# Top **URL:** https://discuss.elastic.co/top.md?page=1661&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1662 --- ## [Get jenkins jobs data in to elastic search](https://discuss.elastic.co/t/get-jenkins-jobs-data-in-to-elastic-search/175951)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 5:59am UTC](https://discuss.elastic.co/t/get-jenkins-jobs-data-in-to-elastic-search/175951 "2019-04-09T05:59:06Z")
Hi I am trying to create a dashboard to monitor different components of our software, migrating from one environment to another. Package A Dev --\> test --\> QA --\> UAT --\> Prod Package B Dev --\> test --\> QA --\> UAT … --- ## [Elasticsearch going down lot of times](https://discuss.elastic.co/t/elasticsearch-going-down-lot-of-times/120984)
**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\ **Replies:** 3\ **Last updated:** [February 22, 2018, 8:46am UTC](https://discuss.elastic.co/t/elasticsearch-going-down-lot-of-times/120984 "2018-02-22T08:46:11Z")
org.elasticsearch.transport.RemoteTransportException: \[node-1\]\[127.0.0.1:9302\]\[indices:data/read/search\[phase/query\]\] Caused by: org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution … --- ## [Mapper parsing exception - unsupported parameter](https://discuss.elastic.co/t/mapper-parsing-exception-unsupported-parameter/85914)
**Author:** [@sahar\_q](https://discuss.elastic.co/u/sahar_q)\ **Replies:** 3\ **Last updated:** [May 16, 2017, 1:12pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-unsupported-parameter/85914 "2017-05-16T13:12:01Z")
Hi guys, i've attempted to add this template and for some reason it says there are unsupported parameters, i failed to detect the error on my end and would like you to take a look : { "template": "arp-table… --- ## [Why Elasticsearch 1.7.3 is faster 20% than 1.7.5?](https://discuss.elastic.co/t/why-elasticsearch-1-7-3-is-faster-20-than-1-7-5/67102)
**Author:** [@Joomler](https://discuss.elastic.co/u/Joomler)\ **Replies:** 3\ **Last updated:** [November 25, 2016, 4:08pm UTC](https://discuss.elastic.co/t/why-elasticsearch-1-7-3-is-faster-20-than-1-7-5/67102 "2016-11-25T16:08:24Z")
Why Elasticsearch 1.7.3 is faster 20% than 1.7.5 ? Absolutely the same config and index data, 30 queries in loop: 1.7.3 - 34s 1.7.5 - 47s I wanted to upgrade to 2.4 but it even slower. New 5 version too. So, per… --- ## [Purge data within a date range from an Elasticsearch database](https://discuss.elastic.co/t/purge-data-within-a-date-range-from-an-elasticsearch-database/54763)
**Author:** [@cwelber](https://discuss.elastic.co/u/cwelber)\ **Replies:** 3\ **Last updated:** [July 5, 2016, 8:47pm UTC](https://discuss.elastic.co/t/purge-data-within-a-date-range-from-an-elasticsearch-database/54763 "2016-07-05T20:47:36Z")
How could I purge everything older than a date say (x/x/xxxx) from an Elasticsearch database? Thanks! --- ## [Need help with configuring memory usage](https://discuss.elastic.co/t/need-help-with-configuring-memory-usage/36163)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 3\ **Last updated:** [December 3, 2015, 5:07am UTC](https://discuss.elastic.co/t/need-help-with-configuring-memory-usage/36163 "2015-12-03T05:07:39Z")
Hi. I've been using ES for a while - but dont have much experience configuring and optimising its settings. In short - I keep crashing my nodes with large queries , when the heap seems to fill up. The long - I have… --- ## [Running more than one ES instance on the same server while indexing data](https://discuss.elastic.co/t/running-more-than-one-es-instance-on-the-same-server-while-indexing-data/5913)
**Author:** [@Frederic](https://discuss.elastic.co/u/Frederic)\ **Replies:** 3\ **Last updated:** [November 22, 2011, 12:46pm UTC](https://discuss.elastic.co/t/running-more-than-one-es-instance-on-the-same-server-while-indexing-data/5913 "2011-11-22T12:46:02Z")
Hey guys, hope you can help me with this. By mistake, two instances of ES were launched (at the same 9200 port) on al least 4 servers of a 8 nodes cluster. That happened while multiple processes were indexing docs. … --- ## [High Memory buffer/cache Kubernetes](https://discuss.elastic.co/t/high-memory-buffer-cache-kubernetes/197569)
**Author:** [@beyond](https://discuss.elastic.co/u/beyond)\ **Replies:** 0\ **Last updated:** [August 30, 2019, 6:50pm UTC](https://discuss.elastic.co/t/high-memory-buffer-cache-kubernetes/197569 "2019-08-30T18:50:23Z")
Describe the bug i tried to start a cluster in kubernetes with below nodes while setting pods memory limits 3G 2 clients nodes 3 masters nodes 3 Data nodes The problem that i found is that elastic pods dont see this… --- ## [About org.elasticsearch.indices.recovery.RecoveryFailedException error](https://discuss.elastic.co/t/about-org-elasticsearch-indices-recovery-recoveryfailedexception-error/23341)
**Author:** [@guoyiqincn](https://discuss.elastic.co/u/guoyiqincn)\ **Replies:** 0\ **Last updated:** [April 21, 2015, 10:39am UTC](https://discuss.elastic.co/t/about-org-elasticsearch-indices-recovery-recoveryfailedexception-error/23341 "2015-04-21T10:39:32Z")
\*Hi All,\* \*I have a 5 nodes cluster. \* \*now my cluster eror \* \[2015-04-21 18:32:26,032\]\[WARN \]\[indices.cluster \] \[i-bxtszyhz\] \[blacklist\]\[1\] failed to start shard org.elasticsearch.indices.recovery… --- ## [Index has disappeared](https://discuss.elastic.co/t/index-has-disappeared/347889)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 5\ **Last updated:** [November 23, 2023, 10:47pm UTC](https://discuss.elastic.co/t/index-has-disappeared/347889 "2023-11-23T22:47:53Z")
Hello I have several sources that ELK processes, as you know from /etc/logstash/conf.d a .conf file is created for each of the sources to be processed either by GROK or CSV, I don't know if there is another way. One of… --- ## [Logstash pipeline processing](https://discuss.elastic.co/t/logstash-pipeline-processing/298921)
**Author:** [@KarlWolf](https://discuss.elastic.co/u/KarlWolf)\ **Replies:** 5\ **Last updated:** [March 7, 2022, 9:52pm UTC](https://discuss.elastic.co/t/logstash-pipeline-processing/298921 "2022-03-07T21:52:43Z")
Hello, I am having a problem with Logstash configuration. I can't get rid with pipelines configuraton. My scenario: logstash.yml - only lines which are uncommented/changed path.data: /usr/share/logstash pipeline.worke… --- ## [ECK 1.4.1 dry run is not working](https://discuss.elastic.co/t/eck-1-4-1-dry-run-is-not-working/268021)
**Author:** [@Mike\_Eklund](https://discuss.elastic.co/u/Mike_Eklund)\ **Replies:** 5\ **Last updated:** [March 23, 2021, 4:20pm UTC](https://discuss.elastic.co/t/eck-1-4-1-dry-run-is-not-working/268021 "2021-03-23T16:20:32Z")
ECK dry run is not working giving: Error from server (BadRequest): admission webhook "elastic-es-validation-v1.k8s.elastic.co" does not support dry run ES version is 7.9.3. kubernetes version is v1.18.16 Side effects… --- ## [Kibana Geo\_json Map](https://discuss.elastic.co/t/kibana-geo-json-map/255482)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 5\ **Last updated:** [November 16, 2020, 11:25am UTC](https://discuss.elastic.co/t/kibana-geo-json-map/255482 "2020-11-16T11:25:31Z")
Hi Unfortunately, I can not import a JSON file to kibana map Could you please help me what should I do for this issue: I have downloaded many many JSON file... but every time I faced with this message :frowning: --- ## [What is the password when I use elasticsearch?](https://discuss.elastic.co/t/what-is-the-password-when-i-use-elasticsearch/234051)
**Author:** [@Jun.8](https://discuss.elastic.co/u/Jun.8)\ **Replies:** 5\ **Last updated:** [June 1, 2020, 10:03pm UTC](https://discuss.elastic.co/t/what-is-the-password-when-i-use-elasticsearch/234051 "2020-06-01T22:03:25Z")
Hi, I have a problem with the password of elasticsearch. I'm trying to study Kibana map through a tutorial video.(for South Korea) I need to use Suricata logs but I found that I have to modify my password like below. Th… --- ## [Kibana migration issues after upgrade to 6.8.6](https://discuss.elastic.co/t/kibana-migration-issues-after-upgrade-to-6-8-6/232047)
**Author:** [@mrcsg](https://discuss.elastic.co/u/mrcsg)\ **Replies:** 5\ **Last updated:** [May 18, 2020, 10:07pm UTC](https://discuss.elastic.co/t/kibana-migration-issues-after-upgrade-to-6-8-6/232047 "2020-05-18T22:07:43Z")
Hi All- I recently upgraded from 5.6 to 6.8.6 and had some issues getting Kibana running. In the end I was able to get it running with deleting all the kibana indexes, deleting aliases to .kibana and then starting fresh… --- ## [How to speed up msearch queries?](https://discuss.elastic.co/t/how-to-speed-up-msearch-queries/221105)
**Author:** [@hjiop\_oop](https://discuss.elastic.co/u/hjiop_oop)\ **Replies:** 5\ **Last updated:** [February 26, 2020, 10:13pm UTC](https://discuss.elastic.co/t/how-to-speed-up-msearch-queries/221105 "2020-02-26T22:13:58Z")
I'm using elasticsearch's msearch for making a large number of batch queries. Problem is this is very slow, I'm primarily using this for doing searches / counts over an index. For eg. if I have 2000 of such queries lin… --- ## [Elastic search and Tableau Integration using ODBC](https://discuss.elastic.co/t/elastic-search-and-tableau-integration-using-odbc/171948)
**Author:** [@nikhil\_tarigonda](https://discuss.elastic.co/u/nikhil_tarigonda)\ **Replies:** 5\ **Last updated:** [March 13, 2019, 4:11pm UTC](https://discuss.elastic.co/t/elastic-search-and-tableau-integration-using-odbc/171948 "2019-03-13T16:11:48Z")
Hi, I am facing few issues when accessing my data set from Elastic search to Tableau. Few fields in my data set do not support live in tableau. I know that the ODBC is still under development, when can I expect the stabl… --- ## [Fields Not Returning When Explicitly Requested](https://discuss.elastic.co/t/fields-not-returning-when-explicitly-requested/5333)
**Author:** [@davet](https://discuss.elastic.co/u/davet)\ **Replies:** 5\ **Last updated:** [October 17, 2011, 11:46pm UTC](https://discuss.elastic.co/t/fields-not-returning-when-explicitly-requested/5333 "2011-10-17T23:46:08Z")
Hi, I'm having problems returning fields in a query when I specifically request them. If I run this query (without the fields): { "size": 1, "query": { "filtered": { "query": { "term": {… --- ## [File --\> kibana](https://discuss.elastic.co/t/file-kibana/130465)
**Author:** [@MrNerd](https://discuss.elastic.co/u/MrNerd)\ **Replies:** 5\ **Last updated:** [May 7, 2018, 7:27am UTC](https://discuss.elastic.co/t/file-kibana/130465 "2018-05-07T07:27:00Z")
It is possible to create multiple index with filebeat and send them deirectly to kibana, if it's possible how? --- ## [How add a second node to my cluster?](https://discuss.elastic.co/t/how-add-a-second-node-to-my-cluster/175226)
**Author:** [@manue](https://discuss.elastic.co/u/manue)\ **Replies:** 6\ **Last updated:** [April 5, 2019, 6:55am UTC](https://discuss.elastic.co/t/how-add-a-second-node-to-my-cluster/175226 "2019-04-05T06:55:00Z")
I am trying to solve a problem that I have with elasticsearch and magento 2.3, and I have been recommended to add a new node but I do not know how to launch the query from the terminal, can someone help me? I have elasti… --- ## [Fielddata is disabled on \[host.name\] in \[metricbeat-8.10.3\]](https://discuss.elastic.co/t/fielddata-is-disabled-on-host-name-in-metricbeat-8-10-3/348261)
**Author:** [@efrainMZ](https://discuss.elastic.co/u/efrainMZ)\ **Replies:** 8\ **Last updated:** [December 12, 2023, 9:03pm UTC](https://discuss.elastic.co/t/fielddata-is-disabled-on-host-name-in-metricbeat-8-10-3/348261 "2023-12-12T21:03:10Z")
Hello good morning! I am ingesting data from metricbeat to elasticsearch and loading the dashboards of version metricbeat 8.10.3 with the command "./metricbeat setup --dashboard" but when viewing the dashboards it shows… --- ## [Is there any way to monitor machine using machine name rather than monitor.ip?](https://discuss.elastic.co/t/is-there-any-way-to-monitor-machine-using-machine-name-rather-than-monitor-ip/327042)
**Author:** [@Nitin08bisht](https://discuss.elastic.co/u/Nitin08bisht)\ **Replies:** 8\ **Last updated:** [March 16, 2023, 7:42pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-monitor-machine-using-machine-name-rather-than-monitor-ip/327042 "2023-03-16T19:42:28Z")
Hi @Andrew\_Cholakian1 , I am trying to create alert to monitor server for specific machine by using the machine name rather than using the machine.ip but not getting any key value. Please let me know, How can I do this… --- ## [GC issues causing high CPU](https://discuss.elastic.co/t/gc-issues-causing-high-cpu/307341)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 8\ **Last updated:** [June 16, 2022, 7:46am UTC](https://discuss.elastic.co/t/gc-issues-causing-high-cpu/307341 "2022-06-16T07:46:26Z")
Hello, I have setup a 2 node cluster for our production environment. We are using t3a.xlarge instance type. APM and log analysis is currently enabled for our cluster, observing high CPU frequently. Upon checking the log… --- ## [How to create an index\_2 containing Index\_1's aggregations results as fields?](https://discuss.elastic.co/t/how-to-create-an-index-2-containing-index-1s-aggregations-results-as-fields/227110)
**Author:** [@oula\_oula](https://discuss.elastic.co/u/oula_oula)\ **Replies:** 8\ **Last updated:** [April 9, 2020, 11:52am UTC](https://discuss.elastic.co/t/how-to-create-an-index-2-containing-index-1s-aggregations-results-as-fields/227110 "2020-04-09T11:52:14Z")
How to create an index\_2 containing Index\_1's aggregations results as fields ? Is it possible to use a command like this on kibana dev tools ? PUT /index\_2/doc\_aggs\_results\_of\_index1 { field\_aggs1: ... field\_aggs2: … --- ## [Logstash date offset issue and indicies](https://discuss.elastic.co/t/logstash-date-offset-issue-and-indicies/152588)
**Author:** [@Pirate\_Trkmn](https://discuss.elastic.co/u/Pirate_Trkmn)\ **Replies:** 8\ **Last updated:** [October 16, 2018, 6:50am UTC](https://discuss.elastic.co/t/logstash-date-offset-issue-and-indicies/152588 "2018-10-16T06:50:56Z")
Hi guys i have two problem cant solve. 1.i have log\_time field and want to load it @timestamp with date filter. but there is time difference after i load it to @timestamp example: log\_time is 09:34, but @timestamp is 05… --- ## [Indexing data by getting substring of each row](https://discuss.elastic.co/t/indexing-data-by-getting-substring-of-each-row/151391)
**Author:** [@prasad.ram1431](https://discuss.elastic.co/u/prasad.ram1431)\ **Replies:** 8\ **Last updated:** [October 10, 2018, 10:56am UTC](https://discuss.elastic.co/t/indexing-data-by-getting-substring-of-each-row/151391 "2018-10-10T10:56:20Z")
Hi All, I am new to logstash, I would like to index attached format of data into Elasticsearch using logstash. Could you please provide some samples, so that I can work on them. The Attached file doesn't contains heade… --- ## [How to write regex pattern on logstash input kakfa topics\_pattern](https://discuss.elastic.co/t/how-to-write-regex-pattern-on-logstash-input-kakfa-topics-pattern/96705)
**Author:** [@sulthonzh](https://discuss.elastic.co/u/sulthonzh)\ **Replies:** 0\ **Last updated:** [August 11, 2017, 6:15am UTC](https://discuss.elastic.co/t/how-to-write-regex-pattern-on-logstash-input-kakfa-topics-pattern/96705 "2017-08-11T06:15:38Z")
kafka { bootstrap\_servers =\> "localhost:9092" # topics =\> \["techsupportforum\_\_listings","black\_\_listings"\] topics\_pattern =\> "\\\\\*\_\_listings" consumer\_threads =\> 1 decorate\_events =\> true } hi, i ha… --- ## [Help creating a bar chart using split series percentages](https://discuss.elastic.co/t/help-creating-a-bar-chart-using-split-series-percentages/259400)
**Author:** [@brookeharrislowing](https://discuss.elastic.co/u/brookeharrislowing)\ **Replies:** 2\ **Last updated:** [December 22, 2020, 11:29pm UTC](https://discuss.elastic.co/t/help-creating-a-bar-chart-using-split-series-percentages/259400 "2020-12-22T23:29:44Z")
Hi there, I am trying to make a bar graph that is split by region, showing the relevant percentage for each region. However, all of my bars come out at 100% with a legend detailing their actual percentages. I would like… --- ## [Filter Dashboard with missing field](https://discuss.elastic.co/t/filter-dashboard-with-missing-field/174110)
**Author:** [@radi](https://discuss.elastic.co/u/radi)\ **Replies:** 2\ **Last updated:** [March 28, 2019, 9:14am UTC](https://discuss.elastic.co/t/filter-dashboard-with-missing-field/174110 "2019-03-28T09:14:40Z")
Hello, I have dashboard with two visualizations, the first one is Pie ( with this: {"missing": "MyMissingValue"} in JSON Input ), a second one is metric when i filter my dashboard with MyMissingValue, I have : no res… --- ## [Grok from nginx-module gets error](https://discuss.elastic.co/t/grok-from-nginx-module-gets-error/143473)
**Author:** [@g.myznikov.tinkoff](https://discuss.elastic.co/u/g.myznikov.tinkoff)\ **Replies:** 2\ **Last updated:** [August 13, 2018, 9:52am UTC](https://discuss.elastic.co/t/grok-from-nginx-module-gets-error/143473 "2018-08-13T09:52:51Z")
Hello! I have nginx-module enabled in filebeat.yml: filebeat.modules: - module: nginx access: var.paths: \["/testvar/nginx/access.log"\] error: var.paths: \["/testvar/nginx/error.log"\] output.elasticsearch: … --- ## [Reg: Issues Monitoring logstash - XPack](https://discuss.elastic.co/t/reg-issues-monitoring-logstash-xpack/121309)
**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\ **Replies:** 2\ **Last updated:** [March 15, 2018, 8:12pm UTC](https://discuss.elastic.co/t/reg-issues-monitoring-logstash-xpack/121309 "2018-03-15T20:12:44Z")
Trying to alert when Logstash fails on any pipeline or sends data to dead letter queue. Queries: How to find a Pipeline is not running from XPack/monitoring when it is not logging any detail if pipeline is wrongly con… --- ## [Multiline log parsing](https://discuss.elastic.co/t/multiline-log-parsing/84251)
**Author:** [@shammi](https://discuss.elastic.co/u/shammi)\ **Replies:** 2\ **Last updated:** [May 8, 2017, 7:14am UTC](https://discuss.elastic.co/t/multiline-log-parsing/84251 "2017-05-08T07:14:10Z")
Hi, I am using grok pattern to get date from filename and that is working fine. Now i need to parse multiline log event along with date from filename. Log: 8480 12:33:38 ERROR Error while rendering view: '/Views/Arti… --- ## [\_default\_ string to keyword but fields still using text](https://discuss.elastic.co/t/-default--string-to-keyword-but-fields-still-using-text/78179)
**Author:** [@Oscar\_Cpl](https://discuss.elastic.co/u/Oscar_Cpl)\ **Replies:** 2\ **Last updated:** [March 14, 2017, 3:21pm UTC](https://discuss.elastic.co/t/-default--string-to-keyword-but-fields-still-using-text/78179 "2017-03-14T15:21:07Z")
Hello, I did set a dynamic template to make sure all the string are mapped as keyword but I still see fields stored as text, any hints? { "app-security-2017-03-10": { "mappings": { "\_default\_": { "\_all": { … --- ## [Heartbeat: Monitor based tags](https://discuss.elastic.co/t/heartbeat-monitor-based-tags/78363)
**Author:** [@dosera](https://discuss.elastic.co/u/dosera)\ **Replies:** 2\ **Last updated:** [March 14, 2017, 7:52am UTC](https://discuss.elastic.co/t/heartbeat-monitor-based-tags/78363 "2017-03-14T07:52:54Z")
Hi, I have a heartbeat that checks many different hosts; the urls of these hosts are usually not very expressive, e.g. heartbeat.monitors: -type: 'http' urls: \["1.2.3.4"\] -type 'http' urls: \["5.6.7.8"\] ... It w… --- ## [How the use the multiline in these situation?](https://discuss.elastic.co/t/how-the-use-the-multiline-in-these-situation/59388)
**Author:** [@LazyerHong](https://discuss.elastic.co/u/LazyerHong)\ **Replies:** 2\ **Last updated:** [August 31, 2016, 6:26am UTC](https://discuss.elastic.co/t/how-the-use-the-multiline-in-these-situation/59388 "2016-08-31T06:26:35Z")
There is logs: 2016-08-30 04:10:02,104\[INFO\] HttpRequest\[191.1.3.81:33983:null\] 2016-08-30 04:10:02,107\[INFO\] 用户\[10253\]，执行\[monitor\]前状态为：1100000000 \[com.cairh.xpe.context.user.interceptor.FlowEngineInterceptor.preHandle(F… --- ## [How to wirte elasticSesrh](https://discuss.elastic.co/t/how-to-wirte-elasticsesrh/37220)
**Author:** [@Lxz](https://discuss.elastic.co/u/Lxz)\ **Replies:** 2\ **Last updated:** [December 16, 2015, 9:36am UTC](https://discuss.elastic.co/t/how-to-wirte-elasticsesrh/37220 "2015-12-16T09:36:25Z")
Hi ! I found an article, but the article content is too old, the current version can not according to this article to write plug-ins. https://www.elastic.co/blog/found-writing-a-plugin Now, How to write elasticSear… --- ## [Simple vega table](https://discuss.elastic.co/t/simple-vega-table/354560)
**Author:** [@chowpay](https://discuss.elastic.co/u/chowpay)\ **Replies:** 1\ **Last updated:** [March 4, 2024, 2:51am UTC](https://discuss.elastic.co/t/simple-vega-table/354560 "2024-03-04T02:51:35Z")
I finally figured out how to query and get a metric back for a nested piece of data: GET channel\_statistics\_long-\*/\_search { "\_source":"", "query": { "nested": { "path": "components", "query": { … --- ## [Master not discovered or elected yet, an election requires 2 nodes with ids](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/256116)
**Author:** [@xziten](https://discuss.elastic.co/u/xziten)\ **Replies:** 1\ **Last updated:** [November 20, 2020, 12:42pm UTC](https://discuss.elastic.co/t/master-not-discovered-or-elected-yet-an-election-requires-2-nodes-with-ids/256116 "2020-11-20T12:42:00Z")
Hi, I'm trying to setup an elasticsearch Cluster. I know that this is a common topic but I would like to understand what I'm doing wrong. Here are some informations : OS : RHEL 7.8 ES Version : 7.10 Nodes : 3 Mast… --- ## [Filebeat - accesing event data and fields in the configuration](https://discuss.elastic.co/t/filebeat-accesing-event-data-and-fields-in-the-configuration/151232)
**Author:** [@John\_Doe2](https://discuss.elastic.co/u/John_Doe2)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 7:38pm UTC](https://discuss.elastic.co/t/filebeat-accesing-event-data-and-fields-in-the-configuration/151232 "2018-10-08T19:38:40Z")
Logstash documentation: https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html i want to define a field on the input like this: filebeat.inputs: - type: log enabled: true … --- ## [Parse Java logs](https://discuss.elastic.co/t/parse-java-logs/82469)
**Author:** [@ItsMeSurajR](https://discuss.elastic.co/u/ItsMeSurajR)\ **Replies:** 1\ **Last updated:** [April 15, 2017, 1:00pm UTC](https://discuss.elastic.co/t/parse-java-logs/82469 "2017-04-15T13:00:48Z")
Hello all, I'm new to this framework. I'm trying to parse java log files (which is not in JSON) lookin for errors in the build. Trying to add statistics for the kind of failure over time. Is this possible to achieve? … --- ## [Elastic Data Security (Can we encrypt Lucene Index Files?)](https://discuss.elastic.co/t/elastic-data-security-can-we-encrypt-lucene-index-files/71783)
**Author:** [@ilyasjaan](https://discuss.elastic.co/u/ilyasjaan)\ **Replies:** 1\ **Last updated:** [January 16, 2017, 9:32pm UTC](https://discuss.elastic.co/t/elastic-data-security-can-we-encrypt-lucene-index-files/71783 "2017-01-16T21:32:53Z")
Hi there.... I am looking to explore ES stack... One thing that I want to know is as it is all file based on local drives. Is there a way we can encrypt the data in those files? Because some clients this is policy to… --- ## [How to get the rank of a document in a query?](https://discuss.elastic.co/t/how-to-get-the-rank-of-a-document-in-a-query/29817)
**Author:** [@ibash](https://discuss.elastic.co/u/ibash)\ **Replies:** 1\ **Last updated:** [September 23, 2015, 12:50am UTC](https://discuss.elastic.co/t/how-to-get-the-rank-of-a-document-in-a-query/29817 "2015-09-23T00:50:33Z")
Hi, I'm trying to measure the effectiveness of query changes. I am collecting data about what searches users are making and what was their target document. To that end, I want to play back the searches later to find ou… --- ## [How to model a live web application in ElasticSearch?](https://discuss.elastic.co/t/how-to-model-a-live-web-application-in-elasticsearch/26907)
**Author:** [@bdb](https://discuss.elastic.co/u/bdb)\ **Replies:** 1\ **Last updated:** [August 7, 2015, 4:38am UTC](https://discuss.elastic.co/t/how-to-model-a-live-web-application-in-elasticsearch/26907 "2015-08-07T04:38:04Z")
In our web application we use a denormalized data mart in SQL Server for geo-based user project content. Users have 1..projects, 1..geo areas. Content is stored (in the data mart) with UserID, ProjectID, text values fo… --- ## [Libbeat ignore outgoing messages](https://discuss.elastic.co/t/libbeat-ignore-outgoing-messages/26678)
**Author:** [@Esquive](https://discuss.elastic.co/u/Esquive)\ **Replies:** 1\ **Last updated:** [August 3, 2015, 8:05am UTC](https://discuss.elastic.co/t/libbeat-ignore-outgoing-messages/26678 "2015-08-03T08:05:30Z")
Hello, I used packetbeat on multiple hosts. So I needed to disable the outgoing messages. The problem was that despite having a proper configuration of /etc/hostname and /etc/hosts, in the publisher class it was not r… --- ## [System.Net.WebException on ping for system user](https://discuss.elastic.co/t/system-net-webexception-on-ping-for-system-user/21777)
**Author:** [@TJ\_Kolev](https://discuss.elastic.co/u/TJ_Kolev)\ **Replies:** 1\ **Last updated:** [January 22, 2015, 8:45pm UTC](https://discuss.elastic.co/t/system-net-webexception-on-ping-for-system-user/21777 "2015-01-22T20:45:42Z")
Greetings, I have a little service that pushes logs to Elasticsearch (1.4.2), and I am now using the Elasticsearch.net client (1.3.1). This is all running on my dev machine - 64 bit Windows 2008 R2, .Net 4.5. Howe… --- ## [Top average list of terms](https://discuss.elastic.co/t/top-average-list-of-terms/169041)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 3\ **Last updated:** [February 22, 2019, 1:45pm UTC](https://discuss.elastic.co/t/top-average-list-of-terms/169041 "2019-02-22T13:45:10Z")
I have a large daily index (150-200GB) which has several shards on different nodes. I want to check which terms have on average the largest values. However, when I run a terms aggregation ordered by the average aggregati… --- ## [How to differentiate Multiple metricbeat system logs in one kibana index](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416)
**Author:** [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)\ **Replies:** 3\ **Last updated:** [January 30, 2019, 7:29pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416 "2019-01-30T19:29:28Z")
Hi all, I have 4 different remote machines so I'm getting system information like disk, cpu and memory used using metricbeat and sanding it to logstash, in creating only one index daily bases. So my question is how can … --- ## [Two weird exceptions while loading apm-agent 1.0.1 for java](https://discuss.elastic.co/t/two-weird-exceptions-while-loading-apm-agent-1-0-1-for-java/157834)
**Author:** [@cmcornejocrespo](https://discuss.elastic.co/u/cmcornejocrespo)\ **Replies:** 3\ **Last updated:** [November 22, 2018, 10:25am UTC](https://discuss.elastic.co/t/two-weird-exceptions-while-loading-apm-agent-1-0-1-for-java/157834 "2018-11-22T10:25:46Z")
Hi there, My setup is: ELK, APM, filebeat (all 6.5.0), apm-java-agent-1.0.1 wso2 api manager 2.5.0 (jdk 1.8.0\_144) Basically we use apm-java-agent in wso2am and it seems to be working fine connection wise, but we… --- ## [Weblogic access log lines being merged into a single event/message](https://discuss.elastic.co/t/weblogic-access-log-lines-being-merged-into-a-single-event-message/93242)
**Author:** [@flasantos19](https://discuss.elastic.co/u/flasantos19)\ **Replies:** 3\ **Last updated:** [July 17, 2017, 11:18pm UTC](https://discuss.elastic.co/t/weblogic-access-log-lines-being-merged-into-a-single-event-message/93242 "2017-07-17T23:18:00Z")
Hello guys, i'm new to ELK Stack and i am having some troubles trying to parse weblogic access log files. In short, my problem is: log sample i need to parse (2 different events): 10.153.236.90 - 2017-07-14 - 16:48:14 … --- ## [JDBC plugin doesn't work](https://discuss.elastic.co/t/jdbc-plugin-doesnt-work/66244)
**Author:** [@Idan](https://discuss.elastic.co/u/Idan)\ **Replies:** 3\ **Last updated:** [November 20, 2016, 4:43pm UTC](https://discuss.elastic.co/t/jdbc-plugin-doesnt-work/66244 "2016-11-20T16:43:01Z")
I'm trying to use the JDBC plugin has you recommended to connect to MySQL retrive query data and send to Elasticsearch for graph. I get this error: \[2016-11-15T14:16:28,314\]\[ERROR\]\[logstash.agent \] fetched an invalid con… [Previous page](https://discuss.elastic.co/top.md?page=1660&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1662&per_page=50&period=all)