# Top **URL:** https://discuss.elastic.co/top.md?page=1660&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1661 --- ## [I use Spring-data-elasticsearch 3.1.2 to connect to elasticsearch6.2.4 but has some error](https://discuss.elastic.co/t/i-use-spring-data-elasticsearch-3-1-2-to-connect-to-elasticsearch6-2-4-but-has-some-error/187847)
**Author:** [@zangju2](https://discuss.elastic.co/u/zangju2)\ **Replies:** 1\ **Last updated:** [June 28, 2019, 12:19pm UTC](https://discuss.elastic.co/t/i-use-spring-data-elasticsearch-3-1-2-to-connect-to-elasticsearch6-2-4-but-has-some-error/187847 "2019-06-28T12:19:15Z")
java.lang.IllegalArgumentException: maxNumComponents: 1 (expected: \>= 2) at io.netty.buffer.CompositeByteBuf.(CompositeByteBuf.java:68) at io.netty.buffer.CompositeByteBuf.(CompositeByteBuf.java:78) at io.netty.buffer… --- ## [How to prevent logging logstash logs in /var/log/messages](https://discuss.elastic.co/t/how-to-prevent-logging-logstash-logs-in-var-log-messages/145560)
**Author:** [@Bharadwaj](https://discuss.elastic.co/u/Bharadwaj)\ **Replies:** 1\ **Last updated:** [August 25, 2018, 2:04pm UTC](https://discuss.elastic.co/t/how-to-prevent-logging-logstash-logs-in-var-log-messages/145560 "2018-08-25T14:04:23Z")
Hi all logstash data is written to / var / log / messages. This causes the server capacity to continue to grow. Is there a way to prevent this data from being written to / var / log / messages? Thank you --- ## [How to use one scripted field to inside another scripted field](https://discuss.elastic.co/t/how-to-use-one-scripted-field-to-inside-another-scripted-field/98776)
**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\ **Replies:** 1\ **Last updated:** [August 30, 2017, 1:18pm UTC](https://discuss.elastic.co/t/how-to-use-one-scripted-field-to-inside-another-scripted-field/98776 "2017-08-30T13:18:41Z")
I have created two scripted field 'oldDate’ oldDate = doc\[‘Date’\].value. and 'newDate’ newDate = doc\[‘oldDate’\]. How can i use oldDate scripted field in second scripted field? --- ## [Elasticsearch-hadoop not discovering all fields in the index](https://discuss.elastic.co/t/elasticsearch-hadoop-not-discovering-all-fields-in-the-index/86575)
**Author:** [@Dustin\_Decker](https://discuss.elastic.co/u/Dustin_Decker)\ **Replies:** 1\ **Last updated:** [May 21, 2017, 7:03pm UTC](https://discuss.elastic.co/t/elasticsearch-hadoop-not-discovering-all-fields-in-the-index/86575 "2017-05-21T19:03:52Z")
The index i'm querying has over 400 fields, and each document contains a subset of these fields. When performing a simple count query on a src\_ip field, I see get this exception: Exception in thread "main" org.apache… --- ## [Elastic search + maprDB integration](https://discuss.elastic.co/t/elastic-search-maprdb-integration/35269)
**Author:** [@dayanand](https://discuss.elastic.co/u/dayanand)\ **Replies:** 1\ **Last updated:** [November 23, 2015, 9:36pm UTC](https://discuss.elastic.co/t/elastic-search-maprdb-integration/35269 "2015-11-23T21:36:06Z")
Hi Team, I have the below setup. Mapr hadoop 5.0.0 is installed on ubuntu 14.04 elastic search is installed on debain 7 One of our customer is trying to Mapr hadoop with elastic search for auto replicating tables b… --- ## [How to find out $metrics.lastexecutionstart value](https://discuss.elastic.co/t/how-to-find-out-metrics-lastexecutionstart-value/29017)
**Author:** [@vsreddy](https://discuss.elastic.co/u/vsreddy)\ **Replies:** 1\ **Last updated:** [September 10, 2015, 12:02pm UTC](https://discuss.elastic.co/t/how-to-find-out-metrics-lastexecutionstart-value/29017 "2015-09-10T12:02:00Z")
How to find out $metrics.lastexecutionstart value --- ## [Windows support?](https://discuss.elastic.co/t/windows-support/24421)
**Author:** [@andrea\_patricelli](https://discuss.elastic.co/u/andrea_patricelli)\ **Replies:** 1\ **Last updated:** [June 30, 2015, 1:22pm UTC](https://discuss.elastic.co/t/windows-support/24421 "2015-06-30T13:22:48Z")
Hi all, there will be in the near future support by packetbeat for Windows? --- ## [How to Configure FileBeat for Spark Headnode ( HDInsight Cluster in Azure)](https://discuss.elastic.co/t/how-to-configure-filebeat-for-spark-headnode-hdinsight-cluster-in-azure/87995)
**Author:** [@arvindsing](https://discuss.elastic.co/u/arvindsing)\ **Replies:** 0\ **Last updated:** [June 1, 2017, 10:18pm UTC](https://discuss.elastic.co/t/how-to-configure-filebeat-for-spark-headnode-hdinsight-cluster-in-azure/87995 "2017-06-01T22:18:30Z")
Our logs are at DFS and we can access them using .... hadoop fs -cat wasbs://yourcontainer@youraccount.blob.core.windows.net/testDir/testFile test file content Now we want to configure filebeats here so that we can shi… --- ## [Settin up the DOTNET\_STARTUP\_HOOKS](https://discuss.elastic.co/t/settin-up-the-dotnet-startup-hooks/271782)
**Author:** [@Henk\_Stobbe](https://discuss.elastic.co/u/Henk_Stobbe)\ **Replies:** 2\ **Last updated:** [April 30, 2021, 2:13pm UTC](https://discuss.elastic.co/t/settin-up-the-dotnet-startup-hooks/271782 "2021-04-30T14:13:24Z")
Hello, set DOTNET\_STARTUP\_HOOKS=\[pathToAgent\]\\ElasticApmAgentStartupHook.dllI I use tis to set up .NET core. How do I configure this further? I see nothing in the documentation, KR Henk --- ## [How to configure logstash file to make nested object inside another nested filed from sql query?](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077)
**Author:** [@My-project-repositor](https://discuss.elastic.co/u/My-project-repositor)\ **Replies:** 2\ **Last updated:** [April 6, 2021, 10:28am UTC](https://discuss.elastic.co/t/how-to-configure-logstash-file-to-make-nested-object-inside-another-nested-filed-from-sql-query/268077 "2021-04-06T10:28:12Z")
I am new in Elasticsearch and logstash and I have an issue with nested objects. So what I want to ask is how can I create index with multiple nested fields inside another nested fields. How can I build the data inside l… --- ## [Split pipeline, multiple pipiline filter in logstash management center](https://discuss.elastic.co/t/split-pipeline-multiple-pipiline-filter-in-logstash-management-center/196297)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 2\ **Last updated:** [August 28, 2019, 3:08am UTC](https://discuss.elastic.co/t/split-pipeline-multiple-pipiline-filter-in-logstash-management-center/196297 "2019-08-28T03:08:21Z")
As we as knew, with logstash pipeline, we can use multiple pipeline for multiple filter logstash on event and logstash will be execute pipeline order by naming of pipline For example : 001-input-beat.conf 002-input-wi… --- ## [Logstash Drop Lines](https://discuss.elastic.co/t/logstash-drop-lines/163273)
**Author:** [@rcd1189](https://discuss.elastic.co/u/rcd1189)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 6:48pm UTC](https://discuss.elastic.co/t/logstash-drop-lines/163273 "2019-01-15T18:48:04Z")
Hi All. I Have a Weblogic log how below: Jan 7, 2019 5:29:13 PM com.clarify.common.filter.SearchFilterBaseWB Start doLoad() from SearchFilterBaseWB INFO: ENTRY Warning (Not critical): Query will be done against view.… --- ## [Winlogbeat match eventdata param1](https://discuss.elastic.co/t/winlogbeat-match-eventdata-param1/160953)
**Author:** [@Siva\_](https://discuss.elastic.co/u/Siva_)\ **Replies:** 2\ **Last updated:** [December 16, 2018, 2:44am UTC](https://discuss.elastic.co/t/winlogbeat-match-eventdata-param1/160953 "2018-12-16T02:44:37Z")
Hi community, How can i use the eventdata param1 to filter in winlogbeat? currently, I am using regex on the message but hoping to avoid it for performance. processors: - drop\_event: when: not: regexp: … --- ## [Make fails for Examplebeat on Debian 8](https://discuss.elastic.co/t/make-fails-for-examplebeat-on-debian-8/120602)
**Author:** [@dcroonen](https://discuss.elastic.co/u/dcroonen)\ **Replies:** 2\ **Last updated:** [February 20, 2018, 2:58pm UTC](https://discuss.elastic.co/t/make-fails-for-examplebeat-on-debian-8/120602 "2018-02-20T14:58:59Z")
Hi everyone I followed the manual on how to create your own beat (examplebeat/countbeat), but I got stuck on the make part on a Debian 8 system. I got the following errors: root@bamboojessie:~/go/src/github.com/dcroone… --- ## [Grok filter not working after add tags](https://discuss.elastic.co/t/grok-filter-not-working-after-add-tags/97892)
**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\ **Replies:** 2\ **Last updated:** [August 23, 2017, 8:01am UTC](https://discuss.elastic.co/t/grok-filter-not-working-after-add-tags/97892 "2017-08-23T08:01:43Z")
Hi experts. I already setup ELK stack and it working normaly. with my grok filter grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:Time} %{WORD:Method} %{NUMBER:Http\_stt} %{NUMBER:ResTime}" } add\_field =\>… --- ## [Problème de merge de logs Postgres](https://discuss.elastic.co/t/probleme-de-merge-de-logs-postgres/88822)
**Author:** [@jstn](https://discuss.elastic.co/u/jstn)\ **Replies:** 2\ **Last updated:** [July 1, 2017, 8:49am UTC](https://discuss.elastic.co/t/probleme-de-merge-de-logs-postgres/88822 "2017-07-01T08:49:35Z")
Bonjour, Je souhaite indexer les logs Postgres qui sont stockés sur mes différents serveurs. Pour cela j'utilise Rsyslog pour envoyer les logs vers logstash. Les requêtes Postgres sont envoyés sur plusieurs lignes: \[3… --- ## [Sub queries with Spark hadoop](https://discuss.elastic.co/t/sub-queries-with-spark-hadoop/73189)
**Author:** [@shaimr](https://discuss.elastic.co/u/shaimr)\ **Replies:** 2\ **Last updated:** [February 5, 2017, 8:00am UTC](https://discuss.elastic.co/t/sub-queries-with-spark-hadoop/73189 "2017-02-05T08:00:38Z")
Hey, first time here, so apologies if it is a duplicate. I use ES-Hadoop to run over all index data, but I need to perform sub-queries inside my mapPartition. I query for entire index, then run over it with mapPartitio… --- ## [MasterNotDiscoveredException in JAVA! Have to change the cluster name](https://discuss.elastic.co/t/masternotdiscoveredexception-in-java-have-to-change-the-cluster-name/40076)
**Author:** [@Yongyao\_Jiang](https://discuss.elastic.co/u/Yongyao_Jiang)\ **Replies:** 2\ **Last updated:** [January 26, 2016, 4:38am UTC](https://discuss.elastic.co/t/masternotdiscoveredexception-in-java-have-to-change-the-cluster-name/40076 "2016-01-26T04:38:51Z")
Hey guys, I was doing some ES test with my Java program this morning, then strange things happened - the program can be finished successfully, but I could not find any data through Sense UI. Finally, I found out that … --- ## [\`existQuery\` Elasticsearch 2.0 Java API usage](https://discuss.elastic.co/t/existquery-elasticsearch-2-0-java-api-usage/35123)
**Author:** [@Arinto\_Murdopo](https://discuss.elastic.co/u/Arinto_Murdopo)\ **Replies:** 2\ **Last updated:** [November 23, 2015, 5:35am UTC](https://discuss.elastic.co/t/existquery-elasticsearch-2-0-java-api-usage/35123 "2015-11-23T05:35:55Z")
I want to use existQuery in my Java code. We're using Elasticsearch 2.0. Should I wrap the query as a filter using constantScoreQuery? (as shown by the Query DSL documentation) The code snippet will be something like t… --- ## [Bulk UDP deprecated?](https://discuss.elastic.co/t/bulk-udp-deprecated/22853)
**Author:** [@Steve\_Freegard\_2](https://discuss.elastic.co/u/Steve_Freegard_2)\ **Replies:** 2\ **Last updated:** [November 18, 2015, 12:39pm UTC](https://discuss.elastic.co/t/bulk-udp-deprecated/22853 "2015-11-18T12:39:02Z")
Hi all, Can anyone tell me why the Bulk UDP service is being deprecated? I'm using it currently as it's a handy way to send non-critical data to ES without the associated overheads of doing it via the standard AP… --- ## [ElasticSearch Master : ClassNotfound Exception PluginManager](https://discuss.elastic.co/t/elasticsearch-master-classnotfound-exception-pluginmanager/10349)
**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\ **Replies:** 2\ **Last updated:** [January 16, 2013, 9:32am UTC](https://discuss.elastic.co/t/elasticsearch-master-classnotfound-exception-pluginmanager/10349 "2013-01-16T09:32:27Z")
Hello, Just built ES from today's Master branch. When tryong to install a plugin I just get a ClassNotFoundException... Z:\\Mes\_Projets\\elasticsearch-master\>bin\\plugin.bat -install jprante/elasticsearc h-river-jdbc/… --- ## [Ingest Pipeline Failure Processor Shard Failures](https://discuss.elastic.co/t/ingest-pipeline-failure-processor-shard-failures/330541)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 4\ **Last updated:** [May 31, 2023, 9:25pm UTC](https://discuss.elastic.co/t/ingest-pipeline-failure-processor-shard-failures/330541 "2023-05-31T21:25:18Z")
I set up an ingest pipeline in Dev Tools console with this command PUT \_ingest/pipeline/ams-log-pipeline { "processors": \[ { "dissect": { "field": "message", "pattern": "%{@timestamp} %{logLe… --- ## [Databricks Spark SQL and Elasticsearch](https://discuss.elastic.co/t/databricks-spark-sql-and-elasticsearch/328028)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 4\ **Last updated:** [March 22, 2023, 6:19am UTC](https://discuss.elastic.co/t/databricks-spark-sql-and-elasticsearch/328028 "2023-03-22T06:19:45Z")
Is there any documentation related to Databricks Spark/Spark SQL integration with elasticsearch? --- ## [How to switch dataview/lens to new index without downtime?](https://discuss.elastic.co/t/how-to-switch-dataview-lens-to-new-index-without-downtime/321191)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 4\ **Last updated:** [December 22, 2022, 4:01pm UTC](https://discuss.elastic.co/t/how-to-switch-dataview-lens-to-new-index-without-downtime/321191 "2022-12-22T16:01:52Z")
Hello :wave: , we have the following setup: Elastic 8.5.1 Cluster, Kibana 8.5.1. Multiple indices like data1, data1\_1, data2, ... dataview "data1\*" (wildcard) to get all the data from data1 & data1\_1 We have the foll… --- ## [Setup repository on cluster across two servers](https://discuss.elastic.co/t/setup-repository-on-cluster-across-two-servers/286945)
**Author:** [@alfianaf](https://discuss.elastic.co/u/alfianaf)\ **Replies:** 4\ **Last updated:** [October 18, 2021, 5:15am UTC](https://discuss.elastic.co/t/setup-repository-on-cluster-across-two-servers/286945 "2021-10-18T05:15:52Z")
Hello, I have a cluster set up on two servers, Node master and coordination on IP 10.10.10.1. Node data on IP 10.10.10.2. I want to set up repository on my cluster, here is my question How I can declare my path.repo… --- ## [Accessing kibana over HTTPS](https://discuss.elastic.co/t/accessing-kibana-over-https/227677)
**Author:** [@lw24](https://discuss.elastic.co/u/lw24)\ **Replies:** 4\ **Last updated:** [April 13, 2020, 4:27pm UTC](https://discuss.elastic.co/t/accessing-kibana-over-https/227677 "2020-04-13T16:27:41Z")
I have tried to follow the steps outlined under "Detections configuration and index privilege prerequisites" I have modified elasticsearch.yml to be: network.host: 0.0.0.0 http.port: 9200 xpack.security.enabled: true … --- ## [Visualization filter error after migration from 7.2.0 to 7.3.1](https://discuss.elastic.co/t/visualization-filter-error-after-migration-from-7-2-0-to-7-3-1/197721)
**Author:** [@Oakar](https://discuss.elastic.co/u/Oakar)\ **Replies:** 4\ **Last updated:** [September 8, 2019, 10:14am UTC](https://discuss.elastic.co/t/visualization-filter-error-after-migration-from-7-2-0-to-7-3-1/197721 "2019-09-08T10:14:21Z")
Hi, i'm new to Kibana (to Elastic stack also) and i'm facing an issue since the last migration from 7.2.0 to 7.3.1. I have a dashboard with visualizations, when i want apply filter from a pie chart for example, nothing… --- ## [Index API queries taking long time](https://discuss.elastic.co/t/index-api-queries-taking-long-time/155413)
**Author:** [@bondido](https://discuss.elastic.co/u/bondido)\ **Replies:** 4\ **Last updated:** [November 13, 2018, 9:23am UTC](https://discuss.elastic.co/t/index-api-queries-taking-long-time/155413 "2018-11-13T09:23:53Z")
Hi, On our ES 6.x (various versions tested with 6.4.1 being the last one) installed on Ubuntu 16 hosts we are experiencing temporary problems with Indexing queries performance. Single query can take up to 10 or more se… --- ## [Dynamically assigning timezone from a filebeat event](https://discuss.elastic.co/t/dynamically-assigning-timezone-from-a-filebeat-event/125669)
**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\ **Replies:** 4\ **Last updated:** [March 27, 2018, 7:03pm UTC](https://discuss.elastic.co/t/dynamically-assigning-timezone-from-a-filebeat-event/125669 "2018-03-27T19:03:52Z")
I am shipping logs to logstash from filebeat. I have added the processor to add beat.timezone. But, when beat.timezone returns "EDT" (which currently is correct), logstash fails to parse as its unable to identify EDT. in… --- ## [How can I avoid losing data when update es's data by three java threads?](https://discuss.elastic.co/t/how-can-i-avoid-losing-data-when-update-ess-data-by-three-java-threads/36185)
**Author:** [@ourRoy](https://discuss.elastic.co/u/ourRoy)\ **Replies:** 4\ **Last updated:** [December 3, 2015, 1:12am UTC](https://discuss.elastic.co/t/how-can-i-avoid-losing-data-when-update-ess-data-by-three-java-threads/36185 "2015-12-03T01:12:51Z")
how can i avoid losing data when update es's data by three java threads? for example： one message In es serv\_id name age sex 10001 roy 24 boy while one java thread to update this'… --- ## [Bulk indexing - optimal refresh\_interval](https://discuss.elastic.co/t/bulk-indexing-optimal-refresh-interval/18942)
**Author:** [@shikhar](https://discuss.elastic.co/u/shikhar)\ **Replies:** 4\ **Last updated:** [July 30, 2014, 1:28pm UTC](https://discuss.elastic.co/t/bulk-indexing-optimal-refresh-interval/18942 "2014-07-30T13:28:30Z")
The 1.3.0 release notes state: Increase the refresh\_interval http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/indices-update-settings.html#bulk if you are doing heavy bulk indexing, or you are h… --- ## [Explicit array type in mapping](https://discuss.elastic.co/t/explicit-array-type-in-mapping/5467)
**Author:** [@Ridvan\_Gyundogan](https://discuss.elastic.co/u/Ridvan_Gyundogan)\ **Replies:** 4\ **Last updated:** [October 2, 2011, 8:45am UTC](https://discuss.elastic.co/t/explicit-array-type-in-mapping/5467 "2011-10-02T08:45:13Z")
Hello, Does anyone know whether it is possible to explicitly specify that a property is expected to be an array in the mapping? I know all the properties can be arrays but is it possible to specify this in the ma… --- ## [Metricbeat mysql 8.2.3 fleet integration failing](https://discuss.elastic.co/t/metricbeat-mysql-8-2-3-fleet-integration-failing/307306)
**Author:** [@rbos](https://discuss.elastic.co/u/rbos)\ **Replies:** 7\ **Last updated:** [June 18, 2022, 5:15am UTC](https://discuss.elastic.co/t/metricbeat-mysql-8-2-3-fleet-integration-failing/307306 "2022-06-18T05:15:16Z")
On all my hosts that have upgraded to elastic-agent 8.2.3 (with the RHEL packages), the "mysql" integration is failing with: {"log.level":"error","@timestamp":"2022-06-15T09:01:06.421-0700","log.origin":{"file.name":"lo… --- ## [Java::JavaLang::IllegalStateException\` for \`PipelineAction::Create\\`"](https://discuss.elastic.co/t/java-illegalstateexception-for-pipelineaction-create-main/306871)
**Author:** [@akjain3](https://discuss.elastic.co/u/akjain3)\ **Replies:** 1\ **Last updated:** [June 10, 2022, 12:44pm UTC](https://discuss.elastic.co/t/java-illegalstateexception-for-pipelineaction-create-main/306871 "2022-06-10T12:44:29Z")
Hi, I am new to logstash and using logstash to add my logs with Elasticsearch. But I can't get through this error. Please help. It is urgent. Using bundled JDK: /Users/akjain3cisco.com/Documents/ELK/logstash-7.15.2/jdk.… --- ## [S3 Output Plugin: Correct Way to manage codec](https://discuss.elastic.co/t/s3-output-plugin-correct-way-to-manage-codec/282103)
**Author:** [@Hammond95](https://discuss.elastic.co/u/Hammond95)\ **Replies:** 1\ **Last updated:** [August 23, 2021, 5:21pm UTC](https://discuss.elastic.co/t/s3-output-plugin-correct-way-to-manage-codec/282103 "2021-08-23T17:21:01Z")
Hi everyone, I have the following problem: We have in place a pipeline which consist of: \[PrestoDB Clusters\] ==auditing==\> \[Kafka\] \<== \[Logstash\] ==\> Elastic + S3 The auditing messages on kafka are basically json mes… --- ## [Logstash to Ingest nodes](https://discuss.elastic.co/t/logstash-to-ingest-nodes/258925)
**Author:** [@leemase004](https://discuss.elastic.co/u/leemase004)\ **Replies:** 7\ **Last updated:** [December 17, 2020, 6:02pm UTC](https://discuss.elastic.co/t/logstash-to-ingest-nodes/258925 "2020-12-17T18:02:33Z")
In Logstash under the pipeline directory there will be multiple .conf files that set specific grok filters. The format of the files are as follows: Input Grok Filter Output \[list of nodes\] For that Output section do … --- ## [Metricset mongodb.replstatus only work on primary server](https://discuss.elastic.co/t/metricset-mongodb-replstatus-only-work-on-primary-server/232045)
**Author:** [@dbargo](https://discuss.elastic.co/u/dbargo)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 9:15am UTC](https://discuss.elastic.co/t/metricset-mongodb-replstatus-only-work-on-primary-server/232045 "2020-05-13T09:15:06Z")
We deploy metricbeat on 3 mongo servers ( 1 primary, 2 secondary ) While metricbeat run on secondary server we get the following error: Error fetching data for metricset mongodb.replstatus: error getting replication in… --- ## [Can I run Auditbeat as a non-root user?](https://discuss.elastic.co/t/can-i-run-auditbeat-as-a-non-root-user/230380)
**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\ **Replies:** 1\ **Last updated:** [May 7, 2020, 3:22pm UTC](https://discuss.elastic.co/t/can-i-run-auditbeat-as-a-non-root-user/230380 "2020-05-07T15:22:28Z")
Hi I'm setting up the Beats. For each one I followed the following process: Created and user called elastic in the host Created a systemd unit file like this: \[Unit\] Description=Auditbeat After=syslog.target ne… --- ## [Does Kivana support linear regression or box plot?](https://discuss.elastic.co/t/does-kivana-support-linear-regression-or-box-plot/192674)
**Author:** [@enzobb](https://discuss.elastic.co/u/enzobb)\ **Replies:** 1\ **Last updated:** [July 29, 2019, 5:13pm UTC](https://discuss.elastic.co/t/does-kivana-support-linear-regression-or-box-plot/192674 "2019-07-29T17:13:06Z")
Hi all, I am planning to build dashboards using Kibana. I checked out many of the features provided by Kivana. However, I did not find out whether linear regression or boxplot functions were provided. Does Kivana sup… --- ## [Index format change daily to weekly](https://discuss.elastic.co/t/index-format-change-daily-to-weekly/186656)
**Author:** [@NAHA](https://discuss.elastic.co/u/NAHA)\ **Replies:** 1\ **Last updated:** [June 20, 2019, 10:32am UTC](https://discuss.elastic.co/t/index-format-change-daily-to-weekly/186656 "2019-06-20T10:32:02Z")
Hi , I am currently send logs from NLog to Elasticsearch. So , my index format default seems like this - \> " logstash-yyyy.MM.dd" I want to change to weekly , My Nlog config file like this: \ **Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 7\ **Last updated:** [April 26, 2019, 5:46am UTC](https://discuss.elastic.co/t/writing-multiline-grok/178214 "2019-04-26T05:46:39Z") HI I am trying to write grok for apache mod security logs. GET /images/new2.gif HTTP/1.1 Accept: / Referer: http://www.rrcat.gov.in/ Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; Trident/7.0… --- ## [Elasticsearch-setup-passwords](https://discuss.elastic.co/t/elasticsearch-setup-passwords/152883)
**Author:** [@rmadoori](https://discuss.elastic.co/u/rmadoori)\ **Replies:** 1\ **Last updated:** [October 17, 2018, 5:19pm UTC](https://discuss.elastic.co/t/elasticsearch-setup-passwords/152883 "2018-10-17T17:19:51Z")
Hi, Is there alternative for elasticsearch-setup-passwords . cause this looks like a manual process and passwords are plain text. Is there any option to generate keys and we can use the keys for kibana and logstash to… --- ## [Removing aborted snapshot](https://discuss.elastic.co/t/removing-aborted-snapshot/132879)
**Author:** [@Jonny\_Glazier](https://discuss.elastic.co/u/Jonny_Glazier)\ **Replies:** 1\ **Last updated:** [May 22, 2018, 7:34pm UTC](https://discuss.elastic.co/t/removing-aborted-snapshot/132879 "2018-05-22T19:34:49Z")
Thanks in advance for the help My problem is that I tried to delete a snapshot during execution and now it is labeled as both aborted and in progress. This prevents me from executing any new snapshots, as it returns me … --- ## [Parsing a JSON array of objects with field-value](https://discuss.elastic.co/t/parsing-a-json-array-of-objects-with-field-value/99656)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 1\ **Last updated:** [September 7, 2017, 5:37am UTC](https://discuss.elastic.co/t/parsing-a-json-array-of-objects-with-field-value/99656 "2017-09-07T05:37:41Z")
I have some log look like { "ExtendedProperties": \[ { "Value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.79 Safari/537.36 Edge/14.14393", "Name": "UserAg… --- ## [Couldn't find any output plugin named 'elasticsearch'......error: manticore -- java.lang.NoSuchFieldError: INSTANCE](https://discuss.elastic.co/t/couldnt-find-any-output-plugin-named-elasticsearch-error-manticore-java-lang-nosuchfielderror-instance/82273)
**Author:** [@Daram\_Aparna](https://discuss.elastic.co/u/Daram_Aparna)\ **Replies:** 1\ **Last updated:** [April 21, 2017, 6:38am UTC](https://discuss.elastic.co/t/couldnt-find-any-output-plugin-named-elasticsearch-error-manticore-java-lang-nosuchfielderror-instance/82273 "2017-04-21T06:38:17Z")
Hi, I'm trying to use Elasticsearch as output in my configuration file. logstash version 2.1.0 elasticsearch version 2.3.2 But getting the below error: Couldn't find any output plugin named 'elasticsearch'. Are you… --- ## [Hive SQL term query](https://discuss.elastic.co/t/hive-sql-term-query/39951)
**Author:** [@andrewwwooster](https://discuss.elastic.co/u/andrewwwooster)\ **Replies:** 1\ **Last updated:** [January 24, 2016, 7:31pm UTC](https://discuss.elastic.co/t/hive-sql-term-query/39951 "2016-01-24T19:31:13Z")
I'm love being able to use Hive SQL to effectively filter Elasticsearch. \[:smiley:\] However, I am not sure how to best access the elasticsearch term query from SQL. I've noted the 'es.query' = '?q=term' table prope… --- ## [OrientDB support in packetbeat](https://discuss.elastic.co/t/orientdb-support-in-packetbeat/25674)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 1\ **Last updated:** [July 16, 2015, 10:12am UTC](https://discuss.elastic.co/t/orientdb-support-in-packetbeat/25674 "2015-07-16T10:12:50Z")
Hi Team, Is there any way to capture OrientDB traffic in packetbeat? --- ## [Remove aggregate column from the dataTable](https://discuss.elastic.co/t/remove-aggregate-column-from-the-datatable/265570)
**Author:** [@gobi\_s](https://discuss.elastic.co/u/gobi_s)\ **Replies:** 1\ **Last updated:** [February 26, 2021, 4:44pm UTC](https://discuss.elastic.co/t/remove-aggregate-column-from-the-datatable/265570 "2021-02-26T16:44:55Z")
I want to remove the count column from the table, can you help to how to do that. note: count is the only metric column in the table --- ## [Override field value for sorting](https://discuss.elastic.co/t/override-field-value-for-sorting/89339)
**Author:** [@Strato](https://discuss.elastic.co/u/Strato)\ **Replies:** 1\ **Last updated:** [June 22, 2017, 12:30pm UTC](https://discuss.elastic.co/t/override-field-value-for-sorting/89339 "2017-06-22T12:30:29Z")
Konishiwa amigos, I have the following requirement : I have a field, that contains a priority term (string) : highest, high, medium, low, lowest. I want to be able to sort on this field, but not by alphabetical order. … --- ## [Logstash jdbc - unnable to connect to database - plugin restart](https://discuss.elastic.co/t/logstash-jdbc-unnable-to-connect-to-database-plugin-restart/269959)
**Author:** [@g34ncarlo](https://discuss.elastic.co/u/g34ncarlo)\ **Replies:** 3\ **Last updated:** [April 14, 2021, 10:26pm UTC](https://discuss.elastic.co/t/logstash-jdbc-unnable-to-connect-to-database-plugin-restart/269959 "2021-04-14T22:26:24Z")
We're running Logstash with jdbc plugin as a Kubernetes cron job. Due to some network problem, eventually it cannot connect to database: \[ERROR\]\[logstash.inputs.jdbc \] Unable to connect to database. Tried 1 times {:… [Previous page](https://discuss.elastic.co/top.md?page=1659&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1661&per_page=50&period=all)