# Top **URL:** https://discuss.elastic.co/top.md?page=1680&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1681 --- ## [How to give specific disk threshold for specific node in a Elastic cluster](https://discuss.elastic.co/t/how-to-give-specific-disk-threshold-for-specific-node-in-a-elastic-cluster/344247)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 5\ **Last updated:** [October 6, 2023, 7:00pm UTC](https://discuss.elastic.co/t/how-to-give-specific-disk-threshold-for-specific-node-in-a-elastic-cluster/344247 "2023-10-06T19:00:03Z")
Hi, I have a multi-node cluster. I want to allocate only 100 shards to a specific node in the elastic cluster. (But other nodes should be allocated more than 100 shards.) I have one node that has less disk space than … --- ## [Errors indexing binary attachment using ingest-attachment pipeline](https://discuss.elastic.co/t/errors-indexing-binary-attachment-using-ingest-attachment-pipeline/300766)
**Author:** [@Enxiad](https://discuss.elastic.co/u/Enxiad)\ **Replies:** 5\ **Last updated:** [March 27, 2022, 6:37am UTC](https://discuss.elastic.co/t/errors-indexing-binary-attachment-using-ingest-attachment-pipeline/300766 "2022-03-27T06:37:30Z")
Hi all, I am ingesting a document A and I receive the error: "Last unit does not have enough valid bits" when the document contains only the word "Lorem". For document B which contains the words "Lorem ipsum" then I get… --- ## [Do I need a nested query or foreach or a create a new index?](https://discuss.elastic.co/t/do-i-need-a-nested-query-or-foreach-or-a-create-a-new-index/295968)
**Author:** [@clearbluelou](https://discuss.elastic.co/u/clearbluelou)\ **Replies:** 5\ **Last updated:** [February 3, 2022, 8:52pm UTC](https://discuss.elastic.co/t/do-i-need-a-nested-query-or-foreach-or-a-create-a-new-index/295968 "2022-02-03T20:52:06Z")
I'm new to Elasticsearch and Kibana. I haven't really gotten to a point of understanding of the JSON-like syntax. I've just been using the filters and some Lucene queries. Please be gentle. :blush: This is hard to e… --- ## [Using field name other than "message" in grok match](https://discuss.elastic.co/t/using-field-name-other-than-message-in-grok-match/256563)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 5\ **Last updated:** [November 25, 2020, 10:03am UTC](https://discuss.elastic.co/t/using-field-name-other-than-message-in-grok-match/256563 "2020-11-25T10:03:40Z")
i have log like below, in line 2 , i have stored custom filter value in field "method"...in line 3 , i want to use "method" field and apply it another custom filter and store this result in method 2...i don't want to cha… --- ## [Executing a custom allocation decider before an ES allocation decider](https://discuss.elastic.co/t/executing-a-custom-allocation-decider-before-an-es-allocation-decider/200061)
**Author:** [@UDixit](https://discuss.elastic.co/u/UDixit)\ **Replies:** 5\ **Last updated:** [September 20, 2019, 5:17am UTC](https://discuss.elastic.co/t/executing-a-custom-allocation-decider-before-an-es-allocation-decider/200061 "2019-09-20T05:17:04Z")
The createAllocationDeciders API in ClusterModule.cs instantiates multiple ES deciders as well as custom allocation deciders. Since these are added to a linkedHashMap, they are always executed in order. How can I ensure… --- ## [Cross navigation in Kibana](https://discuss.elastic.co/t/cross-navigation-in-kibana/55849)
**Author:** [@kharbechtein](https://discuss.elastic.co/u/kharbechtein)\ **Replies:** 5\ **Last updated:** [July 21, 2016, 9:21am UTC](https://discuss.elastic.co/t/cross-navigation-in-kibana/55849 "2016-07-21T09:21:33Z")
Hello, I would like to know if "cross navigation" in Kibana is possible or no. IF yes , how to configure it please. ? Thanks in advance. --- ## [Visualise:Bad gateway](https://discuss.elastic.co/t/visualise-bad-gateway/50303)
**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\ **Replies:** 5\ **Last updated:** [May 18, 2016, 10:16am UTC](https://discuss.elastic.co/t/visualise-bad-gateway/50303 "2016-05-18T10:16:17Z")
What could be the reasons for Bad gateway error...and how we can solve that --- ## [Monitoring host with example from docs does not work](https://discuss.elastic.co/t/monitoring-host-with-example-from-docs-does-not-work/324161)
**Author:** [@Toaster2-0](https://discuss.elastic.co/u/Toaster2-0)\ **Replies:** 6\ **Last updated:** [January 29, 2023, 4:55pm UTC](https://discuss.elastic.co/t/monitoring-host-with-example-from-docs-does-not-work/324161 "2023-01-29T16:55:03Z")
Hi, in the Docs is a run command of docker with which you should be able to Monitor the host machine (with the System Module), but It seems to not be working. In a reddit thread nobody seems to be able to give a working… --- ## [Strigo lab error in ElasticSearch Observability Engineer ondemand class lab 1.2](https://discuss.elastic.co/t/strigo-lab-error-in-elasticsearch-observability-engineer-ondemand-class-lab-1-2/281729)
**Author:** [@Oleg\_Gomozov](https://discuss.elastic.co/u/Oleg_Gomozov)\ **Replies:** 6\ **Last updated:** [August 18, 2021, 4:55pm UTC](https://discuss.elastic.co/t/strigo-lab-error-in-elasticsearch-observability-engineer-ondemand-class-lab-1-2/281729 "2021-08-18T16:55:49Z")
The next command docker stop petclinic-client in Lab 1.2 ( #20) (Elastic Observability Engineer) doesn’t work with error “-bash: docker: command not found”. None of docker commands work. Docker is either not installed … --- ## [Connect a role to a space](https://discuss.elastic.co/t/connect-a-role-to-a-space/218029)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 6\ **Last updated:** [February 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/connect-a-role-to-a-space/218029 "2020-02-18T12:44:26Z")
hello I have a case where we have 1 dashboard for all clients (created in the default space) with index pattern client\_\*. (includes: client\_1 , client\_2\_ and so on..) example names... I created a space for each clien… --- ## [Curl usage with Elasticsearch 6.1.1](https://discuss.elastic.co/t/curl-usage-with-elasticsearch-6-1-1/114027)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 6\ **Last updated:** [January 4, 2018, 7:52pm UTC](https://discuss.elastic.co/t/curl-usage-with-elasticsearch-6-1-1/114027 "2018-01-04T19:52:32Z")
Hi, I just update my Elasticsearch 4.6 to 6.1.1 With 4.6 version, I use this command line to get all VISUALISATION ans all DASHBOARD: curl -XPOST 'http://xx.xx.xx.xx:9200/.kibana/\_search?type=visualization&pretty=2&s… --- ## [Elastic agent goes offline & healthy every 5 minutes](https://discuss.elastic.co/t/elastic-agent-goes-offline-healthy-every-5-minutes/367215)
**Author:** [@harshpanchal](https://discuss.elastic.co/u/harshpanchal)\ **Replies:** 3\ **Last updated:** [October 16, 2024, 12:45pm UTC](https://discuss.elastic.co/t/elastic-agent-goes-offline-healthy-every-5-minutes/367215 "2024-10-16T12:45:24Z")
I have an Elastic Stack setup managed by the ECK operator on Kubernetes. I deployed a Fleet Server on Kubernetes and an Elastic Agent on a separate Alpine Linux VM for log shipping. The installation was successful, and t… --- ## [Elastic APM Javagent + Elastic search](https://discuss.elastic.co/t/elastic-apm-javagent-elastic-search/350805)
**Author:** [@RavaliJ](https://discuss.elastic.co/u/RavaliJ)\ **Replies:** 8\ **Last updated:** [January 11, 2024, 8:25pm UTC](https://discuss.elastic.co/t/elastic-apm-javagent-elastic-search/350805 "2024-01-11T20:25:44Z")
Hi, I am using elastic-apm-agent-1.45.0.jar to instrument a java spring boot application. I have installed Elasticsearch - 8.8.0 and apm-server-8.8.0 on my local windows machine. Made necessary basic config changes to t… --- ## [Transaction names are hex after agent upgrade](https://discuss.elastic.co/t/transaction-names-are-hex-after-agent-upgrade/304136)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 8\ **Last updated:** [May 17, 2022, 11:30am UTC](https://discuss.elastic.co/t/transaction-names-are-hex-after-agent-upgrade/304136 "2022-05-17T11:30:06Z")
We've recently done an APM Java agent upgrade from 1.17 to 1.30.1. For most of our APM monitoring things have gone smoothly but one of our services, all of the transaction names are coming through as hex values instead o… --- ## [Translate filter multiple values in same label ECS field](https://discuss.elastic.co/t/translate-filter-multiple-values-in-same-label-ecs-field/277391)
**Author:** [@metalshanked](https://discuss.elastic.co/u/metalshanked)\ **Replies:** 3\ **Last updated:** [June 30, 2021, 2:22am UTC](https://discuss.elastic.co/t/translate-filter-multiple-values-in-same-label-ecs-field/277391 "2021-06-30T02:22:31Z")
Hi, I am looking to populate the \[labels\]\[feed\] field (labels is the ECS field) with contents from two separate CSV fields as below. I am hoping to have it as an array. Is this a correct approach? If not, what would be… --- ## [How to remove \_id, \_index, \_type, num\_matches, num\_hits and @timestamp from elastialert rules](https://discuss.elastic.co/t/how-to-remove-id-index-type-num-matches-num-hits-and-timestamp-from-elastialert-rules/273822)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 3\ **Last updated:** [May 24, 2021, 6:27pm UTC](https://discuss.elastic.co/t/how-to-remove-id-index-type-num-matches-num-hits-and-timestamp-from-elastialert-rules/273822 "2021-05-24T18:27:41Z")
Hi All, Below is the content which im getting in my gmail inbox. I want to remove \_id, \_index, \_type, num\_matches, num\_hits and @timestamp all this only i want message to be include in my email triggering everytime. … --- ## [Vega Context Within Specific Aggregations](https://discuss.elastic.co/t/vega-context-within-specific-aggregations/271886)
**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\ **Replies:** 3\ **Last updated:** [May 4, 2021, 3:03pm UTC](https://discuss.elastic.co/t/vega-context-within-specific-aggregations/271886 "2021-05-04T15:03:20Z")
Need help building a query to properly calculate turnover to be used in Vega. I tried looking at the context-must/context-must\_not portions of Vega but I don't know if I can apply these to specific aggregations unless I … --- ## [Elasticsearch Trace Route](https://discuss.elastic.co/t/elasticsearch-trace-route/228784)
**Author:** [@Alsheh](https://discuss.elastic.co/u/Alsheh)\ **Replies:** 3\ **Last updated:** [April 20, 2020, 7:37am UTC](https://discuss.elastic.co/t/elasticsearch-trace-route/228784 "2020-04-20T07:37:08Z")
Is there a way to trace the route of search & indexing requests to nodes within the cluster? I have lots of dedicated nodes in the cluster and I want to confirm requests routing is optimized by checking the path the requ… --- ## [Kibana 6.8 rpm Installation issue](https://discuss.elastic.co/t/kibana-6-8-rpm-installation-issue/185039)
**Author:** [@mtaormina](https://discuss.elastic.co/u/mtaormina)\ **Replies:** 3\ **Last updated:** [June 27, 2019, 11:32am UTC](https://discuss.elastic.co/t/kibana-6-8-rpm-installation-issue/185039 "2019-06-27T11:32:31Z")
The Kibana 6.8 64-bit rpm sha512 hash doesn't match downloaded file and installation on RHEL 7 gives the following error: Error unpacking rpm package kibana-6.8.0-1.x86\_64 error: unpacking of archive failed on file /us… --- ## [Custom Plugin installation was unsuccessful](https://discuss.elastic.co/t/custom-plugin-installation-was-unsuccessful/180326)
**Author:** [@Arul\_Selvan](https://discuss.elastic.co/u/Arul_Selvan)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 1:21pm UTC](https://discuss.elastic.co/t/custom-plugin-installation-was-unsuccessful/180326 "2019-05-10T13:21:40Z")
I'm getting below error while install my custom plugin, could you please help ? Kibana Version : 6.6.1 Plugin installation was unsuccessful due to error "Command failed: /Users/abasker/kibana\_test/kibana-6.6.1-darwin-x… --- ## [Understanding SYSLOGBASE2 pattern](https://discuss.elastic.co/t/understanding-syslogbase2-pattern/138993)
**Author:** [@dss](https://discuss.elastic.co/u/dss)\ **Replies:** 0\ **Last updated:** [July 7, 2018, 1:05am UTC](https://discuss.elastic.co/t/understanding-syslogbase2-pattern/138993 "2018-07-07T01:05:58Z")
SYSLOGBASE2 (?:%{SYSLOGTIMESTAMP:timestamp}|%{TIMESTAMP\_ISO8601:timestamp8601}) (?:%{SYSLOGFACILITY} )?%{SYSLOGHOST:logsource}+(?: %{SYSLOGPROG}:|) Could I get a hand with the meaning of a few constructs in this pattern… --- ## [How long filebeat harvester will be alive by default?](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 3\ **Last updated:** [June 15, 2017, 2:08pm UTC](https://discuss.elastic.co/t/how-long-filebeat-harvester-will-be-alive-by-default/89170 "2017-06-15T14:08:02Z")
HI, I used filebeat to get my logs from one server to another , usually my logs generation is slow. I want to know how long the filebeat harvester will be alive ? Is there any possible case where the filebeat harvester… --- ## [Defining a custom ES index based on an existing field](https://discuss.elastic.co/t/defining-a-custom-es-index-based-on-an-existing-field/84244)
**Author:** [@ticktockhouse](https://discuss.elastic.co/u/ticktockhouse)\ **Replies:** 3\ **Last updated:** [May 2, 2017, 11:08am UTC](https://discuss.elastic.co/t/defining-a-custom-es-index-based-on-an-existing-field/84244 "2017-05-02T11:08:53Z")
I have a logstash pipeline designed to break container logs coming from coreos into separate indexes, but it's not quite working: My pipeline looks like this: input { beats { port =\> 5044 } } filter { grok… --- ## [Duplicate insertions for a single document](https://discuss.elastic.co/t/duplicate-insertions-for-a-single-document/62088)
**Author:** [@Pat\_Humphreys](https://discuss.elastic.co/u/Pat_Humphreys)\ **Replies:** 3\ **Last updated:** [October 6, 2016, 8:53am UTC](https://discuss.elastic.co/t/duplicate-insertions-for-a-single-document/62088 "2016-10-06T08:53:30Z")
I have a Cascading job that is reading a file of Json docs from S3 (1.5GB) and inserting it into Elasticsearch. I have 5888755 records in the file, but when I do a count in the elasticsearch index it is 6213755 ( this nu… --- ## [Elasticsearch top hits aggregation not working as expected](https://discuss.elastic.co/t/elasticsearch-top-hits-aggregation-not-working-as-expected/48231)
**Author:** [@abhishek.guruvayya](https://discuss.elastic.co/u/abhishek.guruvayya)\ **Replies:** 3\ **Last updated:** [April 25, 2016, 3:35pm UTC](https://discuss.elastic.co/t/elasticsearch-top-hits-aggregation-not-working-as-expected/48231 "2016-04-25T15:35:01Z")
I am running the below query and want to retrieve top hits per bucket. But I see multiple docs per bucket in few cases. I want only one document per bucket returned. Can some one review the query and suggest. SearchRes… --- ## [Attachment plugin: why does it return extracted text only if asked for "file" field explicitly?](https://discuss.elastic.co/t/attachment-plugin-why-does-it-return-extracted-text-only-if-asked-for-file-field-explicitly/44900)
**Author:** [@vorou](https://discuss.elastic.co/u/vorou)\ **Replies:** 3\ **Last updated:** [March 19, 2016, 4:26pm UTC](https://discuss.elastic.co/t/attachment-plugin-why-does-it-return-extracted-text-only-if-asked-for-file-field-explicitly/44900 "2016-03-19T16:26:20Z")
If I ask for file field in my query explicitly, the field file in the response will contain extracted text. If I don't ask for any fields, the field file (in source) will be a subdocument with \_name, \_content, etc. I don… --- ## [Does anyone know of a way to get elasticsearch to return a word count?](https://discuss.elastic.co/t/does-anyone-know-of-a-way-to-get-elasticsearch-to-return-a-word-count/13913)
**Author:** [@nik9000](https://discuss.elastic.co/u/nik9000)\ **Replies:** 3\ **Last updated:** [October 13, 2013, 5:14pm UTC](https://discuss.elastic.co/t/does-anyone-know-of-a-way-to-get-elasticsearch-to-return-a-word-count/13913 "2013-10-13T17:14:58Z")
It looks like my user interface returns a word count and it was sneakily implemented by faulting text in from the database and running str\_word\_count on it. I'd rather have elasticsearch calculate the number of words… --- ## [Is there a way to force a couchdb river update?](https://discuss.elastic.co/t/is-there-a-way-to-force-a-couchdb-river-update/7143)
**Author:** [@Andrius\_Juozapaitis](https://discuss.elastic.co/u/Andrius_Juozapaitis)\ **Replies:** 8\ **Last updated:** [April 28, 2013, 1:56pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-force-a-couchdb-river-update/7143 "2013-04-28T13:56:50Z")
Hey all, Looking for advice here. I am using couchdb as my data store, with elasticsearch handling pretty much all the read operations. I've encountered an issue with the near-real-time indexing through couchdb riv… --- ## [0.19.11 StackOverflowError](https://discuss.elastic.co/t/0-19-11-stackoverflowerror/9678)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 8\ **Last updated:** [November 19, 2012, 11:51am UTC](https://discuss.elastic.co/t/0-19-11-stackoverflowerror/9678 "2012-11-19T11:51:33Z")
Hi, After my move to 0.19.11 - I am getting a StackOverflowError when I try to start ES, also I get a SnappyError, which may be related. The problem happens on Solaris 10 but not my Suse Linux build (2.6.16): … --- ## [Building Interactive Faceted Search with Backbone.js](https://discuss.elastic.co/t/building-interactive-faceted-search-with-backbone-js/8785)
**Author:** [@Greg\_Brown](https://discuss.elastic.co/u/Greg_Brown)\ **Replies:** 3\ **Last updated:** [August 21, 2012, 3:32pm UTC](https://discuss.elastic.co/t/building-interactive-faceted-search-with-backbone-js/8785 "2012-08-21T15:32:58Z")
Howdy ElasticSearchers! I just released a library for quickly building interactive faceted search sites (with charts). I wrote an intro blog postto the library, or head straight over to the es-backbone github repo… --- ## [Running elasticsearch with Tomcat on Jelastic](https://discuss.elastic.co/t/running-elasticsearch-with-tomcat-on-jelastic/8010)
**Author:** [@Marina\_Sprava](https://discuss.elastic.co/u/Marina_Sprava)\ **Replies:** 3\ **Last updated:** [June 8, 2012, 3:32am UTC](https://discuss.elastic.co/t/running-elasticsearch-with-tomcat-on-jelastic/8010 "2012-06-08T03:32:45Z")
In this post I’m gonna write about elasticsearch and a way to deploy it within a Java servlet container as a war file. Since I’m playing around with Jelastic, why not try to deploy it to the cloud? --- ## [Trouble restarting after crash](https://discuss.elastic.co/t/trouble-restarting-after-crash/7585)
**Author:** [@Chuck\_McKenzie](https://discuss.elastic.co/u/Chuck_McKenzie)\ **Replies:** 3\ **Last updated:** [May 9, 2012, 9:08am UTC](https://discuss.elastic.co/t/trouble-restarting-after-crash/7585 "2012-05-09T09:08:53Z")
I've inherited a several large 18.7 elasticsearch clusters and I'm having some trouble getting one to restart after a crash. (We ran out of open filehandles.) I've since upped the limit, and I'll be cleaning up old… --- ## [Alerting in ELK 7.6 Basic License](https://discuss.elastic.co/t/alerting-in-elk-7-6-basic-license/223289)
**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 9:49am UTC](https://discuss.elastic.co/t/alerting-in-elk-7-6-basic-license/223289 "2020-03-12T09:49:53Z")
Hi, Is there any option of sending alert mails through Kibana 7.6 Basic License. Watcher requires a licensed version and I am not able to find any other way to enable option of sending alert mails. Kindly suggest me on… --- ## [How can I Write dsl query inside of the Nest query with C# for updatinds specific fields?](https://discuss.elastic.co/t/how-can-i-write-dsl-query-inside-of-the-nest-query-with-c-for-updatinds-specific-fields/218590)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 2:11am UTC](https://discuss.elastic.co/t/how-can-i-write-dsl-query-inside-of-the-nest-query-with-c-for-updatinds-specific-fields/218590 "2020-02-11T02:11:27Z")
Hi; Iam trying to update my index fields by using CId ; CId can be used many rows. My Structure like : { AId: 4244, BId : 53535, CId: "4242342" } if you look at below query what My intend to achieve, It retur… --- ## [Populating name and email fields when using LDAP authentication](https://discuss.elastic.co/t/populating-name-and-email-fields-when-using-ldap-authentication/183532)
**Author:** [@jackjefferson](https://discuss.elastic.co/u/jackjefferson)\ **Replies:** 1\ **Last updated:** [May 30, 2019, 3:07pm UTC](https://discuss.elastic.co/t/populating-name-and-email-fields-when-using-ldap-authentication/183532 "2019-05-30T15:07:51Z")
I've set up LDAP authentication using a trial license of Elasticsearch 7.1. I've got the authentication working with user-search mode, but the "full\_name" and "email" attributes are null. How do I populate these with val… --- ## [ELK LOG rotation](https://discuss.elastic.co/t/elk-log-rotation/151389)
**Author:** [@abhinav.dwivedi](https://discuss.elastic.co/u/abhinav.dwivedi)\ **Replies:** 1\ **Last updated:** [October 8, 2018, 6:47am UTC](https://discuss.elastic.co/t/elk-log-rotation/151389 "2018-10-08T06:47:19Z")
Hi I have indexes around 200 GB in all my 4 host so around 800 GB data in my ELK cluster. So how can i rotate my ELK logs keep 3-month data in my clsuter and older should be pushed some where else. Regards Abhinav D --- ## [Filebeat stops forwarding logs to Logstash after setting max harvesters](https://discuss.elastic.co/t/filebeat-stops-forwarding-logs-to-logstash-after-setting-max-harvesters/108700)
**Author:** [@ntviet18](https://discuss.elastic.co/u/ntviet18)\ **Replies:** 1\ **Last updated:** [November 23, 2017, 9:49am UTC](https://discuss.elastic.co/t/filebeat-stops-forwarding-logs-to-logstash-after-setting-max-harvesters/108700 "2017-11-23T09:49:42Z")
Due to some resource limitations I have to set maximum number of Filebeat harvesters. But after that change there are no more logs forwarded to Logstash. Here are some logs from Filebeat 2017/11/22 11:13:56.421773 pro… --- ## [Logstash ingest data after any updates in CSV input](https://discuss.elastic.co/t/logstash-ingest-data-after-any-updates-in-csv-input/103415)
**Author:** [@cp\_el](https://discuss.elastic.co/u/cp_el)\ **Replies:** 1\ **Last updated:** [October 15, 2017, 7:42pm UTC](https://discuss.elastic.co/t/logstash-ingest-data-after-any-updates-in-csv-input/103415 "2017-10-15T19:42:54Z")
I ingested csv in elasticsearch using logstash and also put that ingesting script running in background for continues ingestion. It's ingest if new row added to csv but if I have any row values update then it's not upda… --- ## [Can journalbeat monitor journal entries from remote machines?](https://discuss.elastic.co/t/can-journalbeat-monitor-journal-entries-from-remote-machines/90686)
**Author:** [@holt](https://discuss.elastic.co/u/holt)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 3:04pm UTC](https://discuss.elastic.co/t/can-journalbeat-monitor-journal-entries-from-remote-machines/90686 "2017-06-26T15:04:24Z")
Want to have multiple machines using systemd-journal-remote feeding a single machine running systemd-journal-remote, then have journalbeat running on that single machine. (An alternative to running journalbeat on the rem… --- ## [Elasticsearch 5 - Large (size) query performance with complex mapping](https://discuss.elastic.co/t/elasticsearch-5-large-size-query-performance-with-complex-mapping/89931)
**Author:** [@atze](https://discuss.elastic.co/u/atze)\ **Replies:** 1\ **Last updated:** [June 20, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-5-large-size-query-performance-with-complex-mapping/89931 "2017-06-20T13:59:45Z")
Hi, We are designing a API with an Elasticsearch backend. The data is (in ES terms) very structured. The limit of nesting has been upped to 75 (default is 50). The indices are also have a lot of like (ngram) analyzers… --- ## [Kibana Markdown not working as expected](https://discuss.elastic.co/t/kibana-markdown-not-working-as-expected/85128)
**Author:** [@ppierce01](https://discuss.elastic.co/u/ppierce01)\ **Replies:** 1\ **Last updated:** [May 10, 2017, 2:43pm UTC](https://discuss.elastic.co/t/kibana-markdown-not-working-as-expected/85128 "2017-05-10T14:43:20Z")
I am attempting to create a Markdown to be used for hyperlinks. When I do this Click \[Here for search help\] id1 Click\[Here for UPD SpreadSheet\] id2 it works as expected. and if I do this by itself Click \[Here for Y… --- ## [High Logstash CPU Usage](https://discuss.elastic.co/t/high-logstash-cpu-usage/47533)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 1\ **Last updated:** [April 15, 2016, 8:34pm UTC](https://discuss.elastic.co/t/high-logstash-cpu-usage/47533 "2016-04-15T20:34:32Z")
I've been running a logstash framework for a while now that had 5 instances of logstash reading from a kafka queue, processing that data, and pushing it to elasticsearch. I discovered recently that that kafka queue only … --- ## [Question about facets and get full terms](https://discuss.elastic.co/t/question-about-facets-and-get-full-terms/13658)
**Author:** [@Pashkevich\_Aleksandr](https://discuss.elastic.co/u/Pashkevich_Aleksandr)\ **Replies:** 7\ **Last updated:** [September 18, 2013, 6:31am UTC](https://discuss.elastic.co/t/question-about-facets-and-get-full-terms/13658 "2013-09-18T06:31:00Z")
Hello, sory for my English i am use that query for get all fields of one tag { "query" : { "match\_all" : { } }, "facets" : { "Params\_1" : { "terms" : { … --- ## [Query String with WhiteSpace](https://discuss.elastic.co/t/query-string-with-whitespace/6417)
**Author:** [@Shaun\_Farrell](https://discuss.elastic.co/u/Shaun_Farrell)\ **Replies:** 1\ **Last updated:** [January 18, 2012, 8:58am UTC](https://discuss.elastic.co/t/query-string-with-whitespace/6417 "2012-01-18T08:58:20Z")
If I have a name "abcdef" in my index and I do a search for "abcdef" I get the result however if I do the search "abc%20def" i don't get the result. Is there a way to join those and sort of ignore the whitespace. I… --- ## [What is difference between document id and index id?](https://discuss.elastic.co/t/what-is-difference-between-document-id-and-index-id/5758)
**Author:** [@Sam\_4](https://discuss.elastic.co/u/Sam_4)\ **Replies:** 1\ **Last updated:** [November 3, 2011, 8:25am UTC](https://discuss.elastic.co/t/what-is-difference-between-document-id-and-index-id/5758 "2011-11-03T08:25:10Z")
Hi I have doubt regarding document id and index id: 1.both are same or both are different. 2.how to set the document id using java API. Thanks --- ## [Export CSV doesn't work v7.9.0](https://discuss.elastic.co/t/export-csv-doesnt-work-v7-9-0/258247)
**Author:** [@111382](https://discuss.elastic.co/u/111382)\ **Replies:** 2\ **Last updated:** [December 10, 2020, 5:31pm UTC](https://discuss.elastic.co/t/export-csv-doesnt-work-v7-9-0/258247 "2020-12-10T17:31:35Z")
Hi everyone! I hope some of you met the same trouble with csv report generation. I read articles at the forum but didn't get the same case. So I try to export saved search in Kibana 7.9.0 but receive Service Unavailable… --- ## [Kibana container: permission denied error related to /var/log/kibana.log](https://discuss.elastic.co/t/kibana-container-permission-denied-error-related-to-var-log-kibana-log/363086)
**Author:** [@Dan567](https://discuss.elastic.co/u/Dan567)\ **Replies:** 1\ **Last updated:** [July 14, 2024, 5:06pm UTC](https://discuss.elastic.co/t/kibana-container-permission-denied-error-related-to-var-log-kibana-log/363086 "2024-07-14T17:06:01Z")
Hello community, running Kibana v8.14.1 in its own Docker container. Issue: configuring Kibana to write its log file to /var/log/kibana.log, following the guidance in the Kibana logging settings documentation: I enc… --- ## [Is Kibana EQL Rule Using Async Search?](https://discuss.elastic.co/t/is-kibana-eql-rule-using-async-search/320687)
**Author:** [@davendu](https://discuss.elastic.co/u/davendu)\ **Replies:** 4\ **Last updated:** [December 7, 2022, 3:55pm UTC](https://discuss.elastic.co/t/is-kibana-eql-rule-using-async-search/320687 "2022-12-07T15:55:05Z")
Hi everyone, Similar to this thread, I also was notified by error Request timed out like the following debug log says: { ... "message":"Changing rule status to \\"failed\\". An error occurred during rule execution: messa… --- ## [How to embed dashboard into website with auto login user?](https://discuss.elastic.co/t/how-to-embed-dashboard-into-website-with-auto-login-user/311619)
**Author:** [@Irwan\_Kurniawan](https://discuss.elastic.co/u/Irwan_Kurniawan)\ **Replies:** 4\ **Last updated:** [August 25, 2022, 8:27am UTC](https://discuss.elastic.co/t/how-to-embed-dashboard-into-website-with-auto-login-user/311619 "2022-08-25T08:27:21Z")
I want to embed the dashboard with auto login user.. So when the user login into website, it automatically login into Kibana also with same user and role.. Is it possible? Thank you! --- ## [Zeek & ELK integration (A lot of strange fields)](https://discuss.elastic.co/t/zeek-elk-integration-a-lot-of-strange-fields/284547)
**Author:** [@test\_qweqwe](https://discuss.elastic.co/u/test_qweqwe)\ **Replies:** 4\ **Last updated:** [September 18, 2021, 9:02pm UTC](https://discuss.elastic.co/t/zeek-elk-integration-a-lot-of-strange-fields/284547 "2021-09-18T21:02:23Z")
Hi there, I set up ELK and then beats on Zeek server to send data to Elasticsearch. Everything is good except one: there are a lot of fields - 308 And it creates an element of inconvenience for me to create a searc… [Previous page](https://discuss.elastic.co/top.md?page=1679&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1681&per_page=50&period=all)