124825)
**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\ **Replies:** 5\ **Last updated:** [March 28, 2018, 2:22pm UTC](https://discuss.elastic.co/t/metricbeat-5-3-0-reporting-strange-memory-value/124825 "2018-03-28T14:22:20Z")
beats 5.3.0 on FreeBSD linprocfs has been mounted and this has been working for months. This morning I noticed errors in my elasticsearch log, something like this: "\[2018-03-20T15:53:19,197\]\[DEBUG\]\[o.e.a.b.TransportS… --- ## [X-pack installation dependency](https://discuss.elastic.co/t/x-pack-installation-dependency/124313)
**Author:** [@kawo123](https://discuss.elastic.co/u/kawo123)\ **Replies:** 5\ **Last updated:** [March 16, 2018, 3:58pm UTC](https://discuss.elastic.co/t/x-pack-installation-dependency/124313 "2018-03-16T15:58:11Z")
When installing x-pack to any component of the elastic stack (elasticsearch, logstash, kibana, filebeat), is there any requirement that x-pack must be installed on all other components? For example, if I install x-pack o… --- ## [Tenable.sc integration with Elastic](https://discuss.elastic.co/t/tenable-sc-integration-with-elastic/328724)
**Author:** [@Wenwei](https://discuss.elastic.co/u/Wenwei)\ **Replies:** 2\ **Last updated:** [March 29, 2023, 5:56pm UTC](https://discuss.elastic.co/t/tenable-sc-integration-with-elastic/328724 "2023-03-29T17:56:11Z")
Hi guys, I am trying Tenable.sc integration with Elasticsearch. I added the integration, configured the URL to be https://private\_ip\_address\_of\_sc also included access key and secret key. Also installed elastic-agent… --- ## [Module/apmzap](https://discuss.elastic.co/t/module-apmzap/296154)
**Author:** [@MerNat](https://discuss.elastic.co/u/MerNat)\ **Replies:** 2\ **Last updated:** [February 4, 2022, 9:08am UTC](https://discuss.elastic.co/t/module-apmzap/296154 "2022-02-04T09:08:17Z")
I'm trying to send logs to the APM server and thus can see it in transactions associated logs. I've simply followed the simple doc Built-in instrumentation modules | APM Go Agent Reference \[1.x\] | Elastic. Kibana versio… --- ## [1つのDashboardを複数のSpaceで共有したい](https://discuss.elastic.co/t/1-dashboard-space/222392)
**Author:** [@sshota](https://discuss.elastic.co/u/sshota)\ **Replies:** 2\ **Last updated:** [March 6, 2020, 7:56am UTC](https://discuss.elastic.co/t/1-dashboard-space/222392 "2020-03-06T07:56:53Z")
お世話になります。 1つのDashboardを複数のSpaceで共有したいのですが、よい方法はありませんでしょうか。 やりたいことイメージ ユーザーA,B,Cが、それぞれSpace A,B,Cを使用している。 1つのDashboardを共通的に、全てのユーザー（＝全てのSpace）で閲覧させたい それ以外のDashboardは、各 ユーザーごとに閲覧させたい 意図としては、１つのDashboardを更新するだけで、全てのS… --- ## [\[Important\] Filebeat goroutine leaking fixing (issue 7820) is missing in v6.5](https://discuss.elastic.co/t/important-filebeat-goroutine-leaking-fixing-issue-7820-is-missing-in-v6-5/161068)
**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\ **Replies:** 2\ **Last updated:** [December 17, 2018, 2:22pm UTC](https://discuss.elastic.co/t/important-filebeat-goroutine-leaking-fixing-issue-7820-is-missing-in-v6-5/161068 "2018-12-17T14:22:38Z")
I don't know what is the reason behind that, but the correction bing in by https://github.com/elastic/beats/pull/7820, are missing in Filebeat v6.5, this cause that we suffer the the memory leak issue again after upgrade… --- ## [Kibana aggregation filter query issue](https://discuss.elastic.co/t/kibana-aggregation-filter-query-issue/118161)
**Author:** [@shahrukhkhan](https://discuss.elastic.co/u/shahrukhkhan)\ **Replies:** 2\ **Last updated:** [February 5, 2018, 10:52am UTC](https://discuss.elastic.co/t/kibana-aggregation-filter-query-issue/118161 "2018-02-05T10:52:38Z")
So i want to enquire about composite query in kibana filter aggregation. i am using kibana 5.4.3. I applied one filter like, method.raw:"methodName" now two method names are same but are from different class. So i'd l… --- ## [Elasticsearch Windows Service - redirect stdout to null](https://discuss.elastic.co/t/elasticsearch-windows-service-redirect-stdout-to-null/105367)
**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 3:01pm UTC](https://discuss.elastic.co/t/elasticsearch-windows-service-redirect-stdout-to-null/105367 "2017-11-07T15:01:36Z")
Hi All, I'm running Elasticsearch 5.5.1 as a Windows Service which is working fine. However, the service is writing to STDOUT, and this log file only seems to get written when the service is stopped. Depending on how lo… --- ## [Kibanaプラグインで callWithInternalUser() のパラメータ設定方法について](https://discuss.elastic.co/t/kibana-callwithinternaluser/104490)
**Author:** [@drumn](https://discuss.elastic.co/u/drumn)\ **Replies:** 2\ **Last updated:** [October 19, 2017, 8:29am UTC](https://discuss.elastic.co/t/kibana-callwithinternaluser/104490 "2017-10-19T08:29:58Z")
kibanaの Dev Tools で正常にレコード取得できる以下のクエリを、 自作のkibana プラグインのcallWithInternalUserメソッドを使ってレコード取得したいのですが、 パラメータの指定方法がわからず困っております。 ・クエリ GET testindex/\_search { "from": 0, "size": 5, "query": { "nested": { "pa… --- ## [New to ES - Simple watcher does not work like i want](https://discuss.elastic.co/t/new-to-es-simple-watcher-does-not-work-like-i-want/89571)
**Author:** [@Maxime\_Poirier-Journ](https://discuss.elastic.co/u/Maxime_Poirier-Journ)\ **Replies:** 2\ **Last updated:** [June 15, 2017, 3:51pm UTC](https://discuss.elastic.co/t/new-to-es-simple-watcher-does-not-work-like-i-want/89571 "2017-06-15T15:51:39Z")
Hi there, Im trying to configure what seems to be a really easy watcher but can't get it to work like i want it to. I'm trying to alert if a fail login occurs on one of our Windows Server or a Linux server. Here's my … --- ## [ScriptedField - Only part before comma is taken](https://discuss.elastic.co/t/scriptedfield-only-part-before-comma-is-taken/85885)
**Author:** [@th\_dap7](https://discuss.elastic.co/u/th_dap7)\ **Replies:** 2\ **Last updated:** [May 17, 2017, 6:27am UTC](https://discuss.elastic.co/t/scriptedfield-only-part-before-comma-is-taken/85885 "2017-05-17T06:27:04Z")
I added a scripted field to my index with name Drift using painless: Name Language Script Drift painless doc\['NumberValue'\].value The attribute NumberValue has float values. The script… --- ## [Cluster Logs Filling Drive](https://discuss.elastic.co/t/cluster-logs-filling-drive/50573)
**Author:** [@jnpetty](https://discuss.elastic.co/u/jnpetty)\ **Replies:** 2\ **Last updated:** [May 20, 2016, 7:12pm UTC](https://discuss.elastic.co/t/cluster-logs-filling-drive/50573 "2016-05-20T19:12:41Z")
I have a 50G root partition and the Elasticsearch cluster log files have consumed the whole drive on two of my 3 nodes. The files are located in /var/log/elasticsearch. Whats the best way of keeping these files under con… --- ## [Index not getting created for csv import](https://discuss.elastic.co/t/index-not-getting-created-for-csv-import/47877)
**Author:** [@PKA](https://discuss.elastic.co/u/PKA)\ **Replies:** 2\ **Last updated:** [April 22, 2016, 4:40am UTC](https://discuss.elastic.co/t/index-not-getting-created-for-csv-import/47877 "2016-04-22T04:40:50Z")
I want to load csv into ES. I have followed the steps as detailed in this blog: http://blog.webkid.io/visualize-datasets-with-elk/ I am using elasticsearch 2.3.1, kibana-4.5.0-linux-x64, logstash-2.3.1. I have deleted … --- ## [Mutate and Columns combined](https://discuss.elastic.co/t/mutate-and-columns-combined/36327)
**Author:** [@Optius\_Prime](https://discuss.elastic.co/u/Optius_Prime)\ **Replies:** 2\ **Last updated:** [December 4, 2015, 8:27pm UTC](https://discuss.elastic.co/t/mutate-and-columns-combined/36327 "2015-12-04T20:27:51Z")
Hello Fellow Logstash users. I have just started to use ELK and am impressed with it. I am trying to propose a project to my senior management. However i am getting a problem in trying to upload the data in appropriate… --- ## [Range filter performance consideration](https://discuss.elastic.co/t/range-filter-performance-consideration/26695)
**Author:** [@limac](https://discuss.elastic.co/u/limac)\ **Replies:** 2\ **Last updated:** [August 3, 2015, 12:26am UTC](https://discuss.elastic.co/t/range-filter-performance-consideration/26695 "2015-08-03T00:26:12Z")
Hi, I am currently make a lot of range filter in this way: "filter":{ "range":{"date":{"gte":1438358400, "lte":1438358460}} } if we disable cache, does elasticsearch will scan every doc in my index t… --- ## [Elastic Agent failing to parse valid condition functions](https://discuss.elastic.co/t/elastic-agent-failing-to-parse-valid-condition-functions/349579)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 8\ **Last updated:** [January 12, 2024, 1:34am UTC](https://discuss.elastic.co/t/elastic-agent-failing-to-parse-valid-condition-functions/349579 "2024-01-12T01:34:46Z")
Hi, I'm having an issue where if I try to run elastic-agent inspect with a policy that defines a condition with a function, I get an error, even if the function is valid. Elastic Agent 8.11.3 Example: Use the Kuberne… --- ## [Replace Null to 0 if no records found in Visualisation](https://discuss.elastic.co/t/replace-null-to-0-if-no-records-found-in-visualisation/336989)
**Author:** [@bandodkarD](https://discuss.elastic.co/u/bandodkarD)\ **Replies:** 8\ **Last updated:** [June 30, 2023, 10:09am UTC](https://discuss.elastic.co/t/replace-null-to-0-if-no-records-found-in-visualisation/336989 "2023-06-30T10:09:28Z")
We have this visualisation created. We want the CSV download to show the value as 0 not "null" for filters with no records. Is this possible ? --- ## [Unable to start kibana with systemd on ubuntu while manually does](https://discuss.elastic.co/t/unable-to-start-kibana-with-systemd-on-ubuntu-while-manually-does/306925)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 3\ **Last updated:** [June 11, 2022, 2:00pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-with-systemd-on-ubuntu-while-manually-does/306925 "2022-06-11T14:00:01Z")
Hi Team, I am facing a weird isssue. On my ubuntu system I am unable to start kibana process with systemd and its failing while if I am starting from command line or manually it does. Any clud why? below are the error … --- ## [Filebeat: Configuring input from URL](https://discuss.elastic.co/t/filebeat-configuring-input-from-url/278195)
**Author:** [@Conor\_Hennessy](https://discuss.elastic.co/u/Conor_Hennessy)\ **Replies:** 3\ **Last updated:** [July 13, 2021, 12:59pm UTC](https://discuss.elastic.co/t/filebeat-configuring-input-from-url/278195 "2021-07-13T12:59:46Z")
Hi All, I have used filebeat to parse and send an xml to elasticsearch and it has worked nicely. The xml file was downloaded from a url (something like example.com/example.xml) and I then included the path to the downlo… --- ## [Python agent raise ValueError](https://discuss.elastic.co/t/python-agent-raise-valueerror/233263)
**Author:** [@leslie](https://discuss.elastic.co/u/leslie)\ **Replies:** 3\ **Last updated:** [May 27, 2020, 5:23pm UTC](https://discuss.elastic.co/t/python-agent-raise-valueerror/233263 "2020-05-27T17:23:53Z")
Hi all, After my django application intergrating with elastic-apm, I received some errors of apm agent. I can see them in sentry and kibana( /app/apm#/services/\/errors ). The error is: ValueError: too many… --- ## [Unassigned Shard](https://discuss.elastic.co/t/unassigned-shard/210890)
**Author:** [@Merlin\_Nunez](https://discuss.elastic.co/u/Merlin_Nunez)\ **Replies:** 3\ **Last updated:** [December 6, 2019, 2:37pm UTC](https://discuss.elastic.co/t/unassigned-shard/210890 "2019-12-06T14:37:10Z")
Hi All, A while ago I reported this issue, but back then I was running a single node cluser and though that may have been the issue. Yesterday I migrated to a triple node cluster configuration: 3 elasticsearch nodes (m… --- ## [Difference between kibana github and kibana docker oss](https://discuss.elastic.co/t/difference-between-kibana-github-and-kibana-docker-oss/200001)
**Author:** [@oranciog](https://discuss.elastic.co/u/oranciog)\ **Replies:** 3\ **Last updated:** [September 18, 2019, 4:37pm UTC](https://discuss.elastic.co/t/difference-between-kibana-github-and-kibana-docker-oss/200001 "2019-09-18T16:37:50Z")
Hello! I've noticed that there are differences between the code from github and the code inside docker oss images. For examples: The files: https://github.com/elastic/kibana/blob/v6.2.3/src/cli\_plugin/install/install… --- ## [Doubt Regarding Data Extraction From Same Line - Logstash](https://discuss.elastic.co/t/doubt-regarding-data-extraction-from-same-line-logstash/172139)
**Author:** [@Sanriya\_Krimzn](https://discuss.elastic.co/u/Sanriya_Krimzn)\ **Replies:** 8\ **Last updated:** [March 18, 2019, 1:17pm UTC](https://discuss.elastic.co/t/doubt-regarding-data-extraction-from-same-line-logstash/172139 "2019-03-18T13:17:30Z")
Hi , I am extracting information from log and creating fields. Sample Log Line: Keepalive set (10 sec) aliveset (9 sec) Now how can I parse the above line to get two rows like { "parameter" =\> "Keepalive set", "du… --- ## [Logstash high CPU % on startup ~ 190%](https://discuss.elastic.co/t/logstash-high-cpu-on-startup-190/168490)
**Author:** [@stash2logs](https://discuss.elastic.co/u/stash2logs)\ **Replies:** 3\ **Last updated:** [February 14, 2019, 10:21pm UTC](https://discuss.elastic.co/t/logstash-high-cpu-on-startup-190/168490 "2019-02-14T22:21:53Z")
I installed a fresh instance of Logstash with basic configurations for testing (no filters) just an input and an output. As soon as I start Logstash the CPU percentage shoots up to ~200%. Is this the normal behavior for … --- ## [New fields](https://discuss.elastic.co/t/new-fields/141537)
**Author:** [@mohamed.samir](https://discuss.elastic.co/u/mohamed.samir)\ **Replies:** 8\ **Last updated:** [July 29, 2018, 3:44pm UTC](https://discuss.elastic.co/t/new-fields/141537 "2018-07-29T15:44:09Z")
i have forwarded sys log messages to my ELK. i have used grok to filter this logs and abstract the fields, but it didn't work. i am sure with my grok. when i forward the php logs directly to the ELK, with another grok… --- ## [Elastic disk usage for a beginner](https://discuss.elastic.co/t/elastic-disk-usage-for-a-beginner/114306)
**Author:** [@wweeder](https://discuss.elastic.co/u/wweeder)\ **Replies:** 3\ **Last updated:** [January 8, 2018, 8:50pm UTC](https://discuss.elastic.co/t/elastic-disk-usage-for-a-beginner/114306 "2018-01-08T20:50:21Z")
Hello, I have a very basic question but one which I haven't seen asked or answered directly. Is elasticsearch disk usage intended to be infinite? apart from deleting indices or their data using a manual or manually cre… --- ## [Giving WinSCP log file as input to filebeat](https://discuss.elastic.co/t/giving-winscp-log-file-as-input-to-filebeat/90034)
**Author:** [@nmane](https://discuss.elastic.co/u/nmane)\ **Replies:** 3\ **Last updated:** [June 22, 2017, 10:20am UTC](https://discuss.elastic.co/t/giving-winscp-log-file-as-input-to-filebeat/90034 "2017-06-22T10:20:32Z")
I want to give log file from WinSCP as input to Filebeat. Is it possible? If yes, how do I do it? --- ## [Java API UpdateArray](https://discuss.elastic.co/t/java-api-updatearray/88898)
**Author:** [@Skolty](https://discuss.elastic.co/u/Skolty)\ **Replies:** 3\ **Last updated:** [June 10, 2017, 1:54pm UTC](https://discuss.elastic.co/t/java-api-updatearray/88898 "2017-06-10T13:54:10Z")
Hi Guys ! I have a document which contains an array of JSONObject. When I add a JSONObject in my array from Sense like this, it works fine : \[quote\] POST index/type/1/\_update { "script" : { "inline": "ctx.\_source.p… --- ## [Alias for multiple indexes, why can't I use /indexname/doctype/docno?](https://discuss.elastic.co/t/alias-for-multiple-indexes-why-cant-i-use-indexname-doctype-docno/65588)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 3\ **Last updated:** [November 14, 2016, 4:05am UTC](https://discuss.elastic.co/t/alias-for-multiple-indexes-why-cant-i-use-indexname-doctype-docno/65588 "2016-11-14T04:05:38Z")
We have an alias combining multiple indexes. Searching across the indexes via the alias and the \_search endpoint is fine. However, when referring to a document by its ID as a URI: curl http://the-node:9200/the-alias/… --- ## [Logstash output to Elastic search is not working](https://discuss.elastic.co/t/logstash-output-to-elastic-search-is-not-working/21599)
**Author:** [@zaluxa](https://discuss.elastic.co/u/zaluxa)\ **Replies:** 3\ **Last updated:** [January 15, 2015, 11:46am UTC](https://discuss.elastic.co/t/logstash-output-to-elastic-search-is-not-working/21599 "2015-01-15T11:46:47Z")
Hi all, I've started experimenting ELK today, unfortunately not succeeded. Everything installed properly and running without any error. When I start Logstash with the following command, output to STDOUT is fine. B… --- ## [Pop3 River? Mail River? MailList River](https://discuss.elastic.co/t/pop3-river-mail-river-maillist-river/5896)
**Author:** [@medcl\_net](https://discuss.elastic.co/u/medcl_net)\ **Replies:** 8\ **Last updated:** [April 23, 2014, 10:44pm UTC](https://discuss.elastic.co/t/pop3-river-mail-river-maillist-river/5896 "2014-04-23T22:44:16Z")
hey，guys I just have an idea of implementing a river for receiving mails（or maillists），it should support pop3 or imap basicly ，the river will be useful if you have lots of mail like me and the mail-client becomes mor… --- ## [ILM policy for filebeats through config file](https://discuss.elastic.co/t/ilm-policy-for-filebeats-through-config-file/277597)
**Author:** [@rp346](https://discuss.elastic.co/u/rp346)\ **Replies:** 0\ **Last updated:** [July 1, 2021, 8:54pm UTC](https://discuss.elastic.co/t/ilm-policy-for-filebeats-through-config-file/277597 "2021-07-01T20:54:37Z")
I want to setup ILM through filebeat.yml I have following config # ====================== Index Lifecycle Management (ILM) ====================== # Configure index lifecycle management (ILM). These settings cr… --- ## [How do I increment my count field of my document from logstash?](https://discuss.elastic.co/t/how-do-i-increment-my-count-field-of-my-document-from-logstash/27993)
**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\ **Replies:** 0\ **Last updated:** [August 25, 2015, 7:43am UTC](https://discuss.elastic.co/t/how-do-i-increment-my-count-field-of-my-document-from-logstash/27993 "2015-08-25T07:43:20Z")
I want to update one field of my document/log in elasticsearch from logstash. My logstash conf file input { http { host =\> "127.0.0.1" # default: 0.0.0.0 port =\> 31311 # default: 8080 } } output { std… [Previous page](https://discuss.elastic.co/top.md?page=1641&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1643&per_page=50&period=all)