# Top **URL:** https://discuss.elastic.co/top.md?page=1650&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1651 --- ## [\[Integration\] Facing error while adding transform in integration package](https://discuss.elastic.co/t/integration-facing-error-while-adding-transform-in-integration-package/320746)
**Author:** [@Alex\_R](https://discuss.elastic.co/u/Alex_R)\ **Replies:** 4\ **Last updated:** [December 21, 2022, 5:05am UTC](https://discuss.elastic.co/t/integration-facing-error-while-adding-transform-in-integration-package/320746 "2022-12-21T05:05:02Z")
I have referred elastic-package spec to ship transform along with integration package. However, I am not able to install integration package when added transform under /root/integrations/packages/my\_package/elasticsearch… --- ## [Parse Mcafee audit log file with Logstash](https://discuss.elastic.co/t/parse-mcafee-audit-log-file-with-logstash/302946)
**Author:** [@Xor44](https://discuss.elastic.co/u/Xor44)\ **Replies:** 4\ **Last updated:** [April 27, 2022, 12:46pm UTC](https://discuss.elastic.co/t/parse-mcafee-audit-log-file-with-logstash/302946 "2022-04-27T12:46:59Z")
Hi Folks , I need your help to find a right way to parse this non-structured file \_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_ Timestamp : 19/Apr/2022:05:50:02.771 +0200 User … --- ## [How to replace ' to " with gsub](https://discuss.elastic.co/t/how-to-replace-to-with-gsub/226612)
**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\ **Replies:** 4\ **Last updated:** [April 6, 2020, 9:11am UTC](https://discuss.elastic.co/t/how-to-replace-to-with-gsub/226612 "2020-04-06T09:11:28Z")
Hi all How can i use gsub to replace ' to become ", i need it to parse json data. So some how json can only parse data field with "" and not '' so i need to replace ' to ". Can anyone help me Thanks in advance --- ## [How can I set X-axis time domain with 24hours?](https://discuss.elastic.co/t/how-can-i-set-x-axis-time-domain-with-24hours/221383)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 4\ **Last updated:** [February 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/how-can-i-set-x-axis-time-domain-with-24hours/221383 "2020-02-28T12:40:21Z")
I want to make my vega-light graph x-axis starts from 0:00 to 24:00 below. I was trying to add a code like this, but it doesn't work successfully. Is there any tips? "x": { . . . "scale":{ … --- ## [Kibana stops displaying data at 12:00 AM every morning](https://discuss.elastic.co/t/kibana-stops-displaying-data-at-12-00-am-every-morning/172995)
**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\ **Replies:** 4\ **Last updated:** [March 22, 2019, 8:30pm UTC](https://discuss.elastic.co/t/kibana-stops-displaying-data-at-12-00-am-every-morning/172995 "2019-03-22T20:30:26Z")
Ever since we upgraded our production environment to R6.6.1 Kibana stops presenting data at 12:00 AM every morning and restarting the Kibana service doesn't resolve the issue. Documents are still being indexed into Elast… --- ## [Error while setting up elasticsearch](https://discuss.elastic.co/t/error-while-setting-up-elasticsearch/111585)
**Author:** [@ArunaMaurya221B](https://discuss.elastic.co/u/ArunaMaurya221B)\ **Replies:** 4\ **Last updated:** [December 14, 2017, 3:02am UTC](https://discuss.elastic.co/t/error-while-setting-up-elasticsearch/111585 "2017-12-14T03:02:58Z")
This is the message that I get when I run it in the terminal. Can anyone help me out? $ sudo systemctl status elasticsearch sudo: unable to resolve host u4cse16113 ● elasticsearch.service - Elasticsearch Loaded: load… --- ## [Boolean Exact Query](https://discuss.elastic.co/t/boolean-exact-query/99726)
**Author:** [@trabs](https://discuss.elastic.co/u/trabs)\ **Replies:** 4\ **Last updated:** [September 10, 2017, 10:54am UTC](https://discuss.elastic.co/t/boolean-exact-query/99726 "2017-09-10T10:54:06Z")
Hi, I am currently not understanding why a specific query won’t work. This is what is being sent to elasticsearch: { "query": { "constant\_score": { "filter": { … --- ## [What is the best way to index of documents when aggregating logs?](https://discuss.elastic.co/t/what-is-the-best-way-to-index-of-documents-when-aggregating-logs/97668)
**Author:** [@zacscoding](https://discuss.elastic.co/u/zacscoding)\ **Replies:** 4\ **Last updated:** [August 22, 2017, 1:09am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-index-of-documents-when-aggregating-logs/97668 "2017-08-22T01:09:38Z")
I want to use on elasticsearch for saving access log datas from WEB APP or Database Web app logs and Database logs have difference fields respectively. for example, was-access log : “url” : xxx, “session-id” : xxx, … --- ## [Elasticsearch\_mapping\_conflict](https://discuss.elastic.co/t/elasticsearch-mapping-conflict/89192)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 4\ **Last updated:** [June 21, 2017, 12:51pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-conflict/89192 "2017-06-21T12:51:49Z")
Hi All, I was changing one the fields in the index I want this field "HOST\_START" as type date instead of string, so i updated the template today but i get a conflict ,which I know since the field as two values.How … --- ## [Curator Rollover ignores max\_docs condition](https://discuss.elastic.co/t/curator-rollover-ignores-max-docs-condition/85229)
**Author:** [@pbmsys](https://discuss.elastic.co/u/pbmsys)\ **Replies:** 4\ **Last updated:** [May 10, 2017, 12:54pm UTC](https://discuss.elastic.co/t/curator-rollover-ignores-max-docs-condition/85229 "2017-05-10T12:54:06Z")
Hi. I have setup a curator job to rollover my index every 2.000.000 docs. But curator keeps making the rollover every 1.000.000 docs. My action file: actions: 1: action: rollover description: "Rollover th… --- ## [Sporadic index corruption... Fielddata is disabled on text fields by default](https://discuss.elastic.co/t/sporadic-index-corruption-fielddata-is-disabled-on-text-fields-by-default/76679)
**Author:** [@jasona](https://discuss.elastic.co/u/jasona)\ **Replies:** 4\ **Last updated:** [March 1, 2017, 3:12am UTC](https://discuss.elastic.co/t/sporadic-index-corruption-fielddata-is-disabled-on-text-fields-by-default/76679 "2017-03-01T03:12:59Z")
After the aws hardware failure, we've been encountering a new error that we've never seen before on our elastic.co cloud cluster. Reference: https://discuss.elastic.co/t/problem-cluster-is-under-maintenance-recovery-for… --- ## [Hosting and securing ElasticSearch](https://discuss.elastic.co/t/hosting-and-securing-elasticsearch/3852)
**Author:** [@Administrator\_2](https://discuss.elastic.co/u/Administrator_2)\ **Replies:** 4\ **Last updated:** [January 31, 2011, 9:59pm UTC](https://discuss.elastic.co/t/hosting-and-securing-elasticsearch/3852 "2011-01-31T21:59:43Z")
I've been looking at ElasticSearch and I'm a huge fan of what I'm seeing so far. I'm currently using Lucene.NET on my site (sf4answers.com) to perform searching, but I feel that I'd rather not have to deal with a lot… --- ## [Increase Maximum Number of Shards per node in ECK (Elastic Cloud for Kubernetes)](https://discuss.elastic.co/t/increase-maximum-number-of-shards-per-node-in-eck-elastic-cloud-for-kubernetes/316719)
**Author:** [@pschlesi](https://discuss.elastic.co/u/pschlesi)\ **Replies:** 1\ **Last updated:** [October 17, 2022, 3:31am UTC](https://discuss.elastic.co/t/increase-maximum-number-of-shards-per-node-in-eck-elastic-cloud-for-kubernetes/316719 "2022-10-17T03:31:22Z")
Hi, We are running ECK in our on-prem Kubernetes Cluster and we have quite a large number of pretty small indexes. We recently hit the limit of 1000 shards per node after which Elasticsearch began silently dropping new … --- ## [How to rename dynamical fields](https://discuss.elastic.co/t/how-to-rename-dynamical-fields/207245)
**Author:** [@ja123](https://discuss.elastic.co/u/ja123)\ **Replies:** 1\ **Last updated:** [November 10, 2019, 4:03pm UTC](https://discuss.elastic.co/t/how-to-rename-dynamical-fields/207245 "2019-11-10T16:03:29Z")
I have got the following filterd xml and I would like to rename the field fpDate for every single element, but I don't know how to interate through the \[parsed\]\[Journey\]. The size of the \[Journey\] array is always 20 elem… --- ## [All shards failed for phase: \[query\] - messages after upgrade](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-messages-after-upgrade/142900)
**Author:** [@Pimpek](https://discuss.elastic.co/u/Pimpek)\ **Replies:** 1\ **Last updated:** [August 3, 2018, 12:46pm UTC](https://discuss.elastic.co/t/all-shards-failed-for-phase-query-messages-after-upgrade/142900 "2018-08-03T12:46:29Z")
Hi, I recently upgraded elasticsearch from 5.6.10 to 6.3.2 (on centos6). It's a single testing instance so no replication is configured yet. I dump telegraf metrics from various hosts in here. Now after the upgrade whe… --- ## [How to collect more than 22 event ids with winlogbeat?](https://discuss.elastic.co/t/how-to-collect-more-than-22-event-ids-with-winlogbeat/124274)
**Author:** [@FanteG](https://discuss.elastic.co/u/FanteG)\ **Replies:** 1\ **Last updated:** [March 16, 2018, 2:03pm UTC](https://discuss.elastic.co/t/how-to-collect-more-than-22-event-ids-with-winlogbeat/124274 "2018-03-16T14:03:07Z")
I've got a task to collect over 500 events from DC with winlogbeat. But windows got a limit 22 events to query. I'm using version 6.1.2. I've tried with processors like this: winlogbeat.event\_logs: - name: Security … --- ## [SOLR\_HTTP plugin & https](https://discuss.elastic.co/t/solr-http-plugin-https/90953)
**Author:** [@marjan4jc](https://discuss.elastic.co/u/marjan4jc)\ **Replies:** 1\ **Last updated:** [June 29, 2017, 10:58am UTC](https://discuss.elastic.co/t/solr-http-plugin-https/90953 "2017-06-29T10:58:31Z")
Hi, I'm trying to index data in solr but no luck till now. I'm not even sure if solr\_http logstash plugin is capable of handling a https connection? I've putted https url and I can not see any data on solr side. Every… --- ## [Is there a way to prevent user from deleting saved Searches/Visualizations/Dashboards?](https://discuss.elastic.co/t/is-there-a-way-to-prevent-user-from-deleting-saved-searches-visualizations-dashboards/86257)
**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\ **Replies:** 1\ **Last updated:** [May 19, 2017, 10:00pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-prevent-user-from-deleting-saved-searches-visualizations-dashboards/86257 "2017-05-19T22:00:19Z")
I'm playing with users permissions on ELK5.4 with X-Pack. As far as I see, every user which can use Kibana ("kibana\_user" role) is able to delete any search/visualization/dashboard. I'd like to see two features, 1st is… --- ## [Grok filter does not match message](https://discuss.elastic.co/t/grok-filter-does-not-match-message/78128)
**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\ **Replies:** 1\ **Last updated:** [March 10, 2017, 11:24am UTC](https://discuss.elastic.co/t/grok-filter-does-not-match-message/78128 "2017-03-10T11:24:05Z")
Hi, when importing the following log lines, they are getting into Elasticsearch without being matched by grok: 2017-02-16 00:03:03 202.152.71.0 - www.host.ch GET /content/specialinterest var1=234&var3=876234 200 - - … --- ## [Pie chart - Nested data - Same document - Wrong aggregation](https://discuss.elastic.co/t/pie-chart-nested-data-same-document-wrong-aggregation/53951)
**Author:** [@shade](https://discuss.elastic.co/u/shade)\ **Replies:** 1\ **Last updated:** [June 28, 2016, 6:18am UTC](https://discuss.elastic.co/t/pie-chart-nested-data-same-document-wrong-aggregation/53951 "2016-06-28T06:18:20Z")
i would like to know how to generate a pie chart with the following data: themes\_subjects{ type:nested, properties{ type:nested theme{ type:string }, subject{ type:string } } e… --- ## [Operators in Watcher Input](https://discuss.elastic.co/t/operators-in-watcher-input/44605)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 1\ **Last updated:** [March 17, 2016, 12:31pm UTC](https://discuss.elastic.co/t/operators-in-watcher-input/44605 "2016-03-17T12:31:37Z")
Hi Team, i am trying to configure alert where fs.used\_p \> 60 but it seems "gt" and "gte" conditions is not supported, PFB error. i tested with fs.used\_p = 0, please suggest if we can build such conditions in watcher an… --- ## [How to audit search on an Elasticsearch indexes](https://discuss.elastic.co/t/how-to-audit-search-on-an-elasticsearch-indexes/298754)
**Author:** [@chriselk](https://discuss.elastic.co/u/chriselk)\ **Replies:** 6\ **Last updated:** [March 4, 2022, 10:50am UTC](https://discuss.elastic.co/t/how-to-audit-search-on-an-elasticsearch-indexes/298754 "2022-03-04T10:50:52Z")
We would like to have report on what type of search we have on some Elastic index, I cannot find the search in the servers logs, not sure how we could audit the search request done on an index ? kind of 10 most field /… --- ## [Redis slowlog module + Kubernetes secrets =\> error :/](https://discuss.elastic.co/t/redis-slowlog-module-kubernetes-secrets-error/246827)
**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\ **Replies:** 6\ **Last updated:** [September 4, 2020, 1:32pm UTC](https://discuss.elastic.co/t/redis-slowlog-module-kubernetes-secrets-error/246827 "2020-09-04T13:32:40Z")
Hi thanks for the beautiful elastic stack! I am using Redis slowlog module + k8s secrets but then it fails. EDIT: My guess - maybe the var.password do not understand k8s secrets? (just a naive guess) The yaml # ref: h… --- ## [Migrate from co-location to the cloud without downtime(?)](https://discuss.elastic.co/t/migrate-from-co-location-to-the-cloud-without-downtime/216819)
**Author:** [@jimmie](https://discuss.elastic.co/u/jimmie)\ **Replies:** 6\ **Last updated:** [January 29, 2020, 1:29pm UTC](https://discuss.elastic.co/t/migrate-from-co-location-to-the-cloud-without-downtime/216819 "2020-01-29T13:29:30Z")
We want to move out from co-lo (Sweden), and in to AWS EC2 in USA (i3.2xl) (maintaining it our-self, not the service one) We have a 18 data node setup on co-location. We are running elasticsearch 5.6 We have two replica… --- ## [Setting log time to @timestamp in logstash](https://discuss.elastic.co/t/setting-log-time-to-timestamp-in-logstash/186374)
**Author:** [@Vinutha\_A\_H](https://discuss.elastic.co/u/Vinutha_A_H)\ **Replies:** 6\ **Last updated:** [June 20, 2019, 5:44am UTC](https://discuss.elastic.co/t/setting-log-time-to-timestamp-in-logstash/186374 "2019-06-20T05:44:52Z")
Hi, In our logs, we have our date time as below and trying to set the same to timestamp field in logstash. But it's giving dateparsefailure. Any help in this is useful. Logs : the below data is mapped as DateTime usin… --- ## [Error in string field](https://discuss.elastic.co/t/error-in-string-field/69403)
**Author:** [@madhan](https://discuss.elastic.co/u/madhan)\ **Replies:** 6\ **Last updated:** [December 19, 2016, 8:14am UTC](https://discuss.elastic.co/t/error-in-string-field/69403 "2016-12-19T08:14:06Z")
Failed to parse \[searchtext\]; nested: MapperParsingException\[failed to parse date field \[\], tried both date format \[dateOptionalTime\], and timestamp number\]; nested: IllegalArgumentException\[Invalid format: "". I am … --- ## [Randomly missing events](https://discuss.elastic.co/t/randomly-missing-events/297377)
**Author:** [@Nasser](https://discuss.elastic.co/u/Nasser)\ **Replies:** 5\ **Last updated:** [February 20, 2022, 11:07am UTC](https://discuss.elastic.co/t/randomly-missing-events/297377 "2022-02-20T11:07:04Z")
Hi i have one pipeline processing 16 .conf file in each file i have 2 jdbc the issue is sometimes randomly i see logstash miss some jdbc ! i check the logstash-plain.log but nothing abnormal ! i tired to update logs… --- ## [Find Trending topics without background set](https://discuss.elastic.co/t/find-trending-topics-without-background-set/269207)
**Author:** [@sj12345](https://discuss.elastic.co/u/sj12345)\ **Replies:** 5\ **Last updated:** [April 5, 2021, 5:34pm UTC](https://discuss.elastic.co/t/find-trending-topics-without-background-set/269207 "2021-04-05T17:34:25Z")
i have read this article Find trending article Referring to Mark Harwood's comment on that page : " maybe it’s failing to find anything statistically significant in the sample of 100 headlines that differs materially fr… --- ## [Watcher unable to generate PDF report via webhook (7.7.0)](https://discuss.elastic.co/t/watcher-unable-to-generate-pdf-report-via-webhook-7-7-0/234159)
**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\ **Replies:** 5\ **Last updated:** [May 26, 2020, 9:17pm UTC](https://discuss.elastic.co/t/watcher-unable-to-generate-pdf-report-via-webhook-7-7-0/234159 "2020-05-26T21:17:54Z")
We're trying to setup a Watcher job that will call a Dashboard POST URL to generate a PDF on a regular interval via a webhook. This report is then stored in Elasticsearch and downloadable by support users. We appear to … --- ## [Logstash Aggregate with multiple end tags](https://discuss.elastic.co/t/logstash-aggregate-with-multiple-end-tags/232972)
**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\ **Replies:** 5\ **Last updated:** [May 17, 2020, 10:45am UTC](https://discuss.elastic.co/t/logstash-aggregate-with-multiple-end-tags/232972 "2020-05-17T10:45:12Z")
Hi All, I am trying to aggregate elapsed time value for a specific event. But, the event end tags are either one of the two tags (either Saved or Modified) as specified below in the sample data. Sample Data with colu… --- ## [Boolean matchQuery on a not\_analyzed field?](https://discuss.elastic.co/t/boolean-matchquery-on-a-not-analyzed-field/13805)
**Author:** [@Paul\_Sanwald\_2](https://discuss.elastic.co/u/Paul_Sanwald_2)\ **Replies:** 5\ **Last updated:** [October 2, 2013, 2:02pm UTC](https://discuss.elastic.co/t/boolean-matchquery-on-a-not-analyzed-field/13805 "2013-10-02T14:02:16Z")
having a very strange problem and hoping the group can provide some enlightenment. I have a field, activeLabels, which is defined as a multi-field in my index, with analyzed and not\_analyzed subfields. A boolean q… --- ## [Error while using Java API for Search on query](https://discuss.elastic.co/t/error-while-using-java-api-for-search-on-query/5881)
**Author:** [@Ravi\_Dontharaju](https://discuss.elastic.co/u/Ravi_Dontharaju)\ **Replies:** 5\ **Last updated:** [November 22, 2011, 12:39pm UTC](https://discuss.elastic.co/t/error-while-using-java-api-for-search-on-query/5881 "2011-11-22T12:39:00Z")
Hi, I am using Elasticsearch 0.18.2. I am trying to connect to port 9300 on localhost. - I am able to create documents and get documents by \_id on elasticsearch using Java API. GetResponse respons… --- ## [How to zoom in the Y-Axis in a line chart using kibana 7.16?](https://discuss.elastic.co/t/how-to-zoom-in-the-y-axis-in-a-line-chart-using-kibana-7-16/295162)
**Author:** [@GustavoEH](https://discuss.elastic.co/u/GustavoEH)\ **Replies:** 2\ **Last updated:** [January 24, 2022, 7:53am UTC](https://discuss.elastic.co/t/how-to-zoom-in-the-y-axis-in-a-line-chart-using-kibana-7-16/295162 "2022-01-24T07:53:47Z")
Hello everyone, I'm new in Elasticsearch/Kibana and this is my first post, maybe the question is simple but I already expend hours trying to solve this issue, also looking for something similar in many forums but nothin… --- ## [SNMP input with MIB](https://discuss.elastic.co/t/snmp-input-with-mib/292673)
**Author:** [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)\ **Replies:** 2\ **Last updated:** [December 22, 2021, 3:29pm UTC](https://discuss.elastic.co/t/snmp-input-with-mib/292673 "2021-12-22T15:29:37Z")
"Hello. I´m trying to setup an snmp polling function in our Elasticsearch with Logstash. Today it is an "Proof of Concept" with only one 4G router from the vendor named Advantech. I have followed the instructions foun… --- ## [Confusion, dot-notation vs. sub-objects](https://discuss.elastic.co/t/confusion-dot-notation-vs-sub-objects/286199)
**Author:** [@anton-johansson](https://discuss.elastic.co/u/anton-johansson)\ **Replies:** 2\ **Last updated:** [October 11, 2021, 3:15pm UTC](https://discuss.elastic.co/t/confusion-dot-notation-vs-sub-objects/286199 "2021-10-11T15:15:40Z")
We're a bit confused about the specification regarding dot-notation vs. sub-objects. If you look in the documentation, it is specified as dot-notation, see here: This is implemented as dot-notation in the Java/Log4j2-i… --- ## [How to grok pattern match middle of a string?](https://discuss.elastic.co/t/how-to-grok-pattern-match-middle-of-a-string/276708)
**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\ **Replies:** 2\ **Last updated:** [June 25, 2021, 4:51pm UTC](https://discuss.elastic.co/t/how-to-grok-pattern-match-middle-of-a-string/276708 "2021-06-25T16:51:04Z")
I have a string that looks like this: SITE;500400;PEER FLOW (AS 3535);;100G;MR;PP:10.02.01.91 97,98; I just want to extract "FLOW" into a field named peer. I tried doing this: (?\\\w+\\D\\d+\\D\\w+\\s(\\w+)) But tha… --- ## [Cross-cluster search on-premise remote cluster from Elastic Cloud Deployment](https://discuss.elastic.co/t/cross-cluster-search-on-premise-remote-cluster-from-elastic-cloud-deployment/267273)
**Author:** [@cvanhalt](https://discuss.elastic.co/u/cvanhalt)\ **Replies:** 2\ **Last updated:** [March 16, 2021, 4:06pm UTC](https://discuss.elastic.co/t/cross-cluster-search-on-premise-remote-cluster-from-elastic-cloud-deployment/267273 "2021-03-16T16:06:06Z")
Is it possible to use the cross-cluster search feature to query a Elastic Cloud Deployment in Azure and an on-premise remote Cluster? Both with the Basic/Standard License. Connection should be made through a VPN. I'm … --- ## [Pagination for REST API Through Logstash](https://discuss.elastic.co/t/pagination-for-rest-api-through-logstash/231060)
**Author:** [@Mahmmoud\_Rashed](https://discuss.elastic.co/u/Mahmmoud_Rashed)\ **Replies:** 2\ **Last updated:** [May 5, 2020, 5:29pm UTC](https://discuss.elastic.co/t/pagination-for-rest-api-through-logstash/231060 "2020-05-05T17:29:26Z")
How can I import from a REST API to Elasticsearch via Logstash using Pagination? I was able to import using http\_poller but unfortunately, it doesn't support pagination, so how can I write force a custom script or "for … --- ## [CCR with an BI-directional replication setup and performance impact](https://discuss.elastic.co/t/ccr-with-an-bi-directional-replication-setup-and-performance-impact/195156)
**Author:** [@kley](https://discuss.elastic.co/u/kley)\ **Replies:** 2\ **Last updated:** [August 19, 2019, 1:15pm UTC](https://discuss.elastic.co/t/ccr-with-an-bi-directional-replication-setup-and-performance-impact/195156 "2019-08-19T13:15:57Z")
Hi :wave: So, we are currently performance testing our CCR setup to get some kind of understanding on how much more hardware we need to accomplish the same indexing numbers as without CCR. As said in the title, we are … --- ## [Downgrade Kibana 6.4.1.1 -\> 6.4.0.1](https://discuss.elastic.co/t/downgrade-kibana-6-4-1-1-6-4-0-1/152430)
**Author:** [@KindTomato](https://discuss.elastic.co/u/KindTomato)\ **Replies:** 2\ **Last updated:** [October 15, 2018, 7:54am UTC](https://discuss.elastic.co/t/downgrade-kibana-6-4-1-1-6-4-0-1/152430 "2018-10-15T07:54:38Z")
Hey, I had an issue with creating new Indexes on Kibana 6.4.0.1 - on Dev environemnt i upgraded logstash and elasticsearch to 6.4.1.1 (kibana stayed 6.4.0.1) and it worked - so I did the same on prod - but unfourtantely … --- ## [Get troubles in creating Kibana index pattern when the Apache proxy is up](https://discuss.elastic.co/t/get-troubles-in-creating-kibana-index-pattern-when-the-apache-proxy-is-up/130762)
**Author:** [@kesha](https://discuss.elastic.co/u/kesha)\ **Replies:** 2\ **Last updated:** [May 9, 2018, 10:04pm UTC](https://discuss.elastic.co/t/get-troubles-in-creating-kibana-index-pattern-when-the-apache-proxy-is-up/130762 "2018-05-09T22:04:15Z")
I'm trying to put Apache proxy in front of Kibana and I have made a config file for apache. But when I start to create index pattern in Kibana interface, the 404 error prompts. From the first image, there is a match ther… --- ## [Unable to create kibana index '.kibana'](https://discuss.elastic.co/t/unable-to-create-kibana-index-kibana/116258)
**Author:** [@Calum\_Price](https://discuss.elastic.co/u/Calum_Price)\ **Replies:** 2\ **Last updated:** [January 22, 2018, 9:44am UTC](https://discuss.elastic.co/t/unable-to-create-kibana-index-kibana/116258 "2018-01-22T09:44:57Z")
The Kibana dashboard is still red saying unable to create Kibana index '.Kibana'. (Kibana runs on a EC2 instance. When I run curl -XGET 'localhost:9200/\_cat/indices?v&pretty' on the elasticsearch pod (k8s), i get the fo… --- ## [Parallel coordinates plugin - parallel axis for multidimensional presentation](https://discuss.elastic.co/t/parallel-coordinates-plugin-parallel-axis-for-multidimensional-presentation/85677)
**Author:** [@elasticsaad](https://discuss.elastic.co/u/elasticsaad)\ **Replies:** 2\ **Last updated:** [June 3, 2017, 3:05pm UTC](https://discuss.elastic.co/t/parallel-coordinates-plugin-parallel-axis-for-multidimensional-presentation/85677 "2017-06-03T15:05:02Z")
Hi, it was a panel for parallel coordinates in Kibana version 3, but it was removed. exists a way to integrate it again as a plugin or wy not into core? i found also this implementation example for that in d3.js Nutr… --- ## [Memory usage on startup (old gen full)](https://discuss.elastic.co/t/memory-usage-on-startup-old-gen-full/51710)
**Author:** [@knights](https://discuss.elastic.co/u/knights)\ **Replies:** 2\ **Last updated:** [June 3, 2016, 7:03am UTC](https://discuss.elastic.co/t/memory-usage-on-startup-old-gen-full/51710 "2016-06-03T07:03:20Z")
Hello, everyone I am facing a problem with my ES cluster, version 1.7.3 I have 10 nodes, each having 30g RAM. Scatered around thos nodes are 2480 shards. When I start the cluster, the heap usage skyrocket to 27-29g,… --- ## [Aggregations on Subset of Queries](https://discuss.elastic.co/t/aggregations-on-subset-of-queries/46002)
**Author:** [@rn\_devs](https://discuss.elastic.co/u/rn_devs)\ **Replies:** 2\ **Last updated:** [April 1, 2016, 6:53pm UTC](https://discuss.elastic.co/t/aggregations-on-subset-of-queries/46002 "2016-04-01T18:53:08Z")
Hi, I am wondering if it is possible to run aggregations on a subset of your queries. For example, I have facet filters where I want the counts to persist when someone clicks the various filters. The filters would obvi… --- ## [Can filebeat be configured to send to different ES or logstash servers?](https://discuss.elastic.co/t/can-filebeat-be-configured-to-send-to-different-es-or-logstash-servers/41503)
**Author:** [@skynardo](https://discuss.elastic.co/u/skynardo)\ **Replies:** 2\ **Last updated:** [February 12, 2016, 9:49pm UTC](https://discuss.elastic.co/t/can-filebeat-be-configured-to-send-to-different-es-or-logstash-servers/41503 "2016-02-12T21:49:42Z")
I have a request to send Database logs to one ES server and tomcat logs to another ES server. Can this be configured in filebeat version 1.1.0-1 ? --- ## [Run logs through logstash again](https://discuss.elastic.co/t/run-logs-through-logstash-again/26932)
**Author:** [@jeroentbt](https://discuss.elastic.co/u/jeroentbt)\ **Replies:** 2\ **Last updated:** [August 6, 2015, 7:07am UTC](https://discuss.elastic.co/t/run-logs-through-logstash-again/26932 "2015-08-06T07:07:31Z")
Is it possible to run logs that are in ElasticSearch through Logstash again, ideally replacing the new output in ES? How do you normally handle changes in the pipeline? Do you just leave the old stuff as is or are you … --- ## [Merge 2 types based on common field](https://discuss.elastic.co/t/merge-2-types-based-on-common-field/16669)
**Author:** [@Fawad\_Shah](https://discuss.elastic.co/u/Fawad_Shah)\ **Replies:** 2\ **Last updated:** [March 28, 2014, 9:29am UTC](https://discuss.elastic.co/t/merge-2-types-based-on-common-field/16669 "2014-03-28T09:29:18Z")
Hi, I have an index named 'product' it has two types named 'type1' and 'type2' For example: \*{ product\_id: "1111", price: "23.56", stock: "100" }\* \*{ product\_id: "1111", category: "iPhone cas… --- ## [Controls visualization filter uses the default index pattern](https://discuss.elastic.co/t/controls-visualization-filter-uses-the-default-index-pattern/251189)
**Author:** [@lorehek](https://discuss.elastic.co/u/lorehek)\ **Replies:** 1\ **Last updated:** [October 14, 2020, 11:41am UTC](https://discuss.elastic.co/t/controls-visualization-filter-uses-the-default-index-pattern/251189 "2020-10-14T11:41:35Z")
Hello community! I hope someone can help. I'd like to have the Controls visualization filter for particular value. I can do this in other visualizations such as the data table but since when creating the controls visua… --- ## [Including Metricbeat Custom Field in Watch](https://discuss.elastic.co/t/including-metricbeat-custom-field-in-watch/249130)
**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\ **Replies:** 7\ **Last updated:** [September 22, 2020, 2:55pm UTC](https://discuss.elastic.co/t/including-metricbeat-custom-field-in-watch/249130 "2020-09-22T14:55:24Z")
Hello - I have the following Watch which triggers when Metricbeat shows system.cpu.total.pct is over 75%. PUT \_watcher/watch/testwatch { "trigger": { "schedule": { "interval": "10s" } }, "metadata":… [Previous page](https://discuss.elastic.co/top.md?page=1649&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1651&per_page=50&period=all)