# Top **URL:** https://discuss.elastic.co/top.md?page=183&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 184 --- ## [Show records based on last modified date in Kibana](https://discuss.elastic.co/t/show-records-based-on-last-modified-date-in-kibana/286959)
**Author:** [@Farah\_Zaidi](https://discuss.elastic.co/u/Farah_Zaidi)\ **Replies:** 10\ **Last updated:** [October 18, 2021, 10:34am UTC](https://discuss.elastic.co/t/show-records-based-on-last-modified-date-in-kibana/286959 "2021-10-18T10:34:46Z")
Hi All , I have a requirement where we have same ids with different status but we need to show only the last status of the id based on last modified date . For Example {id : 123, status:validated, modifiedAt:Oct… --- ## [Migration from 0.90.13 to 1.7](https://discuss.elastic.co/t/migration-from-0-90-13-to-1-7/32083)
**Author:** [@kannan](https://discuss.elastic.co/u/kannan)\ **Replies:** 13\ **Last updated:** [October 16, 2015, 6:47am UTC](https://discuss.elastic.co/t/migration-from-0-90-13-to-1-7/32083 "2015-10-16T06:47:38Z")
Hi, We have setup a environment with 5 nodes(3 VM & 2 Cloud) with multiple index in Elastic Search version 0.90.13. 5 Shard with 3 replica Seven .Net Applications using Nest wrapper pushing data to the Elastic Sour… --- ## [Combining two documents by aggregating common field](https://discuss.elastic.co/t/combining-two-documents-by-aggregating-common-field/213622)
**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\ **Replies:** 9\ **Last updated:** [January 6, 2020, 3:40pm UTC](https://discuss.elastic.co/t/combining-two-documents-by-aggregating-common-field/213622 "2020-01-06T15:40:39Z")
Hello, I'm using the JDBC input plugin to ingest vulnerability data from a Rapid7 postgres database. Everything is fine, but one of the tables I'm referencing has many rows which is causing significant duplication of my… --- ## [What are the specifications of your shard configuration or equipment?](https://discuss.elastic.co/t/what-are-the-specifications-of-your-shard-configuration-or-equipment/276155)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 12\ **Last updated:** [July 2, 2021, 6:46am UTC](https://discuss.elastic.co/t/what-are-the-specifications-of-your-shard-configuration-or-equipment/276155 "2021-07-02T06:46:45Z")
I'm using Filebeat, Logstash and ElasticSearch to collect logs. Today, I encountered the following error. # tail /var/log/logstash/logstash-plain.log \[2021-06-16T10:10:48,509\]\[WARN \]\[logstash.outputs.elasticsearch\]\[mai… --- ## [Jolokia autodiscovery](https://discuss.elastic.co/t/jolokia-autodiscovery/219622)
**Author:** [@Milan\_Todorovic](https://discuss.elastic.co/u/Milan_Todorovic)\ **Replies:** 12\ **Last updated:** [March 20, 2020, 11:37am UTC](https://discuss.elastic.co/t/jolokia-autodiscovery/219622 "2020-03-20T11:37:27Z")
Hi, I am currently in use of ELK cluster based on version 7.3.1 under Kubernetes environment. I also use Jolokia module inside metricbeat in order to gather many metrics. I wander does anyone can help me regarding Jolok… --- ## [Kibana APM metrics view din't show Opentelemetry JVM metrics](https://discuss.elastic.co/t/kibana-apm-metrics-view-dint-show-opentelemetry-jvm-metrics/353524)
**Author:** [@XuQing\_Tan](https://discuss.elastic.co/u/XuQing_Tan)\ **Replies:** 10\ **Last updated:** [February 19, 2024, 2:49pm UTC](https://discuss.elastic.co/t/kibana-apm-metrics-view-dint-show-opentelemetry-jvm-metrics/353524 "2024-02-19T14:49:29Z")
Versions: ES v8.11.2 opentelemtry agent 2.1.0 jre 17.0.10 I'm setting up the APM dashboard of Keycloak which uses Quarkus, so per the thread Does Elastic APM support Quarkus? - #2 by cyrilleleclerc I used opentelemetr… --- ## [Grok filter not being applied but logstash logs being collected](https://discuss.elastic.co/t/grok-filter-not-being-applied-but-logstash-logs-being-collected/221112)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 9\ **Last updated:** [March 5, 2020, 9:24am UTC](https://discuss.elastic.co/t/grok-filter-not-being-applied-but-logstash-logs-being-collected/221112 "2020-03-05T09:24:10Z")
I am passing logs from server to Elasticsearch and they are indexed properly but the grok filter I have applied in not extracting the information. The grok pattern works perfectly when i use it in grok debugger against t… --- ## [Is heapCurrent reflective of performance](https://discuss.elastic.co/t/is-heapcurrent-reflective-of-performance/86314)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 11\ **Last updated:** [May 30, 2017, 6:04am UTC](https://discuss.elastic.co/t/is-heapcurrent-reflective-of-performance/86314 "2017-05-30T06:04:33Z")
Im trying to dig a bit into the performance of my ES cluster and I'm trying to understand \_cat/nodes. My response to GET /\_cat/nodes?v&h=name,ip,heapCurrent,heapMax,ramCurrent,ramMax,cpu,getTime,getTotal,getMissingTota… --- ## [Exception in indexing function: ElasticsearchException got in indexing function: TransportError](https://discuss.elastic.co/t/exception-in-indexing-function-elasticsearchexception-got-in-indexing-function-transporterror/271220)
**Author:** [@sanjaysh](https://discuss.elastic.co/u/sanjaysh)\ **Replies:** 19\ **Last updated:** [April 30, 2021, 9:11am UTC](https://discuss.elastic.co/t/exception-in-indexing-function-elasticsearchexception-got-in-indexing-function-transporterror/271220 "2021-04-30T09:11:30Z")
Hello All, I was ingesting the data into the ElasticCloud and suddenly I got this error before the competition of the data I was having the data of 14BG and at 13.5 GB data are being completed but this error has come an… --- ## [Reindex with Terms query](https://discuss.elastic.co/t/reindex-with-terms-query/331087)
**Author:** [@tmslara.a](https://discuss.elastic.co/u/tmslara.a)\ **Replies:** 12\ **Last updated:** [May 4, 2023, 8:11pm UTC](https://discuss.elastic.co/t/reindex-with-terms-query/331087 "2023-05-04T20:11:06Z")
Hello, Everyday I create an index with a size of approximately 10 GB of size. Once the index is completed, I need to reindex a certain set of documents into a new filtered index. To filter the documents I'm using a Ter… --- ## [Geoip filter logstash](https://discuss.elastic.co/t/geoip-filter-logstash/52128)
**Author:** [@bishaka](https://discuss.elastic.co/u/bishaka)\ **Replies:** 11\ **Last updated:** [June 7, 2016, 11:41pm UTC](https://discuss.elastic.co/t/geoip-filter-logstash/52128 "2016-06-07T23:41:06Z")
Hi, I am trying to show location of users in the Kibana Tile Map. How do i do it using the Geoip filter? Can someone point me to some good resource? I have ELK stack setup. --- ## [AWS fleet integration fails with API key error on ingest](https://discuss.elastic.co/t/aws-fleet-integration-fails-with-api-key-error-on-ingest/304846)
**Author:** [@diogof](https://discuss.elastic.co/u/diogof)\ **Replies:** 10\ **Last updated:** [June 8, 2022, 10:42am UTC](https://discuss.elastic.co/t/aws-fleet-integration-fails-with-api-key-error-on-ingest/304846 "2022-06-08T10:42:40Z")
Hi I'm in the process of trying to set AWS log ingestion into Elastic Cloud via a Fleet elastic cloud managed elastic agent. I followed the instructions on Install Fleet-managed Elastic Agents | Fleet and Elastic Agent … --- ## [Why i can't add a date field](https://discuss.elastic.co/t/why-i-cant-add-a-date-field/127922)
**Author:** [@chenzilong444](https://discuss.elastic.co/u/chenzilong444)\ **Replies:** 10\ **Last updated:** [April 16, 2018, 7:56am UTC](https://discuss.elastic.co/t/why-i-cant-add-a-date-field/127922 "2018-04-16T07:56:35Z")
filter { grok{ match =\> \[ "message","\\\[%{TIMESTAMP\_ISO8601:TimeStamp}\\\]" \] } date { match =\> \[ "TimeStamp", "ISO8601" \] target =\> "timest… --- ## [Better places to store es.nodes and es.port in ES Hive integration?](https://discuss.elastic.co/t/better-places-to-store-es-nodes-and-es-port-in-es-hive-integration/18106)
**Author:** [@Jinyuan\_Zhou](https://discuss.elastic.co/u/Jinyuan_Zhou)\ **Replies:** 9\ **Last updated:** [September 17, 2014, 4:48am UTC](https://discuss.elastic.co/t/better-places-to-store-es-nodes-and-es-port-in-es-hive-integration/18106 "2014-09-17T04:48:26Z")
Hi, I am playing with elasticsearch and hive integration. The documentation says to set configuration like es.nodes, es.port in TBLPROPERTIES. It works. But it can cause many reduntant codes. If I have ten data … --- ## [Elastic agent -\> reverse proxy -\> ( fleet server & elasticsearch cluster )](https://discuss.elastic.co/t/elastic-agent-reverse-proxy-fleet-server-elasticsearch-cluster/366000)
**Author:** [@Abdarrahmane](https://discuss.elastic.co/u/Abdarrahmane)\ **Replies:** 11\ **Last updated:** [September 17, 2024, 11:06pm UTC](https://discuss.elastic.co/t/elastic-agent-reverse-proxy-fleet-server-elasticsearch-cluster/366000 "2024-09-17T23:06:54Z")
hello, i want that my elastic agents (in company A) send logs to a reverse proxy in front of my fleet server (in company b) which Is connected directly to my elasticsearch cluster is there any guide to follow ? please… --- ## [Synonym search filter](https://discuss.elastic.co/t/synonym-search-filter/156400)
**Author:** [@ronyarmon](https://discuss.elastic.co/u/ronyarmon)\ **Replies:** 11\ **Last updated:** [November 15, 2018, 9:38am UTC](https://discuss.elastic.co/t/synonym-search-filter/156400 "2018-11-15T09:38:40Z")
Hello, I'm testing a search engine that should retrieve documents with synonyms to the search term. Version: 6.4.2 Example: Search term='good'; Synonyms='right, in\_effect, proficient, in\_force, unspoiled' Index: syn\_… --- ## [Elastic Search is crashing after I add the metrics{ } in filters and format =\> ... in output](https://discuss.elastic.co/t/elastic-search-is-crashing-after-i-add-the-metrics-in-filters-and-format-in-output/1781)
**Author:** [@Ben](https://discuss.elastic.co/u/Ben)\ **Replies:** 11\ **Last updated:** [June 5, 2015, 2:18pm UTC](https://discuss.elastic.co/t/elastic-search-is-crashing-after-i-add-the-metrics-in-filters-and-format-in-output/1781 "2015-06-05T14:18:23Z")
if \[type\] == "apacheaccesslog" { grok { patterns\_dir =\> "./patterns" match =\> {"message" =\> "%{APACHE\_ACCESS\_LOG}" } break\_on\_match =\> false } grok { … --- ## [Elastic Cluster restart with one master node](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278)
**Author:** [@hiruni.insyncit.net](https://discuss.elastic.co/u/hiruni.insyncit.net)\ **Replies:** 9\ **Last updated:** [December 16, 2020, 6:47pm UTC](https://discuss.elastic.co/t/elastic-cluster-restart-with-one-master-node/258278 "2020-12-16T18:47:46Z")
I have 6 nodes elastic cluster. node1 - master node2 - master node3 - data node4 - data node5 - data node6 - master, data node1,2,3,4 and node5 are primary nodes node6 is DR node I want to all primary nodes and … --- ## [About the kibana error "Kibana server is not ready yetroot"](https://discuss.elastic.co/t/about-the-kibana-error-kibana-server-is-not-ready-yetroot/283231)
**Author:** [@vamei\_T](https://discuss.elastic.co/u/vamei_T)\ **Replies:** 13\ **Last updated:** [September 3, 2021, 6:17am UTC](https://discuss.elastic.co/t/about-the-kibana-error-kibana-server-is-not-ready-yetroot/283231 "2021-09-03T06:17:12Z")
my es and kibana version is 7.9.2 anyone hava method to solove is? --- ## [Some problem of logstash elapsed filter](https://discuss.elastic.co/t/some-problem-of-logstash-elapsed-filter/158111)
**Author:** [@zxc654951](https://discuss.elastic.co/u/zxc654951)\ **Replies:** 12\ **Last updated:** [November 30, 2018, 2:19am UTC](https://discuss.elastic.co/t/some-problem-of-logstash-elapsed-filter/158111 "2018-11-30T02:19:58Z")
I use elapsed filter to calculate events duration, but it has something wrong. The elapsed\_time got negative number in my case. config below: Can someone help me? Thanks. --- ## [LogStash Next Step](https://discuss.elastic.co/t/logstash-next-step/313927)
**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\ **Replies:** 11\ **Last updated:** [September 9, 2022, 4:01pm UTC](https://discuss.elastic.co/t/logstash-next-step/313927 "2022-09-09T16:01:17Z")
Team, I'm not sure what I'm missing or I have broken here. I have an Elastic Server, Kibana Server, and Logstash Server. Elastic and Kibana are working. I'v setup one cisco switch to send logs to logstash and setup logs… --- ## [Incompatibility while using co.elastic.apm:apm-opentracing:1.6.1 and elastic-apm-agent-1.6.1](https://discuss.elastic.co/t/incompatibility-while-using-co-elastic-apm1-6-1-and-elastic-apm-agent-1-6-1/182628)
**Author:** [@Barry\_Zhong](https://discuss.elastic.co/u/Barry_Zhong)\ **Replies:** 9\ **Last updated:** [June 1, 2019, 1:35pm UTC](https://discuss.elastic.co/t/incompatibility-while-using-co-elastic-apm1-6-1-and-elastic-apm-agent-1-6-1/182628 "2019-06-01T13:35:26Z")
Kibana version: 6.5.4 Elasticsearch version: 6.5.4 APM Server version: 6.5.4 APM Agent language and version: Java elastic-apm-agent-1.6.1 Browser version: Chrome Version 74.0.3729.169 (Official Build) (64-bit) O… --- ## [Mounted Searchable Snapshot Delay Reallocation/Recovery](https://discuss.elastic.co/t/mounted-searchable-snapshot-delay-reallocation-recovery/299757)
**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\ **Replies:** 13\ **Last updated:** [March 15, 2022, 7:07pm UTC](https://discuss.elastic.co/t/mounted-searchable-snapshot-delay-reallocation-recovery/299757 "2022-03-15T19:07:30Z")
Hi All, I'm using searchable snapshots on a cluster and was wondering if there is a way to delay whether a searchable snapshot gets reallocated for a period of time. Example problem, if I have a cold node which gets hi… --- ## [Nested boolean range query returning values outside of its range](https://discuss.elastic.co/t/nested-boolean-range-query-returning-values-outside-of-its-range/5870)
**Author:** [@doug\_livesey](https://discuss.elastic.co/u/doug_livesey)\ **Replies:** 10\ **Last updated:** [November 15, 2011, 5:33pm UTC](https://discuss.elastic.co/t/nested-boolean-range-query-returning-values-outside-of-its-range/5870 "2011-11-15T17:33:48Z")
Hi, I have a bunch of records in an index called item, with varying prices. I'm trying to construct a query that will allow me to retrieve items under a particular category\_id, and in one or more price ranges. The que… --- ## [Drop grok failures](https://discuss.elastic.co/t/drop-grok-failures/246476)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 9\ **Last updated:** [September 1, 2020, 9:46am UTC](https://discuss.elastic.co/t/drop-grok-failures/246476 "2020-09-01T09:46:42Z")
I use Logstash to filter data from big files like mysqld.log and mongos.log. It receives thousands of entries from these logs and I use grok to filter data and display it in Kibana. There are many entries that logstash … --- ## [Discover Tab filters data incorrectly](https://discuss.elastic.co/t/discover-tab-filters-data-incorrectly/130040)
**Author:** [@pavithrakc](https://discuss.elastic.co/u/pavithrakc)\ **Replies:** 14\ **Last updated:** [May 9, 2018, 1:17pm UTC](https://discuss.elastic.co/t/discover-tab-filters-data-incorrectly/130040 "2018-05-09T13:17:25Z")
Hello all, I am trying to filter data based on TRADENUMBER in my discover tab. It shows incorrect results. It retrieves data for other Tradenumber's too. I did a query on elasticsearch too. I get same results which is … --- ## [Index mapping via template file](https://discuss.elastic.co/t/index-mapping-via-template-file/10748)
**Author:** [@Ulli](https://discuss.elastic.co/u/Ulli)\ **Replies:** 14\ **Last updated:** [February 21, 2013, 4:26pm UTC](https://discuss.elastic.co/t/index-mapping-via-template-file/10748 "2013-02-21T16:26:40Z")
Hi, I'm trying to create an index mapping via template file as descirbed here: http://www.elasticsearch.org/guide/reference/api/admin-indices-templates.html So I created the following template file in config/temp… --- ## [Elasticsearch giving creating index, cause \[auto(bulk api)\]](https://discuss.elastic.co/t/elasticsearch-giving-creating-index-cause-auto-bulk-api/286560)
**Author:** [@Aashish\_Goyal](https://discuss.elastic.co/u/Aashish_Goyal)\ **Replies:** 9\ **Last updated:** [October 13, 2021, 2:57am UTC](https://discuss.elastic.co/t/elasticsearch-giving-creating-index-cause-auto-bulk-api/286560 "2021-10-13T02:57:05Z")
I am facing issues that old indices are getting created automatically, as I am using fluentd as a log shipper to Elasticsearch. I am facing this issue since 2 days, dig very much for this but no result till now. I delete… --- ## [Apm-agent not working, after updating war in tomcat](https://discuss.elastic.co/t/apm-agent-not-working-after-updating-war-in-tomcat/239750)
**Author:** [@bob96589](https://discuss.elastic.co/u/bob96589)\ **Replies:** 9\ **Last updated:** [August 7, 2020, 7:10am UTC](https://discuss.elastic.co/t/apm-agent-not-working-after-updating-war-in-tomcat/239750 "2020-08-07T07:10:46Z")
Kibana version: 7.4.1 Elasticsearch version: 7.4.1 APM Server version: 7.6.1 APM Agent language and version: java, apm-agent-attach-1.17.0.jar Browser version: Original install method (e.g. download page, yum, deb, … --- ## [Update Kibana for all visualisations to handle fields with null values](https://discuss.elastic.co/t/update-kibana-for-all-visualisations-to-handle-fields-with-null-values/243995)
**Author:** [@rbergmann](https://discuss.elastic.co/u/rbergmann)\ **Replies:** 10\ **Last updated:** [September 4, 2020, 8:39am UTC](https://discuss.elastic.co/t/update-kibana-for-all-visualisations-to-handle-fields-with-null-values/243995 "2020-09-04T08:39:03Z")
I understand that from v7+ there is an issue with the handling of null values in fields. This would check it. doc\[\\].size()==0 https://www.elastic.co/guide/en/elasticsearch/reference/current/breaking-changes-7.0… --- ## [Tags does not work with aggregate filter and elasticsearch output plugins](https://discuss.elastic.co/t/tags-does-not-work-with-aggregate-filter-and-elasticsearch-output-plugins/181489)
**Author:** [@sachi\_mr](https://discuss.elastic.co/u/sachi_mr)\ **Replies:** 10\ **Last updated:** [May 17, 2019, 9:25pm UTC](https://discuss.elastic.co/t/tags-does-not-work-with-aggregate-filter-and-elasticsearch-output-plugins/181489 "2019-05-17T21:25:29Z")
I am trying to get the tags to work with filter and output and so far no luck with it . The tags are required to import data from multiple tables conditionally. when the tags are applied to aggregate and output plugins t… --- ## [Unable to send lof files on disk to Elastic](https://discuss.elastic.co/t/unable-to-send-lof-files-on-disk-to-elastic/99501)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 12\ **Last updated:** [September 7, 2017, 2:23am UTC](https://discuss.elastic.co/t/unable-to-send-lof-files-on-disk-to-elastic/99501 "2017-09-07T02:23:38Z")
Hi, I’m having some problems with ingesting log files I have on disk to Elastic. For testing purposes I have 1 plain text file that I want to push to Elastic however nothing is happening. I don’t see anything in the log… --- ## [Filebeat multiple outputs](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 16\ **Last updated:** [March 7, 2025, 12:57pm UTC](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668 "2025-03-07T12:57:02Z")
Filebeat to send logs to Kafka, and if Kafka is down, failover to Elasticsearch. --- ## [Mapping Issues](https://discuss.elastic.co/t/mapping-issues/257461)
**Author:** [@muaz761](https://discuss.elastic.co/u/muaz761)\ **Replies:** 9\ **Last updated:** [December 3, 2020, 9:56am UTC](https://discuss.elastic.co/t/mapping-issues/257461 "2020-12-03T09:56:10Z")
Hey, I am facing a problem with elastic search mapping. currently, my elastic search version is 1.7.2. When I index my data in a cluster it workes perfectly. But when I want to map it for search purposes it gives me an … --- ## [IF with multiple OR](https://discuss.elastic.co/t/if-with-multiple-or/123928)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 9\ **Last updated:** [March 16, 2018, 11:45pm UTC](https://discuss.elastic.co/t/if-with-multiple-or/123928 "2018-03-16T23:45:15Z")
I have multiple fields that I need to check and, if they meet a shared value, it needs to be mutated. Is it possible to do something like this: if "pass" in \[field1\] or \[field2\] or \[field3\] { mutate { replace "%{… --- ## [Not transferring Multiline messages](https://discuss.elastic.co/t/not-transferring-multiline-messages/63212)
**Author:** [@gdkge](https://discuss.elastic.co/u/gdkge)\ **Replies:** 9\ **Last updated:** [October 19, 2016, 7:31pm UTC](https://discuss.elastic.co/t/not-transferring-multiline-messages/63212 "2016-10-19T19:31:38Z")
It seems my multiline filter in Filebeat is not working I was looking at the log file for the multiline messages and found that they were not being transferred to Elastisearch. My config file is filebeat: # Lis… --- ## [Unable to parse the mule logs in logstash](https://discuss.elastic.co/t/unable-to-parse-the-mule-logs-in-logstash/259265)
**Author:** [@vinodkumar](https://discuss.elastic.co/u/vinodkumar)\ **Replies:** 10\ **Last updated:** [December 22, 2020, 7:31am UTC](https://discuss.elastic.co/t/unable-to-parse-the-mule-logs-in-logstash/259265 "2020-12-22T07:31:57Z")
Hi Team, I am trying to parse the mule application logs logstash, tried different options but unable to achieve it. My sample logs: 2020-12-18 10:27:10,666 \[\[hl7v2-ORU-message-processor-api\].hl7v2-fhir-api-flowsFlow.s… --- ## [Why stdout output shows message =\> "?"](https://discuss.elastic.co/t/why-stdout-output-shows-message/214079)
**Author:** [@nino](https://discuss.elastic.co/u/nino)\ **Replies:** 10\ **Last updated:** [January 8, 2020, 2:35pm UTC](https://discuss.elastic.co/t/why-stdout-output-shows-message/214079 "2020-01-08T14:35:04Z")
Hello all, i am very new to logstash. I am just testing some filters to extract content from txt files without any structure. Why is this happening? On Windows enviroment logstash config file input { file { p… --- ## [How to force entries to be unique](https://discuss.elastic.co/t/how-to-force-entries-to-be-unique/141787)
**Author:** [@mivipe](https://discuss.elastic.co/u/mivipe)\ **Replies:** 9\ **Last updated:** [July 31, 2018, 9:34pm UTC](https://discuss.elastic.co/t/how-to-force-entries-to-be-unique/141787 "2018-07-31T21:34:02Z")
Dear experts, I have a simple Filebeat-Elasticsearch-Kibana configuration. In my logs every entry has a uniqueID field. Everything seems to work fine until, for some reason, all entries become duplicated. I've noticed … --- ## [Logstash output date, using timestamp of filebeat instead of server time](https://discuss.elastic.co/t/logstash-output-date-using-timestamp-of-filebeat-instead-of-server-time/360845)
**Author:** [@Mansoor\_Ur\_Rehman](https://discuss.elastic.co/u/Mansoor_Ur_Rehman)\ **Replies:** 13\ **Last updated:** [June 7, 2024, 3:51pm UTC](https://discuss.elastic.co/t/logstash-output-date-using-timestamp-of-filebeat-instead-of-server-time/360845 "2024-06-07T15:51:41Z")
I have setup a cluster filebeat -\> logstash -\> elasticsearch, i have a lifecycle policy that makes the indexes readonly after 7 days. i have out for logsatash index =\> "log-%{\[fields\]\[log\_name\]}-%{+YYYY.MM.dd}" … --- ## [Logstash loops](https://discuss.elastic.co/t/logstash-loops/158750)
**Author:** [@dinesh1](https://discuss.elastic.co/u/dinesh1)\ **Replies:** 13\ **Last updated:** [December 13, 2018, 6:21am UTC](https://discuss.elastic.co/t/logstash-loops/158750 "2018-12-13T06:21:29Z")
Hi, how to use loops for output in logstash. output { if \[my\_index\] == "order"{ elasticsearch { hosts =\> \[ "172.160.0.234" \] index =\> "order-%{+… --- ## [Use nodejs lambda layer, npm package, or both?](https://discuss.elastic.co/t/use-nodejs-lambda-layer-npm-package-or-both/308059)
**Author:** [@apoco](https://discuss.elastic.co/u/apoco)\ **Replies:** 10\ **Last updated:** [June 25, 2022, 1:18am UTC](https://discuss.elastic.co/t/use-nodejs-lambda-layer-npm-package-or-both/308059 "2022-06-25T01:18:08Z")
I've been seeing a lot of noisy logging from Elastic APM in the CloudWatch logs for my node.js Lambda, despite setting ELASTIC\_APM\_LOG\_LEVEL=error. Hoping that there are some bug fixes available, I was looking into updat… --- ## [Discover tab timing out with single \_msearch request](https://discuss.elastic.co/t/discover-tab-timing-out-with-single-msearch-request/110325)
**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\ **Replies:** 10\ **Last updated:** [December 19, 2017, 12:47pm UTC](https://discuss.elastic.co/t/discover-tab-timing-out-with-single-msearch-request/110325 "2017-12-19T12:47:25Z")
I'm trying to replace a Kibana 4 installation with Kibana 6. I have an index pattern called events-\* When I go to the Discover tab in my Kibana 4 installation, I can see multiple HTTP calls to the \_msearch API endpoint… --- ## [Non-Integer Data Types in my Data... How to make a Visualization?](https://discuss.elastic.co/t/non-integer-data-types-in-my-data-how-to-make-a-visualization/196375)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 11\ **Last updated:** [August 26, 2019, 2:20pm UTC](https://discuss.elastic.co/t/non-integer-data-types-in-my-data-how-to-make-a-visualization/196375 "2019-08-26T14:20:39Z")
Hi Kibana Gurus, I’m a hardcore network guy trying to learn Kibana from scratch, and I’m having a tough time. In my Elasticsearch, I have a repository of network data. When in Kibana, I can see the data and all the in… --- ## [Delete some data in index](https://discuss.elastic.co/t/delete-some-data-in-index/55701)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 11\ **Last updated:** [July 20, 2016, 4:29pm UTC](https://discuss.elastic.co/t/delete-some-data-in-index/55701 "2016-07-20T16:29:37Z")
Hello, With Curl, how is it possible to remove a portion of an index data : - 1st case : any recording \> on a date (use @timestamp column) - 2nd case : delete all records where the column test have the value "ok". Than… --- ## [Question about :Fs rivers ,synonyms and elasticsearch java api](https://discuss.elastic.co/t/question-about-fs-rivers-synonyms-and-elasticsearch-java-api/11167)
**Author:** [@yahia](https://discuss.elastic.co/u/yahia)\ **Replies:** 9\ **Last updated:** [March 15, 2013, 4:56pm UTC](https://discuss.elastic.co/t/question-about-fs-rivers-synonyms-and-elasticsearch-java-api/11167 "2013-03-15T16:56:13Z")
I use rivers (fs river and jdbc river) to index documents, I use java api for keyword search, I want to use synonyms in my research, for example when I type the word Application, documents that contain the word i… --- ## [Elaticsearch SQL CLI is not working](https://discuss.elastic.co/t/elaticsearch-sql-cli-is-not-working/340615)
**Author:** [@ashishshukla](https://discuss.elastic.co/u/ashishshukla)\ **Replies:** 10\ **Last updated:** [August 22, 2023, 11:41am UTC](https://discuss.elastic.co/t/elaticsearch-sql-cli-is-not-working/340615 "2023-08-22T11:41:02Z")
Hi Team, I am trying to execute some sql commands from SQL CLI in elasticsearch -8.8.2 but while executing below commands to open SQL CLI ./bin/elasticsearch-sql-cli I am getting below error ERROR: Cannot communicat… --- ## [Field level security](https://discuss.elastic.co/t/field-level-security/203573)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 10\ **Last updated:** [October 17, 2019, 4:58am UTC](https://discuss.elastic.co/t/field-level-security/203573 "2019-10-17T04:58:24Z")
I am trying to setup one role to have read permission on particular fields, but the testing is a bit confusing. In Role Management, I choose one indice with Read privilege, and then turn on the Grant Access to specific … --- ## [Failed execution of ESQL query and high cpu load](https://discuss.elastic.co/t/failed-execution-of-esql-query-and-high-cpu-load/346992)
**Author:** [@Stefan\_Sabolowitsch](https://discuss.elastic.co/u/Stefan_Sabolowitsch)\ **Replies:** 15\ **Last updated:** [November 14, 2023, 4:04pm UTC](https://discuss.elastic.co/t/failed-execution-of-esql-query-and-high-cpu-load/346992 "2023-11-14T16:04:54Z")
Hi There, I have a one node cluster here for testing. Hardware Spec: 16 Core // 148GB // 6 SAS 15K Raid0 Everything is running smoothly except for Elastic Security. As soon as i perform an action here, i get Kibana … --- ## [Disable exists query in Kibana 8.7](https://discuss.elastic.co/t/disable-exists-query-in-kibana-8-7/329753)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 14\ **Last updated:** [May 9, 2023, 12:45pm UTC](https://discuss.elastic.co/t/disable-exists-query-in-kibana-8-7/329753 "2023-05-09T12:45:20Z")
Hello, after the new controls came out and replaced the beta controls, i started to add them to every dashboard i'm managing. There was no exists query possible at all back then. Then a new update came out, introducing… [Previous page](https://discuss.elastic.co/top.md?page=182&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=184&per_page=50&period=all)