# Top **URL:** https://discuss.elastic.co/top.md?page=168&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 169 --- ## [Want to know what is the file are present in indecies](https://discuss.elastic.co/t/want-to-know-what-is-the-file-are-present-in-indecies/130808)
**Author:** [@Tamal\_Kundu](https://discuss.elastic.co/u/Tamal_Kundu)\ **Replies:** 15\ **Last updated:** [May 8, 2018, 6:06am UTC](https://discuss.elastic.co/t/want-to-know-what-is-the-file-are-present-in-indecies/130808 "2018-05-08T06:06:59Z")
.deleted store.size pri.store.size yellow open fuselog-2018.05.03 Ivek1mr5S9q1KiRDu-2NUg 5 1 30271526 0 111gb 111gb yellow open fuselog-2018.05.07 UQvSXBKlSjeJM\_bngM01wQ 5 1 241… --- ## [Spring-Data-Elasticsearch is ready to serve!](https://discuss.elastic.co/t/spring-data-elasticsearch-is-ready-to-serve/10523)
**Author:** [@smhdiu](https://discuss.elastic.co/u/smhdiu)\ **Replies:** 12\ **Last updated:** [November 9, 2015, 6:01pm UTC](https://discuss.elastic.co/t/spring-data-elasticsearch-is-ready-to-serve/10523 "2015-11-09T18:01:52Z")
Hello And greetings to all elasticsearch users and contributors, Happy to announced that Spring-Data-Elasticsearch is ready to serve with spring data implementation for elasticsearch. It has all basic features like… --- ## [Regex performance with logstash using more general match](https://discuss.elastic.co/t/regex-performance-with-logstash-using-more-general-match/253917)
**Author:** [@vinci](https://discuss.elastic.co/u/vinci)\ **Replies:** 9\ **Last updated:** [November 3, 2020, 10:34pm UTC](https://discuss.elastic.co/t/regex-performance-with-logstash-using-more-general-match/253917 "2020-11-03T22:34:50Z")
Hi, I was wondering about regex performance in general and in particular with logstash and grok. I'm currently trying to parse firewall logs sent through the syslog protocol which mainly contains keys and values (a key… --- ## [How to send invitation to my friends for the elastic forum, so that I can claim Campaigner badge](https://discuss.elastic.co/t/how-to-send-invitation-to-my-friends-for-the-elastic-forum-so-that-i-can-claim-campaigner-badge/207431)
**Author:** [@Joseph\_John](https://discuss.elastic.co/u/Joseph_John)\ **Replies:** 9\ **Last updated:** [June 24, 2020, 12:29pm UTC](https://discuss.elastic.co/t/how-to-send-invitation-to-my-friends-for-the-elastic-forum-so-that-i-can-claim-campaigner-badge/207431 "2020-06-24T12:29:03Z")
Hi All, Like to invite few of my contacts to the discussion forum How to invite my friends to the discussion forum,. I am aiming to gain the campaigner badge Campaigner badge on Discuss the Elastic Stack. Please p… --- ## [Change Login Page Logo - Kibana 7.9.1 Docker](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647)
**Author:** [@Ayakashi97](https://discuss.elastic.co/u/Ayakashi97)\ **Replies:** 11\ **Last updated:** [December 4, 2020, 4:31pm UTC](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647 "2020-12-04T16:31:48Z")
Hi threre, i am on Version 7.9.1 and want to change the login page logo. I found this thread: Custom Logo Kibana 7.9.2 (guide) All is working fine in docker-container, but i cannot use this command in the kibana docker… --- ## [Kibana - Query difficulties in Canvas](https://discuss.elastic.co/t/kibana-query-difficulties-in-canvas/283563)
**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\ **Replies:** 14\ **Last updated:** [September 21, 2021, 3:47pm UTC](https://discuss.elastic.co/t/kibana-query-difficulties-in-canvas/283563 "2021-09-21T15:47:08Z")
Hello, Right now I'm facing an issue creating a vertical bar element. The values I'm looking to use are quite simple to obtain through Dev Tools by making a query, however Canvas doesn't allow to query that way, which I… --- ## [APM Java Agent 1.40 leads to NoClassDefFoundError (ReceiveMessageRequest) in S3 communication with AWS Java SDK v2](https://discuss.elastic.co/t/apm-java-agent-1-40-leads-to-noclassdeffounderror-receivemessagerequest-in-s3-communication-with-aws-java-sdk-v2/339188)
**Author:** [@IngoStrauch2020](https://discuss.elastic.co/u/IngoStrauch2020)\ **Replies:** 13\ **Last updated:** [August 7, 2023, 6:33pm UTC](https://discuss.elastic.co/t/apm-java-agent-1-40-leads-to-noclassdeffounderror-receivemessagerequest-in-s3-communication-with-aws-java-sdk-v2/339188 "2023-08-07T18:33:40Z")
APM Agent language and version: Java 1.40.0 Description of the problem including expected versus actual behavior. Please include screenshots (if relevant): We recently updated the APM Java Agent in our Spring Boot serv… --- ## [Logstash Dead Letter Messages back to RabbitMQ](https://discuss.elastic.co/t/logstash-dead-letter-messages-back-to-rabbitmq/136270)
**Author:** [@davidbugeja](https://discuss.elastic.co/u/davidbugeja)\ **Replies:** 11\ **Last updated:** [June 21, 2018, 7:20am UTC](https://discuss.elastic.co/t/logstash-dead-letter-messages-back-to-rabbitmq/136270 "2018-06-21T07:20:58Z")
Logstash and Elastic versions: 5.6.9 We're currently taking messages from RabbitMQ using logstash and outputting them to Elasticsearch. We noticed some scenarios of 400 responses and have enabled Logstash dead letter to… --- ## [Не корректно работает поиск с использованием Edge n-gram token filter](https://discuss.elastic.co/t/edge-n-gram-token-filter/226531)
**Author:** [@111311](https://discuss.elastic.co/u/111311)\ **Replies:** 9\ **Last updated:** [April 6, 2020, 7:01pm UTC](https://discuss.elastic.co/t/edge-n-gram-token-filter/226531 "2020-04-06T19:01:35Z")
Здравствуйте, нужна помощь в корректировке настроек поиска. Вкратце опишу проблему. Когда мы забиваем в поиск слово например "Приора" то помимо реальных документов где встречается слово приора вылетают такие документы г… --- ## [Hardware configuration - tips](https://discuss.elastic.co/t/hardware-configuration-tips/33255)
**Author:** [@Arvid\_de\_Jong](https://discuss.elastic.co/u/Arvid_de_Jong)\ **Replies:** 9\ **Last updated:** [November 9, 2015, 2:34pm UTC](https://discuss.elastic.co/t/hardware-configuration-tips/33255 "2015-11-09T14:34:30Z")
Hello all! I'm new to this forum, and rather new to Elasticsearch. I've been playing around a little bit with the ELK-stack on virtual machines. Now however, I would like to know what it takes to get it in a production… --- ## [Elastic and Kibana Load Balancing](https://discuss.elastic.co/t/elastic-and-kibana-load-balancing/190251)
**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\ **Replies:** 26\ **Last updated:** [July 13, 2019, 7:35pm UTC](https://discuss.elastic.co/t/elastic-and-kibana-load-balancing/190251 "2019-07-13T19:35:31Z")
I have 2 physical machines where I run Elastic and Kibana on 120 - Master Node and a Data Node 121 - Data Node I have 8C/64GB Ram and 4TB of hard drive space on them. the clusters are setup and the indices have repli… --- ## [The records in the elastic index are missing frequenlty](https://discuss.elastic.co/t/the-records-in-the-elastic-index-are-missing-frequenlty/227738)
**Author:** [@tharak](https://discuss.elastic.co/u/tharak)\ **Replies:** 13\ **Last updated:** [April 14, 2020, 7:32am UTC](https://discuss.elastic.co/t/the-records-in-the-elastic-index-are-missing-frequenlty/227738 "2020-04-14T07:32:55Z")
I had a record in the elastic index which was indexed by logstash from a sql data source. This record which is already came to elastic index is not available after sometime. After updating the record in the database does… --- ## [How do I create a filter for a custom app log with different lines?](https://discuss.elastic.co/t/how-do-i-create-a-filter-for-a-custom-app-log-with-different-lines/55961)
**Author:** [@jinal.shah](https://discuss.elastic.co/u/jinal.shah)\ **Replies:** 9\ **Last updated:** [July 20, 2016, 2:53pm UTC](https://discuss.elastic.co/t/how-do-i-create-a-filter-for-a-custom-app-log-with-different-lines/55961 "2016-07-20T14:53:54Z")
Hello I am knew to Logstash/Elasticsearch.. I have a log file with multiple lines within it. What's the best way to create a filter for a log similar to the example below? 2016-07-12T02:04:32.998+0100: Total time f… --- ## [Filebeat is not sending data to logstash](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-logstash/63029)
**Author:** [@adimania](https://discuss.elastic.co/u/adimania)\ **Replies:** 10\ **Last updated:** [October 25, 2016, 7:16am UTC](https://discuss.elastic.co/t/filebeat-is-not-sending-data-to-logstash/63029 "2016-10-25T07:16:42Z")
Hello, I am using filebeat to send logs to logstash. The logs get written all the time from the application but filebeat is not able to detect it. Here is the filebeat version # filebeat --version filebeat version … --- ## [Questions about dedicated master & client node](https://discuss.elastic.co/t/questions-about-dedicated-master-client-node/23723)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 9\ **Last updated:** [July 7, 2016, 1:13pm UTC](https://discuss.elastic.co/t/questions-about-dedicated-master-client-node/23723 "2016-07-07T13:13:04Z")
Right now we only need 4 ES nodes due to the small data volume, and all 4 nodes are master & data nodes. Q1: I am wondering in this case, is it necessary to have dedicated master and client node? Any benefit of … --- ## [Switch from Java to REST API and use XContent builders?](https://discuss.elastic.co/t/switch-from-java-to-rest-api-and-use-xcontent-builders/3208)
**Author:** [@fucema](https://discuss.elastic.co/u/fucema)\ **Replies:** 9\ **Last updated:** [August 12, 2010, 4:53pm UTC](https://discuss.elastic.co/t/switch-from-java-to-rest-api-and-use-xcontent-builders/3208 "2010-08-12T16:53:04Z")
Is it possible to leverage the java xcontent builders to form json strings that can be used to interact with the REST API? I am trying to avoid manually marshalling from java objects to json strings if the elastic s… --- ## [How to achieve data Encryption in elasticsearch](https://discuss.elastic.co/t/how-to-achieve-data-encryption-in-elasticsearch/194793)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 10\ **Last updated:** [August 12, 2019, 10:08am UTC](https://discuss.elastic.co/t/how-to-achieve-data-encryption-in-elasticsearch/194793 "2019-08-12T10:08:01Z")
Hi, I need to encrypt the data before indexing into elastic search so that actual data is protected and while searching it should produce the proper results. Please let me know how this can be achieved in elasticsearch. … --- ## [Invalid transactions grouping with ActiveMQ](https://discuss.elastic.co/t/invalid-transactions-grouping-with-activemq/252678)
**Author:** [@Svetlana\_Nikitina](https://discuss.elastic.co/u/Svetlana_Nikitina)\ **Replies:** 12\ **Last updated:** [November 11, 2020, 11:32am UTC](https://discuss.elastic.co/t/invalid-transactions-grouping-with-activemq/252678 "2020-11-11T11:32:23Z")
Kibana version : 7.9.2 Elasticsearch version : 7.9.2 APM Server version : 7.9.2 APM Agent language and version : JAVA apm-agent-attach:1.17.0, apm-agent-api:1.17.0 Java version : openjdk:11 We have Spring-boot … --- ## [Painlessスクリプト利用時の想定外の挙動](https://discuss.elastic.co/t/painless/160132)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 12\ **Last updated:** [December 21, 2018, 6:20am UTC](https://discuss.elastic.co/t/painless/160132 "2018-12-21T06:20:30Z")
"painlessスクリプト"を利用した場合、想定外の挙動が見られました。 恐れ入りますが、不具合か否かご確認願えますでしょうか。 ※同内容の投稿を英語でさせて頂きましたが、データに日本語が含まれますので、サンプルデータも含め、こちらで再投稿させて頂いております。 https://discuss.elastic.co/t/nested-data-not-shown-correctly-with-painless-script/15… --- ## [Elasticsearch basic performance](https://discuss.elastic.co/t/elasticsearch-basic-performance/109053)
**Author:** [@elastic\_paul](https://discuss.elastic.co/u/elastic_paul)\ **Replies:** 11\ **Last updated:** [November 28, 2017, 1:04pm UTC](https://discuss.elastic.co/t/elasticsearch-basic-performance/109053 "2017-11-28T13:04:44Z")
I have 12 servers running logstash. They are sending data to 4 ES nodes. Each ES node has 24 cores, 36TB of spinning disks and 128GB RAM. The 12 logstash machines are sending round robin to the 4 ES nodes. All going into… --- ## [Readonly dashboard user in elastic cloud not working](https://discuss.elastic.co/t/readonly-dashboard-user-in-elastic-cloud-not-working/144514)
**Author:** [@hugohendriks](https://discuss.elastic.co/u/hugohendriks)\ **Replies:** 9\ **Last updated:** [August 20, 2018, 1:21pm UTC](https://discuss.elastic.co/t/readonly-dashboard-user-in-elastic-cloud-not-working/144514 "2018-08-20T13:21:18Z")
Hi, I'm using the trail version of an Cloud instance( 6.3.2) and I'm trying to create a user which only has dashboard rights to my dashboard. I've created a user and a specific dashboard role as I read here: https://www.… --- ## [Manually propagating a distributed tracing context from third party http client (.net)](https://discuss.elastic.co/t/manually-propagating-a-distributed-tracing-context-from-third-party-http-client-net/315024)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 10\ **Last updated:** [October 5, 2022, 4:41pm UTC](https://discuss.elastic.co/t/manually-propagating-a-distributed-tracing-context-from-third-party-http-client-net/315024 "2022-10-05T16:41:11Z")
Kibana version: 7.16.3 (Docker) Elasticsearch version: 7.16.3 (Docker) APM Server version: 7.16.3 (Docker) APM Agent language and version: .net Description of the problem including expected versus actual behavior… --- ## [How to enable filebeat to harvest .File Type?](https://discuss.elastic.co/t/how-to-enable-filebeat-to-harvest-file-type/138986)
**Author:** [@krisdinesh](https://discuss.elastic.co/u/krisdinesh)\ **Replies:** 10\ **Last updated:** [July 13, 2018, 11:46pm UTC](https://discuss.elastic.co/t/how-to-enable-filebeat-to-harvest-file-type/138986 "2018-07-13T23:46:15Z")
Hello, Please help me here. I have a file needs to be harvested by Filebeats 'D:\\apps\\jenkins\\jobs\\TestJob\\builds\\180\\log.File' but its not. --- ## [Metricbeat only run system module instead of running both system and apache module](https://discuss.elastic.co/t/metricbeat-only-run-system-module-instead-of-running-both-system-and-apache-module/258098)
**Author:** [@Minh\_Ti\_n\_Tr\_n](https://discuss.elastic.co/u/Minh_Ti_n_Tr_n)\ **Replies:** 16\ **Last updated:** [December 15, 2020, 9:05am UTC](https://discuss.elastic.co/t/metricbeat-only-run-system-module-instead-of-running-both-system-and-apache-module/258098 "2020-12-15T09:05:20Z")
Hi all, I configured metricbeat on my server for collecting both system & apache data with default module but only system data from host showed on kibana. The apache dashboard is empty data and don't know the reason. h… --- ## [Reporting - CSV Export: contains partial data](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 9\ **Last updated:** [September 13, 2021, 12:05pm UTC](https://discuss.elastic.co/t/reporting-csv-export-contains-partial-data/282052 "2021-09-13T12:05:21Z")
Hi Team, we have execute any query, it gives results and we save it by x name and when we generate csv then records are not getting saved in csv file. Sometimes partial results are getting saved. We have also tried afte… --- ## [Elasticsearch index and clustering](https://discuss.elastic.co/t/elasticsearch-index-and-clustering/282025)
**Author:** [@selin](https://discuss.elastic.co/u/selin)\ **Replies:** 9\ **Last updated:** [August 23, 2021, 9:43am UTC](https://discuss.elastic.co/t/elasticsearch-index-and-clustering/282025 "2021-08-23T09:43:40Z")
Hi friends, Can i know is it good to have a single index per environment or 1 environment to have 5 index based on team. based on each team they have multiple logs. Besides that i have 3 Elasticsearch cluster, will the … --- ## [Stop-start an elasticsearch instance having all the primary shards](https://discuss.elastic.co/t/stop-start-an-elasticsearch-instance-having-all-the-primary-shards/220028)
**Author:** [@Chimu](https://discuss.elastic.co/u/Chimu)\ **Replies:** 13\ **Last updated:** [February 20, 2020, 5:26pm UTC](https://discuss.elastic.co/t/stop-start-an-elasticsearch-instance-having-all-the-primary-shards/220028 "2020-02-20T17:26:56Z")
I have an Elasticsearch (v5.6.10) cluster with 3 nodes. Node A : Master Node B : Master + Data Node C : Master + Data There are 6 shards per data node with replication set as 1. All 6 primary nodes are in Node B and a… --- ## [Attachments download are really slow](https://discuss.elastic.co/t/attachments-download-are-really-slow/141978)
**Author:** [@cyberman6877](https://discuss.elastic.co/u/cyberman6877)\ **Replies:** 12\ **Last updated:** [July 31, 2018, 10:28pm UTC](https://discuss.elastic.co/t/attachments-download-are-really-slow/141978 "2018-07-31T22:28:40Z")
We have a combination of the HIVE and Elasticsearch setup on Docker. When we attempt to download any attachments from the HIVE which stores the documents in Elasticsearch, the process of download is really slow. For ex… --- ## [Multi-select facets](https://discuss.elastic.co/t/multi-select-facets/3847)
**Author:** [@Karussell1](https://discuss.elastic.co/u/Karussell1)\ **Replies:** 9\ **Last updated:** [January 31, 2011, 7:28pm UTC](https://discuss.elastic.co/t/multi-select-facets/3847 "2011-01-31T19:28:05Z")
Hi, as we discussed in these issues \*\* there seems to be a way in ES to enable 'multiselect' when faceting. Now my problem is: I do not understand the difference between global=true and issue 650 I've tried di… --- ## [logstash-output-elasticsearch fails with Permission denied](https://discuss.elastic.co/t/logstash-output-elasticsearch-fails-with-permission-denied/347787)
**Author:** [@mirceastoian](https://discuss.elastic.co/u/mirceastoian)\ **Replies:** 18\ **Last updated:** [November 24, 2023, 2:46pm UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-fails-with-permission-denied/347787 "2023-11-24T14:46:15Z")
Logstash information: Logstash version: 7.17.9 Logstash installation source: deb How is Logstash being run: systemd How was the Logstash Plugin installed: sudo /usr/share/logstash/bin/logstash-plugin install logstash-o… --- ## [I am not able to find a word which is seprated by (.)](https://discuss.elastic.co/t/i-am-not-able-to-find-a-word-which-is-seprated-by/99828)
**Author:** [@abc1](https://discuss.elastic.co/u/abc1)\ **Replies:** 18\ **Last updated:** [September 18, 2017, 5:53am UTC](https://discuss.elastic.co/t/i-am-not-able-to-find-a-word-which-is-seprated-by/99828 "2017-09-18T05:53:00Z")
I am new to ELk .I am not able to find a word which is seprated by (.) for example: javax.ejb.duplicatekeyexception so when i only search duplicatekeyexception . kibana does not show any result , kindly please help me i… --- ## [Upgrade order](https://discuss.elastic.co/t/upgrade-order/198627)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 15\ **Last updated:** [September 11, 2019, 6:40am UTC](https://discuss.elastic.co/t/upgrade-order/198627 "2019-09-11T06:40:42Z")
When upgrading from any version to a higher version that is supported by Elastic, what is the order of upgrade for node types: master, index-only, coordination-only ? --- ## [Question about threadpools](https://discuss.elastic.co/t/question-about-threadpools/268888)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 13\ **Last updated:** [April 2, 2021, 8:08am UTC](https://discuss.elastic.co/t/question-about-threadpools/268888 "2021-04-02T08:08:31Z")
Hi, It's a simple question but I couldn't be sure and couldn't find anything that specifies this. When using Kibana on discover page what operation is used on elasticsearch to show logs? Is it Get or Search? --- ## [Fleet agent upgrade fails 8.1.2](https://discuss.elastic.co/t/fleet-agent-upgrade-fails-8-1-2/302970)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 12\ **Last updated:** [May 9, 2022, 8:12am UTC](https://discuss.elastic.co/t/fleet-agent-upgrade-fails-8-1-2/302970 "2022-05-09T08:12:41Z")
After the stack upgrade to the latest 8.1.3 the agents are unable to upgrade error: failed verification of agent binary: 2 errors occurred:\\n\\t\* fetching asc file from 'C:\\\\Program Files\\\\Elastic\\\\Agent\\\\data\\\\elastic-… --- ## [Python FLASK Elastic APM Agent issues - Culprit threading.\_bootstrap](https://discuss.elastic.co/t/python-flask-elastic-apm-agent-issues-culprit-threading-bootstrap/318946)
**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\ **Replies:** 15\ **Last updated:** [November 18, 2022, 6:40pm UTC](https://discuss.elastic.co/t/python-flask-elastic-apm-agent-issues-culprit-threading-bootstrap/318946 "2022-11-18T18:40:47Z")
Hi @basepi @lwintergerst , We are using ELASTIC APM to instrument FLASK APP with Wsgi, Gunicorn. The events are generated and submitted to APM Server with status code as "202". The APM - Kibana UI is unable to display… --- ## [Vis development, upgrade from 5.4.0 to 5.5.0: Visualization"my\_vis" fatal error](https://discuss.elastic.co/t/vis-development-upgrade-from-5-4-0-to-5-5-0-visualization-my-vis-fatal-error/93121)
**Author:** [@pts0](https://discuss.elastic.co/u/pts0)\ **Replies:** 9\ **Last updated:** [July 16, 2017, 9:16pm UTC](https://discuss.elastic.co/t/vis-development-upgrade-from-5-4-0-to-5-5-0-visualization-my-vis-fatal-error/93121 "2017-07-16T21:16:43Z")
Hi All, I have a custom vis and I just upgraded to new 5.5.0 stack. Now when I try to use the visualisation I get the error Saved Visualization Service: Visualization type of "mycustom\_vis" is invalid. Please change … --- ## [Filebeat Apache module not showing data on Dashboards when using Logstash](https://discuss.elastic.co/t/filebeat-apache-module-not-showing-data-on-dashboards-when-using-logstash/318594)
**Author:** [@Carlos\_T](https://discuss.elastic.co/u/Carlos_T)\ **Replies:** 12\ **Last updated:** [November 10, 2022, 11:08pm UTC](https://discuss.elastic.co/t/filebeat-apache-module-not-showing-data-on-dashboards-when-using-logstash/318594 "2022-11-10T23:08:08Z")
Good afternoon all. I've recently installed a filebeat and enabled the system and apache modules. After that I set the filebeat.yml to point to ES and Kibana and run the 'filebeat setup -e' Everything went as expecte… --- ## [Enrich all Elasticsearch REST requests by adding filters from plugin](https://discuss.elastic.co/t/enrich-all-elasticsearch-rest-requests-by-adding-filters-from-plugin/160714)
**Author:** [@Uiidoi12](https://discuss.elastic.co/u/Uiidoi12)\ **Replies:** 12\ **Last updated:** [December 14, 2018, 9:18am UTC](https://discuss.elastic.co/t/enrich-all-elasticsearch-rest-requests-by-adding-filters-from-plugin/160714 "2018-12-14T09:18:42Z")
Hi, would it be possible to catch all Elasticsearch requests, from a plugin, in order to enrich them by adding some filters without changing the query client-side? E.g. user calls GET /\_search and I will add: { "que… --- ## [How to exclude XML & json key-value if key length is greater than 15 char and value length is greater than 100 char](https://discuss.elastic.co/t/how-to-exclude-xml-json-key-value-if-key-length-is-greater-than-15-char-and-value-length-is-greater-than-100-char/270248)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 14\ **Last updated:** [April 16, 2021, 4:19pm UTC](https://discuss.elastic.co/t/how-to-exclude-xml-json-key-value-if-key-length-is-greater-than-15-char-and-value-length-is-greater-than-100-char/270248 "2021-04-16T16:19:18Z")
@Badger I want to exclude XML & json key-value if key length is greater than 15 char and value length is greater than 100 char. Is this possible can you please suggest way for it. --- ## [New Log file not pull up on kibana](https://discuss.elastic.co/t/new-log-file-not-pull-up-on-kibana/85221)
**Author:** [@Saplog](https://discuss.elastic.co/u/Saplog)\ **Replies:** 10\ **Last updated:** [May 11, 2017, 11:04am UTC](https://discuss.elastic.co/t/new-log-file-not-pull-up-on-kibana/85221 "2017-05-11T11:04:32Z")
Hello dears, I have 2 types of logs, pfSense which works perfectly , and I want to add other logs (saplog) in a file. I already create a filter (sapfilter) for these new logs, I try it with logstash-f and that's work. Wh… --- ## [Is it me or is ES 1.6.0 node startup/recovery slower then before?](https://discuss.elastic.co/t/is-it-me-or-is-es-1-6-0-node-startup-recovery-slower-then-before/2718)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 14\ **Last updated:** [June 18, 2015, 4:07pm UTC](https://discuss.elastic.co/t/is-it-me-or-is-es-1-6-0-node-startup-recovery-slower-then-before/2718 "2015-06-18T16:07:23Z")
On the tin it sais it's supposed to be faster, I follow these steps... 1- transient.cluster.routing.allocation.enable: none 2- shutdown the specific node 3- Do what ever updates (In this case windows updates) 4- Rebo… --- ## [Filebeat Cisco module can't parse 305011, 302015, 302013, or 722015 message types](https://discuss.elastic.co/t/filebeat-cisco-module-cant-parse-305011-302015-302013-or-722015-message-types/250882)
**Author:** [@rthielen](https://discuss.elastic.co/u/rthielen)\ **Replies:** 11\ **Last updated:** [October 30, 2020, 5:13am UTC](https://discuss.elastic.co/t/filebeat-cisco-module-cant-parse-305011-302015-302013-or-722015-message-types/250882 "2020-10-30T05:13:31Z")
Version 7.9.2 Debian 10 Problematic file: /usr/share/filebeat/module/cisco/shared/ingest/asa-ftd-pipeline.yml 305011 parse pattern doesn't account for presence of source.user.name pattern: "Built %{} %{network.transp… --- ## [JVM crashes after reincorporating nodes into cluster](https://discuss.elastic.co/t/jvm-crashes-after-reincorporating-nodes-into-cluster/8667)
**Author:** [@Alex\_5](https://discuss.elastic.co/u/Alex_5)\ **Replies:** 18\ **Last updated:** [October 8, 2013, 5:11pm UTC](https://discuss.elastic.co/t/jvm-crashes-after-reincorporating-nodes-into-cluster/8667 "2013-10-08T17:11:11Z")
Dear all, We are seeing unexpected JVM crashes after an ElasticSearch cluster node is restarted and reincorporate into the cluster. For load balancing and robustness we have two ElasticSearch front-end servers whi… --- ## [Performance degradation after upgrading from v6.3.2 to v7.4.2](https://discuss.elastic.co/t/performance-degradation-after-upgrading-from-v6-3-2-to-v7-4-2/213466)
**Author:** [@farin99](https://discuss.elastic.co/u/farin99)\ **Replies:** 9\ **Last updated:** [January 9, 2020, 12:40pm UTC](https://discuss.elastic.co/t/performance-degradation-after-upgrading-from-v6-3-2-to-v7-4-2/213466 "2020-01-09T12:40:22Z")
Hi, we have a cluster with hot and warm nodes. Our warm nodes have around 400 shards. In 7.4.2, we see an increase of 10% in CPU usage in comparison to 6.3.2. According to the hot threads call stacks, it is related to … --- ## [User\_agent and geoip filters does not work](https://discuss.elastic.co/t/user-agent-and-geoip-filters-does-not-work/74219)
**Author:** [@jonasv](https://discuss.elastic.co/u/jonasv)\ **Replies:** 11\ **Last updated:** [February 7, 2017, 1:36pm UTC](https://discuss.elastic.co/t/user-agent-and-geoip-filters-does-not-work/74219 "2017-02-07T13:36:20Z")
Hey, I'm got a field which looks like this: Mozilla/5.0 (X11; Linux x86\_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36 OPR/42.0.2393.94 or this: curl/7.47.0 filter { mutate { remove\_… --- ## [Delay logs Paloalto](https://discuss.elastic.co/t/delay-logs-paloalto/313367)
**Author:** [@juancamiloll](https://discuss.elastic.co/u/juancamiloll)\ **Replies:** 15\ **Last updated:** [September 1, 2022, 5:24pm UTC](https://discuss.elastic.co/t/delay-logs-paloalto/313367 "2022-09-01T17:24:30Z")
Hello, I am completely new to ELK, in my case someone installed this tool but it is no longer in my organization and I am putting a lot of effort into trying to keep the ELK solution working. Excuse my English as I'm u… --- ## [Elasticsearch does not send logs to filebeat and/or Logstash](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405)
**Author:** [@Royal](https://discuss.elastic.co/u/Royal)\ **Replies:** 11\ **Last updated:** [February 17, 2021, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405 "2021-02-17T14:56:11Z")
Our situation is as follows: We have a Kubernetes Cluster with a lot of logs piling up. We would like to get a centralized place for the logs to query through. This centralized place is a local VM, which has Elasticsearc… --- ## [XML filter in logstash](https://discuss.elastic.co/t/xml-filter-in-logstash/250291)
**Author:** [@SSSPR](https://discuss.elastic.co/u/SSSPR)\ **Replies:** 11\ **Last updated:** [October 2, 2020, 5:16pm UTC](https://discuss.elastic.co/t/xml-filter-in-logstash/250291 "2020-10-02T17:16:01Z")
Hi All, I want to match the message name and value but both are linked with a variable p , how to extract each of the message name and match with corresponding value using the variable p with respective corresponding ob… --- ## [Is anyway to bulk huge data to ES without rest](https://discuss.elastic.co/t/is-anyway-to-bulk-huge-data-to-es-without-rest/12573)
**Author:** [@dancer](https://discuss.elastic.co/u/dancer)\ **Replies:** 16\ **Last updated:** [July 6, 2013, 9:28am UTC](https://discuss.elastic.co/t/is-anyway-to-bulk-huge-data-to-es-without-rest/12573 "2013-07-06T09:28:40Z")
I want bulk huge data to es. but the current plugin use REST, I think it may very good for performance. So, is any other way, such as write lucene use MR? -- You received this message because you are subscribed … --- ## [Uploading an xml file into logstash](https://discuss.elastic.co/t/uploading-an-xml-file-into-logstash/165016)
**Author:** [@Alaoui](https://discuss.elastic.co/u/Alaoui)\ **Replies:** 19\ **Last updated:** [January 22, 2019, 8:56am UTC](https://discuss.elastic.co/t/uploading-an-xml-file-into-logstash/165016 "2019-01-22T08:56:57Z")
Hi , i already upload my xml file into logtsahs, everything sames okey but the result is not like i want, because i want to specify to each tag to a column so i can do my search in kibana using a name of a column but no… [Previous page](https://discuss.elastic.co/top.md?page=167&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=169&per_page=50&period=all)