# Top

**URL:** https://discuss.elastic.co/top.md?page=1657&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1658

---

## [Clarification on Recovery settings please](https://discuss.elastic.co/t/clarification-on-recovery-settings-please/24435)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 3\
**Last updated:** [June 29, 2015, 9:23pm UTC](https://discuss.elastic.co/t/clarification-on-recovery-settings-please/24435 "2015-06-29T21:23:05Z")

</div>

Hi all, I would like some clarification on the various cluster recovery settings, just to make sure I'm understanding them correctly. I have a 6 node cluster, split like this: 3 master only 2 data only 1 client only …

---

## [SearchParseException (marvel) - \[No mapping found for \[@timestamp\] in order to sort on](https://discuss.elastic.co/t/searchparseexception-marvel-no-mapping-found-for-timestamp-in-order-to-sort-on/21250)

<div class="topic-metadata">

**Author:** [@Eugen\_Paraschiv](https://discuss.elastic.co/u/Eugen_Paraschiv)\
**Replies:** 3\
**Last updated:** [December 20, 2014, 11:36am UTC](https://discuss.elastic.co/t/searchparseexception-marvel-no-mapping-found-for-timestamp-in-order-to-sort-on/21250 "2014-12-20T11:36:06Z")

</div>

Hi, I'm using Elasticsearch 1.4.1 and the latest Marvel (1.2.1). I have Marvel installed on every node of the cluster and generating data into the daily index. When going into Marvel, I get the following exceptio…

---

## [Grok filter log](https://discuss.elastic.co/t/grok-filter-log/132361)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 7\
**Last updated:** [June 6, 2018, 11:05am UTC](https://discuss.elastic.co/t/grok-filter-log/132361 "2018-06-06T11:05:58Z")

</div>

hi every one i need your help please : i want parse a log file with grok filter but it doesn't work i don't know why : the log file : Aug 24 14:26:49 192.168.0.61 firewall 514865 11:12:13:14:15:16 the logstash confi…

---

## [Unable to see the spring boot application logs in ElasticCloud APM ](https://discuss.elastic.co/t/unable-to-see-the-spring-boot-application-logs-in-elasticcloud-apm/334473)

<div class="topic-metadata">

**Author:** [@ramakrr77](https://discuss.elastic.co/u/ramakrr77)\
**Replies:** 1\
**Last updated:** [June 2, 2023, 9:26am UTC](https://discuss.elastic.co/t/unable-to-see-the-spring-boot-application-logs-in-elasticcloud-apm/334473 "2023-06-02T09:26:56Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Manage several data stream(s) in the elasitcsearch output with interpolation](https://discuss.elastic.co/t/manage-several-data-stream-s-in-the-elasitcsearch-output-with-interpolation/332981)

<div class="topic-metadata">

**Author:** [@Pascal\_Nuccio](https://discuss.elastic.co/u/Pascal_Nuccio)\
**Replies:** 1\
**Last updated:** [May 9, 2023, 6:23pm UTC](https://discuss.elastic.co/t/manage-several-data-stream-s-in-the-elasitcsearch-output-with-interpolation/332981 "2023-05-09T18:23:51Z")

</div>

If you need to manage several data streams for one LOGSTASH instance, you can configure the elasticsearch output like this in your logstash configuration: We must use a filter to configure the data\_stream parameters (ty…

---

## [FileBeat disabling hints.default.default\_config](https://discuss.elastic.co/t/filebeat-disabling-hints-default-default-config/268614)

<div class="topic-metadata">

**Author:** [@Joaquin\_menchaca](https://discuss.elastic.co/u/Joaquin_menchaca)\
**Replies:** 1\
**Last updated:** [March 30, 2021, 2:09pm UTC](https://discuss.elastic.co/t/filebeat-disabling-hints-default-default-config/268614 "2021-03-30T14:09:26Z")

</div>

I don't understand why this doesn't work, any insight appreciated. When I enable hints.default\_config, I do not get anything show up in Kibana. I was following these docs for auto-discovery. My filebeats.yml config is…

---

## [How do I delete the registry on a Windows Service?](https://discuss.elastic.co/t/how-do-i-delete-the-registry-on-a-windows-service/205120)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 1\
**Last updated:** [October 24, 2019, 5:09pm UTC](https://discuss.elastic.co/t/how-do-i-delete-the-registry-on-a-windows-service/205120 "2019-10-24T17:09:37Z")

</div>

While developing my Filebeat fed pipelines, I find a need to delete the Filebeat registry from time to time to force a re-read of all the data. When I was running Filebeat from the command line it was easy, there is a '…

---

## [Mapping geo\_point from .csv](https://discuss.elastic.co/t/mapping-geo-point-from-csv/146183)

<div class="topic-metadata">

**Author:** [@Tanatos\_Daniel](https://discuss.elastic.co/u/Tanatos_Daniel)\
**Replies:** 1\
**Last updated:** [August 27, 2018, 9:07pm UTC](https://discuss.elastic.co/t/mapping-geo-point-from-csv/146183 "2018-08-27T21:07:10Z")

</div>

I cannot understand what I'm missing. classes2.conf input { file { path =\> "D:\\Workspace.Elastic\\FinalVersions\\classes.csv" start\_position =\> "beginning" sincedb\_path =\> "/dev/null" } } filter { csv {…

---

## [Logstash 6.2.3 Failed to create monitoring event](https://discuss.elastic.co/t/logstash-6-2-3-failed-to-create-monitoring-event/130464)

<div class="topic-metadata">

**Author:** [@roketyyang](https://discuss.elastic.co/u/roketyyang)\
**Replies:** 1\
**Last updated:** [May 3, 2018, 2:55pm UTC](https://discuss.elastic.co/t/logstash-6-2-3-failed-to-create-monitoring-event/130464 "2018-05-03T14:55:52Z")

</div>

I can't get any help from similar topics. \[2018-05-03T21:45:28,088\]\[ERROR\]\[logstash.inputs.metrics \] Failed to create monitoring event {:message=\>"For path: events. Map keys: \[:pipelines, :reloads\]", :error=\>"LogStash:…

---

## [Hive - es.update.script property value more than 4000 Chars](https://discuss.elastic.co/t/hive-es-update-script-property-value-more-than-4000-chars/101240)

<div class="topic-metadata">

**Author:** [@sachinjose](https://discuss.elastic.co/u/sachinjose)\
**Replies:** 1\
**Last updated:** [October 4, 2017, 3:32am UTC](https://discuss.elastic.co/t/hive-es-update-script-property-value-more-than-4000-chars/101240 "2017-10-04T03:32:11Z")

</div>

In one of the use cases, Length of Hive TBLPROPERTIES - es.update.script property value is more than 4000 characters, so hive query is failing with the below error message in the initial table creation step. As a workar…

---

## [Where is import\_dashboards script?](https://discuss.elastic.co/t/where-is-import-dashboards-script/98698)

<div class="topic-metadata">

**Author:** [@shinoj](https://discuss.elastic.co/u/shinoj)\
**Replies:** 1\
**Last updated:** [August 29, 2017, 1:46pm UTC](https://discuss.elastic.co/t/where-is-import-dashboards-script/98698 "2017-08-29T13:46:33Z")

</div>

Hi, I am trying to import beats dashboard but cant find import\_dashboards script at https://github.com/elastic/beats/tree/master/libbeat/dashboards I was following the instructions at : https://www.elastic.co/guide/en…

---

## [LogStash-- Parsing A log file](https://discuss.elastic.co/t/logstash-parsing-a-log-file/80552)

<div class="topic-metadata">

**Author:** [@Riaz\_Mohamed](https://discuss.elastic.co/u/Riaz_Mohamed)\
**Replies:** 1\
**Last updated:** [March 31, 2017, 2:24pm UTC](https://discuss.elastic.co/t/logstash-parsing-a-log-file/80552 "2017-03-31T14:24:40Z")

</div>

All I am looking at parsing a log file and inserting it into a MySQL Database. The output works but there seems to be a problem with the date pattern The following is my log Feb 15, 2017 09:35:43 AM GMT, INFO - INVALID\_…

---

## [In docker elasticsearch 5.2.1 x-pack can not login](https://discuss.elastic.co/t/in-docker-elasticsearch-5-2-1-x-pack-can-not-login/72590)

<div class="topic-metadata">

**Author:** [@dbaxyx](https://discuss.elastic.co/u/dbaxyx)\
**Replies:** 1\
**Last updated:** [January 24, 2017, 8:37am UTC](https://discuss.elastic.co/t/in-docker-elasticsearch-5-2-1-x-pack-can-not-login/72590 "2017-01-24T08:37:23Z")

</div>

Hi my dear, At first,Let me describe my installation environment 1)Three Nodes in Three docker container 2)after installed es node,the cluster are worked 3)I installed one x-pack in one node,and restart this docker c…

---

## [Import dashboard from json file to version 4.3](https://discuss.elastic.co/t/import-dashboard-from-json-file-to-version-4-3/36847)

<div class="topic-metadata">

**Author:** [@ssi](https://discuss.elastic.co/u/ssi)\
**Replies:** 1\
**Last updated:** [December 10, 2015, 1:43pm UTC](https://discuss.elastic.co/t/import-dashboard-from-json-file-to-version-4-3/36847 "2015-12-10T13:43:04Z")

</div>

hey is it even possible to import at json file in 4.3 im trying to import this file can it even be done?

---

## [Customizing Shield Login Dialog](https://discuss.elastic.co/t/customizing-shield-login-dialog/29690)

<div class="topic-metadata">

**Author:** [@mne](https://discuss.elastic.co/u/mne)\
**Replies:** 1\
**Last updated:** [September 21, 2015, 10:03am UTC](https://discuss.elastic.co/t/customizing-shield-login-dialog/29690 "2015-09-21T10:03:15Z")

</div>

Hi all, is the a configuration setting for a customized Shield Login-Message? The default shown by a browser is only "Shield" It would be nice to customize the prompt. Btw it would also be nice to have more user fri…

---

## [Tie together events with subfields](https://discuss.elastic.co/t/tie-together-events-with-subfields/28673)

<div class="topic-metadata">

**Author:** [@sissi](https://discuss.elastic.co/u/sissi)\
**Replies:** 1\
**Last updated:** [September 6, 2015, 2:27pm UTC](https://discuss.elastic.co/t/tie-together-events-with-subfields/28673 "2015-09-06T14:27:27Z")

</div>

i have a question about tie events together with subfields,log file like following: ### LOG FILE ### id 1 name paris-1-university city paris country French id 1 namestu cici age 18 sex F id 1 name paris-3-university c…

---

## [\[metricbeat\] - Prometheus module - invalid escape sequence '\\"'](https://discuss.elastic.co/t/metricbeat-prometheus-module-invalid-escape-sequence/308421)

<div class="topic-metadata">

**Author:** [@harikvemula](https://discuss.elastic.co/u/harikvemula)\
**Replies:** 2\
**Last updated:** [July 19, 2022, 10:30am UTC](https://discuss.elastic.co/t/metricbeat-prometheus-module-invalid-escape-sequence/308421 "2022-07-19T10:30:41Z")

</div>

Hi, Metricbeat: 7.10.2 I am trying to use Metricbeat prometheus module to pull metrics from Spring boot application with micrometer prometheus format . It fails with the following error 2022-06-29T12:21:37.658 +0000 …

---

## [User Authentication/Lockout mechanism](https://discuss.elastic.co/t/user-authentication-lockout-mechanism/260980)

<div class="topic-metadata">

**Author:** [@Boopathi\_Raj](https://discuss.elastic.co/u/Boopathi_Raj)\
**Replies:** 2\
**Last updated:** [January 14, 2021, 3:44am UTC](https://discuss.elastic.co/t/user-authentication-lockout-mechanism/260980 "2021-01-14T03:44:41Z")

</div>

Hi Team, We want to implement the following user Authentication mechanism for Elastic/Kibana users. Lockout after 6 invalid tries Lockout for a minimum of 30 mins or until administrator enables the account ( After Loc…

---

## [Logstash file read , mode read, sincedb, duplicate events after restart logstash](https://discuss.elastic.co/t/logstash-file-read-mode-read-sincedb-duplicate-events-after-restart-logstash/257126)

<div class="topic-metadata">

**Author:** [@slast](https://discuss.elastic.co/u/slast)\
**Replies:** 2\
**Last updated:** [December 1, 2020, 10:15am UTC](https://discuss.elastic.co/t/logstash-file-read-mode-read-sincedb-duplicate-events-after-restart-logstash/257126 "2020-12-01T10:15:12Z")

</div>

Hi Guys Can you help me I have a problem with reading files from logstash. After restarting logstash, it rereads the files again and sends events to Elastic. This folder is mounted from another server /opt/Logstore/…

---

## [Scripted fields for only documents with specific fields](https://discuss.elastic.co/t/scripted-fields-for-only-documents-with-specific-fields/234304)

<div class="topic-metadata">

**Author:** [@overlord11](https://discuss.elastic.co/u/overlord11)\
**Replies:** 2\
**Last updated:** [May 26, 2020, 6:51pm UTC](https://discuss.elastic.co/t/scripted-fields-for-only-documents-with-specific-fields/234304 "2020-05-26T18:51:17Z")

</div>

Hello fellow users. Recently if been trying use the scripted fields in kibana 7.\*. I have allot of different documents with each different fields. But if i use my scripted field it creates the field in all the documents…

---

## [How to use more than one S3 config?](https://discuss.elastic.co/t/how-to-use-more-than-one-s3-config/219872)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 2\
**Last updated:** [February 19, 2020, 1:52am UTC](https://discuss.elastic.co/t/how-to-use-more-than-one-s3-config/219872 "2020-02-19T01:52:51Z")

</div>

We are currently using Amazon S3 for snapshots, but am investigating the possibility of using a S3-compatible solution instead. When looking at the docs here: https://www.elastic.co/guide/en/elasticsearch/plugins/current…

---

## [Filebeat doesn't harvest](https://discuss.elastic.co/t/filebeat-doesnt-harvest/219218)

<div class="topic-metadata">

**Author:** [@Noureddine\_Brahmi](https://discuss.elastic.co/u/Noureddine_Brahmi)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 7:30am UTC](https://discuss.elastic.co/t/filebeat-doesnt-harvest/219218 "2020-02-17T07:30:04Z")

</div>

Hello, I've been facing a probem since a while now. My filebeat plugin does not harvest the fields that i ask him to harvest in my conf file. I'm using filebeat 7.6.0 My conf: filebeat.inputs: - type: log paths: …

---

## [How Shards and Replicas distributed on the cluster](https://discuss.elastic.co/t/how-shards-and-replicas-distributed-on-the-cluster/156108)

<div class="topic-metadata">

**Author:** [@vijayakrishna.rg](https://discuss.elastic.co/u/vijayakrishna.rg)\
**Replies:** 2\
**Last updated:** [November 16, 2018, 6:53pm UTC](https://discuss.elastic.co/t/how-shards-and-replicas-distributed-on-the-cluster/156108 "2018-11-16T18:53:52Z")

</div>

Hi, I have provisioned Elastic Cluster with 1 node and index has been divided into 5 shards, Later i have added another node into the cluster and it's by default shows 5 shards on new node, how this Shards mechanism wor…

---

## [Watcher fails when an external webservice is unreachable](https://discuss.elastic.co/t/watcher-fails-when-an-external-webservice-is-unreachable/141507)

<div class="topic-metadata">

**Author:** [@JeffreyH1989](https://discuss.elastic.co/u/JeffreyH1989)\
**Replies:** 2\
**Last updated:** [July 25, 2018, 8:25am UTC](https://discuss.elastic.co/t/watcher-fails-when-an-external-webservice-is-unreachable/141507 "2018-07-25T08:25:26Z")

</div>

Hello, For simple monitoring of our webservices, I'm creating some watchers based on response codes. However, when a service is unreachable (not something like response 404 not found, but an offline server) watcher exe…

---

## [Problem connecting AWS nodes with 5.4.0](https://discuss.elastic.co/t/problem-connecting-aws-nodes-with-5-4-0/86482)

<div class="topic-metadata">

**Author:** [@Jaff](https://discuss.elastic.co/u/Jaff)\
**Replies:** 2\
**Last updated:** [May 19, 2017, 8:13pm UTC](https://discuss.elastic.co/t/problem-connecting-aws-nodes-with-5-4-0/86482 "2017-05-19T20:13:28Z")

</div>

I am in the process of migrating ES version 2 infrastructure code (chef) to ES 5.4.0 and discovered many breaking changes. I learned I cannot put the cloud.aws.xxx into config/elasticsearch.yml, and I am loading into key…

---

## [NoNodeAvailableException None of the configured nodes are available:](https://discuss.elastic.co/t/nonodeavailableexception-none-of-the-configured-nodes-are-available/82446)

<div class="topic-metadata">

**Author:** [@mahade01](https://discuss.elastic.co/u/mahade01)\
**Replies:** 2\
**Last updated:** [April 17, 2017, 4:36pm UTC](https://discuss.elastic.co/t/nonodeavailableexception-none-of-the-configured-nodes-are-available/82446 "2017-04-17T16:36:54Z")

</div>

I was upgrading ElasticSeach to 5.2.0 in my project from 1.0.1. I have the below setting in my Java client :slight\_smile: Settings settings = Settings.builder().put("cluster.name", SpringPropertiesUtil.getProperty("clu…

---

## [Curator current month to date](https://discuss.elastic.co/t/curator-current-month-to-date/73555)

<div class="topic-metadata">

**Author:** [@crags](https://discuss.elastic.co/u/crags)\
**Replies:** 2\
**Last updated:** [February 1, 2017, 7:13pm UTC](https://discuss.elastic.co/t/curator-current-month-to-date/73555 "2017-02-01T19:13:46Z")

</div>

Hi Is there a way in Curator I can add an alias to all indices in the current month? So, if say today is 1st Feb (which is it) how would I set up an alias action to add an alias of "current\_month" to anything from the …

---

## [Maven and X-Pack 5.0.0-alpha5](https://discuss.elastic.co/t/maven-and-x-pack-5-0-0-alpha5/61716)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 2\
**Last updated:** [September 29, 2016, 8:59am UTC](https://discuss.elastic.co/t/maven-and-x-pack-5-0-0-alpha5/61716 "2016-09-29T08:59:15Z")

</div>

Hi, I'm experimenting by porting a 2.x application to 5.0. This application requires Shield. When I depend on org.elasticsearch.plugin/x-pack/5.0.0-alpha5 (there's no beta1?), I get the following: \[ERROR\] Failed to exe…

---

## [Logstash information on csv loaded](https://discuss.elastic.co/t/logstash-information-on-csv-loaded/37847)

<div class="topic-metadata">

**Author:** [@chicco\_95](https://discuss.elastic.co/u/chicco_95)\
**Replies:** 2\
**Last updated:** [January 4, 2016, 11:05am UTC](https://discuss.elastic.co/t/logstash-information-on-csv-loaded/37847 "2016-01-04T11:05:35Z")

</div>

hi, How can I config Logstash filter to know: 1) how many records in a csv have been uploaded 2) how many records in a csv have been updated 3) how many records in a csv have NOT been uploaded thank you

---

## [Parent/child with logstash 2.0 or 2.1](https://discuss.elastic.co/t/parent-child-with-logstash-2-0-or-2-1/35609)

<div class="topic-metadata">

**Author:** [@fchantrel](https://discuss.elastic.co/u/fchantrel)\
**Replies:** 2\
**Last updated:** [November 26, 2015, 8:04pm UTC](https://discuss.elastic.co/t/parent-child-with-logstash-2-0-or-2-1/35609 "2015-11-26T20:04:16Z")

</div>

Hi, I would like to migrate my elasticsearch cluster to 2.x but I am blocked with a problem on indexing child documents with Logstash. In 1.6 I had something working but parent/child relation has changed since 2.0 and I …

---

## [Monitoring indices not showing metrics details](https://discuss.elastic.co/t/monitoring-indices-not-showing-metrics-details/94956)

<div class="topic-metadata">

**Author:** [@mbritton](https://discuss.elastic.co/u/mbritton)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 12:58pm UTC](https://discuss.elastic.co/t/monitoring-indices-not-showing-metrics-details/94956 "2017-07-28T12:58:45Z")

</div>

Hello, For information, if you can see number of indices but not metric details for each indice in monitoring section, i’ ve the solution :wink: After 3 days of research, i found that’s because your servers are not ntp…

---

## [Filebeat ILM policy question](https://discuss.elastic.co/t/filebeat-ilm-policy-question/316077)

<div class="topic-metadata">

**Author:** [@Mark\_Visser](https://discuss.elastic.co/u/Mark_Visser)\
**Replies:** 8\
**Last updated:** [October 7, 2022, 5:11pm UTC](https://discuss.elastic.co/t/filebeat-ilm-policy-question/316077 "2022-10-07T17:11:57Z")

</div>

Hello, For my filebeat rollover to work it expects an alias to be set on the index. In the past you were able to pass along a rollover\_alias in the filebeat config but that is not possible anymore. I found you can manu…

---

## [409 Conflict on update\_by\_query consecutive calls](https://discuss.elastic.co/t/409-conflict-on-update-by-query-consecutive-calls/130667)

<div class="topic-metadata">

**Author:** [@Anton\_Garakh](https://discuss.elastic.co/u/Anton_Garakh)\
**Replies:** 0\
**Last updated:** [May 4, 2018, 5:03pm UTC](https://discuss.elastic.co/t/409-conflict-on-update-by-query-consecutive-calls/130667 "2018-05-04T17:03:20Z")

</div>

Hi guys Came to the point where I can't solve the problem myself.. I have to update big enough amount of documents and I have to do it in cycle. That's the reason why I have to perform consecutive update\_by\_query reque…

---

## [Fluentd to logstash](https://discuss.elastic.co/t/fluentd-to-logstash/70887)

<div class="topic-metadata">

**Author:** [@Nir\_Dothan](https://discuss.elastic.co/u/Nir_Dothan)\
**Replies:** 0\
**Last updated:** [January 8, 2017, 4:43pm UTC](https://discuss.elastic.co/t/fluentd-to-logstash/70887 "2017-01-08T16:43:01Z")

</div>

Hi, what is the recommended way to ship from fluentd to logstash? We need to run some post processing in a central location after logs are shipped by fluentd from remote servers. I've tried using out\_forward plugin on t…

---

## [.kibana index template](https://discuss.elastic.co/t/kibana-index-template/271096)

<div class="topic-metadata">

**Author:** [@bentleg1](https://discuss.elastic.co/u/bentleg1)\
**Replies:** 4\
**Last updated:** [April 27, 2021, 7:08am UTC](https://discuss.elastic.co/t/kibana-index-template/271096 "2021-04-27T07:08:55Z")

</div>

Hello. I want to add several replicas for system .kibana index. I have created template. PUT \_template/kibana { "index\_patterns": ".kibana\*", "settings": { "number\_of\_replicas": "5" } } …

---

## [Hot-Warm nodes - Indexes replicated across nodes](https://discuss.elastic.co/t/hot-warm-nodes-indexes-replicated-across-nodes/231240)

<div class="topic-metadata">

**Author:** [@Camilo\_Diaz](https://discuss.elastic.co/u/Camilo_Diaz)\
**Replies:** 4\
**Last updated:** [May 11, 2020, 4:01am UTC](https://discuss.elastic.co/t/hot-warm-nodes-indexes-replicated-across-nodes/231240 "2020-05-11T04:01:36Z")

</div>

Hi, I have 2 data nodes, one as master (hot) and other as data (warm) authmattix x.x.x. box\_type hot pukeko x.x.x.x box\_type warm I have set all the indexes to number\_of\_replicas= 0 on …

---

## [Extract](https://discuss.elastic.co/t/extract/126754)

<div class="topic-metadata">

**Author:** [@proximator](https://discuss.elastic.co/u/proximator)\
**Replies:** 4\
**Last updated:** [April 4, 2018, 4:31pm UTC](https://discuss.elastic.co/t/extract/126754 "2018-04-04T16:31:08Z")

</div>

Hi I would like to build a new field from my error messages using some grok patterns, the idea is to extract the class name from the first line and then from each single line that starts with "Caused by:" In the exampl…

---

## [Parsing array elements in logs into array](https://discuss.elastic.co/t/parsing-array-elements-in-logs-into-array/109407)

<div class="topic-metadata">

**Author:** [@tanji](https://discuss.elastic.co/u/tanji)\
**Replies:** 4\
**Last updated:** [November 28, 2017, 3:21pm UTC](https://discuss.elastic.co/t/parsing-array-elements-in-logs-into-array/109407 "2017-11-28T15:21:18Z")

</div>

My logs contain arbitrary array elements e.g. item\[0\]=value0, item\[1\]=value1. The number of elements can vary from logline to logline. I'm looking for a way to parse those elements and combine them into an array, e.g. i…

---

## [Report Generator](https://discuss.elastic.co/t/report-generator/108313)

<div class="topic-metadata">

**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\
**Replies:** 4\
**Last updated:** [November 20, 2017, 10:20pm UTC](https://discuss.elastic.co/t/report-generator/108313 "2017-11-20T22:20:25Z")

</div>

Hi all, Is there a way for me to generate PDF reports from the Kibana dashboards I have created? I understand this can be done using X-Pack, but the cost of X-Pack make this not a feasible option for me. Any suggestio…

---

## [Logstash memcached filter plugin can not open more then 4 connection](https://discuss.elastic.co/t/logstash-memcached-filter-plugin-can-not-open-more-then-4-connection/285010)

<div class="topic-metadata">

**Author:** [@ramakrushna.sahu](https://discuss.elastic.co/u/ramakrushna.sahu)\
**Replies:** 5\
**Last updated:** [September 30, 2021, 9:27am UTC](https://discuss.elastic.co/t/logstash-memcached-filter-plugin-can-not-open-more-then-4-connection/285010 "2021-09-30T09:27:35Z")

</div>

Hi Team, Need help on logstash Memcached filter plugin. I see the logstash memcached filter plugin can not open more than 4 connections to Memcached server. is there any configuration required for this memcached filte…

---

## [Scan Snapshot Repository](https://discuss.elastic.co/t/scan-snapshot-repository/257511)

<div class="topic-metadata">

**Author:** [@EnriqueM](https://discuss.elastic.co/u/EnriqueM)\
**Replies:** 5\
**Last updated:** [December 14, 2020, 7:59am UTC](https://discuss.elastic.co/t/scan-snapshot-repository/257511 "2020-12-14T07:59:45Z")

</div>

Good morning. After a data corruption in a server we have the path of the Snapshots repository. When adding the repository on a new cluster, the Snapshots it contains do not appear. Is there any way to recover the inf…

---

## [Problem beetween elastic and logstash: csv files are saved twice](https://discuss.elastic.co/t/problem-beetween-elastic-and-logstash-csv-files-are-saved-twice/236655)

<div class="topic-metadata">

**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\
**Replies:** 5\
**Last updated:** [June 22, 2020, 8:27am UTC](https://discuss.elastic.co/t/problem-beetween-elastic-and-logstash-csv-files-are-saved-twice/236655 "2020-06-22T08:27:13Z")

</div>

Hello ! I use ELK to parse log file and csv file but yesterday a little problem appeared. All the data in my csv file were saved twice so a 1000 lines document is now a 2000 lines document. In fact you just have to divi…

---

## [Logstash throwing error for filter portion when trying to convert csv to elastic search](https://discuss.elastic.co/t/logstash-throwing-error-for-filter-portion-when-trying-to-convert-csv-to-elastic-search/131584)

<div class="topic-metadata">

**Author:** [@Nithin\_Nk](https://discuss.elastic.co/u/Nithin_Nk)\
**Replies:** 5\
**Last updated:** [May 14, 2018, 3:42pm UTC](https://discuss.elastic.co/t/logstash-throwing-error-for-filter-portion-when-trying-to-convert-csv-to-elastic-search/131584 "2018-05-14T15:42:11Z")

</div>

Fixed so deleting

---

## [\[ANN\] SegmentSpy - Site Plugin to watch segments in realtime](https://discuss.elastic.co/t/ann-segmentspy-site-plugin-to-watch-segments-in-realtime/10608)

<div class="topic-metadata">

**Author:** [@polyfractal](https://discuss.elastic.co/u/polyfractal)\
**Replies:** 5\
**Last updated:** [February 12, 2013, 11:27pm UTC](https://discuss.elastic.co/t/ann-segmentspy-site-plugin-to-watch-segments-in-realtime/10608 "2013-02-12T23:27:06Z")

</div>

A while ago, Lukas showed me an article titled "Visualizing Lucene's Segment Merges", written by Mike McCandless on his blog. Since reading that article I've been enamored with the segment visualizations that he c…

---

## [Ingest and Conditional Routing](https://discuss.elastic.co/t/ingest-and-conditional-routing/346231)

<div class="topic-metadata">

**Author:** [@Cal](https://discuss.elastic.co/u/Cal)\
**Replies:** 6\
**Last updated:** [November 2, 2023, 1:00pm UTC](https://discuss.elastic.co/t/ingest-and-conditional-routing/346231 "2023-11-02T13:00:40Z")

</div>

I believe this is a Logstash issue, but please correct me if I am wrong. Currently, I have a Kibana instance set up with a lengthy EQL filter to search a description field for keywords. I want to do the filtering as pa…

---

## [Java API Client 8.x SettingsSimilarity doesnt have field 'type' for correct request completion](https://discuss.elastic.co/t/java-api-client-8-x-settingssimilarity-doesnt-have-field-type-for-correct-request-completion/311464)

<div class="topic-metadata">

**Author:** [@notricky](https://discuss.elastic.co/u/notricky)\
**Replies:** 6\
**Last updated:** [August 16, 2022, 11:42pm UTC](https://discuss.elastic.co/t/java-api-client-8-x-settingssimilarity-doesnt-have-field-type-for-correct-request-completion/311464 "2022-08-16T23:42:30Z")

</div>

When you use 8.x Java Client to create an index within CreateIndexRequest.Builder and specify similarity in settings builder, there is no field type, which Elasticsearch server waits for and it returns an error, pointing…

---

## [Winlogbeat not dropping multicast traffic using drop\_event.when.or](https://discuss.elastic.co/t/winlogbeat-not-dropping-multicast-traffic-using-drop-event-when-or/259428)

<div class="topic-metadata">

**Author:** [@jtillman2020](https://discuss.elastic.co/u/jtillman2020)\
**Replies:** 6\
**Last updated:** [December 23, 2020, 5:58pm UTC](https://discuss.elastic.co/t/winlogbeat-not-dropping-multicast-traffic-using-drop-event-when-or/259428 "2020-12-23T17:58:40Z")

</div>

Using drop\_event.when.or I've attempted to exclude multicast traffic logs from being sent over as well as logs containing the keyword "zabbix". However, I am still receiving these events. winlogbeat.event\_logs: - name…

---

## [ELK and mysql geopoint](https://discuss.elastic.co/t/elk-and-mysql-geopoint/192888)

<div class="topic-metadata">

**Author:** [@Axel\_MORVAN](https://discuss.elastic.co/u/Axel_MORVAN)\
**Replies:** 6\
**Last updated:** [July 30, 2019, 2:42pm UTC](https://discuss.elastic.co/t/elk-and-mysql-geopoint/192888 "2019-07-30T14:42:35Z")

</div>

Hello, I need to create a kibana dashboard with a coordinate map. I import data from a mysql database with latitude and longitute. But I can't create a field type "geo\_point", and after a long search I come to ask you…

---

## [How to use client nodes](https://discuss.elastic.co/t/how-to-use-client-nodes/38366)

<div class="topic-metadata">

**Author:** [@mad\_min](https://discuss.elastic.co/u/mad_min)\
**Replies:** 6\
**Last updated:** [January 6, 2016, 6:56pm UTC](https://discuss.elastic.co/t/how-to-use-client-nodes/38366 "2016-01-06T18:56:26Z")

</div>

I have a cluster of 4 master, 8 data and 2 client/query nodes. This is ingesting logs from logstash. Currently, logstash is sending to all the data nodes (assumption: its load balancing). Is this the most optimal way? Sh…

---

## [I cannot login Kibana](https://discuss.elastic.co/t/i-cannot-login-kibana/285110)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 1\
**Last updated:** [September 25, 2021, 3:19am UTC](https://discuss.elastic.co/t/i-cannot-login-kibana/285110 "2021-09-25T03:19:26Z")

</div>

On the kibana https://127.0.0.1:5601 page, I log in by username elastic and password, but I got an error: Username or password is incorrect. Please try again. Http response: {"statusCode":401,"error":"Unauthorized","mes…

[Previous page](https://discuss.elastic.co/top.md?page=1656&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1658&per_page=50&period=all)
