# Top **URL:** https://discuss.elastic.co/top.md?page=1643&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1644 --- ## [Cross cluster search](https://discuss.elastic.co/t/cross-cluster-search/303484)
**Author:** [@InJong\_Park](https://discuss.elastic.co/u/InJong_Park)\ **Replies:** 6\ **Last updated:** [May 10, 2022, 6:50am UTC](https://discuss.elastic.co/t/cross-cluster-search/303484 "2022-05-10T06:50:18Z")
Hello. I’m InJong. I have a short question. Is it possible connect es-7.2.1(self) to es-7.17(elastic-cloud) for cross cluster search. --- ## [Will kibana work if i am trying to index a file of 6.5 GB having 3 million records](https://discuss.elastic.co/t/will-kibana-work-if-i-am-trying-to-index-a-file-of-6-5-gb-having-3-million-records/100065)
**Author:** [@sudi\_2611](https://discuss.elastic.co/u/sudi_2611)\ **Replies:** 6\ **Last updated:** [September 13, 2017, 2:21pm UTC](https://discuss.elastic.co/t/will-kibana-work-if-i-am-trying-to-index-a-file-of-6-5-gb-having-3-million-records/100065 "2017-09-13T14:21:30Z")
Hi Team, Will kibana work if i am trying to index a file of 6.5 GB having 3 million records. When i try to query the data i get 3000ms request timed out error and application status goes down having status as red --- ## [Monitoring Kibana, Elasticsearch via APM](https://discuss.elastic.co/t/monitoring-kibana-elasticsearch-via-apm/359550)
**Author:** [@adis3421](https://discuss.elastic.co/u/adis3421)\ **Replies:** 2\ **Last updated:** [May 24, 2024, 2:12pm UTC](https://discuss.elastic.co/t/monitoring-kibana-elasticsearch-via-apm/359550 "2024-05-24T14:12:59Z")
Hi, I installed APM with Fleet integration and chail, used it to monitor elastica and kibane, I followed this article How to activate APM in Kibana and Elasticsearch to gain next-level alerting insights | Elastic Blog u… --- ## [Search: minimum\_should\_match: 100% not working when single term expands two more terms](https://discuss.elastic.co/t/search-minimum-should-match-100-not-working-when-single-term-expands-two-more-terms/358119)
**Author:** [@spinscale](https://discuss.elastic.co/u/spinscale)\ **Replies:** 2\ **Last updated:** [April 30, 2024, 8:55am UTC](https://discuss.elastic.co/t/search-minimum-should-match-100-not-working-when-single-term-expands-two-more-terms/358119 "2024-04-30T08:55:41Z")
Hey, I found an interesting behaviour for an OR based query that has minimum\_should\_match: 100% set. Naively I thought that this means, it behaves the same as an AND, but it does not. Example: DELETE test PUT test {… --- ## [Ruby filter to pack string value into object](https://discuss.elastic.co/t/ruby-filter-to-pack-string-value-into-object/346854)
**Author:** [@rcz](https://discuss.elastic.co/u/rcz)\ **Replies:** 7\ **Last updated:** [November 10, 2023, 2:17pm UTC](https://discuss.elastic.co/t/ruby-filter-to-pack-string-value-into-object/346854 "2023-11-10T14:17:09Z")
I have a client that sends HTTP request events with a nested structure, like: context.response.body context.response.code context.response.headers.Content-Length context.response.headers.Content-Type etc.. But sometime… --- ## [Trying to get Jenkins Open Telemetry plugin data into APM, 404 error](https://discuss.elastic.co/t/trying-to-get-jenkins-open-telemetry-plugin-data-into-apm-404-error/324027)
**Author:** [@trudesea](https://discuss.elastic.co/u/trudesea)\ **Replies:** 1\ **Last updated:** [January 26, 2023, 3:38pm UTC](https://discuss.elastic.co/t/trying-to-get-jenkins-open-telemetry-plugin-data-into-apm-404-error/324027 "2023-01-26T15:38:39Z")
Hi, I'm getting this error from my GCP Cloud Armor logs: https://xxx-apm.xxx.com/opentelemetry.proto.collector.trace.v1.TraceService/Export I see this in the Jenkins logs: OpenTelemetry SDK initialized: SDK \[config: … --- ## [Why contexts?](https://discuss.elastic.co/t/why-contexts/302957)
**Author:** [@aleding](https://discuss.elastic.co/u/aleding)\ **Replies:** 7\ **Last updated:** [April 21, 2022, 8:32pm UTC](https://discuss.elastic.co/t/why-contexts/302957 "2022-04-21T20:32:42Z")
In debugging a Filebeat module, I have had to dig into Painless scripts & contexts which has led to several questions: Why contexts? Can the same data not be accessed via \_doc? (I've also seen this asked in other … --- ## [Search/match multiple fields in Elasticsearch](https://discuss.elastic.co/t/search-match-multiple-fields-in-elasticsearch/279448)
**Author:** [@noetic](https://discuss.elastic.co/u/noetic)\ **Replies:** 1\ **Last updated:** [July 26, 2021, 7:32am UTC](https://discuss.elastic.co/t/search-match-multiple-fields-in-elasticsearch/279448 "2021-07-26T07:32:10Z")
I'm trying to build a query in Elasticsearch with PHP combining an exact match and search by keywords/text. I'm using the should for an exact match, and for text, I'm using the term match. My query is: $params = \[ '… --- ## [Sorting nested documents with inner\_hits not returning desired results. ES7.x](https://discuss.elastic.co/t/sorting-nested-documents-with-inner-hits-not-returning-desired-results-es7-x/232762)
**Author:** [@hkhan](https://discuss.elastic.co/u/hkhan)\ **Replies:** 1\ **Last updated:** [May 15, 2020, 2:28pm UTC](https://discuss.elastic.co/t/sorting-nested-documents-with-inner-hits-not-returning-desired-results-es7-x/232762 "2020-05-15T14:28:16Z")
Hi, I am trying to implement a proof of concept for using Elasticsearch in our application. I am, however, stuck at sorting the nested documents with nested field and will greatly appreciate help in finding answer to my … --- ## [App-Search failed to connect to Elasticsearch backup](https://discuss.elastic.co/t/app-search-failed-to-connect-to-elasticsearch-backup/222716)
**Author:** [@Austin\_Lai](https://discuss.elastic.co/u/Austin_Lai)\ **Replies:** 1\ **Last updated:** [March 27, 2020, 2:40pm UTC](https://discuss.elastic.co/t/app-search-failed-to-connect-to-elasticsearch-backup/222716 "2020-03-27T14:40:07Z")
Hi anyone solved or encounter issue with app-search? \[2020-03-09T13:31:14.528+00:00\]\[14\]\[2002\]\[app-server\]\[INFO\]: Failed to connect to Elasticsearch backend. Make sure it is running. app-search7.6.1: image: docker… --- ## [Watcher: How to use Mustache-Syntax/dynamic values from aggregations in chain-input](https://discuss.elastic.co/t/watcher-how-to-use-mustache-syntax-dynamic-values-from-aggregations-in-chain-input/218613)
**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 1:30pm UTC](https://discuss.elastic.co/t/watcher-how-to-use-mustache-syntax-dynamic-values-from-aggregations-in-chain-input/218613 "2020-02-12T13:30:40Z")
Hey there, in my filebeat-indices I have documents that contain an ip-address field 'destination\_ip' and other documents that contain the same ip-field as well as the corresponding uri of that ip-address. Documents with… --- ## [K8S metadata is missing](https://discuss.elastic.co/t/k8s-metadata-is-missing/198647)
**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\ **Replies:** 1\ **Last updated:** [September 9, 2019, 3:59pm UTC](https://discuss.elastic.co/t/k8s-metadata-is-missing/198647 "2019-09-09T15:59:11Z")
Hi there! I'm using ELK 7.3.1 And when Filebeat collects logs from Kubernetes, I don't see any Kubernetes metadata (namespace is missing, container, name and etc.). What am I doing wrong here? Attaching screen of appe… --- ## [CPU usage does not match the CPU usage in Task Manager](https://discuss.elastic.co/t/cpu-usage-does-not-match-the-cpu-usage-in-task-manager/163776)
**Author:** [@zaeemshah](https://discuss.elastic.co/u/zaeemshah)\ **Replies:** 1\ **Last updated:** [January 11, 2019, 5:37pm UTC](https://discuss.elastic.co/t/cpu-usage-does-not-match-the-cpu-usage-in-task-manager/163776 "2019-01-11T17:37:47Z")
Hi, I have just downloaded metricbeat and have successfully shipped the stats over to a third party elk saas provider. I have purposely spiked my CPU using Cpustress tool and it is remaining constantly above 85%-100% r… --- ## [Search as like in elaticsearch with vietnamese](https://discuss.elastic.co/t/search-as-like-in-elaticsearch-with-vietnamese/146293)
**Author:** [@PhamVanTruong](https://discuss.elastic.co/u/PhamVanTruong)\ **Replies:** 1\ **Last updated:** [August 28, 2018, 9:47am UTC](https://discuss.elastic.co/t/search-as-like-in-elaticsearch-with-vietnamese/146293 "2018-08-28T09:47:21Z")
I use package elaticsearch in laravel framework: I has task search name customer when i enter name into input search. I want search as like in elacticsearch. I want typing "an" will return "Tân", "Ánh","Bằng",.. th… --- ## [Another custom log parsing](https://discuss.elastic.co/t/another-custom-log-parsing/131054)
**Author:** [@kondakov](https://discuss.elastic.co/u/kondakov)\ **Replies:** 7\ **Last updated:** [May 10, 2018, 5:23pm UTC](https://discuss.elastic.co/t/another-custom-log-parsing/131054 "2018-05-10T17:23:08Z")
I have slightly modified Apache log - LogFormat "%h %l %u %t %{Host}i "%r" %\>s %b "%{Referer}i" "%{User-Agent}i" "%{nsdr}C"" combined LogFormat "%h %l %u %t "%r" "%{Cookie}i" %\>s %b" common LogFormat "%{Referer}i -\> %… --- ## [User-password in kibana.yml encrypted form](https://discuss.elastic.co/t/user-password-in-kibana-yml-encrypted-form/116896)
**Author:** [@umapada](https://discuss.elastic.co/u/umapada)\ **Replies:** 1\ **Last updated:** [January 24, 2018, 6:33pm UTC](https://discuss.elastic.co/t/user-password-in-kibana-yml-encrypted-form/116896 "2018-01-24T18:33:33Z")
Can we keep elastic user/password in kibana.yml in encrypted form. We can't keep this in plain text form, which violates our policies. --- ## [Life without mapping types (6.0)](https://discuss.elastic.co/t/life-without-mapping-types-6-0/109858)
**Author:** [@Malik\_Rumi](https://discuss.elastic.co/u/Malik_Rumi)\ **Replies:** 1\ **Last updated:** [December 1, 2017, 6:33pm UTC](https://discuss.elastic.co/t/life-without-mapping-types-6-0/109858 "2017-12-01T18:33:00Z")
I am trying to wrap my brain around the removal of mapping types in 6.0. Removal of mapping types | Elasticsearch Guide \[8.11\] | Elastic It seems that join and parent-child are almost completely analogous to the one to… --- ## [What time zone does "now" assume in Date math?](https://discuss.elastic.co/t/what-time-zone-does-now-assume-in-date-math/98733)
**Author:** [@Omar\_Verduzco](https://discuss.elastic.co/u/Omar_Verduzco)\ **Replies:** 1\ **Last updated:** [August 29, 2017, 6:40pm UTC](https://discuss.elastic.co/t/what-time-zone-does-now-assume-in-date-math/98733 "2017-08-29T18:40:33Z")
I’m trying to find out a way to search for documents before the current date. I found a solution using the following in the query: { range: { last\_published\_date: { lte: 'now/m' } } } but I’m wonderin… --- ## [Consistency level](https://discuss.elastic.co/t/consistency-level/89827)
**Author:** [@Alex\_Davidovich](https://discuss.elastic.co/u/Alex_Davidovich)\ **Replies:** 1\ **Last updated:** [June 18, 2017, 2:22pm UTC](https://discuss.elastic.co/t/consistency-level/89827 "2017-06-18T14:22:31Z")
From what I understand, when indexing a document in a replicated index, the action returns success only after getting ack from the replicas. I have an index with 1 shard and 2 replicas. Each indexing operation is returne… --- ## [Logstash included grok patterns dir?](https://discuss.elastic.co/t/logstash-included-grok-patterns-dir/50024)
**Author:** [@vchav73](https://discuss.elastic.co/u/vchav73)\ **Replies:** 1\ **Last updated:** [May 14, 2016, 8:37am UTC](https://discuss.elastic.co/t/logstash-included-grok-patterns-dir/50024 "2016-05-14T08:37:21Z")
I'm running logstash 2.3 on a CentOS 6 installation. I used the Elasticsearch yum repo to install logstash. My question is where in Linux are the included grok pattern files stored? I looked in /opt/logstash but couldn… --- ## [Node Local Storage and Gateway Storage](https://discuss.elastic.co/t/node-local-storage-and-gateway-storage/6425)
**Author:** [@Mihir\_Patel](https://discuss.elastic.co/u/Mihir_Patel)\ **Replies:** 1\ **Last updated:** [January 18, 2012, 9:18pm UTC](https://discuss.elastic.co/t/node-local-storage-and-gateway-storage/6425 "2012-01-18T21:18:45Z")
Hello everyone, I am not sure if this question has been asked before but wanted to get fresh answer if anything has changed recently. I am exploring options for search application with large index (few TB). We wo… --- ## [Docker Connection refused with elasticsearch](https://discuss.elastic.co/t/docker-connection-refused-with-elasticsearch/185812)
**Author:** [@crobix](https://discuss.elastic.co/u/crobix)\ **Replies:** 0\ **Last updated:** [June 14, 2019, 9:02am UTC](https://discuss.elastic.co/t/docker-connection-refused-with-elasticsearch/185812 "2019-06-14T09:02:56Z")
Hello, I got an issue while i try to connect logstash with elasticsearch and i can't solve it \[2019-06-14T08:49:25,833\]\[WARN \]\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance, but… --- ## [How to use environment variable in pipelines.yml? (Windows)](https://discuss.elastic.co/t/how-to-use-environment-variable-in-pipelines-yml-windows/151704)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 0\ **Last updated:** [October 9, 2018, 8:07pm UTC](https://discuss.elastic.co/t/how-to-use-environment-variable-in-pipelines-yml-windows/151704 "2018-10-09T20:07:37Z")
Hi, as dev environment for the elastic stack I am using my laptop which runs windows. Since I have different paths and different operating systems on my laptop and on the live systems, I would like to use environment v… --- ## [How do you multiply two query's relevance scores in Elasticsearch?](https://discuss.elastic.co/t/how-do-you-multiply-two-querys-relevance-scores-in-elasticsearch/26680)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 0\ **Last updated:** [August 1, 2015, 4:33pm UTC](https://discuss.elastic.co/t/how-do-you-multiply-two-querys-relevance-scores-in-elasticsearch/26680 "2015-08-01T16:33:14Z")
Related to this Stackoverflow Question. Elasticsearch has a pretty powerful and intuitive Query DSL. However, I've think I've hit a functionality wall in one respect. In Solr, you can run arbitrary queries in function … --- ## [Geoip pipeline setting for Netflow (Map on Geo Location Dashboard)](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454)
**Author:** [@IMagalashvili](https://discuss.elastic.co/u/IMagalashvili)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 2:30pm UTC](https://discuss.elastic.co/t/geoip-pipeline-setting-for-netflow-map-on-geo-location-dashboard/304454 "2022-05-11T14:30:46Z")
Hi, we had added Netflow module to analyze traffic with Filebeat netflow module. Everything works but cant activate Map settings. As i found, we have to add new pipeline ( "geoip-info", for example) ad add "final\_pipel… --- ## [Read XEL file and send to elasticsearch](https://discuss.elastic.co/t/read-xel-file-and-send-to-elasticsearch/288109)
**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\ **Replies:** 4\ **Last updated:** [November 1, 2021, 9:12am UTC](https://discuss.elastic.co/t/read-xel-file-and-send-to-elasticsearch/288109 "2021-11-01T09:12:14Z")
Hi all, I have some xel files which are a SQL server output. Is there any way to read these files and index them in Elasticsearch. Can beats or logstash read these files? Any help will be so appreciated. Regards --- ## [Logstash parse object](https://discuss.elastic.co/t/logstash-parse-object/259513)
**Author:** [@bbwolf](https://discuss.elastic.co/u/bbwolf)\ **Replies:** 4\ **Last updated:** [December 23, 2020, 6:13pm UTC](https://discuss.elastic.co/t/logstash-parse-object/259513 "2020-12-23T18:13:52Z")
Hello, I have in a field which I need to split thé next values FieldA : "\[{" FieldA1" :"A", "FieldA2" :"B"}{"FieldA1" :"C", "FieldA2" :"D"\]}" I wan't to split FieldA as two documents {" FieldA1" :"A", "FieldA2" :"B"}… --- ## [Data export](https://discuss.elastic.co/t/data-export/173924)
**Author:** [@Claire\_Farrell](https://discuss.elastic.co/u/Claire_Farrell)\ **Replies:** 4\ **Last updated:** [March 26, 2019, 4:27pm UTC](https://discuss.elastic.co/t/data-export/173924 "2019-03-26T16:27:38Z")
Hi, I'm looking to dump all my json docs to an s3 bucket in raw json format from kibana as part of a json script. I've read that a snapshot doesn't allow you to manipulate the json for other purposes. Thanks, Claire --- ## [Enrichment with recent logs](https://discuss.elastic.co/t/enrichment-with-recent-logs/173410)
**Author:** [@farsonic](https://discuss.elastic.co/u/farsonic)\ **Replies:** 4\ **Last updated:** [March 23, 2019, 6:09am UTC](https://discuss.elastic.co/t/enrichment-with-recent-logs/173410 "2019-03-23T06:09:40Z")
Hello, I have a logstash server receiving security events from BRO and also from a firewall. Upon ingest I've created a new log field that merges source-ip, source-port, dest-ip and dest-port into a single field called … --- ## [GC leader to timeout pings](https://discuss.elastic.co/t/gc-leader-to-timeout-pings/143159)
**Author:** [@LinPower](https://discuss.elastic.co/u/LinPower)\ **Replies:** 4\ **Last updated:** [August 8, 2018, 4:14am UTC](https://discuss.elastic.co/t/gc-leader-to-timeout-pings/143159 "2018-08-08T04:14:45Z")
\[2018-08-06T16:26:24,830\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[...\] \[gc\]\[866954\] overhead, spent \[292ms\] collecting in the last \[1s\] \[2018-08-06T16:26:27,831\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[...\] \[gc\]\[866957\] overhe… --- ## [Remove Value in Logstash](https://discuss.elastic.co/t/remove-value-in-logstash/119169)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 4\ **Last updated:** [February 9, 2018, 10:29am UTC](https://discuss.elastic.co/t/remove-value-in-logstash/119169 "2018-02-09T10:29:54Z")
Hello Everyone, I need to remove fields value because its duplicate i have following configuration file and output Symantec.conf input { stdin{} } filter { csv { separator =\> "," columns =\> \["Event Time", "Se… --- ## [Question about query](https://discuss.elastic.co/t/question-about-query/105355)
**Author:** [@Javier](https://discuss.elastic.co/u/Javier)\ **Replies:** 4\ **Last updated:** [October 31, 2017, 11:46am UTC](https://discuss.elastic.co/t/question-about-query/105355 "2017-10-31T11:46:41Z")
Hello. I have a problem with a query. I´m trying to add several fields and only one of them is permit. QUERY='{"query":{"bool":{"must":\[{"range":{"@timestamp":{"gte":"now-'$RELATIVE\_START\_TIME\_TO\_SEARCH'/d","lt":"now/d… --- ## [Can i use NEST version 2.X as a client if the Elastic Search is still 1.x version](https://discuss.elastic.co/t/can-i-use-nest-version-2-x-as-a-client-if-the-elastic-search-is-still-1-x-version/58285)
**Author:** [@aadil79](https://discuss.elastic.co/u/aadil79)\ **Replies:** 4\ **Last updated:** [August 24, 2016, 12:27pm UTC](https://discuss.elastic.co/t/can-i-use-nest-version-2-x-as-a-client-if-the-elastic-search-is-still-1-x-version/58285 "2016-08-24T12:27:07Z")
Can i use NEST version 2.X as a client if the Elastic Search is still 1.X version ? --- ## [SQL Server JDBC on Linux box](https://discuss.elastic.co/t/sql-server-jdbc-on-linux-box/17322)
**Author:** [@anthony\_2](https://discuss.elastic.co/u/anthony_2)\ **Replies:** 4\ **Last updated:** [May 6, 2014, 7:41pm UTC](https://discuss.elastic.co/t/sql-server-jdbc-on-linux-box/17322 "2014-05-06T19:41:31Z")
Hello - I am trying to get ElasticSearch run on Linux. I got it running on Windows, where I have some competence, but on Linux I am really struggling. It is actually running on the Linux box, but no matter what I do … --- ## [Никак не могу отправить данные в elastic](https://discuss.elastic.co/t/elastic/267835)
**Author:** [@Oleksandr\_Stelmakh](https://discuss.elastic.co/u/Oleksandr_Stelmakh)\ **Replies:** 2\ **Last updated:** [March 22, 2021, 5:00pm UTC](https://discuss.elastic.co/t/elastic/267835 "2021-03-22T17:00:19Z")
Привет, я новенький и пытаюсь разобраться, мне нужно отправить данные, но выбивает ошибка и я не понимаю что не так, возможно кто-то может помочь \`\`\` from elasticsearch import Elasticsearch, RequestsHttpConnection,Urll… --- ## [Add CIDR IP range in Timelion](https://discuss.elastic.co/t/add-cidr-ip-range-in-timelion/253247)
**Author:** [@savethebyte](https://discuss.elastic.co/u/savethebyte)\ **Replies:** 2\ **Last updated:** [November 2, 2020, 8:53pm UTC](https://discuss.elastic.co/t/add-cidr-ip-range-in-timelion/253247 "2020-11-02T20:53:27Z")
Is there a way to do a search for an IP range in a Timelion? I need to search a larger amount of time but only with a specific set of IPs. I need to do something like this: .es(index="filebeat-\*", metric="sum:network.b… --- ## [Has anyone tried creating a dashboard library site where we can share dashboards?](https://discuss.elastic.co/t/has-anyone-tried-creating-a-dashboard-library-site-where-we-can-share-dashboards/230422)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 2\ **Last updated:** [April 30, 2020, 6:29pm UTC](https://discuss.elastic.co/t/has-anyone-tried-creating-a-dashboard-library-site-where-we-can-share-dashboards/230422 "2020-04-30T18:29:22Z")
I'm in the middle of evaluating different monitoring tools. As part of that, I've been using both Kibana and Grafana. One of the best features about Grafana is how easy it is to share dashboards. Just give your instance… --- ## [Two filebeat service on same window server](https://discuss.elastic.co/t/two-filebeat-service-on-same-window-server/197923)
**Author:** [@deemanu](https://discuss.elastic.co/u/deemanu)\ **Replies:** 2\ **Last updated:** [September 4, 2019, 3:00pm UTC](https://discuss.elastic.co/t/two-filebeat-service-on-same-window-server/197923 "2019-09-04T15:00:47Z")
Hello All , Could you please help me to know how to run to two filebeat services ( instances) on same windows server ? i have two instances -one is running as a service but when i try to run another it is stopping othe… --- ## [Export the result of an SQL query](https://discuss.elastic.co/t/export-the-result-of-an-sql-query/163591)
**Author:** [@GregoryB-T](https://discuss.elastic.co/u/GregoryB-T)\ **Replies:** 2\ **Last updated:** [January 10, 2019, 9:37am UTC](https://discuss.elastic.co/t/export-the-result-of-an-sql-query/163591 "2019-01-10T09:37:07Z")
Hi , It is possible to export the result of a SQL query made in the dev tool in a visualization or a file Thanks and Regards --- ## [ELastic Stack as AIOps product](https://discuss.elastic.co/t/elastic-stack-as-aiops-product/156287)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [November 27, 2018, 1:47pm UTC](https://discuss.elastic.co/t/elastic-stack-as-aiops-product/156287 "2018-11-27T13:47:34Z")
Looking for any documentation/blog which features Elastic Stack as a AIOps product. --- ## [Does auditbeat require logstash?](https://discuss.elastic.co/t/does-auditbeat-require-logstash/142946)
**Author:** [@Guillaume\_Bettayeb](https://discuss.elastic.co/u/Guillaume_Bettayeb)\ **Replies:** 2\ **Last updated:** [August 7, 2018, 9:18am UTC](https://discuss.elastic.co/t/does-auditbeat-require-logstash/142946 "2018-08-07T09:18:43Z")
Hi everyone, Not sure what I am doing wrong here, but it seems to me that auditbeat is correctly configured although it does not send anything to ElasticSearch. Here's my auditbeat logs: 2018/08/03 16:12:45.328929 bea… --- ## [Filebeat harvesting to logstash is not fast enough](https://discuss.elastic.co/t/filebeat-harvesting-to-logstash-is-not-fast-enough/130388)
**Author:** [@Tomer\_Lev1](https://discuss.elastic.co/u/Tomer_Lev1)\ **Replies:** 2\ **Last updated:** [May 6, 2018, 8:46am UTC](https://discuss.elastic.co/t/filebeat-harvesting-to-logstash-is-not-fast-enough/130388 "2018-05-06T08:46:53Z")
Hi All, when harvesting logs from my machines to logstash using filebeat I noticed logs are not delivered fast enough, especially when using TRACE logs and adding more machine (filebeats). My stack is something like ~40… --- ## [Exclude messages with Strings](https://discuss.elastic.co/t/exclude-messages-with-strings/111668)
**Author:** [@thinkdffrnt](https://discuss.elastic.co/u/thinkdffrnt)\ **Replies:** 2\ **Last updated:** [December 14, 2017, 12:06pm UTC](https://discuss.elastic.co/t/exclude-messages-with-strings/111668 "2017-12-14T12:06:10Z")
Hello, I'm using Filebeat version 1.3 I want to ignore all LOG messages with Strings 'test' 'Test' Does 1.3 support drop\_event? If so, the below (sample)configuration doesn't work. processors: drop\_event: when: re… --- ## [Elasticsearch Service suddenly not working in Ubuntu](https://discuss.elastic.co/t/elasticsearch-service-suddenly-not-working-in-ubuntu/97856)
**Author:** [@TheCthulhuKid](https://discuss.elastic.co/u/TheCthulhuKid)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 8:03am UTC](https://discuss.elastic.co/t/elasticsearch-service-suddenly-not-working-in-ubuntu/97856 "2017-08-22T08:03:55Z")
When I left the office yesterday I was using ES (5.5.2) with no problem on my Ubuntu 16.10 VM as I have been for the last couple of months. This morning I start up the VM and try to access the cluster and get an exceptio… --- ## [How can I alias column names in a sql query while loading data through logstash?](https://discuss.elastic.co/t/how-can-i-alias-column-names-in-a-sql-query-while-loading-data-through-logstash/95291)
**Author:** [@patil-akshay](https://discuss.elastic.co/u/patil-akshay)\ **Replies:** 2\ **Last updated:** [August 2, 2017, 6:33pm UTC](https://discuss.elastic.co/t/how-can-i-alias-column-names-in-a-sql-query-while-loading-data-through-logstash/95291 "2017-08-02T18:33:16Z")
I want to change some column name while loading the data through logstash --- ## [Two-level sort](https://discuss.elastic.co/t/two-level-sort/38197)
**Author:** [@bbach](https://discuss.elastic.co/u/bbach)\ **Replies:** 2\ **Last updated:** [December 31, 2015, 2:32pm UTC](https://discuss.elastic.co/t/two-level-sort/38197 "2015-12-31T14:32:52Z")
I'm trying to overcome the issue that logstash/elasticsearch will not store dates with microsecond resolution. In logstash, I've parsed the micosecond part of my timestamp and put it in a separate field (log\_usec). In k… --- ## [GET API for custom field?](https://discuss.elastic.co/t/get-api-for-custom-field/26856)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [August 5, 2015, 8:49am UTC](https://discuss.elastic.co/t/get-api-for-custom-field/26856 "2015-08-05T08:49:55Z")
Hi, We have GET API which can be used to fetch data on specific {index}/{type}{id}, which works fine. I have xml data which is accepted through http input in logstash shipper. There is one field externalid in xml which… --- ## [Can we have separate filter for separate panel in Dashboard](https://discuss.elastic.co/t/can-we-have-separate-filter-for-separate-panel-in-dashboard/26440)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 2\ **Last updated:** [July 29, 2015, 4:08am UTC](https://discuss.elastic.co/t/can-we-have-separate-filter-for-separate-panel-in-dashboard/26440 "2015-07-29T04:08:55Z")
Hi Experts , Is it possible that we can apply separate filter on dashboard panel . What I can see is while clicking on object/row or any pie chart it will immediately add a global filter which affects the overall dashb… --- ## [Update api, empty object update results in array](https://discuss.elastic.co/t/update-api-empty-object-update-results-in-array/10153)
**Author:** [@michalj](https://discuss.elastic.co/u/michalj)\ **Replies:** 2\ **Last updated:** [December 21, 2012, 2:07pm UTC](https://discuss.elastic.co/t/update-api-empty-object-update-results-in-array/10153 "2012-12-21T14:07:59Z")
Hi. I'm facing some wierd problem with update api. I have a document with object type inside. for example: { "a":"a", "b": {"c", "c"} } Now I want to update b entry with "{}" (clear object) I would expe… --- ## [Write data event to azure blob storage from logstash conf file](https://discuss.elastic.co/t/write-data-event-to-azure-blob-storage-from-logstash-conf-file/237074)
**Author:** [@Pankaj\_Jadhav](https://discuss.elastic.co/u/Pankaj_Jadhav)\ **Replies:** 0\ **Last updated:** [June 15, 2020, 6:40am UTC](https://discuss.elastic.co/t/write-data-event-to-azure-blob-storage-from-logstash-conf-file/237074 "2020-06-15T06:40:06Z")
Hi, can someone will help me for writing data in azure blob storage from logstash. When I will get any exception inside tags on condition basis needs to send that data inside azure blob storage [Previous page](https://discuss.elastic.co/top.md?page=1642&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1644&per_page=50&period=all)