# Top **URL:** https://discuss.elastic.co/top.md?page=1674&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1675 --- ## [ctx.execution\_time.getMillis() no longer works with Elasticsearch 6.5.0](https://discuss.elastic.co/t/ctx-execution-time-getmillis-no-longer-works-with-elasticsearch-6-5-0/157788)
**Author:** [@tphongio](https://discuss.elastic.co/u/tphongio)\ **Replies:** 1\ **Last updated:** [November 21, 2018, 11:41pm UTC](https://discuss.elastic.co/t/ctx-execution-time-getmillis-no-longer-works-with-elasticsearch-6-5-0/157788 "2018-11-21T23:41:53Z")
I have been using ctx.execution\_time.getMillis() in painless script for my watcher and it has been working until 6.5.0. Here is the error from watcher execution: "type": "script\_exception", "reason": "runtime er… --- ## [Threading problem with Node Client](https://discuss.elastic.co/t/threading-problem-with-node-client/147225)
**Author:** [@jbgriffin](https://discuss.elastic.co/u/jbgriffin)\ **Replies:** 1\ **Last updated:** [September 4, 2018, 2:23pm UTC](https://discuss.elastic.co/t/threading-problem-with-node-client/147225 "2018-09-04T14:23:03Z")
Running ElasticSearch 6.1.3 Node Client in our Tomcat Application server, connecting to ElasticSearch 6.1.3 cluster in another JVM on the same machine. Our Tomcat Application quits handling requests because request thre… --- ## [Import from BigQuery to Elasticsearch?](https://discuss.elastic.co/t/import-from-bigquery-to-elasticsearch/138448)
**Author:** [@melissachang](https://discuss.elastic.co/u/melissachang)\ **Replies:** 1\ **Last updated:** [July 5, 2018, 1:43pm UTC](https://discuss.elastic.co/t/import-from-bigquery-to-elasticsearch/138448 "2018-07-05T13:43:59Z")
Is there a recommended/easy way to import data from BigQuery into Elasticsearch? Right now I'm doing BigQuery -\> pandas dataframe -\> dict -\> Elasticsearch, but pandas doesn't handle missing values well. --- ## [Linked dashboards with dynamic filters](https://discuss.elastic.co/t/linked-dashboards-with-dynamic-filters/102208)
**Author:** [@vijeshkk](https://discuss.elastic.co/u/vijeshkk)\ **Replies:** 1\ **Last updated:** [October 2, 2017, 9:22pm UTC](https://discuss.elastic.co/t/linked-dashboards-with-dynamic-filters/102208 "2017-10-02T21:22:48Z")
Hi, I am collecting metric data from over 100 servers and i want to have a summary dashboard which will have the list of hostnames and clicking on the hostname should take to another dashaboard where all metric data for… --- ## [Date field in elastic hive table is created as text in ES](https://discuss.elastic.co/t/date-field-in-elastic-hive-table-is-created-as-text-in-es/95048)
**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\ **Replies:** 1\ **Last updated:** [July 29, 2017, 8:48pm UTC](https://discuss.elastic.co/t/date-field-in-elastic-hive-table-is-created-as-text-in-es/95048 "2017-07-29T20:48:26Z")
any data that I insert in the hadoop Elasticsearch table in HIVE is being mapped as text . I think that's why the date operations are not working on my Index. 0: jdbc:hive2://hadoop2:10000/default\> desc pa\_lane\_txn\_es… --- ## [Metricbeat is not working after i installed xpack](https://discuss.elastic.co/t/metricbeat-is-not-working-after-i-installed-xpack/71681)
**Author:** [@gutasaputra](https://discuss.elastic.co/u/gutasaputra)\ **Replies:** 1\ **Last updated:** [January 16, 2017, 11:33am UTC](https://discuss.elastic.co/t/metricbeat-is-not-working-after-i-installed-xpack/71681 "2017-01-16T11:33:53Z")
hi, recently i installed xpack and then suddenly my metricbeat doesnt work anymore. it should be send log to my elastic. but when i check it in my kibana, it throw me error msg like this. this is my metricbeat.yml s… --- ## [ELK on same nodes or isolated node architecture?](https://discuss.elastic.co/t/elk-on-same-nodes-or-isolated-node-architecture/54755)
**Author:** [@nooners](https://discuss.elastic.co/u/nooners)\ **Replies:** 1\ **Last updated:** [July 5, 2016, 10:26pm UTC](https://discuss.elastic.co/t/elk-on-same-nodes-or-isolated-node-architecture/54755 "2016-07-05T22:26:09Z")
I have four ELK nodes with about 500GB of data used out of 2TB on each one. These nodes are highly active. As in they are being sent many different logs to them (SQL, ULS, IIS and a lot more). All four of these nodes run… --- ## [Replica shards not being assigned to nodes](https://discuss.elastic.co/t/replica-shards-not-being-assigned-to-nodes/45833)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 1\ **Last updated:** [March 30, 2016, 8:37pm UTC](https://discuss.elastic.co/t/replica-shards-not-being-assigned-to-nodes/45833 "2016-03-30T20:37:19Z")
Hello, I have this issue that started happening for a few days now. When an index is generated, primary shards are assigned, but not the replica shards. They show as un-assigned. So after I run this command where my … --- ## [Kafka plugin makes logstash go into 100% CPU infinite loop](https://discuss.elastic.co/t/kafka-plugin-makes-logstash-go-into-100-cpu-infinite-loop/38259)
**Author:** [@Omar\_Al\_Zabir](https://discuss.elastic.co/u/Omar_Al_Zabir)\ **Replies:** 1\ **Last updated:** [January 2, 2016, 8:08pm UTC](https://discuss.elastic.co/t/kafka-plugin-makes-logstash-go-into-100-cpu-infinite-loop/38259 "2016-01-02T20:08:55Z")
I am using Kafka plugin in logstash to read items and push to ES. After processing 3M messages, I can see the logstash process remains at 100% CPU continuously, although it is doing nothing. Here's my config: input … --- ## [Issue with message duplication](https://discuss.elastic.co/t/issue-with-message-duplication/137629)
**Author:** [@mikewitters](https://discuss.elastic.co/u/mikewitters)\ **Replies:** 2\ **Last updated:** [June 27, 2018, 6:19pm UTC](https://discuss.elastic.co/t/issue-with-message-duplication/137629 "2018-06-27T18:19:31Z")
Using the ELK stack (6.2.2) to aggregate our application logs and almost everything is going well after a few bumps and bruises. The only issue that I see now is that the actual log statement the app writes is being dupl… --- ## [How bypass a login popup in Synthetics?](https://discuss.elastic.co/t/how-bypass-a-login-popup-in-synthetics/356796)
**Author:** [@rafaeljsc](https://discuss.elastic.co/u/rafaeljsc)\ **Replies:** 5\ **Last updated:** [April 17, 2024, 9:08am UTC](https://discuss.elastic.co/t/how-bypass-a-login-popup-in-synthetics/356796 "2024-04-17T09:08:06Z")
I'm building a synthetic monitoring where I need login in this page to enter on the application: But I can't interact with this pop up, because it is not page's part, it is a browser part. So, I set a header to bypa… --- ## [Trying to use our own certificates for kibana/elasticsearch but page doesn't load after](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729)
**Author:** [@g0nz0](https://discuss.elastic.co/u/g0nz0)\ **Replies:** 5\ **Last updated:** [January 13, 2022, 1:51pm UTC](https://discuss.elastic.co/t/trying-to-use-our-own-certificates-for-kibana-elasticsearch-but-page-doesnt-load-after/293729 "2022-01-13T13:51:34Z")
Hello, I've manage to build our ELK environment on Ubuntu 20.0.4 (not Docker) and setup Elastiflow, it works great and I followed this guide which also uses self certs, so we just access using https://1.2.3.4:5601 for e… --- ## [Replicating Logstash Fingerprint in elasticsearch\_dsl\_py](https://discuss.elastic.co/t/replicating-logstash-fingerprint-in-elasticsearch-dsl-py/270905)
**Author:** [@Mark\_Parrish](https://discuss.elastic.co/u/Mark_Parrish)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 10:46pm UTC](https://discuss.elastic.co/t/replicating-logstash-fingerprint-in-elasticsearch-dsl-py/270905 "2021-04-21T22:46:25Z")
I am trying replicate this piece of code in the python. ruby { code =\> ' physical = \[ event.get("address1").to\_s, event.get("address2").to\_s, event.get("city").to\_s, event.get… --- ## [Remove whole documents with certain value in field](https://discuss.elastic.co/t/remove-whole-documents-with-certain-value-in-field/204475)
**Author:** [@Marta\_Zagrajek](https://discuss.elastic.co/u/Marta_Zagrajek)\ **Replies:** 5\ **Last updated:** [October 22, 2019, 6:19pm UTC](https://discuss.elastic.co/t/remove-whole-documents-with-certain-value-in-field/204475 "2019-10-22T18:19:14Z")
Hello there I have apache logs in which are documents that I want to remove completely. Whole documents not fields so I do not want to use remove\_field in mutate. I have tried drop: filter { if "field\_name" == … --- ## [JDBC Library Logstash 7.0.0](https://discuss.elastic.co/t/jdbc-library-logstash-7-0-0/178304)
**Author:** [@Carlos\_Rojas](https://discuss.elastic.co/u/Carlos_Rojas)\ **Replies:** 5\ **Last updated:** [April 24, 2019, 6:59pm UTC](https://discuss.elastic.co/t/jdbc-library-logstash-7-0-0/178304 "2019-04-24T18:59:14Z")
HI, i'm using logstash-input-jdbc, and this is installed correctly Step 3/4 : RUN logstash-plugin install logstash-input-jdbc ---\> Running in 3fd593a57661 Validating logstash-input-jdbc Installing logstash-input-jd… --- ## [Shrink index from Lucene 6 to Lucene 7](https://discuss.elastic.co/t/shrink-index-from-lucene-6-to-lucene-7/151176)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [October 8, 2018, 11:31am UTC](https://discuss.elastic.co/t/shrink-index-from-lucene-6-to-lucene-7/151176 "2018-10-08T11:31:02Z")
hi all, trying to shrink indices created with Lucene 6 into the newest Elasticsearch version, I'm facing this error: nested: IllegalArgumentException\[Cannot use addIndexes(Directory) with indexes that have been create… --- ## [Don't found value by search request](https://discuss.elastic.co/t/dont-found-value-by-search-request/96124)
**Author:** [@denis.peshkov](https://discuss.elastic.co/u/denis.peshkov)\ **Replies:** 5\ **Last updated:** [August 8, 2017, 10:11am UTC](https://discuss.elastic.co/t/dont-found-value-by-search-request/96124 "2017-08-08T10:11:10Z")
Hi All, I have a next search request: GET /my\_index/my\_type/\_search { "query": { "bool": { "filter": \[{ "bool": { "should": \[{ "bool": { "must": \[{ … --- ## [Setting index.routing.allocation.include.node failure](https://discuss.elastic.co/t/setting-index-routing-allocation-include-node-failure/16881)
**Author:** [@Ryan\_Bellows](https://discuss.elastic.co/u/Ryan_Bellows)\ **Replies:** 5\ **Last updated:** [October 24, 2016, 1:25pm UTC](https://discuss.elastic.co/t/setting-index-routing-allocation-include-node-failure/16881 "2016-10-24T13:25:53Z")
Hi all, I've got a 5 node elasticsearch cluster that has 3 machines with a "node.storage: ssd\_fast" and 2 with "node.storage: sata\_slow" attributes. I'd like to write today's index (this is being used for logstash) … --- ## [Kibana Goal chart - Max Value](https://discuss.elastic.co/t/kibana-goal-chart-max-value/301845)
**Author:** [@santy1](https://discuss.elastic.co/u/santy1)\ **Replies:** 4\ **Last updated:** [April 7, 2022, 12:00pm UTC](https://discuss.elastic.co/t/kibana-goal-chart-max-value/301845 "2022-04-07T12:00:47Z")
Hello Team, I know this question has been asked many times, but just wish to know if this is possible in the latest Kibana version 8.1, below is my query I have 2 host groups, each containing a set of systems, lets tak… --- ## [Enable Elastic Security prebuilt rules and ML jobs](https://discuss.elastic.co/t/enable-elastic-security-prebuilt-rules-and-ml-jobs/285061)
**Author:** [@bil\_15](https://discuss.elastic.co/u/bil_15)\ **Replies:** 4\ **Last updated:** [October 4, 2021, 10:27pm UTC](https://discuss.elastic.co/t/enable-elastic-security-prebuilt-rules-and-ml-jobs/285061 "2021-10-04T22:27:27Z")
Hello! I'd like to know if there is ability to enable Elastic Security prebuilt rules and ML jobs they require to work properly via API. I didn't managed to find any info on this, so perhaps this functionality is not a… --- ## [Does logstash support having a list/array in root (top level) of the event](https://discuss.elastic.co/t/does-logstash-support-having-a-list-array-in-root-top-level-of-the-event/283524)
**Author:** [@Renjith\_PK](https://discuss.elastic.co/u/Renjith_PK)\ **Replies:** 4\ **Last updated:** [September 7, 2021, 2:35pm UTC](https://discuss.elastic.co/t/does-logstash-support-having-a-list-array-in-root-top-level-of-the-event/283524 "2021-09-07T14:35:29Z")
We have input data like this message:\[{key1:value1},{key2:value2}\] and we need value of message, which is a list, directly on root of event (to use as zipkin storage) without any additional field. I tried using json fi… --- ## [Alerts ceased to be generated](https://discuss.elastic.co/t/alerts-ceased-to-be-generated/280671)
**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\ **Replies:** 4\ **Last updated:** [August 12, 2021, 10:37am UTC](https://discuss.elastic.co/t/alerts-ceased-to-be-generated/280671 "2021-08-12T10:37:04Z")
Hello every body, I have a problem, The alerts have ceased to be generated today at the detection level, after checking I noticed that the rules are matched but the alerts are not generated and the siem-signals-default … --- ## [Logstash & Filebeat sending file/logs over](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663)
**Author:** [@skyluke.1987](https://discuss.elastic.co/u/skyluke.1987)\ **Replies:** 4\ **Last updated:** [December 9, 2019, 2:58am UTC](https://discuss.elastic.co/t/logstash-filebeat-sending-file-logs-over/210663 "2019-12-09T02:58:18Z")
Hi all, I have this setup. Elasticsearch was setup on Server A with filebeat. Next I have Server B setup with logstash. Is it correct that I send Nginx logs from Server B using "logstash" to server A? and Filebeat on se… --- ## [Bootstrap checks failed ES 6.3.1](https://discuss.elastic.co/t/bootstrap-checks-failed-es-6-3-1/148923)
**Author:** [@Abdullah\_aldawsari](https://discuss.elastic.co/u/Abdullah_aldawsari)\ **Replies:** 4\ **Last updated:** [September 18, 2018, 6:51am UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-es-6-3-1/148923 "2018-09-18T06:51:19Z")
Hi, Environment: ES 6.3.1 (installed via RPM) I'm trying to add another node to my cluster which is only one node but it's gave me the following error: \*NOTE: "10.xx.xx.xx" the current node , "10.yy.yy.yy the new n… --- ## [Dangling indices :- coordinating node](https://discuss.elastic.co/t/dangling-indices-coordinating-node/135231)
**Author:** [@praveen.vemuri](https://discuss.elastic.co/u/praveen.vemuri)\ **Replies:** 4\ **Last updated:** [June 14, 2018, 11:12pm UTC](https://discuss.elastic.co/t/dangling-indices-coordinating-node/135231 "2018-06-14T23:12:45Z")
Hi, My cluster turned red due to dangling indexes. i saw below warning message on the coordinating nodes. none of the nodes were restarted during this time. all the nodes in cluster were up and running from 20 days and … --- ## [Finetuning of ElasticSearch](https://discuss.elastic.co/t/finetuning-of-elasticsearch/60167)
**Author:** [@renego](https://discuss.elastic.co/u/renego)\ **Replies:** 4\ **Last updated:** [September 11, 2016, 8:39am UTC](https://discuss.elastic.co/t/finetuning-of-elasticsearch/60167 "2016-09-11T08:39:47Z")
Hi! I have read an tutorial of performance tuning of ES and want to ask if this settings are still active for the actual ElasticSearch 2.4 version: indices.fielddata.cache.size: 40% indices.cache.filter.size: 30% ind… --- ## [Replica node response to primary](https://discuss.elastic.co/t/replica-node-response-to-primary/40358)
**Author:** [@skumar](https://discuss.elastic.co/u/skumar)\ **Replies:** 4\ **Last updated:** [February 15, 2016, 4:52am UTC](https://discuss.elastic.co/t/replica-node-response-to-primary/40358 "2016-02-15T04:52:13Z")
During indexing process, indexing is first performed on primary and if successful , perform on replica which on successfully indexing response back to primary. can someone explain me what process is involved in getting … --- ## [Mapper-attachment plugin not parsing binary files](https://discuss.elastic.co/t/mapper-attachment-plugin-not-parsing-binary-files/11097)
**Author:** [@Michel\_Behlok](https://discuss.elastic.co/u/Michel_Behlok)\ **Replies:** 4\ **Last updated:** [March 14, 2013, 9:02am UTC](https://discuss.elastic.co/t/mapper-attachment-plugin-not-parsing-binary-files/11097 "2013-03-14T09:02:09Z")
Hello, having a bit of trouble with mapper-attachments. Elasticsearch.logs shows plugin loading correctly: \[2013-03-11 09:07:58,407\]\[INFO \]\[plugins\] \[Modred the Mystic\] loaded \[mapper-attachments\], sites \[\] Howe… --- ## [Include\_lower / include\_upper is deprecated?](https://discuss.elastic.co/t/include-lower-include-upper-is-deprecated/373295)
**Author:** [@Jamshid](https://discuss.elastic.co/u/Jamshid)\ **Replies:** 3\ **Last updated:** [February 3, 2025, 10:36pm UTC](https://discuss.elastic.co/t/include-lower-include-upper-is-deprecated/373295 "2025-02-03T22:36:24Z")
After upgrading to elasticsearch 8.17 it seems I started seeing this deprecation log. \],\[299 Elasticsearch-8.17.0-2b6a7fed44faa321997703718f07ee0420804b41 "Deprecated field \[include\_upper\] used, this field is unused and… --- ## [How to disable add\_cloud\_metadata processing in elastic-agents](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processing-in-elastic-agents/357613)
**Author:** [@Toony](https://discuss.elastic.co/u/Toony)\ **Replies:** 3\ **Last updated:** [September 4, 2024, 11:27am UTC](https://discuss.elastic.co/t/how-to-disable-add-cloud-metadata-processing-in-elastic-agents/357613 "2024-09-04T11:27:04Z")
Hi everybody, Is there a way to disable the default processing of the add\_cloud\_metadata from the "elastic-agent.yml" configuration file ? This is very annoying as at each start of the agent it sends a lot of agent err… --- ## [Incorrect timestamp used during query or while seeing messages in Discover](https://discuss.elastic.co/t/incorrect-timestamp-used-during-query-or-while-seeing-messages-in-discover/277868)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 3\ **Last updated:** [July 7, 2021, 8:24am UTC](https://discuss.elastic.co/t/incorrect-timestamp-used-during-query-or-while-seeing-messages-in-discover/277868 "2021-07-07T08:24:58Z")
Hi All, I have some 30 logs files (each file of individual day) of June month. I am collecting data through filebeat and then passing it to logstash. There is one index got created (yesterday, 4th July) which has indexe… --- ## [Use Office 365 module in Logstash?](https://discuss.elastic.co/t/use-office-365-module-in-logstash/276528)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 3\ **Last updated:** [June 29, 2021, 7:21am UTC](https://discuss.elastic.co/t/use-office-365-module-in-logstash/276528 "2021-06-29T07:21:00Z")
Hello Is it possible to use the Office 365 module with Logstash? Thanks --- ## [Can't get kibana to display filebeat logs with docker auto discovery](https://discuss.elastic.co/t/cant-get-kibana-to-display-filebeat-logs-with-docker-auto-discovery/269810)
**Author:** [@LongBeachHXC](https://discuss.elastic.co/u/LongBeachHXC)\ **Replies:** 3\ **Last updated:** [April 17, 2021, 2:11pm UTC](https://discuss.elastic.co/t/cant-get-kibana-to-display-filebeat-logs-with-docker-auto-discovery/269810 "2021-04-17T14:11:39Z")
I am trying to leverage the docker auto discovery provider. I followed every tutorial I could find regarding filebeat and I still cannot get Kibana to display the logs. I am trying to get this working with the Elastic Se… --- ## [Is it possible to combine two datatable from multiple essql filters](https://discuss.elastic.co/t/is-it-possible-to-combine-two-datatable-from-multiple-essql-filters/257290)
**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\ **Replies:** 3\ **Last updated:** [December 3, 2020, 3:23pm UTC](https://discuss.elastic.co/t/is-it-possible-to-combine-two-datatable-from-multiple-essql-filters/257290 "2020-12-03T15:23:32Z")
Hi, I have a data source like below: - TYPE VALUE A 123 A 234 B 890 A 789 B 085 I need to pull the latest record for each type i.e. there will be two rows in the resu… --- ## [Filebeat Sonicwall module - dissect\_parsing\_error](https://discuss.elastic.co/t/filebeat-sonicwall-module-dissect-parsing-error/252708)
**Author:** [@PhilA](https://discuss.elastic.co/u/PhilA)\ **Replies:** 3\ **Last updated:** [October 21, 2020, 3:16pm UTC](https://discuss.elastic.co/t/filebeat-sonicwall-module-dissect-parsing-error/252708 "2020-10-21T15:16:49Z")
I have attempted to enable the SonicWall Filebeat module but it doesn't seem to support our logs fully. I am running v7.9.2 and looked at enabling this through ingest manager in the Kibana GUI but that doesn't seem to b… --- ## [Entries Duplication](https://discuss.elastic.co/t/entries-duplication/247448)
**Author:** [@js7](https://discuss.elastic.co/u/js7)\ **Replies:** 3\ **Last updated:** [September 3, 2020, 11:18pm UTC](https://discuss.elastic.co/t/entries-duplication/247448 "2020-09-03T23:18:33Z")
Hi, when I have 2 pipelines active at the same time, the data from one is somehow duplicated/redirected to the other pipeline, when I'm not using pipeline-to-pipeline communication. The output host of both are the same… --- ## [Why no native CSV import in bulk instead of JSON? It would make sense am I right?](https://discuss.elastic.co/t/why-no-native-csv-import-in-bulk-instead-of-json-it-would-make-sense-am-i-right/226836)
**Author:** [@emilebosch](https://discuss.elastic.co/u/emilebosch)\ **Replies:** 3\ **Last updated:** [April 7, 2020, 4:39pm UTC](https://discuss.elastic.co/t/why-no-native-csv-import-in-bulk-instead-of-json-it-would-make-sense-am-i-right/226836 "2020-04-07T16:39:24Z")
Hi all! I was wondering for some time now why doesn't Elasticsearch allow for native CSV import? I don't mean converting the CSV to JSON and then using the Bulk API, but uploading a CSV to the server and then the server … --- ## [Best way to search for extremely long hash-code similarity?](https://discuss.elastic.co/t/best-way-to-search-for-extremely-long-hash-code-similarity/192220)
**Author:** [@SuperSimon](https://discuss.elastic.co/u/SuperSimon)\ **Replies:** 3\ **Last updated:** [July 25, 2019, 1:05pm UTC](https://discuss.elastic.co/t/best-way-to-search-for-extremely-long-hash-code-similarity/192220 "2019-07-25T13:05:06Z")
Hey! We are a group of students that uses ElasticSearch to search for possible matches between stored hash-codes (or numeric values) in an index and a query with a hash-code. As we are totally new to ElasticSearch, we w… --- ## [Secure Syslog with logstash](https://discuss.elastic.co/t/secure-syslog-with-logstash/159604)
**Author:** [@totuyim](https://discuss.elastic.co/u/totuyim)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 5:58pm UTC](https://discuss.elastic.co/t/secure-syslog-with-logstash/159604 "2018-12-11T17:58:13Z")
I'm using tcp input plugin, on windows, to handle SSL for receiving secure syslog but I only have the .cer file for a certification. How can I use this .cer file? It's a client/server certificate issued by COMODO. --- ## [Logstash filter for IP addresses](https://discuss.elastic.co/t/logstash-filter-for-ip-addresses/104450)
**Author:** [@maddie0726](https://discuss.elastic.co/u/maddie0726)\ **Replies:** 0\ **Last updated:** [October 18, 2017, 7:29pm UTC](https://discuss.elastic.co/t/logstash-filter-for-ip-addresses/104450 "2017-10-18T19:29:42Z")
I have absolutely no idea how to accomplish what I want to accomplish. I have Elasticsearch, Kibana and Logstash configured (all version 5.6.2) and running on Windows 2012 R2. I have my grok filter that parses the data l… --- ## [Xml filter generates arrays with one value](https://discuss.elastic.co/t/xml-filter-generates-arrays-with-one-value/54314)
**Author:** [@sagizvi](https://discuss.elastic.co/u/sagizvi)\ **Replies:** 3\ **Last updated:** [July 1, 2016, 5:50pm UTC](https://discuss.elastic.co/t/xml-filter-generates-arrays-with-one-value/54314 "2016-07-01T17:50:09Z")
Hi I'm using an xml filter on data containing deep tags that sometimes contains arrays and sometimes dont. The xml filter generates the json with arrays, even when there is only one value. for example: "Header" =\> \[ … --- ## [Ruby time filter on LS 1.5](https://discuss.elastic.co/t/ruby-time-filter-on-ls-1-5/1541)
**Author:** [@fbarbeira](https://discuss.elastic.co/u/fbarbeira)\ **Replies:** 3\ **Last updated:** [June 1, 2015, 6:29am UTC](https://discuss.elastic.co/t/ruby-time-filter-on-ls-1-5/1541 "2015-06-01T06:29:48Z")
I want that logstash drop events older than 6 hours, for that purpose I have this ruby filter: ruby { code =\> "event.cancel if Time.now - event\['@timestamp'\] \> 21600" } This filters works like a charm in this envir… --- ## [Exporting Bulk data to CSV](https://discuss.elastic.co/t/exporting-bulk-data-to-csv/156190)
**Author:** [@surajsrinivasa](https://discuss.elastic.co/u/surajsrinivasa)\ **Replies:** 1\ **Last updated:** [November 11, 2018, 1:16pm UTC](https://discuss.elastic.co/t/exporting-bulk-data-to-csv/156190 "2018-11-11T13:16:21Z")
We are using Elasticsearch version 6.4.2. to save access logs for our website. The logs are very heavy in nature, and take up almost 3-4 GB of storage per day. Sometime these logs are required by our IR team to investiga… --- ## [Render Json strings from Elastic API client objects](https://discuss.elastic.co/t/render-json-strings-from-elastic-api-client-objects/341238)
**Author:** [@Zer0](https://discuss.elastic.co/u/Zer0)\ **Replies:** 2\ **Last updated:** [August 21, 2023, 1:59pm UTC](https://discuss.elastic.co/t/render-json-strings-from-elastic-api-client-objects/341238 "2023-08-21T13:59:53Z")
Hi, I am using the Elasticsearch API client (8.9) for java and wondering how to render those Queries and Responses as json strings. For example I can do a simple query like so: val query = Query.of { q -\> q.matchAll {… --- ## [Lost all Fleet agent policies and Security Rules after upgrade to 8.2](https://discuss.elastic.co/t/lost-all-fleet-agent-policies-and-security-rules-after-upgrade-to-8-2/304389)
**Author:** [@robhep](https://discuss.elastic.co/u/robhep)\ **Replies:** 2\ **Last updated:** [May 11, 2022, 9:00pm UTC](https://discuss.elastic.co/t/lost-all-fleet-agent-policies-and-security-rules-after-upgrade-to-8-2/304389 "2022-05-11T21:00:45Z")
I have a cluster running in a lab that I use to test out things before we do them in production. This cluster started out on version 7.14.x roughly. Fleet and agents have been installed and upgraded several times, thro… --- ## [Tried "mutate" convert", logstash getting error from elasticsearch: "type \[float\] to \[long\]"](https://discuss.elastic.co/t/tried-mutate-convert-logstash-getting-error-from-elasticsearch-type-float-to-long/292356)
**Author:** [@4art4](https://discuss.elastic.co/u/4art4)\ **Replies:** 2\ **Last updated:** [December 17, 2021, 6:25pm UTC](https://discuss.elastic.co/t/tried-mutate-convert-logstash-getting-error-from-elasticsearch-type-float-to-long/292356 "2021-12-17T18:25:32Z")
My expectation is that adding the 'convert' would insure that all data for that field will be of type "float", but I guess I did it wrong? relevant part of data: "metrics"=\>\[ { "Unit"=\>"Count", "MetricName"=\>"Res… --- ## [Date format parse error](https://discuss.elastic.co/t/date-format-parse-error/217234)
**Author:** [@F\_eq\_kx](https://discuss.elastic.co/u/F_eq_kx)\ **Replies:** 2\ **Last updated:** [January 31, 2020, 1:36pm UTC](https://discuss.elastic.co/t/date-format-parse-error/217234 "2020-01-31T13:36:32Z")
I'm getting Caused by: java.lang.IllegalArgumentException: failed to parse date field \[Thu Jan 30 15:31:42 +00:00 2020\] with format \[strict\_date\_optional\_time||epoch\_millis||E M dd HH:mm:ss Z yyyy\] when ingesting some da… --- ## [How to get/download the filebeat 7.5.2 source code?](https://discuss.elastic.co/t/how-to-get-download-the-filebeat-7-5-2-source-code/216780)
**Author:** [@davidz101](https://discuss.elastic.co/u/davidz101)\ **Replies:** 2\ **Last updated:** [January 28, 2020, 4:37pm UTC](https://discuss.elastic.co/t/how-to-get-download-the-filebeat-7-5-2-source-code/216780 "2020-01-28T16:37:13Z")
Hi, I am new to filebeat, I just downloaded filebeat 7.5.2 version, how can I checkout the corresponding source code for filebeat version 7.5.2? Thanks -David --- ## [Query visualization label from a different index](https://discuss.elastic.co/t/query-visualization-label-from-a-different-index/127288)
**Author:** [@David\_Gidony](https://discuss.elastic.co/u/David_Gidony)\ **Replies:** 2\ **Last updated:** [April 10, 2018, 1:47pm UTC](https://discuss.elastic.co/t/query-visualization-label-from-a-different-index/127288 "2018-04-10T13:47:19Z")
hi, i want to create a visualization with a Top N items from a specific index, to the value of "item ID" which is a number, i have the item name and id in a different index. can i change the item names to the fitting … --- ## [Filebeat may be sending bad packets](https://discuss.elastic.co/t/filebeat-may-be-sending-bad-packets/102033)
**Author:** [@rswestmoreland](https://discuss.elastic.co/u/rswestmoreland)\ **Replies:** 2\ **Last updated:** [October 4, 2017, 11:41am UTC](https://discuss.elastic.co/t/filebeat-may-be-sending-bad-packets/102033 "2017-10-04T11:41:15Z")
Hello, I'm working on a new Beat which has a tcp listener and decodes lumberjackv2. I ran into a problem with errors which I initially thought was due to my code, but as I've added more and more debugging and worked ba… [Previous page](https://discuss.elastic.co/top.md?page=1673&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1675&per_page=50&period=all)