# Top

**URL:** https://discuss.elastic.co/top.md?page=193&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 194

---

## [How to create ruby class variables mapped to a given ID?](https://discuss.elastic.co/t/how-to-create-ruby-class-variables-mapped-to-a-given-id/234887)

<div class="topic-metadata">

**Author:** [@Nani\_20](https://discuss.elastic.co/u/Nani_20)\
**Replies:** 9\
**Last updated:** [June 4, 2020, 7:26pm UTC](https://discuss.elastic.co/t/how-to-create-ruby-class-variables-mapped-to-a-given-id/234887 "2020-06-04T19:26:52Z")

</div>

Hi, I'm using below Ruby filter to find the elapsed time between a start and end event for a given user. The code works fine with the events coming in sequence. But, I have event logs coming from multiple users. I have …

---

## [Java multi search result repetition](https://discuss.elastic.co/t/java-multi-search-result-repetition/80456)

<div class="topic-metadata">

**Author:** [@GavinSong123](https://discuss.elastic.co/u/GavinSong123)\
**Replies:** 9\
**Last updated:** [March 30, 2017, 6:36am UTC](https://discuss.elastic.co/t/java-multi-search-result-repetition/80456 "2017-03-30T06:36:16Z")

</div>

When I use java multi search api 5.2.2, there are many duplicate data in the response. Is there any other api which can remove these duplicate data?

---

## [If there is an error log in an application, how to send log files onto elastic search](https://discuss.elastic.co/t/if-there-is-an-error-log-in-an-application-how-to-send-log-files-onto-elastic-search/345906)

<div class="topic-metadata">

**Author:** [@jt2023](https://discuss.elastic.co/u/jt2023)\
**Replies:** 21\
**Last updated:** [November 2, 2023, 4:01pm UTC](https://discuss.elastic.co/t/if-there-is-an-error-log-in-an-application-how-to-send-log-files-onto-elastic-search/345906 "2023-11-02T16:01:42Z")

</div>

if there is an error log in an application, how to send log files onto Elasticsearch

---

## [Need the vCPU requirement for GCP](https://discuss.elastic.co/t/need-the-vcpu-requirement-for-gcp/259148)

<div class="topic-metadata">

**Author:** [@Siva\_Karan](https://discuss.elastic.co/u/Siva_Karan)\
**Replies:** 12\
**Last updated:** [December 31, 2020, 7:34am UTC](https://discuss.elastic.co/t/need-the-vcpu-requirement-for-gcp/259148 "2020-12-31T07:34:00Z")

</div>

Hi Team, we are plan to move our Elasticsearch environment to Google cloud platform, our cluster have 3 master nodes+ 5 data nodes having 423 indices,2100 shards How many vCPU need to allocate for each node, please…

---

## [Kibana visualizations is not being updated](https://discuss.elastic.co/t/kibana-visualizations-is-not-being-updated/232414)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 12\
**Last updated:** [May 19, 2020, 3:45pm UTC](https://discuss.elastic.co/t/kibana-visualizations-is-not-being-updated/232414 "2020-05-19T15:45:40Z")

</div>

hi team, please help me solve the issue. My custom plugin changes saved object of native visualization after user clicks. So issue is when user click on dashboard , then script edits saved object of native kibana visuali…

---

## [Trying to find saved dashboard](https://discuss.elastic.co/t/trying-to-find-saved-dashboard/265651)

<div class="topic-metadata">

**Author:** [@nicks1993](https://discuss.elastic.co/u/nicks1993)\
**Replies:** 10\
**Last updated:** [February 27, 2021, 1:35am UTC](https://discuss.elastic.co/t/trying-to-find-saved-dashboard/265651 "2021-02-27T01:35:11Z")

</div>

I was under the impression that saved objects would be saved in a .kibana/ directory or index found here /usr/share/elasticsearch/data/nodes/0/indices But that is not the case, my kibana.yml is found here, I run kibana…

---

## [Kibana freezing when creating TSVB](https://discuss.elastic.co/t/kibana-freezing-when-creating-tsvb/195745)

<div class="topic-metadata">

**Author:** [@pinguin](https://discuss.elastic.co/u/pinguin)\
**Replies:** 9\
**Last updated:** [August 24, 2019, 8:59am UTC](https://discuss.elastic.co/t/kibana-freezing-when-creating-tsvb/195745 "2019-08-24T08:59:26Z")

</div>

Hello, we have an elk cluster from 5 ES nodes, xpack security enabled basic license. whenever we try to create a TSVB (previously Visual Builder) visualization Kibana freezes and the java node process shows high CPU co…

---

## [PacketBeat not loading dashboards to kibana](https://discuss.elastic.co/t/packetbeat-not-loading-dashboards-to-kibana/127661)

<div class="topic-metadata">

**Author:** [@imparker](https://discuss.elastic.co/u/imparker)\
**Replies:** 9\
**Last updated:** [April 13, 2018, 8:51pm UTC](https://discuss.elastic.co/t/packetbeat-not-loading-dashboards-to-kibana/127661 "2018-04-13T20:51:04Z")

</div>

I have packetbeat running on a windows server that's sending logs to an ubuntu 16 server. I'm receiving logs without issue, but the dashboards from the beats install either not being loaded or I simply can't open them, …

---

## [Curator age filter not matcing all indices](https://discuss.elastic.co/t/curator-age-filter-not-matcing-all-indices/187083)

<div class="topic-metadata">

**Author:** [@victor.nilsson](https://discuss.elastic.co/u/victor.nilsson)\
**Replies:** 11\
**Last updated:** [June 24, 2019, 11:31am UTC](https://discuss.elastic.co/t/curator-age-filter-not-matcing-all-indices/187083 "2019-06-24T11:31:00Z")

</div>

Hi, We are creating daily indices and have a need of automatically closing them when they get older than 3 months. I have the following in my Curator action file: 14: action: close description: \>- Close i…

---

## [Which configuration schemes are avaliable in 8.8 version of elastic clusterization?](https://discuss.elastic.co/t/which-configuration-schemes-are-avaliable-in-8-8-version-of-elastic-clusterization/338137)

<div class="topic-metadata">

**Author:** [@hlcxpl](https://discuss.elastic.co/u/hlcxpl)\
**Replies:** 20\
**Last updated:** [July 18, 2023, 7:57pm UTC](https://discuss.elastic.co/t/which-configuration-schemes-are-avaliable-in-8-8-version-of-elastic-clusterization/338137 "2023-07-18T19:57:03Z")

</div>

which configuration schemes are avaliable in 8.8 version of slatic clusterization?

---

## [Issues Moving Elasticsearch and Kibana to new server (with all existing custom indexes and dashboards)](https://discuss.elastic.co/t/issues-moving-elasticsearch-and-kibana-to-new-server-with-all-existing-custom-indexes-and-dashboards/340189)

<div class="topic-metadata">

**Author:** [@Akjal](https://discuss.elastic.co/u/Akjal)\
**Replies:** 10\
**Last updated:** [August 7, 2023, 8:44pm UTC](https://discuss.elastic.co/t/issues-moving-elasticsearch-and-kibana-to-new-server-with-all-existing-custom-indexes-and-dashboards/340189 "2023-08-07T20:44:45Z")

</div>

Hello there, I am working on a large ec2 ubuntu instance where I manually downloaded and installed elasticsearch and kibana (I didn't use docker) . I connected my stack with external data sources and made a lot of custo…

---

## [How can I handle typos in synonyms?](https://discuss.elastic.co/t/how-can-i-handle-typos-in-synonyms/334141)

<div class="topic-metadata">

**Author:** [@gennadii](https://discuss.elastic.co/u/gennadii)\
**Replies:** 12\
**Last updated:** [May 24, 2023, 2:54pm UTC](https://discuss.elastic.co/t/how-can-i-handle-typos-in-synonyms/334141 "2023-05-24T14:54:38Z")

</div>

I have synonyms in synonyms.txt - "auto, vehicle =\> car". In index I have a document with string "car" and an analyzer to handle synonyms. When you use "auto", for example, it will also return you results for "car". B…

---

## [Error while trying to Install elasticsearch on Azure as self service](https://discuss.elastic.co/t/error-while-trying-to-install-elasticsearch-on-azure-as-self-service/258236)

<div class="topic-metadata">

**Author:** [@tal.paz](https://discuss.elastic.co/u/tal.paz)\
**Replies:** 13\
**Last updated:** [January 4, 2021, 10:21am UTC](https://discuss.elastic.co/t/error-while-trying-to-install-elasticsearch-on-azure-as-self-service/258236 "2021-01-04T10:21:50Z")

</div>

Hi, I am trying to install the elasticserach as self service in Azure portal. Using the following link: https://azuremarketplace.microsoft.com/en-us/marketplace/apps/elastic.elasticsearch?tab=Overview After configurin…

---

## [Is there a way to speed up the average inference time?](https://discuss.elastic.co/t/is-there-a-way-to-speed-up-the-average-inference-time/359418)

<div class="topic-metadata">

**Author:** [@shwanlee](https://discuss.elastic.co/u/shwanlee)\
**Replies:** 12\
**Last updated:** [May 20, 2024, 11:27am UTC](https://discuss.elastic.co/t/is-there-a-way-to-speed-up-the-average-inference-time/359418 "2024-05-20T11:27:54Z")

</div>

Is there a way to speed up the average inference time in ML, as it is currently slow? I’m currently running version 8.13.2. The ML node currently has 32 vCPUs, and I've allocated 32 threads to the model. My goal is to ac…

---

## [Logstash split fields into new fields(field1, field2, field3, field4, field5)](https://discuss.elastic.co/t/logstash-split-fields-into-new-fields-field1-field2-field3-field4-field5/120840)

<div class="topic-metadata">

**Author:** [@moketemokoena](https://discuss.elastic.co/u/moketemokoena)\
**Replies:** 14\
**Last updated:** [February 22, 2018, 9:05am UTC](https://discuss.elastic.co/t/logstash-split-fields-into-new-fields-field1-field2-field3-field4-field5/120840 "2018-02-22T09:05:18Z")

</div>

Hi I am importing data from mssql database into Elasticsearch. I am trying to split field "my\_message" that is structured as follows: "{1:Mokete}{2:Mokoena}{3:{888:Logstash}}{4:\\n:20:Testing\\n:LG:Logstash\\n:ES:Elastic…

---

## [Not enough nodes to allocate all shard replicas](https://discuss.elastic.co/t/not-enough-nodes-to-allocate-all-shard-replicas/323360)

<div class="topic-metadata">

**Author:** [@michielswaanen](https://discuss.elastic.co/u/michielswaanen)\
**Replies:** 11\
**Last updated:** [January 26, 2023, 11:40am UTC](https://discuss.elastic.co/t/not-enough-nodes-to-allocate-all-shard-replicas/323360 "2023-01-26T11:40:18Z")

</div>

Hey all, My Elasticsearch deployment is showing the following health issue: I tried to fix the issue by following the suggested guide. I scaled our deployment up by increasing the availability zones (from 1 to 2), l…

---

## [Logstash configuration not working on read csv file](https://discuss.elastic.co/t/logstash-configuration-not-working-on-read-csv-file/306515)

<div class="topic-metadata">

**Author:** [@selflabs](https://discuss.elastic.co/u/selflabs)\
**Replies:** 11\
**Last updated:** [June 15, 2022, 12:24pm UTC](https://discuss.elastic.co/t/logstash-configuration-not-working-on-read-csv-file/306515 "2022-06-15T12:24:49Z")

</div>

Hello Everyone, Logstash not reading csv file, i have tried all possible case but unable to pick data from the csv file. my ultimate goal is read data from REST API and mapping with CSV file. Please suggest, Configuratio…

---

## [Basic logstash grok pattern - need help](https://discuss.elastic.co/t/basic-logstash-grok-pattern-need-help/106140)

<div class="topic-metadata">

**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\
**Replies:** 11\
**Last updated:** [November 3, 2017, 1:22pm UTC](https://discuss.elastic.co/t/basic-logstash-grok-pattern-need-help/106140 "2017-11-03T13:22:17Z")

</div>

Hi Guys, I have file this and I am trying to build a pattern for the same. Somehow this is not working. Can some one please help /var/log/badhost.txt = 125.118.243.164 216.245.208.133 199.59.242.150 104.145.232.3 …

---

## [Elasticsearch topologie](https://discuss.elastic.co/t/elasticsearch-topologie/130845)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 12\
**Last updated:** [May 8, 2018, 11:46am UTC](https://discuss.elastic.co/t/elasticsearch-topologie/130845 "2018-05-08T11:46:57Z")

</div>

Bonjour, J'ai réalisé une topologie avec un noeud Elasticsearch qui sert de load balancer et 3 autres noeuds qui servent de noeuds master et data. J'ai un index par jour de 5 shards et 1 replica pour environ 100GB de do…

---

## [Mapping question](https://discuss.elastic.co/t/mapping-question/314528)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 10\
**Last updated:** [September 16, 2022, 9:35pm UTC](https://discuss.elastic.co/t/mapping-question/314528 "2022-09-16T21:35:30Z")

</div>

I have old index hundreds of them which has following in pattern. I have another index created on different test cluster. which had this place dynamically. What I want is to add this host.name.keyword in previous…

---

## [Monthly query performance on too many shards](https://discuss.elastic.co/t/monthly-query-performance-on-too-many-shards/296429)

<div class="topic-metadata">

**Author:** [@alissan](https://discuss.elastic.co/u/alissan)\
**Replies:** 10\
**Last updated:** [February 10, 2022, 8:48am UTC](https://discuss.elastic.co/t/monthly-query-performance-on-too-many-shards/296429 "2022-02-10T08:48:03Z")

</div>

Hello, I have an Elasticsearch cluster on 5 nodes. I use Elasticsearch for log management and 3 indexes are created every hour (1 shard, 0 replica) Every log line have 20-70 fields, like IP, port, hostname, user agent…

---

## [Why the number of closed index affects write performance?](https://discuss.elastic.co/t/why-the-number-of-closed-index-affects-write-performance/282219)

<div class="topic-metadata">

**Author:** [@wulixuan](https://discuss.elastic.co/u/wulixuan)\
**Replies:** 10\
**Last updated:** [August 24, 2021, 4:21am UTC](https://discuss.elastic.co/t/why-the-number-of-closed-index-affects-write-performance/282219 "2021-08-24T04:21:48Z")

</div>

Hello: I am now testing the write performance of ES(v7.13.4), the number of shards written is constant, I added many empty indexes(shard number is 3). Then I find that the write performance is degraded even if the index…

---

## [LogStash::Json::ParserError](https://discuss.elastic.co/t/logstash-parsererror/250809)

<div class="topic-metadata">

**Author:** [@Raiderume](https://discuss.elastic.co/u/Raiderume)\
**Replies:** 9\
**Last updated:** [October 20, 2020, 9:08am UTC](https://discuss.elastic.co/t/logstash-parsererror/250809 "2020-10-20T09:08:59Z")

</div>

Hello, I have problems with parsing json logs to logstash, there are tons of errors at log: Error parsing json {:source=\>"message", :raw=\>"\*\*\*\*", :exception=\>#\<LogStash::Json::ParserError: Invalid UTF-8 start byte 0xa1 …

---

## [Node Management APIs](https://discuss.elastic.co/t/node-management-apis/100262)

<div class="topic-metadata">

**Author:** [@rnataraja](https://discuss.elastic.co/u/rnataraja)\
**Replies:** 9\
**Last updated:** [September 15, 2017, 2:27am UTC](https://discuss.elastic.co/t/node-management-apis/100262 "2017-09-15T02:27:58Z")

</div>

Are there APIs to add and remove Nodes from Elastic Search cluster? Or modifying and restarting elasticsearch is the only way?

---

## [Custom ILM policies for APM DataStreams](https://discuss.elastic.co/t/custom-ilm-policies-for-apm-datastreams/355568)

<div class="topic-metadata">

**Author:** [@rpanand24](https://discuss.elastic.co/u/rpanand24)\
**Replies:** 14\
**Last updated:** [March 25, 2024, 1:28am UTC](https://discuss.elastic.co/t/custom-ilm-policies-for-apm-datastreams/355568 "2024-03-25T01:28:04Z")

</div>

Hi, By using the ingest pipeline I am rerouting the data to different APM data streams. ref \[OpenTelemetry\] data\_stream.namepace and data\_stream.dataset aren't being respected · Issue #10191 · elastic/apm-server · GitHu…

---

## [Default Kibana User and uberAgent](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417)

<div class="topic-metadata">

**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\
**Replies:** 10\
**Last updated:** [September 13, 2018, 3:59pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417 "2018-09-13T15:59:32Z")

</div>

Running 6.3.2 Just installed uberAgent on all Elasticsearch nodes xpack is OFF (xpack.security.enabled: false) so we are currently using the default Kibana user role Just trying to double check our understanding of a …

---

## [Arabic hunspell doesn't work](https://discuss.elastic.co/t/arabic-hunspell-doesnt-work/69749)

<div class="topic-metadata">

**Author:** [@Netanel\_Malka](https://discuss.elastic.co/u/Netanel_Malka)\
**Replies:** 10\
**Last updated:** [January 15, 2017, 4:34pm UTC](https://discuss.elastic.co/t/arabic-hunspell-doesnt-work/69749 "2017-01-15T16:34:32Z")

</div>

I tried to load the arabic hunspell from the elastic hunspell project . I followed the official elastic doc and I succeeded with the others dictionaries, except Arabic. I got this exception: { "error": { "root\_ca…

---

## [Configured S3 repository on multiple clusters with write-access, data corrupted](https://discuss.elastic.co/t/configured-s3-repository-on-multiple-clusters-with-write-access-data-corrupted/355602)

<div class="topic-metadata">

**Author:** [@Tariq\_Yahya](https://discuss.elastic.co/u/Tariq_Yahya)\
**Replies:** 9\
**Last updated:** [March 19, 2024, 6:34pm UTC](https://discuss.elastic.co/t/configured-s3-repository-on-multiple-clusters-with-write-access-data-corrupted/355602 "2024-03-19T18:34:05Z")

</div>

I added the same S3 repository used by one of my cluster to another cluster and I forgot to give it read-only access. It states in the documentation that this action could cause data corruption : "If you register the sa…

---

## [J2KImageReader not loaded](https://discuss.elastic.co/t/j2kimagereader-not-loaded/238334)

<div class="topic-metadata">

**Author:** [@SKellyRJC](https://discuss.elastic.co/u/SKellyRJC)\
**Replies:** 9\
**Last updated:** [June 24, 2020, 8:14pm UTC](https://discuss.elastic.co/t/j2kimagereader-not-loaded/238334 "2020-06-24T20:14:16Z")

</div>

Hi, I have placed the jai-imageio-core-1.3.0.jar and the jai-imageio-jpeg2000-1.3.0.jar into the LIB directory for FSCrawler, however it does not get rid of the warning saying J2KImageReader not loaded? Why would this …

---

## [Storage footprint not the same as cummulative index size, why is that,](https://discuss.elastic.co/t/storage-footprint-not-the-same-as-cummulative-index-size-why-is-that/158872)

<div class="topic-metadata">

**Author:** [@jacobot](https://discuss.elastic.co/u/jacobot)\
**Replies:** 13\
**Last updated:** [December 11, 2018, 5:43pm UTC](https://discuss.elastic.co/t/storage-footprint-not-the-same-as-cummulative-index-size-why-is-that/158872 "2018-12-11T17:43:46Z")

</div>

Hi, i am issueing this query GET /\_cat/allocation?v&h=disk.indices,disk.avail,disk.used,disk.total,disk.percent response disk.indices disk.avail disk.used disk.total disk.percent 10.2gb 15.2gb 34.6gb …

---

## [When i use "systemctl start elasticsearch.service", don't work](https://discuss.elastic.co/t/when-i-use-systemctl-start-elasticsearch-service-dont-work/355530)

<div class="topic-metadata">

**Author:** [@nperez51](https://discuss.elastic.co/u/nperez51)\
**Replies:** 9\
**Last updated:** [March 17, 2024, 1:27am UTC](https://discuss.elastic.co/t/when-i-use-systemctl-start-elasticsearch-service-dont-work/355530 "2024-03-17T01:27:16Z")

</div>

Hello, i can't start elasticsearch in a ubuntu 22.04 vm in azure, there is the output of comands, thank you. systemctl status elasticsearch.service hive@TheHiveVM:~$ systemctl status elasticsearch.service × elasticsear…

---

## [Keystore for secrets in elastic-agent.yml](https://discuss.elastic.co/t/keystore-for-secrets-in-elastic-agent-yml/349525)

<div class="topic-metadata">

**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\
**Replies:** 9\
**Last updated:** [December 18, 2023, 10:59pm UTC](https://discuss.elastic.co/t/keystore-for-secrets-in-elastic-agent-yml/349525 "2023-12-18T22:59:58Z")

</div>

I have some secret values in my ./elastic-agent.yml file. I was hoping to use a keystore to help manage those secrets. I tried this command ./elastic-agent keystore add outputs.default.password, but it gave the error E…

---

## [Python Client - unable to remove "read\_only" block](https://discuss.elastic.co/t/python-client-unable-to-remove-read-only-block/288032)

<div class="topic-metadata">

**Author:** [@philhagen](https://discuss.elastic.co/u/philhagen)\
**Replies:** 9\
**Last updated:** [November 5, 2021, 8:29pm UTC](https://discuss.elastic.co/t/python-client-unable-to-remove-read-only-block/288032 "2021-11-05T20:29:18Z")

</div>

When using the official Python client, I can't seem to find a way to change an index to normal "read-write" status once it's been marked "read\_only". This function works fine to go from read-write to read\_only, but I wa…

---

## [Help with configuring APM elastic agent](https://discuss.elastic.co/t/help-with-configuring-apm-elastic-agent/284984)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 9\
**Last updated:** [September 23, 2021, 12:39pm UTC](https://discuss.elastic.co/t/help-with-configuring-apm-elastic-agent/284984 "2021-09-23T12:39:51Z")

</div>

hello, I'm setting up APM for my single node ELK stack and unfamiliar with JAVA parameters . The apm-server has been set up correctly . The instructions to set up were being followed from Kibana's APM tutorial . what …

---

## [Elastic cloud entreprise - saml](https://discuss.elastic.co/t/elastic-cloud-entreprise-saml/222705)

<div class="topic-metadata">

**Author:** [@raphperrin](https://discuss.elastic.co/u/raphperrin)\
**Replies:** 10\
**Last updated:** [March 11, 2020, 2:28pm UTC](https://discuss.elastic.co/t/elastic-cloud-entreprise-saml/222705 "2020-03-11T14:28:28Z")

</div>

Hi I am trying to configure the SAML authentication to secure one of my elastic cloud cluster. I added the configuration "user\_bundles": \[ { "name": "saml-metadata", "url": "https://servername/saml-metadata.zip", …

---

## [Connection sqlserver to elasticsearch](https://discuss.elastic.co/t/connection-sqlserver-to-elasticsearch/307039)

<div class="topic-metadata">

**Author:** [@Khadija\_BOUDINAR1](https://discuss.elastic.co/u/Khadija_BOUDINAR1)\
**Replies:** 11\
**Last updated:** [June 15, 2022, 2:53pm UTC](https://discuss.elastic.co/t/connection-sqlserver-to-elasticsearch/307039 "2022-06-15T14:53:45Z")

</div>

hi All, to connect sqlserver to Elasticsearch i have configure the file :sql.conf as following : input { jdbc { # SqlServer jdbc connection string to our database, employeedb # "jdbc:sqlserver://…

---

## [JSON response parsing at attribute level](https://discuss.elastic.co/t/json-response-parsing-at-attribute-level/243552)

<div class="topic-metadata">

**Author:** [@Puneeth\_S\_B\_Gowda1](https://discuss.elastic.co/u/Puneeth_S_B_Gowda1)\
**Replies:** 9\
**Last updated:** [August 7, 2020, 12:09pm UTC](https://discuss.elastic.co/t/json-response-parsing-at-attribute-level/243552 "2020-08-07T12:09:27Z")

</div>

Hi, my logstash configuration for moving JSON response isinput { beats { port =\> 5044 } } filter {mutate { split =\> { "message" =\> "@$@" }} mutate { add\_field =\> { "response" =\> "%{\[message\]\[7\]}" "channel\_typ" =\> "%…

---

## [What is the security realm recommended in ES 5.6](https://discuss.elastic.co/t/what-is-the-security-realm-recommended-in-es-5-6/117841)

<div class="topic-metadata">

**Author:** [@Javier\_Parrondo](https://discuss.elastic.co/u/Javier_Parrondo)\
**Replies:** 9\
**Last updated:** [April 9, 2018, 8:30am UTC](https://discuss.elastic.co/t/what-is-the-security-realm-recommended-in-es-5-6/117841 "2018-04-09T08:30:09Z")

</div>

Hello! I would like to know what is the recommended realm for the elasticsearch security with XPACK in Elasticsearch 5.6. I have known the file realm but i have no clear if migrate it towards the API User Management. I…

---

## [Do not use lot of types per index?](https://discuss.elastic.co/t/do-not-use-lot-of-types-per-index/62121)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 9\
**Last updated:** [October 4, 2016, 3:34pm UTC](https://discuss.elastic.co/t/do-not-use-lot-of-types-per-index/62121 "2016-10-04T15:34:55Z")

</div>

In this presentation (https://www.elastic.co/elasticon/2015/sf/scaling-elasticsearch-for-production-at-verizon) they said to not use a lot of types per index. I have now 41 types in filebeat-xx index, is this bad? I …

---

## [Filebeat resent all events of a logfile - every day](https://discuss.elastic.co/t/filebeat-resent-all-events-of-a-logfile-every-day/242478)

<div class="topic-metadata">

**Author:** [@scheffler](https://discuss.elastic.co/u/scheffler)\
**Replies:** 9\
**Last updated:** [July 30, 2020, 8:57am UTC](https://discuss.elastic.co/t/filebeat-resent-all-events-of-a-logfile-every-day/242478 "2020-07-30T08:57:43Z")

</div>

Hi The logfile has always the same name, but a housekeeping job copy and zip the file every night, with the side effect that the file gets a new inode. I guess that the inode is harvesters primary key in the registry an…

---

## [Recommendation System for retail](https://discuss.elastic.co/t/recommendation-system-for-retail/137990)

<div class="topic-metadata">

**Author:** [@Daniel\_Zuluaga](https://discuss.elastic.co/u/Daniel_Zuluaga)\
**Replies:** 9\
**Last updated:** [July 19, 2018, 8:16am UTC](https://discuss.elastic.co/t/recommendation-system-for-retail/137990 "2018-07-19T08:16:21Z")

</div>

Hello everyone, I want to ask for help for a recommendation system that I'm trying to put together. I have data for millions of users that buy in thousands of retail shops (Food, clothes, services). What I need is, give…

---

## [How to write elasticsearch plugin for 2.2 version](https://discuss.elastic.co/t/how-to-write-elasticsearch-plugin-for-2-2-version/55419)

<div class="topic-metadata">

**Author:** [@gangakrishh](https://discuss.elastic.co/u/gangakrishh)\
**Replies:** 9\
**Last updated:** [July 14, 2016, 10:09am UTC](https://discuss.elastic.co/t/how-to-write-elasticsearch-plugin-for-2-2-version/55419 "2016-07-14T10:09:42Z")

</div>

i just want to write simple plugin for elasticsearch !! following seems not valid one https://www.elastic.co/blog/found-writing-a-plugin please help on this?

---

## [Sum with unique object](https://discuss.elastic.co/t/sum-with-unique-object/225425)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 15\
**Last updated:** [April 4, 2020, 5:09pm UTC](https://discuss.elastic.co/t/sum-with-unique-object/225425 "2020-04-04T17:09:49Z")

</div>

For example if i have csv file with fields; Car, parking,date of entry V1, p1, 12-03-2020 12:30 V1, p1, 12-03-2020 11:30 V2, p2,12-03-2020 10:30 V2, p2,12-03-2020 10:45 How can i calculate number of time V1 enter…

---

## [Table in dashboards is not showing multiline logs](https://discuss.elastic.co/t/table-in-dashboards-is-not-showing-multiline-logs/328355)

<div class="topic-metadata">

**Author:** [@tulio.farias](https://discuss.elastic.co/u/tulio.farias)\
**Replies:** 11\
**Last updated:** [April 10, 2023, 10:06pm UTC](https://discuss.elastic.co/t/table-in-dashboards-is-not-showing-multiline-logs/328355 "2023-04-10T22:06:18Z")

</div>

In Dashboad, I have created a table to show only ERROR logs' messages, but it is not showing logs with multiple lines: If I go to Discover, I see there is a multiline log (using the same filters): Could someone h…

---

## [Error parsing csv](https://discuss.elastic.co/t/error-parsing-csv/314099)

<div class="topic-metadata">

**Author:** [@manuel.urbano](https://discuss.elastic.co/u/manuel.urbano)\
**Replies:** 11\
**Last updated:** [September 10, 2022, 4:06pm UTC](https://discuss.elastic.co/t/error-parsing-csv/314099 "2022-09-10T16:06:35Z")

</div>

Hi, I'm reading a CSV file and sending it to Elasticsearch, everything works fine but some rows are throwing an exception: Error parsing csv {:field=\>"message", :source=\>"6123464a-420f-4838-8ecb-fcce87f16297;20878376219…

---

## [AARCH64 APM Java Client Support](https://discuss.elastic.co/t/aarch64-apm-java-client-support/251714)

<div class="topic-metadata">

**Author:** [@likewhatevs](https://discuss.elastic.co/u/likewhatevs)\
**Replies:** 11\
**Last updated:** [October 22, 2020, 12:39pm UTC](https://discuss.elastic.co/t/aarch64-apm-java-client-support/251714 "2020-10-22T12:39:17Z")

</div>

Kibana version: latest on ECS Elasticsearch version: latest on ECS APM Server version: latest on ECS APM Agent language and version: 1.18.1 Steps to reproduce: try and run a jar with APM client on a aarch64 box (su…

---

## [Tokenizer analysis is not working properly in jdbc river](https://discuss.elastic.co/t/tokenizer-analysis-is-not-working-properly-in-jdbc-river/13952)

<div class="topic-metadata">

**Author:** [@samaswin](https://discuss.elastic.co/u/samaswin)\
**Replies:** 17\
**Last updated:** [October 15, 2013, 9:43am UTC](https://discuss.elastic.co/t/tokenizer-analysis-is-not-working-properly-in-jdbc-river/13952 "2013-10-15T09:43:28Z")

</div>

I used the following query, { "type": "jdbc", "jdbc": { "strategy": "simple", "driver": "com.mysql.jdbc.Driver", "url": "jdbc:mysql://192.168.43.204:3306/BacheCompany", "user": "turbodbuser",…

---

## [Unable to export Kibana dashboard using API](https://discuss.elastic.co/t/unable-to-export-kibana-dashboard-using-api/313941)

<div class="topic-metadata">

**Author:** [@rt\_888](https://discuss.elastic.co/u/rt_888)\
**Replies:** 13\
**Last updated:** [September 9, 2022, 3:26am UTC](https://discuss.elastic.co/t/unable-to-export-kibana-dashboard-using-api/313941 "2022-09-09T03:26:49Z")

</div>

// curl -X POST “http://localhost:5601/api/saved\_objects/\_export” -H ‘kbn-xsrf: true’ -H ‘Content-Type: application/json’ -d’ { “type”: “index-pattern” } ‘ I use this as to export my dashboard but i get the error "Incor…

---

## [Custom elastic query with Enhanced Table](https://discuss.elastic.co/t/custom-elastic-query-with-enhanced-table/305384)

<div class="topic-metadata">

**Author:** [@nomi-gee](https://discuss.elastic.co/u/nomi-gee)\
**Replies:** 12\
**Last updated:** [May 23, 2022, 12:19pm UTC](https://discuss.elastic.co/t/custom-elastic-query-with-enhanced-table/305384 "2022-05-23T12:19:46Z")

</div>

Continuing the discussion from Enhanced Table: Kibana Datatable has some limitations. I am using aggregations with a custom elastic query for generating results and sorting on the basis of buckets can Enhanced table giv…

---

## [Some questions about Uptime ML Integration](https://discuss.elastic.co/t/some-questions-about-uptime-ml-integration/249622)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 12\
**Last updated:** [September 25, 2020, 8:33am UTC](https://discuss.elastic.co/t/some-questions-about-uptime-ml-integration/249622 "2020-09-25T08:33:06Z")

</div>

Hello, Really like the Uptime ML integration, but: Requiring us to enable ML for each uptime monitor separately is kind of a lot of manual work and clicking / verifying when you have 100's of monitors. Is there a …

[Previous page](https://discuss.elastic.co/top.md?page=192&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=194&per_page=50&period=all)
