# Top **URL:** https://discuss.elastic.co/top.md?page=1653&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1654 --- ## [Dynamic\_templates with a match\_mapping\_type of "object"](https://discuss.elastic.co/t/dynamic-templates-with-a-match-mapping-type-of-object/7645)
**Author:** [@MichaelB](https://discuss.elastic.co/u/MichaelB)\ **Replies:** 1\ **Last updated:** [May 13, 2012, 9:58am UTC](https://discuss.elastic.co/t/dynamic-templates-with-a-match-mapping-type-of-object/7645 "2012-05-13T09:58:13Z")
hello, I'm trying to use dynamic\_templates with a match\_mapping\_type of "object", and a mapping that suffixes the field name but leaves the type as object. Here my little sample script. curl -XPUT 'http://l… --- ## [Possible Bug? Percolator still matching deleted queries](https://discuss.elastic.co/t/possible-bug-percolator-still-matching-deleted-queries/6494)
**Author:** [@Onilton\_Maciel](https://discuss.elastic.co/u/Onilton_Maciel)\ **Replies:** 7\ **Last updated:** [February 17, 2012, 3:36pm UTC](https://discuss.elastic.co/t/possible-bug-percolator-still-matching-deleted-queries/6494 "2012-02-17T15:36:08Z")
I'm using elastic search 0.17.6 and percolator. The problem happens when I delete the \_percolator for an index . Then when I run a document through percolate, percolate still return the ids of the queries that were … --- ## [TermFilter and Array-Fields - bug or intended behaviour](https://discuss.elastic.co/t/termfilter-and-array-fields-bug-or-intended-behaviour/4074)
**Author:** [@K\_B](https://discuss.elastic.co/u/K_B)\ **Replies:** 7\ **Last updated:** [March 10, 2011, 3:42pm UTC](https://discuss.elastic.co/t/termfilter-and-array-fields-bug-or-intended-behaviour/4074 "2011-03-10T15:42:43Z")
Hello, I if one has an ArrayField like field = \["Val1","Val2","Val3"\] and its not\_analyzed by mapping then in case a Filter is tried to be put over it: FilterBuilders.termFilter("field", "Val1"); the resu… --- ## [Can't parse event as syslog rfc3164](https://discuss.elastic.co/t/cant-parse-event-as-syslog-rfc3164/352307)
**Author:** [@Amol\_Sahare](https://discuss.elastic.co/u/Amol_Sahare)\ **Replies:** 4\ **Last updated:** [February 5, 2024, 2:50pm UTC](https://discuss.elastic.co/t/cant-parse-event-as-syslog-rfc3164/352307 "2024-02-05T14:50:35Z")
Hello, We are having problems with the'syslog' input of filebeat. I'm using the script for sending a single log to the filebeat syslog input. I've noticed that the same message is being parsed because I can see the eve… --- ## [Retrieve transactions from APM using NEST](https://discuss.elastic.co/t/retrieve-transactions-from-apm-using-nest/274924)
**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\ **Replies:** 4\ **Last updated:** [June 7, 2021, 1:38pm UTC](https://discuss.elastic.co/t/retrieve-transactions-from-apm-using-nest/274924 "2021-06-07T13:38:33Z")
I have an asp.net core web app application that will write logs using serilog to elasticsearch and also can read the logs from elasticsearch using NEST. I also have it set up where I can use APM for my application. If I … --- ## [\[version 7.1.1\] When I set the type of some fields to 'keyword' by ES mapping , it doesn't work](https://discuss.elastic.co/t/version-7-1-1-when-i-set-the-type-of-some-fields-to-keyword-by-es-mapping-it-doesnt-work/212874)
**Author:** [@francis-oyc](https://discuss.elastic.co/u/francis-oyc)\ **Replies:** 4\ **Last updated:** [December 24, 2019, 9:34am UTC](https://discuss.elastic.co/t/version-7-1-1-when-i-set-the-type-of-some-fields-to-keyword-by-es-mapping-it-doesnt-work/212874 "2019-12-24T09:34:55Z")
Recently, I have built an ELK system, I wat to set the type of some fields to 'keyword' by ES mapping , but it doesn't work.Here is my ES mapping : PUT /\_template/francis-template { "index\_patterns": \[""\], "version"… --- ## [Merge and transform more than one csv or json files to elasticsearch from logstash or ingest node pipeline (beginner)](https://discuss.elastic.co/t/merge-and-transform-more-than-one-csv-or-json-files-to-elasticsearch-from-logstash-or-ingest-node-pipeline-beginner/196503)
**Author:** [@namali](https://discuss.elastic.co/u/namali)\ **Replies:** 4\ **Last updated:** [August 27, 2019, 5:24am UTC](https://discuss.elastic.co/t/merge-and-transform-more-than-one-csv-or-json-files-to-elasticsearch-from-logstash-or-ingest-node-pipeline-beginner/196503 "2019-08-27T05:24:38Z")
I wanted to know how to merge and transform more than one csv or json files to elasticsearch from logstash or ingest node pipeline. \*hotel.csv hotelcode hotelname starcode \*star.csv starcode starrating after merg… --- ## [Discard documents when indexing with rules](https://discuss.elastic.co/t/discard-documents-when-indexing-with-rules/159696)
**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\ **Replies:** 4\ **Last updated:** [December 6, 2018, 12:59pm UTC](https://discuss.elastic.co/t/discard-documents-when-indexing-with-rules/159696 "2018-12-06T12:59:26Z")
Hi, Is it possible to add something like a "rule" into the index mapping/description or whatever configuration that could to resolve the following trick: We want to inject lot of data into a dedicated indice, but we wo… --- ## [Timelion .label() not working](https://discuss.elastic.co/t/timelion-label-not-working/129075)
**Author:** [@Ganesha\_Venkanna](https://discuss.elastic.co/u/Ganesha_Venkanna)\ **Replies:** 4\ **Last updated:** [April 24, 2018, 8:33am UTC](https://discuss.elastic.co/t/timelion-label-not-working/129075 "2018-04-24T08:33:12Z")
\[kibana\] I want to change the label to just contents of ip\_log.keyword like below. About to send heartbeat from server to agent 192.168.2.217 21 172.168.1.135,i have tried below but it doesn't seem to be working ,pleas… --- ## [Search for topics best matching a phrase (parent/child top\_children)](https://discuss.elastic.co/t/search-for-topics-best-matching-a-phrase-parent-child-top-children/23967)
**Author:** [@nyc863](https://discuss.elastic.co/u/nyc863)\ **Replies:** 4\ **Last updated:** [June 23, 2015, 10:24am UTC](https://discuss.elastic.co/t/search-for-topics-best-matching-a-phrase-parent-child-top-children/23967 "2015-06-23T10:24:35Z")
I want a search that must be very common: return topics best suited to a search. The topic document has the topic title (and perhaps other fields) The children docs are the posts in the topic, and they have several fie… --- ## [Heapdump without timeouts](https://discuss.elastic.co/t/heapdump-without-timeouts/322850)
**Author:** [@frens](https://discuss.elastic.co/u/frens)\ **Replies:** 8\ **Last updated:** [January 12, 2023, 1:12pm UTC](https://discuss.elastic.co/t/heapdump-without-timeouts/322850 "2023-01-12T13:12:32Z")
Hi! We're running nodes with a substantial amount of heap (150+Gb). I know how to take a dump the heap with jmap. However, dumping a heap this size on our machines will probably take several minutes (if I extrapolate li… --- ## [CPU loading: 100% under load after 10-12 hrs of usage](https://discuss.elastic.co/t/cpu-loading-100-under-load-after-10-12-hrs-of-usage/271041)
**Author:** [@Dmitry\_Uglatch](https://discuss.elastic.co/u/Dmitry_Uglatch)\ **Replies:** 8\ **Last updated:** [May 17, 2021, 6:06am UTC](https://discuss.elastic.co/t/cpu-loading-100-under-load-after-10-12-hrs-of-usage/271041 "2021-05-17T06:06:45Z")
Hello, we're switching from ES 5.5 to 7.12. After applying it works perfect for about 10-12 hrs: and then we get CPU loading: 100% Even simple queries: GET /products/\_search?size=0 works for 5-6 seconds. And it return… --- ## [How to use logstash to upload data in elasticsearch in specific format](https://discuss.elastic.co/t/how-to-use-logstash-to-upload-data-in-elasticsearch-in-specific-format/135642)
**Author:** [@rs123](https://discuss.elastic.co/u/rs123)\ **Replies:** 8\ **Last updated:** [June 19, 2018, 8:12am UTC](https://discuss.elastic.co/t/how-to-use-logstash-to-upload-data-in-elasticsearch-in-specific-format/135642 "2018-06-19T08:12:52Z")
Both mapping and index are as below: PUT somki { "mappings": { "\_doc" : { "properties" : { "suggest" : { "type" : "completion", "contexts"… --- ## [\[ANNOUNCEMENT\] Execbeat 3.2.0 released](https://discuss.elastic.co/t/announcement-execbeat-3-2-0-released/88278)
**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\ **Replies:** 0\ **Last updated:** [June 5, 2017, 1:59pm UTC](https://discuss.elastic.co/t/announcement-execbeat-3-2-0-released/88278 "2017-06-05T13:59:44Z")
I'm happy to announce the availability of \[Execbeat 3.2.0\](https://github.com/christiangalsterer/execbeat/releases/tag/3.2,0. Execbeat is a Beat which executes (shell) commands in a regular interval and sends the stand… --- ## [Elasticsearch server cannot connect with java api](https://discuss.elastic.co/t/elasticsearch-server-cannot-connect-with-java-api/83374)
**Author:** [@zegdene](https://discuss.elastic.co/u/zegdene)\ **Replies:** 0\ **Last updated:** [April 24, 2017, 8:13am UTC](https://discuss.elastic.co/t/elasticsearch-server-cannot-connect-with-java-api/83374 "2017-04-24T08:13:15Z")
Hi, J have a spring boot application , I have in elasticsaerch connect in localhost:9200 but i need to connect the spring boot application to elasticsearch server with the transport client but spring boot application c… --- ## [Marvel behind Nginx and https](https://discuss.elastic.co/t/marvel-behind-nginx-and-https/15450)
**Author:** [@J\_Schulz](https://discuss.elastic.co/u/J_Schulz)\ **Replies:** 8\ **Last updated:** [February 4, 2014, 3:58pm UTC](https://discuss.elastic.co/t/marvel-behind-nginx-and-https/15450 "2014-02-04T15:58:01Z")
Hi, I have Nginx configured as reverse proxy to access elasticsearch over https + auth basic. As example Unfortunately Marvel tries to connect to http://hostname/. The affected code line is in /usr/share/ela… --- ## [Monitoring Oracle Alert log by using Logstash](https://discuss.elastic.co/t/monitoring-oracle-alert-log-by-using-logstash/339889)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 2\ **Last updated:** [August 3, 2023, 8:01am UTC](https://discuss.elastic.co/t/monitoring-oracle-alert-log-by-using-logstash/339889 "2023-08-03T08:01:45Z")
Hi Team, We had one requirement to monitor oracle alert log by using ELK stack. Could someone guide me . In my environment ELK stack running with 8.x version. Thanks, Debasis --- ## [Sql query cannot be closed](https://discuss.elastic.co/t/sql-query-cannot-be-closed/293192)
**Author:** [@bxl](https://discuss.elastic.co/u/bxl)\ **Replies:** 2\ **Last updated:** [January 10, 2022, 8:29am UTC](https://discuss.elastic.co/t/sql-query-cannot-be-closed/293192 "2022-01-10T08:29:41Z")
sql query cannot be closed, resulting in cluster exception，Restart Cluster Recovery Elasticsearch version: 7.9.3 query GET \_sql?format=txt {"query": """ SELECT app,tag,count(1) as c FROM "test" group by app,tag order … --- ## [Watcher trigger time has wrong working](https://discuss.elastic.co/t/watcher-trigger-time-has-wrong-working/221805)
**Author:** [@maddog](https://discuss.elastic.co/u/maddog)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 9:02am UTC](https://discuss.elastic.co/t/watcher-trigger-time-has-wrong-working/221805 "2020-03-12T09:02:54Z")
Dear All My Watcher can be work & alerted. but watcher trigger with daily has wrong working. how to check what wrong of state? Example Config Watcher Schedule trigger "trigger": { "schedule": { "da… --- ## [Logstash split filter throwing \_split\_type\_failure](https://discuss.elastic.co/t/logstash-split-filter-throwing-split-type-failure/213984)
**Author:** [@karthiknpy](https://discuss.elastic.co/u/karthiknpy)\ **Replies:** 2\ **Last updated:** [January 13, 2020, 7:36am UTC](https://discuss.elastic.co/t/logstash-split-filter-throwing-split-type-failure/213984 "2020-01-13T07:36:03Z")
Hi Team, I have a situation to break json using split filter which works fine. But certain scenarios where some subkeys of json are optional. when the split filter is not able to find a specific key to split it is throw… --- ## [Metricbeat overview dashboard](https://discuss.elastic.co/t/metricbeat-overview-dashboard/208671)
**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\ **Replies:** 2\ **Last updated:** [November 21, 2019, 9:42am UTC](https://discuss.elastic.co/t/metricbeat-overview-dashboard/208671 "2019-11-21T09:42:16Z")
Hi, Is any chance to get dashboard with visualization ? System Overview - https://demo.elastic.co/app/kibana#/dashboard/Metricbeat-system-overview-ecs Host Overview - https://demo.elastic.co/app/kibana#/dashboard/79ff… --- ## [Format -\> Color regexp for numerical fields?](https://discuss.elastic.co/t/format-color-regexp-for-numerical-fields/182142)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 2:29am UTC](https://discuss.elastic.co/t/format-color-regexp-for-numerical-fields/182142 "2019-05-23T02:29:04Z")
Hello, What kind of regexp does this color formatter support for numericals? I'm don't have a lot of knowledge regarding regexp but something like \[5-9\]\[0-9\] or (\[5-9\]\[0-9\]) works in online regexp checkers but not in Ki… --- ## [Use scripted fields with a big mapping table](https://discuss.elastic.co/t/use-scripted-fields-with-a-big-mapping-table/153131)
**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\ **Replies:** 2\ **Last updated:** [October 19, 2018, 7:56am UTC](https://discuss.elastic.co/t/use-scripted-fields-with-a-big-mapping-table/153131 "2018-10-19T07:56:16Z")
I would like to use a scripted field with a translation table to add a field from the the CMDB for a given host. Here is an example Painless script adding a new scripted filed host\_service: HashMap mapping = \[ 'gnu': '… --- ## [Inline success script move to stored failed in transform watcher](https://discuss.elastic.co/t/inline-success-script-move-to-stored-failed-in-transform-watcher/103940)
**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\ **Replies:** 2\ **Last updated:** [October 14, 2017, 3:04am UTC](https://discuss.elastic.co/t/inline-success-script-move-to-stored-failed-in-transform-watcher/103940 "2017-10-14T03:04:21Z")
Hi, all The follow is run correct. "transform": { "script": { "source": "return \['error\_count' : ctx.payload.aggregations.whichHost.buckets.length, 'hosts' : ctx.payload.aggregations.whichHost.buckets.strea… --- ## [onDropConnection](https://discuss.elastic.co/t/ondropconnection/66011)
**Author:** [@lonangel](https://discuss.elastic.co/u/lonangel)\ **Replies:** 2\ **Last updated:** [November 15, 2016, 11:21am UTC](https://discuss.elastic.co/t/ondropconnection/66011 "2016-11-15T11:21:02Z")
Hi, I'm trying to implement a protocol using the generator and I have some doubts about how the onDropConnection function works. What I'm trying to achieve is, even if I don't get a response back, I want to publish the t… --- ## [Export of dashboard contains incorrect screenshots](https://discuss.elastic.co/t/export-of-dashboard-contains-incorrect-screenshots/63764)
**Author:** [@shd](https://discuss.elastic.co/u/shd)\ **Replies:** 2\ **Last updated:** [October 25, 2016, 6:49am UTC](https://discuss.elastic.co/t/export-of-dashboard-contains-incorrect-screenshots/63764 "2016-10-25T06:49:34Z")
Hello, I have a dashboard with 4 graphs. Only one shows the correct result. The others are not blank, but are in fact a screenshot of the Visualize tab. I have tried changing the timeout values in kibana.yml, but it … --- ## [Inputs to elasticsearch](https://discuss.elastic.co/t/inputs-to-elasticsearch/28919)
**Author:** [@deepak13](https://discuss.elastic.co/u/deepak13)\ **Replies:** 2\ **Last updated:** [September 9, 2015, 10:54am UTC](https://discuss.elastic.co/t/inputs-to-elasticsearch/28919 "2015-09-09T10:54:32Z")
Hi All, Are there any other ways of input to elasticsearch other than logtsash?? As logstash doesn't have functionalities like aggregations on data is it possible through any other way. --- ## [Using Kibana Spaces to Enable Multi-Tenancy](https://discuss.elastic.co/t/using-kibana-spaces-to-enable-multi-tenancy/383762)
**Author:** [@RedneckHutch](https://discuss.elastic.co/u/RedneckHutch)\ **Replies:** 1\ **Last updated:** [December 12, 2025, 11:59am UTC](https://discuss.elastic.co/t/using-kibana-spaces-to-enable-multi-tenancy/383762 "2025-12-12T11:59:36Z")
Hey all, We’re working on strengthening our Elastic deployment to better support a multi-tenant environment. Today, we’re handling multi-tenancy by using separate namespaces within agent policies in Fleet, which allows … --- ## [Can we have background color in Data Table based on Status Change](https://discuss.elastic.co/t/can-we-have-background-color-in-data-table-based-on-status-change/235921)
**Author:** [@Jayashree\_Teggi](https://discuss.elastic.co/u/Jayashree_Teggi)\ **Replies:** 1\ **Last updated:** [June 11, 2020, 6:28pm UTC](https://discuss.elastic.co/t/can-we-have-background-color-in-data-table-based-on-status-change/235921 "2020-06-11T18:28:49Z")
Based on Status Change I want to assign the colors in the background is this possible in Kibana --- ## [Multiple Logstash pipelines outputting into same index](https://discuss.elastic.co/t/multiple-logstash-pipelines-outputting-into-same-index/163269)
**Author:** [@jackdw](https://discuss.elastic.co/u/jackdw)\ **Replies:** 1\ **Last updated:** [January 7, 2019, 8:30pm UTC](https://discuss.elastic.co/t/multiple-logstash-pipelines-outputting-into-same-index/163269 "2019-01-07T20:30:14Z")
I have two Filebeat pipes inputting into Logstash. One parses out log errors that I actually care about from one service while the other takes each line in order to keep track of the health of another service that often … --- ## [Script sort by descending order](https://discuss.elastic.co/t/script-sort-by-descending-order/144254)
**Author:** [@Xiaofeng\_Zhan](https://discuss.elastic.co/u/Xiaofeng_Zhan)\ **Replies:** 1\ **Last updated:** [August 14, 2018, 6:45pm UTC](https://discuss.elastic.co/t/script-sort-by-descending-order/144254 "2018-08-14T18:45:00Z")
Hello, I need to write a painless sorting script, sorting by first name and last name, descending order. The existing script is sorting by first name and last name, ascending order. The script is like below String AL… --- ## [Modify SearchDescriptor to Add field\_value\_factor using .NEST](https://discuss.elastic.co/t/modify-searchdescriptor-to-add-field-value-factor-using-nest/102483)
**Author:** [@ghohenstatt](https://discuss.elastic.co/u/ghohenstatt)\ **Replies:** 1\ **Last updated:** [October 6, 2017, 7:14am UTC](https://discuss.elastic.co/t/modify-searchdescriptor-to-add-field-value-factor-using-nest/102483 "2017-10-06T07:14:32Z")
I need to revise a method that builds a SearchDescriptor using .Nest so that the score is higher for product search results for items having a contract price (value of zero). I captured the serialized version of the qu… --- ## [Timelion: reduce\_search\_phase\_exception](https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786)
**Author:** [@dreadlocked1](https://discuss.elastic.co/u/dreadlocked1)\ **Replies:** 1\ **Last updated:** [July 4, 2017, 3:52pm UTC](https://discuss.elastic.co/t/timelion-reduce-search-phase-exception/91786 "2017-07-04T15:52:21Z")
Hi, when I plug any new winlogbeat agent to Logstash, Kibana starts showing the following error message. I'm over an Ubuntu 16.06 system, and using the following versions: LS: 5.4.0 ES: 5.3.0 KB: 5.1.1 Error: in c… --- ## [Suggest API](https://discuss.elastic.co/t/suggest-api/781)
**Author:** [@Florian\_Grousset](https://discuss.elastic.co/u/Florian_Grousset)\ **Replies:** 1\ **Last updated:** [May 26, 2015, 7:44am UTC](https://discuss.elastic.co/t/suggest-api/781 "2015-05-26T07:44:57Z")
Bonjour, Je souhaites utiliser la nouvelle fonctionnalité "suggest" afin de faire une liste de suggestion dans un champ. Voici comment j'ai défini le mapping sur mon champ : "suggest":{ "type": "completion", "a… --- ## [Connection Timeout Settings for the Java Client](https://discuss.elastic.co/t/connection-timeout-settings-for-the-java-client/6432)
**Author:** [@Manish\_Pandit](https://discuss.elastic.co/u/Manish_Pandit)\ **Replies:** 1\ **Last updated:** [January 18, 2012, 9:28pm UTC](https://discuss.elastic.co/t/connection-timeout-settings-for-the-java-client/6432 "2012-01-18T21:28:55Z")
We are running ElasticSearch with 4 nodes, and accessing it with the Java Client. Last night one of the nodes became unresponsive (basically curl to :9200/\_status froze). Other nodes were just fine. I was wondering if… --- ## [Allow OpenTelemetry to connect Anonymous to Elastic APM in fleet](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342)
**Author:** [@Aile](https://discuss.elastic.co/u/Aile)\ **Replies:** 3\ **Last updated:** [December 2, 2022, 10:44am UTC](https://discuss.elastic.co/t/allow-opentelemetry-to-connect-anonymous-to-elastic-apm-in-fleet/320342 "2022-12-02T10:44:45Z")
Kibana version: 8.5.2 Elasticsearch version: 8.5.2 APM Server version: / APM Agent language and version: Open-Telemetry Browser version: / Original install method (e.g. download page, yum, deb, from source, etc… --- ## [Filebeat: docker autodiscover problem](https://discuss.elastic.co/t/filebeat-docker-autodiscover-problem/301452)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 3\ **Last updated:** [April 25, 2022, 6:08am UTC](https://discuss.elastic.co/t/filebeat-docker-autodiscover-problem/301452 "2022-04-25T06:08:05Z")
I need to using filebeat auto discover to input the docker container log My container log name pantsel/konga This is my config in filebeat.yml #==============Using Autodiscover======================= filebeat.autodisc… --- ## [ELK with SSL, possible issues?](https://discuss.elastic.co/t/elk-with-ssl-possible-issues/216205)
**Author:** [@nick.ilarionov](https://discuss.elastic.co/u/nick.ilarionov)\ **Replies:** 3\ **Last updated:** [January 23, 2020, 10:39am UTC](https://discuss.elastic.co/t/elk-with-ssl-possible-issues/216205 "2020-01-23T10:39:00Z")
Hello all! I am fairly new to the ELK stack and am trying to run a Proof of Concept of it. Getting it up and running under http was fairly easy, following the guides. However, as I want to have SSL enabled on all commun… --- ## [Filebeat 7.4.0 does not recover when it fails to connect with k8s API](https://discuss.elastic.co/t/filebeat-7-4-0-does-not-recover-when-it-fails-to-connect-with-k8s-api/204327)
**Author:** [@GreenKnight15](https://discuss.elastic.co/u/GreenKnight15)\ **Replies:** 3\ **Last updated:** [October 21, 2019, 3:31pm UTC](https://discuss.elastic.co/t/filebeat-7-4-0-does-not-recover-when-it-fails-to-connect-with-k8s-api/204327 "2019-10-21T15:31:02Z")
I am using the filebeat elastic helm chart https://github.com/elastic/helm-charts/tree/master/filebeat under an Istio service mesh. As of filebeat 7.4.0 with the new k8s client Update kubernetes watcher to use official… --- ## [Many fields not searchable after upgrade](https://discuss.elastic.co/t/many-fields-not-searchable-after-upgrade/170177)
**Author:** [@leftorbit23](https://discuss.elastic.co/u/leftorbit23)\ **Replies:** 3\ **Last updated:** [February 27, 2019, 9:10pm UTC](https://discuss.elastic.co/t/many-fields-not-searchable-after-upgrade/170177 "2019-02-27T21:10:13Z")
After upgrading to the latest version of Elasticsearch and Kibana many of my fields are not searchable using Discover. Elasticsearch 6.6.1 Kibana 6.6.1 Elasticsearch search indexes is managed by Graylog. Example of a… --- ## [Display label](https://discuss.elastic.co/t/display-label/149969)
**Author:** [@sysdradmin](https://discuss.elastic.co/u/sysdradmin)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 7:11am UTC](https://discuss.elastic.co/t/display-label/149969 "2018-09-27T07:11:24Z")
Hello, is there a way to say to display label to looking for in other index in order to display it ? For example : we have a facets in elasticsearch with ip adress like 192.168.1.2 and we want that it display 'AD serve… --- ## [Metricbeat rabbitmq module issues](https://discuss.elastic.co/t/metricbeat-rabbitmq-module-issues/125751)
**Author:** [@adrian.aneci](https://discuss.elastic.co/u/adrian.aneci)\ **Replies:** 3\ **Last updated:** [March 29, 2018, 5:09am UTC](https://discuss.elastic.co/t/metricbeat-rabbitmq-module-issues/125751 "2018-03-29T05:09:50Z")
Hi team, I've noticed some errors in metricbeat logs after activatig rabbitmq module. I'm using 6.2.3 metricbeat inside a docker container. The rabbitmq version against which I'm testing the module is 3.7.4. 2018-03… --- ## [Logstash \<- Kafka over WAN](https://discuss.elastic.co/t/logstash-kafka-over-wan/78251)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 3\ **Last updated:** [March 12, 2017, 10:39pm UTC](https://discuss.elastic.co/t/logstash-kafka-over-wan/78251 "2017-03-12T22:39:15Z")
Hi, I'm looking for the best configuration for a high load system where Logstash is in the Azure cloud, and Kafka is in AWS. At the moment I have 3 Kafka servers with 20 partitions for the topic. I've created an au… --- ## [Scale Out Best Practices / How to](https://discuss.elastic.co/t/scale-out-best-practices-how-to/22164)
**Author:** [@Garrett\_Johnson](https://discuss.elastic.co/u/Garrett_Johnson)\ **Replies:** 3\ **Last updated:** [February 16, 2015, 9:36pm UTC](https://discuss.elastic.co/t/scale-out-best-practices-how-to/22164 "2015-02-16T21:36:18Z")
Is there a How to guide along with best practices for Scale Out? I have a single instance server of Elastic Search and I would like to scale out. From other posts in this group I have tried with no success to a… --- ## [Document level security and Connectors](https://discuss.elastic.co/t/document-level-security-and-connectors/3495)
**Author:** [@Mark1](https://discuss.elastic.co/u/Mark1)\ **Replies:** 6\ **Last updated:** [November 1, 2010, 1:08pm UTC](https://discuss.elastic.co/t/document-level-security-and-connectors/3495 "2010-11-01T13:08:11Z")
Hi, Is there a plan to add support for some type of document level based security scheme to ElasticSearch that works out of the box? That, and some support for Google's or Apaches connector framework and we have a ma… --- ## [ThreatIntel Module - missing field \[otx.id\] when calculating fingerprint](https://discuss.elastic.co/t/threatintel-module-missing-field-otx-id-when-calculating-fingerprint/330928)
**Author:** [@jlopezsec](https://discuss.elastic.co/u/jlopezsec)\ **Replies:** 3\ **Last updated:** [May 16, 2023, 6:15pm UTC](https://discuss.elastic.co/t/threatintel-module-missing-field-otx-id-when-calculating-fingerprint/330928 "2023-05-16T18:15:37Z")
Dear Elastic community, I am encountering an error in the Threat Intel module of Elastic where I am receiving the following message: "missing field \[otx.id\] when calculating fingerprint." After researching the error, I … --- ## [Palo Alto Next-Gen Firewall compatibility with Global Protect VPN Client](https://discuss.elastic.co/t/palo-alto-next-gen-firewall-compatibility-with-global-protect-vpn-client/349084)
**Author:** [@CodeMonky](https://discuss.elastic.co/u/CodeMonky)\ **Replies:** 5\ **Last updated:** [December 12, 2023, 2:52pm UTC](https://discuss.elastic.co/t/palo-alto-next-gen-firewall-compatibility-with-global-protect-vpn-client/349084 "2023-12-12T14:52:15Z")
Good day all! I'm looking for confirmation on the features of the Palo Alto Next-Gen Firewall integration with elastic. On the overview page of the integration, it details support of the Global Protect type of message. … --- ## [How a elastic machine learning(anomaly detection) job depends on historical data?](https://discuss.elastic.co/t/how-a-elastic-machine-learning-anomaly-detection-job-depends-on-historical-data/327806)
**Author:** [@Souvik\_Das](https://discuss.elastic.co/u/Souvik_Das)\ **Replies:** 5\ **Last updated:** [April 11, 2023, 6:53am UTC](https://discuss.elastic.co/t/how-a-elastic-machine-learning-anomaly-detection-job-depends-on-historical-data/327806 "2023-04-11T06:53:25Z")
Hi, Is it possible to redirect one machine learning (anomaly detection) job to a new data stream having the same sets of fields of the old historical index when it is live? Background: We have 10 ML jobs (anomaly det… --- ## [I do not receive the logs in Logstash (Heroku)](https://discuss.elastic.co/t/i-do-not-receive-the-logs-in-logstash-heroku/299895)
**Author:** [@Diego\_T](https://discuss.elastic.co/u/Diego_T)\ **Replies:** 5\ **Last updated:** [March 17, 2022, 4:21pm UTC](https://discuss.elastic.co/t/i-do-not-receive-the-logs-in-logstash-heroku/299895 "2022-03-17T16:21:27Z")
i have open the port 1514 (tcp) in my windows (localhost) i wanna see the logs of Heroku in the Elasticsearch remote (gcp) but I do not receive any log file .conf input { tcp { port =\> "1514" tags =\> \["h… --- ## [Increment date](https://discuss.elastic.co/t/increment-date/292911)
**Author:** [@Time\_cool](https://discuss.elastic.co/u/Time_cool)\ **Replies:** 5\ **Last updated:** [December 25, 2021, 5:36pm UTC](https://discuss.elastic.co/t/increment-date/292911 "2021-12-25T17:36:26Z")
How can you make it so that you can move in the time period. For example, there is a segment 00:00 - 00:15 and find a minimum in this segment. The next step is to take the segment 00:01 - 00:16, find the minimum in it, a… [Previous page](https://discuss.elastic.co/top.md?page=1652&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1654&per_page=50&period=all)