# Top **URL:** https://discuss.elastic.co/top.md?page=1666&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1667 --- ## [Logstash not committing offset to Kafka](https://discuss.elastic.co/t/logstash-not-committing-offset-to-kafka/77944)
**Author:** [@Dan\_Markhasin](https://discuss.elastic.co/u/Dan_Markhasin)\ **Replies:** 0\ **Last updated:** [March 9, 2017, 8:02am UTC](https://discuss.elastic.co/t/logstash-not-committing-offset-to-kafka/77944 "2017-03-09T08:02:11Z")
We are using Logstash with Kafka input and ElasticSearch output, and noticed a strange behavior when ES is slow to respond (for example, when we are pushing multiple document updates). Kafka is constantly rebalancing … --- ## [Running Lucene Queries](https://discuss.elastic.co/t/running-lucene-queries/10253)
**Author:** [@Ahmed\_Yehia](https://discuss.elastic.co/u/Ahmed_Yehia)\ **Replies:** 8\ **Last updated:** [January 12, 2013, 8:35pm UTC](https://discuss.elastic.co/t/running-lucene-queries/10253 "2013-01-12T20:35:20Z")
Hi, I 'm looking into executing a Lucene query, along a geo\_point search request. Documents appear in the index like so: \_source: { pin: { id: 1 location: { lat: 45.706180572509766, lon: 3.603515625 } }, … --- ## [Records neglected in search result](https://discuss.elastic.co/t/records-neglected-in-search-result/9034)
**Author:** [@Kartavya](https://discuss.elastic.co/u/Kartavya)\ **Replies:** 8\ **Last updated:** [September 17, 2012, 12:15pm UTC](https://discuss.elastic.co/t/records-neglected-in-search-result/9034 "2012-09-17T12:15:46Z")
Hi I am getting few record missing in search result even if the record like a hit for query. For Example: Record in index is like- {"msg":"abc def"} When I am searching for "abc" the record in not included in r… --- ## [Inconsistent data among nodes for one (or more) indexes (ES 0.11)](https://discuss.elastic.co/t/inconsistent-data-among-nodes-for-one-or-more-indexes-es-0-11/3426)
**Author:** [@Pablo\_Borges](https://discuss.elastic.co/u/Pablo_Borges)\ **Replies:** 8\ **Last updated:** [October 8, 2010, 8:15pm UTC](https://discuss.elastic.co/t/inconsistent-data-among-nodes-for-one-or-more-indexes-es-0-11/3426 "2010-10-08T20:15:03Z")
Here's one of the problems I got frequently. I have a 5 node ES (using local storage) cluster running 8 indexes each with thousands of documents (one of them with millions) and every now and then it seems like repli… --- ## [Changing kibana logo?](https://discuss.elastic.co/t/changing-kibana-logo/132069)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 2\ **Last updated:** [May 16, 2018, 2:01pm UTC](https://discuss.elastic.co/t/changing-kibana-logo/132069 "2018-05-16T14:01:30Z")
Hi, can somebody help me to change kibana logo please? I am using 6.2.3. I tried many discussions about same, but every case is different and I am not finding those directories or files on mentioned locations. May be… --- ## [Filebeat autodiscover+kubernetes module or add\_kubernetes\_metadata processor?](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-module-or-add-kubernetes-metadata-processor/263662)
**Author:** [@offero](https://discuss.elastic.co/u/offero)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/filebeat-autodiscover-kubernetes-module-or-add-kubernetes-metadata-processor/263662 "2021-02-09T14:32:40Z")
I just set up a new helm chart to use add\_kubernetes\_metadata processor, which seemed to be the way to get k8s annotations based on my googling. But, in the process of trying to figure out which fields are being added, I… --- ## [Command line syntax to use the logstash.yml instead of the pipeline (.conf)](https://discuss.elastic.co/t/command-line-syntax-to-use-the-logstash-yml-instead-of-the-pipeline-conf/336630)
**Author:** [@elBilo](https://discuss.elastic.co/u/elBilo)\ **Replies:** 5\ **Last updated:** [June 22, 2023, 9:25pm UTC](https://discuss.elastic.co/t/command-line-syntax-to-use-the-logstash-yml-instead-of-the-pipeline-conf/336630 "2023-06-22T21:25:36Z")
I see plenty of examples with the command line option -f for using a specific pipeline file can I use the same syntax to use a specific logstash.yml file? the current helm file settings I have are command: - logstash … --- ## [Multiple Users viewing Kibana Reports](https://discuss.elastic.co/t/multiple-users-viewing-kibana-reports/243277)
**Author:** [@vikasp](https://discuss.elastic.co/u/vikasp)\ **Replies:** 5\ **Last updated:** [August 6, 2020, 3:49pm UTC](https://discuss.elastic.co/t/multiple-users-viewing-kibana-reports/243277 "2020-08-06T15:49:22Z")
Hi, I observed that I can see only reports I created. Is there any way that I can view reports created by other users as well in kibana. --- ## [Sql query, histogram interval one month problem](https://discuss.elastic.co/t/sql-query-histogram-interval-one-month-problem/216442)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [January 28, 2020, 2:58pm UTC](https://discuss.elastic.co/t/sql-query-histogram-interval-one-month-problem/216442 "2020-01-28T14:58:04Z")
I am trying to do histogram in sql query for month and it does not work daily or hourly works fine here is query GET \_sql?format=txt { "query": """ select histogram(achieved, INTERVAL 1 month) as m, count(\*) … --- ## [How can elasticsearch automatically index documents inside the tmp / es directory of fscrawler?](https://discuss.elastic.co/t/how-can-elasticsearch-automatically-index-documents-inside-the-tmp-es-directory-of-fscrawler/208274)
**Author:** [@Vo\_Van\_Huy](https://discuss.elastic.co/u/Vo_Van_Huy)\ **Replies:** 5\ **Last updated:** [November 21, 2019, 8:35am UTC](https://discuss.elastic.co/t/how-can-elasticsearch-automatically-index-documents-inside-the-tmp-es-directory-of-fscrawler/208274 "2019-11-21T08:35:45Z")
I frequently change data, so my json files inside fscrawler's tmp / es directory are constantly changing. may be deleting, may be changing the data inside a json file, or changing the json file name. I am currently havi… --- ## [Logstash 6.6.0 sends logs to ES only few hours a day](https://discuss.elastic.co/t/logstash-6-6-0-sends-logs-to-es-only-few-hours-a-day/177002)
**Author:** [@Jaepyoung\_Kim](https://discuss.elastic.co/u/Jaepyoung_Kim)\ **Replies:** 5\ **Last updated:** [May 8, 2019, 11:52pm UTC](https://discuss.elastic.co/t/logstash-6-6-0-sends-logs-to-es-only-few-hours-a-day/177002 "2019-05-08T23:52:20Z")
I have several Elastic Searches clusters in several Kubernetes Clusters. Several VMs are sending the logs through filebeat to Logstash. Some logs show very wired pattern. The following graph shows that the logs were s… --- ## [Logstash 8.11 reports error 403](https://discuss.elastic.co/t/logstash-8-11-reports-error-403/352224)
**Author:** [@andrew3](https://discuss.elastic.co/u/andrew3)\ **Replies:** 3\ **Last updated:** [January 31, 2024, 9:08pm UTC](https://discuss.elastic.co/t/logstash-8-11-reports-error-403/352224 "2024-01-31T21:08:42Z")
I am trying to connect logstash to elasticsearch. Both are on my local machine. I am using https. Logstash reports error 403. Viz: \` {:code=\>403, :url=\>"https://localhost:9200/\_bulk?filter\_path=errors,items.\*.error,i… --- ## [Check Forecast accuracy with scripted field](https://discuss.elastic.co/t/check-forecast-accuracy-with-scripted-field/324650)
**Author:** [@CHP93](https://discuss.elastic.co/u/CHP93)\ **Replies:** 3\ **Last updated:** [February 10, 2023, 4:23pm UTC](https://discuss.elastic.co/t/check-forecast-accuracy-with-scripted-field/324650 "2023-02-10T16:23:20Z")
Hello community, I have a quite challenging task and have not found a solution for my problem, yet. I created a multi-metric anomalies detection machine learning job which is running a forecast as well. My aim is now t… --- ## [\[8.3.2\] bin/elasticsearch-users throws StringIndexOutOfBoundsException](https://discuss.elastic.co/t/8-3-2-bin-elasticsearch-users-throws-stringindexoutofboundsexception/309794)
**Author:** [@gerib](https://discuss.elastic.co/u/gerib)\ **Replies:** 3\ **Last updated:** [July 20, 2022, 6:21am UTC](https://discuss.elastic.co/t/8-3-2-bin-elasticsearch-users-throws-stringindexoutofboundsexception/309794 "2022-07-20T06:21:24Z")
elasticsearch@esmaster:~/bin$ . elasticsearch-users useradd su -p password -r superuser Exception in thread "main" java.lang.StringIndexOutOfBoundsException: Range \[13, 4) out of bounds for length 4 at java.base/… --- ## [The offline installation with esrally-dist-2.4.0 give incompatible error](https://discuss.elastic.co/t/the-offline-installation-with-esrally-dist-2-4-0-give-incompatible-error/304362)
**Author:** [@keylane\_sbaas](https://discuss.elastic.co/u/keylane_sbaas)\ **Replies:** 3\ **Last updated:** [May 20, 2022, 3:28pm UTC](https://discuss.elastic.co/t/the-offline-installation-with-esrally-dist-2-4-0-give-incompatible-error/304362 "2022-05-20T15:28:37Z")
I was installing esrally on RHEL7 machine. At the point of installing there was an problem, that not enough dependencies where installed at the time. That is not the problem for this topic, but the ERROR while installing… --- ## [Create Aggregate field with separated by comma](https://discuss.elastic.co/t/create-aggregate-field-with-separated-by-comma/288463)
**Author:** [@ari\_wahyu\_nahar](https://discuss.elastic.co/u/ari_wahyu_nahar)\ **Replies:** 3\ **Last updated:** [November 5, 2021, 7:40am UTC](https://discuss.elastic.co/t/create-aggregate-field-with-separated-by-comma/288463 "2021-11-05T07:40:25Z")
Need Help. i have data like this: what steps should i take, to get results like this: A: 3 B: 3 C: 2 D: 3 E: 4 Thank you! --- ## [What is the alternative way of querying \_all from elasticsearch 6.x onwards?](https://discuss.elastic.co/t/what-is-the-alternative-way-of-querying-all-from-elasticsearch-6-x-onwards/228749)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 3\ **Last updated:** [April 19, 2020, 5:59pm UTC](https://discuss.elastic.co/t/what-is-the-alternative-way-of-querying-all-from-elasticsearch-6-x-onwards/228749 "2020-04-19T17:59:49Z")
I posted the same in stackoverflow but did not get any reply. Just posting the same here in case someone has any suggestions. As mentioned in the doc, from elasticsearch 6.x \_all has been deprecated. I have a matchQu… --- ## [General Question : Best method for handling JSON files](https://discuss.elastic.co/t/general-question-best-method-for-handling-json-files/224687)
**Author:** [@zebulyon](https://discuss.elastic.co/u/zebulyon)\ **Replies:** 3\ **Last updated:** [March 24, 2020, 3:36pm UTC](https://discuss.elastic.co/t/general-question-best-method-for-handling-json-files/224687 "2020-03-24T15:36:38Z")
Hello, So I have a collection of PCAP files and I want to upload their content to Kibana. Now I am fairly certain that I will need to use tshark to convert the files to JSON, which I have done. Though I have a question… --- ## [Authentification sous Kibana](https://discuss.elastic.co/t/authentification-sous-kibana/187563)
**Author:** [@algilber](https://discuss.elastic.co/u/algilber)\ **Replies:** 3\ **Last updated:** [June 26, 2019, 12:35pm UTC](https://discuss.elastic.co/t/authentification-sous-kibana/187563 "2019-06-26T12:35:18Z")
Bonjour, Je viens d'installer le conteneur «docker.elastic.co/kibana/kibana:7.2.0» ainsi qu'un conteneur ElasticSearch de même version. Le tout fonctionne bien, mais je n'arrive pas à avoir l'authentification sous Kiba… --- ## [ECE v2](https://discuss.elastic.co/t/ece-v2/143480)
**Author:** [@crickes](https://discuss.elastic.co/u/crickes)\ **Replies:** 3\ **Last updated:** [August 16, 2018, 10:39am UTC](https://discuss.elastic.co/t/ece-v2/143480 "2018-08-16T10:39:26Z")
Does anyone know when the version released to Elastic Cloud on August 1st is going to be available on ECE? --- ## [Data sent with curl into elastisearch are invisible in Kibana](https://discuss.elastic.co/t/data-sent-with-curl-into-elastisearch-are-invisible-in-kibana/110868)
**Author:** [@Adesfire](https://discuss.elastic.co/u/Adesfire)\ **Replies:** 3\ **Last updated:** [December 11, 2017, 8:07pm UTC](https://discuss.elastic.co/t/data-sent-with-curl-into-elastisearch-are-invisible-in-kibana/110868 "2017-12-11T20:07:41Z")
Hello there, I'm putting data using a simple curl command (JSON format) then I get this successful message : {"\_index":"home","\_type":"doc","\_id":"ox61NmABZ5bRYuBijg0\_","\_version":1,"result":"created","\_shards":{"total… --- ## [Best way to index IIS logs, Weblogic logs, etc](https://discuss.elastic.co/t/best-way-to-index-iis-logs-weblogic-logs-etc/109422)
**Author:** [@mrc](https://discuss.elastic.co/u/mrc)\ **Replies:** 3\ **Last updated:** [December 4, 2017, 7:30pm UTC](https://discuss.elastic.co/t/best-way-to-index-iis-logs-weblogic-logs-etc/109422 "2017-12-04T19:30:42Z")
Hello, I was able to successfully index Weblogic HTTP access logs into ElasticSearch thru Logstash. I am now tasked to do IIS logs - I was under the impression that when I process the IIS logs the new fields will be add… --- ## [Metricbeat 5.3.1 not collecting host os process info](https://discuss.elastic.co/t/metricbeat-5-3-1-not-collecting-host-os-process-info/97626)
**Author:** [@dh2001](https://discuss.elastic.co/u/dh2001)\ **Replies:** 3\ **Last updated:** [August 30, 2017, 10:04pm UTC](https://discuss.elastic.co/t/metricbeat-5-3-1-not-collecting-host-os-process-info/97626 "2017-08-30T22:04:59Z")
We have Filebeat and Metricbeat running in a docker container. With /proc mounted to /hostfs ro. SLES 12. Using -system.hostfs=/hostfs when running metricbeat. But we do not see any process info for processes in anothe… --- ## [Painless script error when adding a tag to a document](https://discuss.elastic.co/t/painless-script-error-when-adding-a-tag-to-a-document/75762)
**Author:** [@mormor1971](https://discuss.elastic.co/u/mormor1971)\ **Replies:** 0\ **Last updated:** [February 20, 2017, 3:20pm UTC](https://discuss.elastic.co/t/painless-script-error-when-adding-a-tag-to-a-document/75762 "2017-02-20T15:20:57Z")
Hello All, I have a issue that I cannot figure out: I'm running v5.2 but had the same issue on v5.1.2. I have a index with a few documents in that I want to update with a tag if they match a IP address in the host… --- ## [How to ship/fetch data from Client server which is not directly accessible to Logstash](https://discuss.elastic.co/t/how-to-ship-fetch-data-from-client-server-which-is-not-directly-accessible-to-logstash/54130)
**Author:** [@shubham\_deodia](https://discuss.elastic.co/u/shubham_deodia)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 5:37am UTC](https://discuss.elastic.co/t/how-to-ship-fetch-data-from-client-server-which-is-not-directly-accessible-to-logstash/54130 "2016-07-01T05:37:48Z")
I had implemented ELK stack on my Localhost. I want to Ship Data from Client server to ELK server. I am able to do so , if client server is directly accessible from ELK server. But, in production environment , the … --- ## [Create a new index from existing one and add new fields to the new index](https://discuss.elastic.co/t/create-a-new-index-from-existing-one-and-add-new-fields-to-the-new-index/53626)
**Author:** [@divya\_hc](https://discuss.elastic.co/u/divya_hc)\ **Replies:** 3\ **Last updated:** [June 22, 2016, 8:27pm UTC](https://discuss.elastic.co/t/create-a-new-index-from-existing-one-and-add-new-fields-to-the-new-index/53626 "2016-06-22T20:27:13Z")
Hi, I am creating an index on elastic search which has fields appgroupid, appid. But i need to add appgroupname and appname fields to this index. I have an hashmap of appgroupid to appgroupname and appgroupid to app… --- ## [Simple\_query\_string is not matching correctly](https://discuss.elastic.co/t/simple-query-string-is-not-matching-correctly/329656)
**Author:** [@jilson](https://discuss.elastic.co/u/jilson)\ **Replies:** 2\ **Last updated:** [April 10, 2023, 1:39pm UTC](https://discuss.elastic.co/t/simple-query-string-is-not-matching-correctly/329656 "2023-04-10T13:39:03Z")
I am trying the below query using simple\_query\_string to match customer\_id GET order-info/\_search { "query": { "simple\_query\_string": { "query": "1c0298d6-a911-5044-a904-6e848fb05eef", "fields": \["cust… --- ## [Java API client : How to reset index settings value](https://discuss.elastic.co/t/java-api-client-how-to-reset-index-settings-value/329059)
**Author:** [@MathieuLacour](https://discuss.elastic.co/u/MathieuLacour)\ **Replies:** 2\ **Last updated:** [March 31, 2023, 3:02pm UTC](https://discuss.elastic.co/t/java-api-client-how-to-reset-index-settings-value/329059 "2023-03-31T15:02:40Z")
For performance reasons, I need to temporarily disable refresh\_interval at index settings level while bulk loading takes place in the index, and enable it back afterwards. The refresh\_interval value is held by global cl… --- ## [Connecting to Elasticsearch from GUI using API and http security](https://discuss.elastic.co/t/connecting-to-elasticsearch-from-gui-using-api-and-http-security/307299)
**Author:** [@jamesp](https://discuss.elastic.co/u/jamesp)\ **Replies:** 2\ **Last updated:** [June 15, 2022, 5:07pm UTC](https://discuss.elastic.co/t/connecting-to-elasticsearch-from-gui-using-api-and-http-security/307299 "2022-06-15T17:07:09Z")
I am currently running ES 7.11.1 and have set up basic security using a self created ca, certificates for each ES node, and ssl.http for External API access. All nodes and Kibana connect and work without an issue. Howev… --- ## [Filebeat crashed when processing messages from sqs queue](https://discuss.elastic.co/t/filebeat-crashed-when-processing-messages-from-sqs-queue/285145)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 2\ **Last updated:** [October 21, 2021, 6:43am UTC](https://discuss.elastic.co/t/filebeat-crashed-when-processing-messages-from-sqs-queue/285145 "2021-10-21T06:43:57Z")
Hi: I am running filebeat 7.15.0 to process S3 object creation event messages from AWS SQS. The queue is configured to receive AWS ELB log files. After a few minutes, filebeat 7.15.0 crashed with the following error. T… --- ## [Rest High Level Client Bulk Api write request failing: mapper\_parsing\_exception](https://discuss.elastic.co/t/rest-high-level-client-bulk-api-write-request-failing-mapper-parsing-exception/124600)
**Author:** [@vikaslalwani](https://discuss.elastic.co/u/vikaslalwani)\ **Replies:** 2\ **Last updated:** [April 5, 2018, 8:43am UTC](https://discuss.elastic.co/t/rest-high-level-client-bulk-api-write-request-failing-mapper-parsing-exception/124600 "2018-04-05T08:43:19Z")
Hi We recently migrated to ES 6.1.2 from ES 1.7. in the older version we had index mapping as \[ { "ts\_dynamic\_template": { "mapping": { "norms": { "enabled": false }, "in… --- ## [Kibana 5.6.3 rpm installation issues](https://discuss.elastic.co/t/kibana-5-6-3-rpm-installation-issues/103795)
**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\ **Replies:** 2\ **Last updated:** [October 19, 2017, 10:03am UTC](https://discuss.elastic.co/t/kibana-5-6-3-rpm-installation-issues/103795 "2017-10-19T10:03:04Z")
I've just installed kibana 5.6.3 using the rpm install on centos 7.4. The log directory wasn't created, so I've created it, and set the permissions. Now I've tried to start using systemctl... the service starts, however … --- ## [Forward metrics to 'logging-and-metrics' cluster](https://discuss.elastic.co/t/forward-metrics-to-logging-and-metrics-cluster/104424)
**Author:** [@Lafunamor](https://discuss.elastic.co/u/Lafunamor)\ **Replies:** 2\ **Last updated:** [October 19, 2017, 11:59am UTC](https://discuss.elastic.co/t/forward-metrics-to-logging-and-metrics-cluster/104424 "2017-10-19T11:59:03Z")
Hi When I create a new ES cluster on ECE and try to enable Monitoring I cannot use the 'logging-and-metrics' cluster. I was under the impression that this cluster was intended and provisioned for this purpose, am I und… --- ## [Debugging scroll benchmark](https://discuss.elastic.co/t/debugging-scroll-benchmark/89062)
**Author:** [@janhoy](https://discuss.elastic.co/u/janhoy)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 9:01am UTC](https://discuss.elastic.co/t/debugging-scroll-benchmark/89062 "2017-06-19T09:01:23Z")
Hi, I'm running a scroll query benchmark to fetch 200k rows from ES, but the ops/s achieved tells me something is wrong (80 ops/s on 4 cores). Also I added another test with 500k rows and it landed on the same ops/s. I… --- ## [Integrate svg maps in Kibana](https://discuss.elastic.co/t/integrate-svg-maps-in-kibana/89835)
**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\ **Replies:** 2\ **Last updated:** [June 18, 2017, 10:01am UTC](https://discuss.elastic.co/t/integrate-svg-maps-in-kibana/89835 "2017-06-18T10:01:37Z")
Hello All, I need to integrate svg maps in kibana instead of using the built in tile map. Thanks, --- ## [Bar graph intermediate space](https://discuss.elastic.co/t/bar-graph-intermediate-space/83051)
**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\ **Replies:** 2\ **Last updated:** [April 21, 2017, 8:48am UTC](https://discuss.elastic.co/t/bar-graph-intermediate-space/83051 "2017-04-21T08:48:10Z")
I am currently using kibana 4.In bar graph i have used split chart and then gave x axis with filters.The graph seems to be correct but there are some intermediate space for grouping along x axis. Ex:A and B's data are… --- ## [Description of available operation types](https://discuss.elastic.co/t/description-of-available-operation-types/77337)
**Author:** [@Ernesto\_Reig](https://discuss.elastic.co/u/Ernesto_Reig)\ **Replies:** 2\ **Last updated:** [March 7, 2017, 11:13am UTC](https://discuss.elastic.co/t/description-of-available-operation-types/77337 "2017-03-07T11:13:06Z")
Hello, I see in the docs the description of operations like this: operation-type (mandatory): Type of this operation. Out of the box, Rally supports the following operation types: index, force-merge, index-stats, node-st… --- ## [Aggregating fields without indexing it](https://discuss.elastic.co/t/aggregating-fields-without-indexing-it/67105)
**Author:** [@shushu](https://discuss.elastic.co/u/shushu)\ **Replies:** 2\ **Last updated:** [November 24, 2016, 1:48pm UTC](https://discuss.elastic.co/t/aggregating-fields-without-indexing-it/67105 "2016-11-24T13:48:32Z")
Hi all, Trying to follow the example from here, I marked all of the fields as not indexed - but supposibly they should be aggregate-able. According to Kibana over the same fields, they are not. Looking into a solution, e… --- ## [Elasticsearch Define Dynamic Mapping](https://discuss.elastic.co/t/elasticsearch-define-dynamic-mapping/62583)
**Author:** [@sreeram](https://discuss.elastic.co/u/sreeram)\ **Replies:** 2\ **Last updated:** [October 11, 2016, 3:25pm UTC](https://discuss.elastic.co/t/elasticsearch-define-dynamic-mapping/62583 "2016-10-11T15:25:30Z")
Hi, I'm using Elasticsearch 2.3.4 & Elasticsearch.Net (Low-level client) SDK for indexing JSON documents which are dynamic in nature. I want to create mapping for my JSON structure before indexing documents in order… --- ## [\[RESOLVED\] Input plugin Rabbitmq](https://discuss.elastic.co/t/resolved-input-plugin-rabbitmq/60591)
**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\ **Replies:** 2\ **Last updated:** [September 15, 2016, 1:39pm UTC](https://discuss.elastic.co/t/resolved-input-plugin-rabbitmq/60591 "2016-09-15T13:39:31Z")
Hi all, I have a rabbitmq for queueing. I can see my logs comming in rabbitmq but never go out to my logstash. Logstash log: {:timestamp=\>"2016-09-15T11:10:35.118000+0200", :message=\>"Queue subscription ended! Will… --- ## [Adding ingestion time in logs upto nanoseconds for more precision](https://discuss.elastic.co/t/adding-ingestion-time-in-logs-upto-nanoseconds-for-more-precision/52048)
**Author:** [@lucifer](https://discuss.elastic.co/u/lucifer)\ **Replies:** 2\ **Last updated:** [June 8, 2016, 12:26pm UTC](https://discuss.elastic.co/t/adding-ingestion-time-in-logs-upto-nanoseconds-for-more-precision/52048 "2016-06-08T12:26:10Z")
Can I Add ingestion time in logs upto nanoseconds for more precision by specifying it somewhere in the configuration file??? --- ## [Grok filter problem](https://discuss.elastic.co/t/grok-filter-problem/51748)
**Author:** [@etfeet](https://discuss.elastic.co/u/etfeet)\ **Replies:** 2\ **Last updated:** [June 3, 2016, 3:19pm UTC](https://discuss.elastic.co/t/grok-filter-problem/51748 "2016-06-03T15:19:49Z")
I'm having problems matching against a string in the middle of a field field data contains: "change-data" =\> "{ gtm\_pool\_member { gtm\_pool\_member\_pool\_type 1 gtm\_pool\_member\_pool\_name /Common/panel\_preprod… --- ## [The Elasticsearch keystore \[C:\\elasticsearch-7.17.0\\elasticsearch-7.17.0\\config\\elasticsearch.keystore\] format is too new. Are you trying to downgrade? You should delete and recreate it in order to downgrade](https://discuss.elastic.co/t/the-elasticsearch-keystore-c-elasticsearch-7-17-0-elasticsearch-7-17-0-config-elasticsearch-keystore-format-is-too-new-are-you-trying-to-downgrade-you-should-delete-and-recreate-it-in-order-to-downgrade/310527)
**Author:** [@mujtabah](https://discuss.elastic.co/u/mujtabah)\ **Replies:** 1\ **Last updated:** [July 26, 2022, 12:11am UTC](https://discuss.elastic.co/t/the-elasticsearch-keystore-c-elasticsearch-7-17-0-elasticsearch-7-17-0-config-elasticsearch-keystore-format-is-too-new-are-you-trying-to-downgrade-you-should-delete-and-recreate-it-in-order-to-downgrade/310527 "2022-07-26T00:11:56Z")
I am currently using windows server 2019. i was trying to upgrade ES from 7.16.2 to 8.3, then i got error to upgrade first to 7.17. i have upgraded it to 7.17 but now when i run elasticsearch.bat file its giving this er… --- ## [Winlogbeat message not parsed](https://discuss.elastic.co/t/winlogbeat-message-not-parsed/302979)
**Author:** [@Elie\_Sbat](https://discuss.elastic.co/u/Elie_Sbat)\ **Replies:** 7\ **Last updated:** [April 22, 2022, 8:25am UTC](https://discuss.elastic.co/t/winlogbeat-message-not-parsed/302979 "2022-04-22T08:25:03Z")
Hello, I am using elasticstack v8. The messages are sent from winlogbeat -\> kafka - \> logstash -\> elastic. The message is arrived unparsed. Logstash config: input { kafka{ bootstrap\_servers =\> … --- ## [Fields not coming in discover](https://discuss.elastic.co/t/fields-not-coming-in-discover/301181)
**Author:** [@Shubham\_Singh](https://discuss.elastic.co/u/Shubham_Singh)\ **Replies:** 7\ **Last updated:** [April 7, 2022, 6:11am UTC](https://discuss.elastic.co/t/fields-not-coming-in-discover/301181 "2022-04-07T06:11:16Z")
I have a stack\_trace field in log file but in kibana it turn out to be in hidden field with no value. Rest other fields are coming as expected. I can see the field in vizualization but not in discover . The field type is… --- ## [How can I find is ilm policy been applied to my index?](https://discuss.elastic.co/t/how-can-i-find-is-ilm-policy-been-applied-to-my-index/295708)
**Author:** [@baalchina](https://discuss.elastic.co/u/baalchina)\ **Replies:** 1\ **Last updated:** [January 28, 2022, 2:26pm UTC](https://discuss.elastic.co/t/how-can-i-find-is-ilm-policy-been-applied-to-my-index/295708 "2022-01-28T14:26:09Z")
Hi, I am trying to apply a ILM policy to my index, I created a new index template, all of them are empty except a index pattern(and this pattern has some index include). At last, I assigin the ILM policy to the new index… --- ## [How to combine message field](https://discuss.elastic.co/t/how-to-combine-message-field/118692)
**Author:** [@Vikneswar](https://discuss.elastic.co/u/Vikneswar)\ **Replies:** 1\ **Last updated:** [February 7, 2018, 10:48pm UTC](https://discuss.elastic.co/t/how-to-combine-message-field/118692 "2018-02-07T22:48:26Z")
I am passing application log to kibana via Logstash \> ES \> Kibana , by default its creating index and assigning values but in message filed log are getting splitted , Below are the log as log started with new line , how… --- ## [Insert data to elastic with date with date field fails when creating index patter](https://discuss.elastic.co/t/insert-data-to-elastic-with-date-with-date-field-fails-when-creating-index-patter/110076)
**Author:** [@rj-reilly](https://discuss.elastic.co/u/rj-reilly)\ **Replies:** 1\ **Last updated:** [December 4, 2017, 12:32am UTC](https://discuss.elastic.co/t/insert-data-to-elastic-with-date-with-date-field-fails-when-creating-index-patter/110076 "2017-12-04T00:32:53Z")
Hi, I am polling the logstash monitoring api and inserting that data into elasticsearch, I created a mapping so the data field will be set properly. Logstash 6.0 elasticsearch 6.0 Here is my mapping PUT \_template/tes… --- ## [Merging JSON files](https://discuss.elastic.co/t/merging-json-files/108626)
**Author:** [@NPNP](https://discuss.elastic.co/u/NPNP)\ **Replies:** 1\ **Last updated:** [November 22, 2017, 1:59am UTC](https://discuss.elastic.co/t/merging-json-files/108626 "2017-11-22T01:59:21Z")
Hello everyone, 100% newbie here. Thank you for your patience. I'm trying to merge two simple json files under certain condition. Is that possible? Any direction is useful. JSON\_1 { "name\_1" : "John", "age\_1"… --- ## [Show zero instead of "No Results"](https://discuss.elastic.co/t/show-zero-instead-of-no-results/107071)
**Author:** [@Speedman](https://discuss.elastic.co/u/Speedman)\ **Replies:** 1\ **Last updated:** [November 10, 2017, 3:55am UTC](https://discuss.elastic.co/t/show-zero-instead-of-no-results/107071 "2017-11-10T03:55:32Z")
We are building a dashboard to visualize the performance of our transaction processing servers. One of the things we want to see visualized is whether we have any timeouts (which, for us, is a transaction that doesn't fi… [Previous page](https://discuss.elastic.co/top.md?page=1665&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1667&per_page=50&period=all)