# Top **URL:** https://discuss.elastic.co/top.md?page=1672&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1673 --- ## [Unexpected default mapping](https://discuss.elastic.co/t/unexpected-default-mapping/25182)
**Author:** [@Khoa\_Nguyen1](https://discuss.elastic.co/u/Khoa_Nguyen1)\ **Replies:** 4\ **Last updated:** [July 9, 2015, 10:43am UTC](https://discuss.elastic.co/t/unexpected-default-mapping/25182 "2015-07-09T10:43:36Z")
Using logstash, I have parsed a CSV file and loaded them to elasticsearch. It looks like all numbers are treated as string. Is there a way to tell elasticsearch to treat them as number without defining a custom mapping? … --- ## [How to increase memory](https://discuss.elastic.co/t/how-to-increase-memory/10681)
**Author:** [@11114](https://discuss.elastic.co/u/11114)\ **Replies:** 4\ **Last updated:** [August 18, 2014, 10:22pm UTC](https://discuss.elastic.co/t/how-to-increase-memory/10681 "2014-08-18T22:22:41Z")
In continuation of the topic https://github.com/elasticsearch/elasticsearch/issues/2636#issuecomment-13332877 in continuation of the topic https://github.com/elasticsearch/elasticsearch/issues/2636#issuecomment-13… --- ## [ESRally version 2.7.0 is throwing version mismatch h error with elasticsearch server 7.6.1](https://discuss.elastic.co/t/esrally-version-2-7-0-is-throwing-version-mismatch-h-error-with-elasticsearch-server-7-6-1/324723)
**Author:** [@Rahul\_Prajapati](https://discuss.elastic.co/u/Rahul_Prajapati)\ **Replies:** 3\ **Last updated:** [February 16, 2023, 8:00am UTC](https://discuss.elastic.co/t/esrally-version-2-7-0-is-throwing-version-mismatch-h-error-with-elasticsearch-server-7-6-1/324723 "2023-02-16T08:00:01Z")
elasticsearch.exceptions.UnsupportedProductError: The client noticed that the server is not a supported distribution of Elasticsearch I have installed esrally 2.7.0 on my local mac machine in a separate python virtual e… --- ## [Logstash connection with Oracle wallet](https://discuss.elastic.co/t/logstash-connection-with-oracle-wallet/319300)
**Author:** [@Num](https://discuss.elastic.co/u/Num)\ **Replies:** 3\ **Last updated:** [November 22, 2022, 2:31pm UTC](https://discuss.elastic.co/t/logstash-connection-with-oracle-wallet/319300 "2022-11-22T14:31:17Z")
Hello, I'm having issues connecting Logstash using Oracle wallet. I am getting an invalid login/password even though I am trying to connect through the wallet, without using said login/password. \[ERROR\]\[logstash.input… --- ## [Custom stacktrace hampering the json format for long text size](https://discuss.elastic.co/t/custom-stacktrace-hampering-the-json-format-for-long-text-size/313239)
**Author:** [@yahire](https://discuss.elastic.co/u/yahire)\ **Replies:** 3\ **Last updated:** [August 31, 2022, 8:40am UTC](https://discuss.elastic.co/t/custom-stacktrace-hampering-the-json-format-for-long-text-size/313239 "2022-08-31T08:40:02Z")
HI Team, I had added a custom change in elastic apm agent's source code where in : \\apm-agent-core\\src\\main\\java\\co\\elastic\\apm\\agent\\impl\\transaction\\transaction.java -\> beforeEnd() to get all the active threads in j… --- ## [TSVB hide empty time intervals](https://discuss.elastic.co/t/tsvb-hide-empty-time-intervals/284721)
**Author:** [@Janujc](https://discuss.elastic.co/u/Janujc)\ **Replies:** 3\ **Last updated:** [September 29, 2021, 8:40am UTC](https://discuss.elastic.co/t/tsvb-hide-empty-time-intervals/284721 "2021-09-29T08:40:55Z")
Hello, I'm wondering if it is possible to hide days (time interval units) when no event was happened in TSVB. I am interested in showing daily events, but when this extends to a longer time period it is very easy to get … --- ## [Add dynamic variable to item url](https://discuss.elastic.co/t/add-dynamic-variable-to-item-url/284250)
**Author:** [@yangesh4u](https://discuss.elastic.co/u/yangesh4u)\ **Replies:** 3\ **Last updated:** [September 15, 2021, 9:19pm UTC](https://discuss.elastic.co/t/add-dynamic-variable-to-item-url/284250 "2021-09-15T21:19:40Z")
We are trying to add a item url to an TOP N TSVB visualizations ,we have a requirement to pass an attribute name dynamically like given below. https://search.xxxyyyyyyzzzzzzzzz.es.amazonaws.com/\_plugin/kibana/app/discov… --- ## [Fingerprint duplicate hash for different events](https://discuss.elastic.co/t/fingerprint-duplicate-hash-for-different-events/282462)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 3\ **Last updated:** [September 7, 2021, 10:51am UTC](https://discuss.elastic.co/t/fingerprint-duplicate-hash-for-different-events/282462 "2021-09-07T10:51:11Z")
Hi, I have a strange issue which came to light after starting to use datastreams (and thus create events instead of updates). The following fingerprint config we have in logstash: ### Add a fingerprint to… --- ## [Cisco core switch integration](https://discuss.elastic.co/t/cisco-core-switch-integration/259711)
**Author:** [@sbathla](https://discuss.elastic.co/u/sbathla)\ **Replies:** 3\ **Last updated:** [December 28, 2020, 9:18am UTC](https://discuss.elastic.co/t/cisco-core-switch-integration/259711 "2020-12-28T09:18:09Z")
Hi All, I am trying to integrate elasticsearch with cisco core switch.I have done the required configuration in filebeat file and cisco module file. But while sending logs from core switch on port 9506, getting error t… --- ## [Regarding Index Sorting](https://discuss.elastic.co/t/regarding-index-sorting/244984)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 3\ **Last updated:** [August 14, 2020, 4:54pm UTC](https://discuss.elastic.co/t/regarding-index-sorting/244984 "2020-08-14T16:54:39Z")
Hi, When considering index sorting would it be correct to assume the following cost/benefits: Pros: faster searching for standard queries Better index compression Cons: Significantly reduced indexing throughput, s… --- ## [Ingest node / source name](https://discuss.elastic.co/t/ingest-node-source-name/195892)
**Author:** [@thaideval](https://discuss.elastic.co/u/thaideval)\ **Replies:** 8\ **Last updated:** [August 21, 2019, 9:45am UTC](https://discuss.elastic.co/t/ingest-node-source-name/195892 "2019-08-21T09:45:08Z")
Hello, i am using filebeat for sending logs to elastic and ingest node for parsing with grok. my logs have 2 fields for datestamp - \> 1/2 is in the name of every file (Year-month-day-hour) and 1/2 is in the beginning … --- ## [Documents with Regex fields](https://discuss.elastic.co/t/documents-with-regex-fields/195833)
**Author:** [@krish3](https://discuss.elastic.co/u/krish3)\ **Replies:** 3\ **Last updated:** [August 21, 2019, 6:50am UTC](https://discuss.elastic.co/t/documents-with-regex-fields/195833 "2019-08-21T06:50:02Z")
I have documents with fields themselves being a regular expression. For example doc1: regexp:1111.\*01011 doc2: regexp: 111.\*01011 So if I give a query with regexp:1111010111101011 should return doc1 and doc2, while a… --- ## [Regex for json format](https://discuss.elastic.co/t/regex-for-json-format/121635)
**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\ **Replies:** 3\ **Last updated:** [February 27, 2018, 12:03pm UTC](https://discuss.elastic.co/t/regex-for-json-format/121635 "2018-02-27T12:03:21Z")
Hello I am using the logstash to seprate the json format can someone suggest me the regex. as i want to seprate all the names after "have" and it may contain as many names and with a common format i want to extract a… --- ## [Kibana Geohash Zoom Errors Past Precision Level 12](https://discuss.elastic.co/t/kibana-geohash-zoom-errors-past-precision-level-12/95016)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [August 1, 2017, 1:41pm UTC](https://discuss.elastic.co/t/kibana-geohash-zoom-errors-past-precision-level-12/95016 "2017-08-01T13:41:43Z")
Kibana 5.4.1 ES: 5.4.1 x-pack installed This issue has persisted through about four different 5.x versions; Without even using a tilemap -- a data table with the aggregation on the geohash: nginxgeo1 field fails when… --- ## [Which gives better search performance? Search in list element or search in text](https://discuss.elastic.co/t/which-gives-better-search-performance-search-in-list-element-or-search-in-text/72451)
**Author:** [@heeren](https://discuss.elastic.co/u/heeren)\ **Replies:** 3\ **Last updated:** [January 23, 2017, 9:27am UTC](https://discuss.elastic.co/t/which-gives-better-search-performance-search-in-list-element-or-search-in-text/72451 "2017-01-23T09:27:48Z")
To give a better context, if I have a field called "countries". Value of countries can be put as a space separated string (type string) e.g. "de en es" or it can be saved as a proper list (type object) e.g. \["de", "en", … --- ## [Elasticserch slowly inserts a row](https://discuss.elastic.co/t/elasticserch-slowly-inserts-a-row/51298)
**Author:** [@111122](https://discuss.elastic.co/u/111122)\ **Replies:** 3\ **Last updated:** [May 30, 2016, 1:00pm UTC](https://discuss.elastic.co/t/elasticserch-slowly-inserts-a-row/51298 "2016-05-30T13:00:57Z")
We have got a problem with elasticsearch. When we used version 1.7.0 of elasticsearch the speed of insertion a row was approximately 0.01 sec but when we updated version on 2.3.1 the speed of insertion a row slowed down … --- ## [Logs to Elastic cloud](https://discuss.elastic.co/t/logs-to-elastic-cloud/49634)
**Author:** [@Karl\_Trasschaert](https://discuss.elastic.co/u/Karl_Trasschaert)\ **Replies:** 3\ **Last updated:** [May 11, 2016, 9:47am UTC](https://discuss.elastic.co/t/logs-to-elastic-cloud/49634 "2016-05-11T09:47:22Z")
Hi, I've just started with the elastic cloud, i would like to send logs from devices ( routers) where i can only set the ipadress of the log receiver to the cloud. Which is the best solution ? Do i have to install a… --- ## [Field cache limits ignored](https://discuss.elastic.co/t/field-cache-limits-ignored/9569)
**Author:** [@Logan\_2](https://discuss.elastic.co/u/Logan_2)\ **Replies:** 8\ **Last updated:** [November 6, 2012, 4:49pm UTC](https://discuss.elastic.co/t/field-cache-limits-ignored/9569 "2012-11-06T16:49:59Z")
I'm having problems controlling OOME errors on my 6 node CentOS 5.6 cluster. I am currently running elasticsearch-0.19.8 using the service wrapper and java version "1.6.0\_25". I have set the following index.cache.f… --- ## [DeprecationWarning for request\_timeout](https://discuss.elastic.co/t/deprecationwarning-for-request-timeout/315311)
**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\ **Replies:** 0\ **Last updated:** [September 27, 2022, 8:37pm UTC](https://discuss.elastic.co/t/deprecationwarning-for-request-timeout/315311 "2022-09-27T20:37:45Z")
I initialize my ES connection in Python with Elasticsearch.options(), setting a global timeout. For some complex searches I need a custom (longer) timeout. To achieve this, I use es.search(request\_timeout=timeout, \[..\]).… --- ## [Does WorkplaceSearch support GoogleChat?](https://discuss.elastic.co/t/does-workplacesearch-support-googlechat/275551)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 6\ **Last updated:** [June 25, 2021, 12:53am UTC](https://discuss.elastic.co/t/does-workplacesearch-support-googlechat/275551 "2021-06-25T00:53:25Z")
Does WorkplaceSearch include GoogleChat in its content sources? The following page does not have it, so it does not appear to be supported at this time. If it is not currently supported, is there a plan to support it … --- ## [Enabling email notifications](https://discuss.elastic.co/t/enabling-email-notifications/187475)
**Author:** [@AMiura](https://discuss.elastic.co/u/AMiura)\ **Replies:** 6\ **Last updated:** [July 2, 2019, 4:26am UTC](https://discuss.elastic.co/t/enabling-email-notifications/187475 "2019-07-02T04:26:52Z")
I'm trying to enable xpack.watcher.encrypt\_sensitive\_data on Elasticsearch 7.1 so I can have passwords not in plain text. Any time I try to set it to true in elasticsearch.yml it crashes when trying to start. In the logs… --- ## [Adding nodes to cluster cause all nodes Load](https://discuss.elastic.co/t/adding-nodes-to-cluster-cause-all-nodes-load/102864)
**Author:** [@xavierfacq](https://discuss.elastic.co/u/xavierfacq)\ **Replies:** 6\ **Last updated:** [October 6, 2017, 7:21am UTC](https://discuss.elastic.co/t/adding-nodes-to-cluster-cause-all-nodes-load/102864 "2017-10-06T07:21:28Z")
Hi, Here is my strange story : We had a cluster with 5 nodes with one node having load. We have added 2 new nodes. After few days we have deleted 2 old ones because they had to much load, and we finally have added 2 n… --- ## [ElasticsearchIllegalArgumentException can't parse config file](https://discuss.elastic.co/t/elasticsearchillegalargumentexception-cant-parse-config-file/21838)
**Author:** [@Xavier\_Garcia](https://discuss.elastic.co/u/Xavier_Garcia)\ **Replies:** 6\ **Last updated:** [January 27, 2015, 5:42am UTC](https://discuss.elastic.co/t/elasticsearchillegalargumentexception-cant-parse-config-file/21838 "2015-01-27T05:42:32Z")
Hello guy, I'm configuring a ES cluster and i got this issue - \*ElasticsearchIllegalArgumentException\[value cannot be parsed to boolean \[ true/1/on/yes OR false/0/off/no \] \]\* I try to increase the level of logging… --- ## [A rollover (ILM) on rollup indexes](https://discuss.elastic.co/t/a-rollover-ilm-on-rollup-indexes/316597)
**Author:** [@mguggi](https://discuss.elastic.co/u/mguggi)\ **Replies:** 7\ **Last updated:** [December 12, 2022, 11:23am UTC](https://discuss.elastic.co/t/a-rollover-ilm-on-rollup-indexes/316597 "2022-12-12T11:23:20Z")
Referring to the post I have some more questions: Since the issue #48003 is closed is there a plan until when this feature will be available? I would also like to know if a numeric rollover works for rollup indexes? If… --- ## [Kibana and Fleet setup failed unable to authenticate user](https://discuss.elastic.co/t/kibana-and-fleet-setup-failed-unable-to-authenticate-user/304325)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 1\ **Last updated:** [May 11, 2022, 8:08am UTC](https://discuss.elastic.co/t/kibana-and-fleet-setup-failed-unable-to-authenticate-user/304325 "2022-05-11T08:08:06Z")
Im trying to setup kibana and fleet uisng the following example. https://github.com/elastic/cloud-on-k8s/blob/main/config/recipes/elastic-agent/fleet-kubernetes-integration.yaml However kibana is giving me the following… --- ## [Date Histogram buckets using top\_hits of terms over last 30 days](https://discuss.elastic.co/t/date-histogram-buckets-using-top-hits-of-terms-over-last-30-days/217679)
**Author:** [@duo\_jc](https://discuss.elastic.co/u/duo_jc)\ **Replies:** 1\ **Last updated:** [February 12, 2020, 8:44pm UTC](https://discuss.elastic.co/t/date-histogram-buckets-using-top-hits-of-terms-over-last-30-days/217679 "2020-02-12T20:44:17Z")
Hello Elasticsearch, I'm having an issue finding the right combination of aggregations to achieve a query I'm looking for. Essentially what I need to do is take the most recent document by ID over the last 30 days and t… --- ## [Error Logstash: unable to load plugin Postgresql.jar](https://discuss.elastic.co/t/error-logstash-unable-to-load-plugin-postgresql-jar/214562)
**Author:** [@Kostis95](https://discuss.elastic.co/u/Kostis95)\ **Replies:** 1\ **Last updated:** [January 10, 2020, 10:01am UTC](https://discuss.elastic.co/t/error-logstash-unable-to-load-plugin-postgresql-jar/214562 "2020-01-10T10:01:45Z")
Hi there, I'm trying to get started with elasticsearch and to use it for our forum data (which is stored in a postgresql database). I read that it would be possible to sync a postgresql database with elastic by using lo… --- ## [SIEM Parsing](https://discuss.elastic.co/t/siem-parsing/188291)
**Author:** [@pinguin](https://discuss.elastic.co/u/pinguin)\ **Replies:** 1\ **Last updated:** [July 1, 2019, 9:34pm UTC](https://discuss.elastic.co/t/siem-parsing/188291 "2019-07-01T21:34:28Z")
we are trying to send windows event logs using winlogbeat 7.XX version , we are creating severals of dashboards based on the correlation rules of event built on top of event ,sysmon and security logs ex : event.id =1 AND… --- ## [High cpu load on only one node](https://discuss.elastic.co/t/high-cpu-load-on-only-one-node/109090)
**Author:** [@xlc](https://discuss.elastic.co/u/xlc)\ **Replies:** 1\ **Last updated:** [November 25, 2017, 4:08am UTC](https://discuss.elastic.co/t/high-cpu-load-on-only-one-node/109090 "2017-11-25T04:08:39Z")
Hi,all I have a cluster with 21 nodes,es5.3.0(31.9G heapsize).Only one has high cpu load around 90%,and load average about 30 while the others are 10% 5. The nodes are all using ssd data store,and gc well. Any ideas fo… --- ## [Unable to start winlogbeat on windows server 2012](https://discuss.elastic.co/t/unable-to-start-winlogbeat-on-windows-server-2012/105112)
**Author:** [@Offer\_Sasson](https://discuss.elastic.co/u/Offer_Sasson)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 12:06pm UTC](https://discuss.elastic.co/t/unable-to-start-winlogbeat-on-windows-server-2012/105112 "2017-10-25T12:06:19Z")
Hi, I am new to this world.... 1.I read a few of the topic related to this error. 2. i am using centos as my EKL server. 3. i installed winlogbeat on a windows 2012 machine and trying to started the service, also in … --- ## [\_id as a consistent hash to avoid duplication with replays](https://discuss.elastic.co/t/-id-as-a-consistent-hash-to-avoid-duplication-with-replays/24411)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 1\ **Last updated:** [June 26, 2015, 11:10am UTC](https://discuss.elastic.co/t/-id-as-a-consistent-hash-to-avoid-duplication-with-replays/24411 "2015-06-26T11:10:30Z")
Hi All, I'm trying to create a situation where I have the option of replaying logs with zero risk of duplication. It seems to me that a good way to do that would be to make a field, possibly UUID or \_id, be a consiste… --- ## [Latest git master does not build](https://discuss.elastic.co/t/latest-git-master-does-not-build/13568)
**Author:** [@James\_Michael\_Dupont](https://discuss.elastic.co/u/James_Michael_Dupont)\ **Replies:** 7\ **Last updated:** [October 13, 2013, 4:08pm UTC](https://discuss.elastic.co/t/latest-git-master-does-not-build/13568 "2013-10-13T16:08:32Z")
Hi! here is my first attempt to build : https://github.com/elasticsearch/elasticsearch/issues/3674 java version "1.7.0\_25" OpenJDK Runtime Environment (rhel-2.3.10.4.el6\_4-x86\_64) OpenJDK 64-Bit Server VM (build… --- ## [Searching from array with OR](https://discuss.elastic.co/t/searching-from-array-with-or/10963)
**Author:** [@moocow](https://discuss.elastic.co/u/moocow)\ **Replies:** 7\ **Last updated:** [March 2, 2013, 2:24am UTC](https://discuss.elastic.co/t/searching-from-array-with-or/10963 "2013-03-02T02:24:29Z")
hello there, im trying to make a query as simple and obviously as fast as possible. i have a bunch of items indexed in ES with field sid, i have a an array of sids -\> \[1111,2222,3333\] and so i want to find all … --- ## [ELastic Defend agent high latency on DCs](https://discuss.elastic.co/t/elastic-defend-agent-high-latency-on-dcs/328766)
**Author:** [@Kelly\_Slavens](https://discuss.elastic.co/u/Kelly_Slavens)\ **Replies:** 2\ **Last updated:** [April 24, 2023, 4:44pm UTC](https://discuss.elastic.co/t/elastic-defend-agent-high-latency-on-dcs/328766 "2023-04-24T16:44:41Z")
We're seeing extreme latency on 2022 Domain controllers when Elastic Defend 8.6.2 Malicious Behavior rules are enabled. The server becomes very sluggish but performance metrics don't appear to show any sign of excesses l… --- ## [Dockerized elastic cluster "failed to send join request to master"](https://discuss.elastic.co/t/dockerized-elastic-cluster-failed-to-send-join-request-to-master/190506)
**Author:** [@Alaa\_bdira](https://discuss.elastic.co/u/Alaa_bdira)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 11:41am UTC](https://discuss.elastic.co/t/dockerized-elastic-cluster-failed-to-send-join-request-to-master/190506 "2019-07-15T11:41:00Z")
Hello i'm trying to set an elastic cluster on 2 different hosts with 2 nodes running on docker. i'm running on Red Hat Enterprise Linux Server : 7.4 (Maipo) with openjdk version "1.8.0\_161" and Elasticsearch 6.8.0. Aft… --- ## [Filter elements of a list using painless syntax](https://discuss.elastic.co/t/filter-elements-of-a-list-using-painless-syntax/142752)
**Author:** [@sahil\_sawhney](https://discuss.elastic.co/u/sahil_sawhney)\ **Replies:** 2\ **Last updated:** [August 2, 2018, 12:16pm UTC](https://discuss.elastic.co/t/filter-elements-of-a-list-using-painless-syntax/142752 "2018-08-02T12:16:58Z")
I need to filter a list and transform the payload. Using Elasticsearch 5.6 Example(Groovy) def list = \[1,2,3,4,5\] def result = list.findAll { it \> 2 } The result would be \[3,4,5\] This is showing syntax exception in … --- ## [How to change the target location of a snapshot repo?](https://discuss.elastic.co/t/how-to-change-the-target-location-of-a-snapshot-repo/96203)
**Author:** [@paul\_m](https://discuss.elastic.co/u/paul_m)\ **Replies:** 2\ **Last updated:** [August 8, 2017, 7:57am UTC](https://discuss.elastic.co/t/how-to-change-the-target-location-of-a-snapshot-repo/96203 "2017-08-08T07:57:14Z")
Hi all, I need to move my snapshot files to a different bucket on S3 - I accidentally put my snappies on a Glacier-enabled bucket, which kills snapshotting when the metadata files get taken offline into Glacier. If I m… --- ## [Elasticsearch docker image acts differently on a different host OS](https://discuss.elastic.co/t/elasticsearch-docker-image-acts-differently-on-a-different-host-os/85427)
**Author:** [@jacekr](https://discuss.elastic.co/u/jacekr)\ **Replies:** 2\ **Last updated:** [May 29, 2017, 4:01am UTC](https://discuss.elastic.co/t/elasticsearch-docker-image-acts-differently-on-a-different-host-os/85427 "2017-05-29T04:01:10Z")
hi Elasticsearch, I'm trying to run ES docker image docker.elastic.co/elasticsearch/elasticsearch:5.2.2 so that it binds the port 9300 on non LO interface, so that other containers can connect to that port. My tests … --- ## [Can we have interface name also stamped on each event?](https://discuss.elastic.co/t/can-we-have-interface-name-also-stamped-on-each-event/48054)
**Author:** [@harshafrnd4u](https://discuss.elastic.co/u/harshafrnd4u)\ **Replies:** 2\ **Last updated:** [April 22, 2016, 5:42am UTC](https://discuss.elastic.co/t/can-we-have-interface-name-also-stamped-on-each-event/48054 "2016-04-22T05:42:25Z")
Hi, Is there any way to stamp interface name on each event generated by packetbeat ? Thanks Harsha --- ## [Filter pfsense Logs in Logstash](https://discuss.elastic.co/t/filter-pfsense-logs-in-logstash/207658)
**Author:** [@Snadro](https://discuss.elastic.co/u/Snadro)\ **Replies:** 0\ **Last updated:** [November 13, 2019, 8:54am UTC](https://discuss.elastic.co/t/filter-pfsense-logs-in-logstash/207658 "2019-11-13T08:54:20Z")
Hi erveryone. I looking for to use ELK-Stack as intrusion decetion system (IDS). i'm new in ELK and it is my first setup of en IDS. Our-Setup: Firewall: pfsense ELK-Stack Version: 6.8.4 Java-Version: 1.8.0\_222-8u222… --- ## [Indexing \\n as \\n in elasticsearch](https://discuss.elastic.co/t/indexing-n-as-n-in-elasticsearch/107415)
**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 3:29pm UTC](https://discuss.elastic.co/t/indexing-n-as-n-in-elasticsearch/107415 "2017-11-13T15:29:00Z")
Hi all..... Here i am trying to index \\n as a field values in elasticsearch here is my mapping PUT my\_index { "mappings": { "my\_type": { "properties": { "city": { "type": "text" … --- ## [Error when trying to add documents layer to maps](https://discuss.elastic.co/t/error-when-trying-to-add-documents-layer-to-maps/245500)
**Author:** [@looknleap](https://discuss.elastic.co/u/looknleap)\ **Replies:** 5\ **Last updated:** [August 19, 2020, 3:29pm UTC](https://discuss.elastic.co/t/error-when-trying-to-add-documents-layer-to-maps/245500 "2020-08-19T15:29:30Z")
I am trying to get a map visualization working, but I get the error: "Couldn't find any index patterns with geospatial fields" As shown below, I have have the index template setup with a geoip field mapping (2 actually,… --- ## [Logstash multiple outputs](https://discuss.elastic.co/t/logstash-multiple-outputs/238428)
**Author:** [@mycloudcms](https://discuss.elastic.co/u/mycloudcms)\ **Replies:** 5\ **Last updated:** [July 27, 2020, 10:05pm UTC](https://discuss.elastic.co/t/logstash-multiple-outputs/238428 "2020-07-27T22:05:27Z")
Hi, once I try to add multiple output.logstash as array, I don't get any data, can you please assist? Thank you ex. #----------------------------- Logstash output -------------------------------- output.logstash: # T… --- ## [Metricbeat service starts then stop when trying to use the MSSQL](https://discuss.elastic.co/t/metricbeat-service-starts-then-stop-when-trying-to-use-the-mssql/240545)
**Author:** [@jhaycraft](https://discuss.elastic.co/u/jhaycraft)\ **Replies:** 5\ **Last updated:** [July 15, 2020, 7:43am UTC](https://discuss.elastic.co/t/metricbeat-service-starts-then-stop-when-trying-to-use-the-mssql/240545 "2020-07-15T07:43:53Z")
I'm trying to log some metrics from Microsoft MSSQL and the Metricbeat service starts then stop. I'm thinking that I have something wrong in the mssql.yaml file that is causing this. Windows errors logs have not been m… --- ## [Alerts in elastic](https://discuss.elastic.co/t/alerts-in-elastic/197223)
**Author:** [@Karthik2411](https://discuss.elastic.co/u/Karthik2411)\ **Replies:** 5\ **Last updated:** [September 9, 2019, 5:48am UTC](https://discuss.elastic.co/t/alerts-in-elastic/197223 "2019-09-09T05:48:26Z")
I am working creating alerts in elastic. I have a complex requirement of checking failures every hour and then summing them up to alert when the sum is exceeding 10 and then checking every hour and doing the same. I am a… --- ## [Elasticsearch - Projects](https://discuss.elastic.co/t/elasticsearch-projects/159408)
**Author:** [@Sean\_Patrick](https://discuss.elastic.co/u/Sean_Patrick)\ **Replies:** 5\ **Last updated:** [December 4, 2018, 10:00pm UTC](https://discuss.elastic.co/t/elasticsearch-projects/159408 "2018-12-04T22:00:50Z")
From a few other customers, I’ve heard that Elasticsearch technology is very hard to implement, more proprietary (like a Cloudera) and the use cases are narrow and not in production environments. What has been your exper… --- ## [Get the most recent event among event where have the same ID](https://discuss.elastic.co/t/get-the-most-recent-event-among-event-where-have-the-same-id/136657)
**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\ **Replies:** 5\ **Last updated:** [June 22, 2018, 6:45am UTC](https://discuss.elastic.co/t/get-the-most-recent-event-among-event-where-have-the-same-id/136657 "2018-06-22T06:45:15Z")
Hello, My problem is that my logs line are composed with a @timestamp and an ID and I want to add a field to the line where is the most recent among lines with the same ID. There is an example of what I want. If there i… --- ## [Logstash netflow and beats input](https://discuss.elastic.co/t/logstash-netflow-and-beats-input/119618)
**Author:** [@h\_foxit](https://discuss.elastic.co/u/h_foxit)\ **Replies:** 5\ **Last updated:** [February 13, 2018, 4:32pm UTC](https://discuss.elastic.co/t/logstash-netflow-and-beats-input/119618 "2018-02-13T16:32:40Z")
hi, I want to configure logstash to read from both beats and netflow input .. but what i get is only the beats input that works .. I did check that my router is sending logs on port 555. any idea why input { udp { … --- ## [Compare field value with field from csv , database and set a new field](https://discuss.elastic.co/t/compare-field-value-with-field-from-csv-database-and-set-a-new-field/166001)
**Author:** [@TEJASWI\_CHUNDURI](https://discuss.elastic.co/u/TEJASWI_CHUNDURI)\ **Replies:** 4\ **Last updated:** [January 29, 2019, 6:09am UTC](https://discuss.elastic.co/t/compare-field-value-with-field-from-csv-database-and-set-a-new-field/166001 "2019-01-29T06:09:43Z")
My events are having fields like timestamp, version , sitename , url and score Whenever the data parsed to logstash , I want to compare the score field of the url fields between different version field. As i have searc… --- ## [Logstash location](https://discuss.elastic.co/t/logstash-location/56925)
**Author:** [@wldbs0508](https://discuss.elastic.co/u/wldbs0508)\ **Replies:** 4\ **Last updated:** [August 5, 2016, 5:42pm UTC](https://discuss.elastic.co/t/logstash-location/56925 "2016-08-05T17:42:47Z")
Hi, I would like to set up our Elasticsearch Cluster on some hosts and it consists of 4~5 hosts. I also want to use Logstash to put data into Elasticsearch cluster. My website will run Logstash when customer requests i… [Previous page](https://discuss.elastic.co/top.md?page=1671&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1673&per_page=50&period=all)