# Top

**URL:** https://discuss.elastic.co/top.md?page=216&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 217

---

## [Logstash and pipelines](https://discuss.elastic.co/t/logstash-and-pipelines/374287)

<div class="topic-metadata">

**Author:** [@Trent-alex](https://discuss.elastic.co/u/Trent-alex)\
**Replies:** 15\
**Last updated:** [March 21, 2025, 2:13pm UTC](https://discuss.elastic.co/t/logstash-and-pipelines/374287 "2025-03-21T14:13:31Z")

</div>

Hello, I am attempting my first pipeline from a csv to logstash. I am running elasticsearch and kibana on a single alma linux machine. I downloaded elasticsearch, logstash and kibana from the 8.17 webpage and after extr…

---

## [ElasticSearch-8-5-2 ingest-pipeline issue](https://discuss.elastic.co/t/elasticsearch-8-5-2-ingest-pipeline-issue/324114)

<div class="topic-metadata">

**Author:** [@Pierre\_LANCASTRE](https://discuss.elastic.co/u/Pierre_LANCASTRE)\
**Replies:** 10\
**Last updated:** [January 27, 2023, 5:32pm UTC](https://discuss.elastic.co/t/elasticsearch-8-5-2-ingest-pipeline-issue/324114 "2023-01-27T17:32:26Z")

</div>

Hi all, I recently posted a problem on ingest-pipelines working in testing mode but finally not working. I have the same issue and i m still stuck while I ve tried many tricks (remove special characters from syslog stri…

---

## [Neither query nor filter](https://discuss.elastic.co/t/neither-query-nor-filter/11354)

<div class="topic-metadata">

**Author:** [@Enrique\_Medina\_Monte](https://discuss.elastic.co/u/Enrique_Medina_Monte)\
**Replies:** 11\
**Last updated:** [March 29, 2013, 12:59pm UTC](https://discuss.elastic.co/t/neither-query-nor-filter/11354 "2013-03-29T12:59:24Z")

</div>

Hi list, Let's put I have a simple 'index' with a simple 'type' mapping animals like this: { "name": "dog", "type": "mammal" } { "name": "dolphin", "type": "mammal" } { "name": "tiger", …

---

## [Application is down when run a few mintues](https://discuss.elastic.co/t/application-is-down-when-run-a-few-mintues/253087)

<div class="topic-metadata">

**Author:** [@hyhong](https://discuss.elastic.co/u/hyhong)\
**Replies:** 14\
**Last updated:** [October 29, 2020, 8:25am UTC](https://discuss.elastic.co/t/application-is-down-when-run-a-few-mintues/253087 "2020-10-29T08:25:41Z")

</div>

Java Agent Version:1.18.1 JDK Version:1.7.79 APM Server Version:7.4.0 JVM args: export JAVA\_OPTS="$JAVA\_OPTS -javaagent:elastic-apm-agent-1.18.1.jar" export JAVA\_OPTS="$JAVA\_OPTS -Delastic.apm.service\_name=jboss-serv…

---

## [Need Full text elasticsearch](https://discuss.elastic.co/t/need-full-text-elasticsearch/20827)

<div class="topic-metadata">

**Author:** [@Vijayakumari\_B\_N](https://discuss.elastic.co/u/Vijayakumari_B_N)\
**Replies:** 14\
**Last updated:** [December 9, 2014, 3:37pm UTC](https://discuss.elastic.co/t/need-full-text-elasticsearch/20827 "2014-12-09T15:37:47Z")

</div>

Hi, I am looking for full text elastic search where in it searches the text in particular column of a database (Hibernate Persistence layer) and does indexing and caching of data. Please give me some inputs on how…

---

## [Performance/Slowness issues with ES](https://discuss.elastic.co/t/performance-slowness-issues-with-es/21444)

<div class="topic-metadata">

**Author:** [@Bhumir\_Jhaveri](https://discuss.elastic.co/u/Bhumir_Jhaveri)\
**Replies:** 9\
**Last updated:** [January 2, 2015, 6:30pm UTC](https://discuss.elastic.co/t/performance-slowness-issues-with-es/21444 "2015-01-02T18:30:08Z")

</div>

Hey guys, I am facing some performance issues with ES(1.2.2)/Kibana(3.0.2) - Here is the situation - I am currently running everything on single node - which I know is biggest problem n bottleneck. VM on which I …

---

## [Logstash Kafka input : conditonnal consuming?](https://discuss.elastic.co/t/logstash-kafka-input-conditonnal-consuming/268664)

<div class="topic-metadata">

**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\
**Replies:** 12\
**Last updated:** [March 31, 2021, 3:27pm UTC](https://discuss.elastic.co/t/logstash-kafka-input-conditonnal-consuming/268664 "2021-03-31T15:27:08Z")

</div>

Hello ! I have multiple firewall log sources. All these sources push the logs in a dedicated topic named "firewall". In logstash, I would like to have a different pipeline for each of these sources to apply different p…

---

## [2024: The Year in Review](https://discuss.elastic.co/t/2024-the-year-in-review/372677)

<div class="topic-metadata">

**Author:** [@system](https://discuss.elastic.co/u/system)\
**Replies:** 15\
**Last updated:** [January 1, 2025, 9:37am UTC](https://discuss.elastic.co/t/2024-the-year-in-review/372677 "2025-01-01T09:37:04Z")

</div>

2024's Top Users Most Time Reading User Hours Read @leandrojmp 164 @Christian\_Dahlqvist 147 @stephenb 142 @Rios 77 @Badger 68 @dadoonet 42 @TimV 36 @DavidTurner 30 @carly.richmond 25 …

---

## [ElasticSearch with \> 40 nodes, missing shards and indexing troubles](https://discuss.elastic.co/t/elasticsearch-with-40-nodes-missing-shards-and-indexing-troubles/10022)

<div class="topic-metadata">

**Author:** [@Jerome\_Gagnon](https://discuss.elastic.co/u/Jerome_Gagnon)\
**Replies:** 10\
**Last updated:** [December 12, 2012, 10:42am UTC](https://discuss.elastic.co/t/elasticsearch-with-40-nodes-missing-shards-and-indexing-troubles/10022 "2012-12-12T10:42:35Z")

</div>

Hi everyone, I'm currently on a project that require using more than 40 nodes.. (migration from Sphinx cluster to ES) and I'm actually having hard time managing everything. I'm able to do the bulk indexation of ev…

---

## [Iptablex trojan experiences?](https://discuss.elastic.co/t/iptablex-trojan-experiences/17894)

<div class="topic-metadata">

**Author:** [@ElasticSearch\_Users\_](https://discuss.elastic.co/u/ElasticSearch_Users_)\
**Replies:** 12\
**Last updated:** [June 4, 2014, 7:57pm UTC](https://discuss.elastic.co/t/iptablex-trojan-experiences/17894 "2014-06-04T19:57:26Z")

</div>

Hi, I had a couple of exploits in the last 2 weeks in my CentOS 5.7 with a trojan iptablex. Apparently it does a DDoS and, after, opens connections somewhere else. There are reported cases of connections open to some…

---

## [Limited score precision for a big score hierarchy](https://discuss.elastic.co/t/limited-score-precision-for-a-big-score-hierarchy/340759)

<div class="topic-metadata">

**Author:** [@Grisha](https://discuss.elastic.co/u/Grisha)\
**Replies:** 14\
**Last updated:** [September 7, 2023, 3:02pm UTC](https://discuss.elastic.co/t/limited-score-precision-for-a-big-score-hierarchy/340759 "2023-09-07T15:02:20Z")

</div>

Hi, I'm trying to implement a kind of score hierarchy using different boosts for different fields (there are multiple fields and type of search (full match, fuzzy, etc.)). Simplified example of boosts: field\_1 fuzzy b…

---

## [Nodes can't find each other in a single server setup](https://discuss.elastic.co/t/nodes-cant-find-each-other-in-a-single-server-setup/347601)

<div class="topic-metadata">

**Author:** [@said1296](https://discuss.elastic.co/u/said1296)\
**Replies:** 10\
**Last updated:** [November 22, 2023, 6:45am UTC](https://discuss.elastic.co/t/nodes-cant-find-each-other-in-a-single-server-setup/347601 "2023-11-22T06:45:23Z")

</div>

Hi, I've been trying all day to run a 2-node cluster on a single server for testing purposes using Docker. But I keep getting: "log.level": "WARN", "message":"master not discovered yet: have discovered \[{node-2}{k8wUeU…

---

## [Indices based on field value](https://discuss.elastic.co/t/indices-based-on-field-value/244891)

<div class="topic-metadata">

**Author:** [@jijo.john](https://discuss.elastic.co/u/jijo.john)\
**Replies:** 10\
**Last updated:** [August 18, 2020, 1:36pm UTC](https://discuss.elastic.co/t/indices-based-on-field-value/244891 "2020-08-18T13:36:38Z")

</div>

Hi There, I am doing a POC on elasticsearch, currently all the cisco asa logs are captured using filebeat cisco module. We would like to create a separate indice when a specific condition is met. Basically we need creat…

---

## [Generate Plugin not working on 6.4.2](https://discuss.elastic.co/t/generate-plugin-not-working-on-6-4-2/161147)

<div class="topic-metadata">

**Author:** [@mandritac](https://discuss.elastic.co/u/mandritac)\
**Replies:** 9\
**Last updated:** [December 20, 2018, 11:19am UTC](https://discuss.elastic.co/t/generate-plugin-not-working-on-6-4-2/161147 "2018-12-20T11:19:14Z")

</div>

Hi, I am trying to create a custom plugin on Red Hat Linux Enterprise 7 using plugin generator script packaged with kibana 6.4.2 but it fails with following errors - error Couldn't find package "debug@^2.6.6" required …

---

## [Details on snapshot and restore in ES 1.0](https://discuss.elastic.co/t/details-on-snapshot-and-restore-in-es-1-0/16168)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 15\
**Last updated:** [March 6, 2014, 5:44pm UTC](https://discuss.elastic.co/t/details-on-snapshot-and-restore-in-es-1-0/16168 "2014-03-06T17:44:25Z")

</div>

Hi I am try to know about the new feature snapshot and restore in the Elasticsearch 1.0. Can anyone provide the details or provide a link that gives a detailed explanation on this, other that the official blog. I w…

---

## [Twitter River : stopping after an arror](https://discuss.elastic.co/t/twitter-river-stopping-after-an-arror/7099)

<div class="topic-metadata">

**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Replies:** 9\
**Last updated:** [November 9, 2012, 7:53am UTC](https://discuss.elastic.co/t/twitter-river-stopping-after-an-arror/7099 "2012-11-09T07:53:37Z")

</div>

Hi there, I started a twitter river on a ec2 instance but it failed after 1 hour and half. It didn't restart automatically even if river displayed "stream failure, restarting stream..." in logs. …

---

## [Metricbeat not getting diskio](https://discuss.elastic.co/t/metricbeat-not-getting-diskio/251606)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 12\
**Last updated:** [November 2, 2020, 6:24pm UTC](https://discuss.elastic.co/t/metricbeat-not-getting-diskio/251606 "2020-11-02T18:24:20Z")

</div>

where can I see diskio for process and network traffic use by process? I did load default template, running 7.9.1 here is config file - module: system period: 1m metricsets: - cpu - load - memory -…

---

## [Querying indexed data in different computer Elasticsearch](https://discuss.elastic.co/t/querying-indexed-data-in-different-computer-elasticsearch/23677)

<div class="topic-metadata">

**Author:** [@Kartik\_Singhal](https://discuss.elastic.co/u/Kartik_Singhal)\
**Replies:** 16\
**Last updated:** [May 25, 2015, 6:59am UTC](https://discuss.elastic.co/t/querying-indexed-data-in-different-computer-elasticsearch/23677 "2015-05-25T06:59:12Z")

</div>

Hi In elastic search java api, suppose I am building the indexed data using this client \*Node node = nodeBuilder().clusterName(".\* \*/resources/firstcommit").node();Client client = node.clie…

---

## [Logstash pipeline DLQ issue](https://discuss.elastic.co/t/logstash-pipeline-dlq-issue/309920)

<div class="topic-metadata">

**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\
**Replies:** 9\
**Last updated:** [July 18, 2022, 7:31pm UTC](https://discuss.elastic.co/t/logstash-pipeline-dlq-issue/309920 "2022-07-18T19:31:37Z")

</div>

Hi, I am upgrading my logstash from 7.x.x to 8.2.0. Problem is, logstash is not able to run the pipeline, showing the following error. \[2022-07-18T11:08:52,606\]\[ERROR\]\[org.logstash.common.io.DeadLetterQueueWriter\]\[main…

---

## [How to do basic authentication when your Trial license with premium features is active](https://discuss.elastic.co/t/how-to-do-basic-authentication-when-your-trial-license-with-premium-features-is-active/168535)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 10\
**Last updated:** [February 19, 2019, 1:31pm UTC](https://discuss.elastic.co/t/how-to-do-basic-authentication-when-your-trial-license-with-premium-features-is-active/168535 "2019-02-19T13:31:53Z")

</div>

how to do basic authentication when your Trial license with premium features is active. I want to keep username,password for each user who want to enter into kibana or elastic search . How can we do it .How can i setup…

---

## [Pie with all source files](https://discuss.elastic.co/t/pie-with-all-source-files/120664)

<div class="topic-metadata">

**Author:** [@flochon](https://discuss.elastic.co/u/flochon)\
**Replies:** 10\
**Last updated:** [February 20, 2018, 3:54pm UTC](https://discuss.elastic.co/t/pie-with-all-source-files/120664 "2018-02-20T15:54:03Z")

</div>

How to create a pie with all source files where my logs come ?

---

## [Embedding elasticsearch in an auto-scaling application](https://discuss.elastic.co/t/embedding-elasticsearch-in-an-auto-scaling-application/6182)

<div class="topic-metadata">

**Author:** [@Jeremy\_Jongsma](https://discuss.elastic.co/u/Jeremy_Jongsma)\
**Replies:** 10\
**Last updated:** [January 6, 2012, 9:08pm UTC](https://discuss.elastic.co/t/embedding-elasticsearch-in-an-auto-scaling-application/6182 "2012-01-06T21:08:07Z")

</div>

I'm looking to switch to ElasticSearch for the search engine inside one of our Java server applications (a real-time news aggregator), but I haven't been able to determine whether it is suitable for embedding as part …

---

## [Check performance of cluster](https://discuss.elastic.co/t/check-performance-of-cluster/332996)

<div class="topic-metadata">

**Author:** [@NNI](https://discuss.elastic.co/u/NNI)\
**Replies:** 11\
**Last updated:** [May 10, 2023, 9:56am UTC](https://discuss.elastic.co/t/check-performance-of-cluster/332996 "2023-05-10T09:56:45Z")

</div>

Hi We're facing some performance issue cluster build on 9 nodes 3x ingest 3x master 3x data (on NVMe disks) index\_with\_data 2 r STARTED 10590253 elk\_es\_data-1 index\_with\_data 2 p …

---

## [Circuit\_breaking\_exception](https://discuss.elastic.co/t/circuit-breaking-exception/247637)

<div class="topic-metadata">

**Author:** [@Sajeeva\_Lakmal](https://discuss.elastic.co/u/Sajeeva_Lakmal)\
**Replies:** 11\
**Last updated:** [September 15, 2020, 3:58am UTC](https://discuss.elastic.co/t/circuit-breaking-exception/247637 "2020-09-15T03:58:00Z")

</div>

We recently upgraded our elastic cloud deployment from 6.8.5 to 7.9 After the upgrade we are seeing the following error time to time. { "error" : { "root\_cause" : \[ { "type" : "circuit\_breaking\_exce…

---

## [Unable to parse nested JSON using logstash](https://discuss.elastic.co/t/unable-to-parse-nested-json-using-logstash/202906)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 9\
**Last updated:** [October 10, 2019, 8:09pm UTC](https://discuss.elastic.co/t/unable-to-parse-nested-json-using-logstash/202906 "2019-10-10T20:09:00Z")

</div>

Nested JSON response - { "application": "FinClient", "occurredOn": "2019-10-07T10:38:39", "host": "U8HPP213", "finEvents": \[ { "@xmlns": "http://jabber.org/protocol/pubsub", "data": { "apiErrors": { "apiError":…

---

## [The id query will trigger refresh, but I still can't search with query qsl?](https://discuss.elastic.co/t/the-id-query-will-trigger-refresh-but-i-still-cant-search-with-query-qsl/195829)

<div class="topic-metadata">

**Author:** [@lance](https://discuss.elastic.co/u/lance)\
**Replies:** 11\
**Last updated:** [August 20, 2019, 8:56am UTC](https://discuss.elastic.co/t/the-id-query-will-trigger-refresh-but-i-still-cant-search-with-query-qsl/195829 "2019-08-20T08:56:35Z")

</div>

official documentation : the get API will issue a refresh call in-place to make the document visible. id query doc First I call the id query, then call query QSL, the official documentation says it will call refresh, b…

---

## [Analyzers comparison](https://discuss.elastic.co/t/analyzers-comparison/6568)

<div class="topic-metadata">

**Author:** [@chimingc](https://discuss.elastic.co/u/chimingc)\
**Replies:** 11\
**Last updated:** [December 6, 2012, 1:05pm UTC](https://discuss.elastic.co/t/analyzers-comparison/6568 "2012-12-06T13:05:44Z")

</div>

Hi, I am trying to compare different analyzers to see which ones we should use. But my simple comparison shows me no difference between standard and keyword analyzers. I wonder what I am missing. This is the …

---

## [Elasticsearch is displaying correct result only after a space](https://discuss.elastic.co/t/elasticsearch-is-displaying-correct-result-only-after-a-space/283009)

<div class="topic-metadata">

**Author:** [@Drsaud](https://discuss.elastic.co/u/Drsaud)\
**Replies:** 9\
**Last updated:** [September 5, 2021, 10:43am UTC](https://discuss.elastic.co/t/elasticsearch-is-displaying-correct-result-only-after-a-space/283009 "2021-09-05T10:43:22Z")

</div>

I build react app the has search bar using elasticsearch, but the problem is when I search in my search bar earthier I have to write the word not complete or I write as complete word but after I click space. for example…

---

## [Kibana ML anomalies detection and regression](https://discuss.elastic.co/t/kibana-ml-anomalies-detection-and-regression/241894)

<div class="topic-metadata">

**Author:** [@ahadi](https://discuss.elastic.co/u/ahadi)\
**Replies:** 12\
**Last updated:** [August 4, 2020, 12:15pm UTC](https://discuss.elastic.co/t/kibana-ml-anomalies-detection-and-regression/241894 "2020-08-04T12:15:59Z")

</div>

Hi, I have trend data and i want to identify customers whose turnover climb or fall . Witch Kibana ML model can i do to identify them? Anomalies detection or regression ? I also want to know how to interpret the res…

---

## [Display a ratio of data](https://discuss.elastic.co/t/display-a-ratio-of-data/265449)

<div class="topic-metadata">

**Author:** [@jazzdorf](https://discuss.elastic.co/u/jazzdorf)\
**Replies:** 9\
**Last updated:** [February 26, 2021, 1:01pm UTC](https://discuss.elastic.co/t/display-a-ratio-of-data/265449 "2021-02-26T13:01:03Z")

</div>

Hi guys, I have some difficulties with Kibana. My data contains IDs and links: { "\_index": "debug\_sample\_data", "\_type": "\_doc", "\_id": "rPeEz3cBYzpkMbM6YKCc", "\_version": 1, …

---

## [Building Graph Relationships Between Documents](https://discuss.elastic.co/t/building-graph-relationships-between-documents/148452)

<div class="topic-metadata">

**Author:** [@Andrew\_Stroz](https://discuss.elastic.co/u/Andrew_Stroz)\
**Replies:** 9\
**Last updated:** [September 13, 2018, 4:33pm UTC](https://discuss.elastic.co/t/building-graph-relationships-between-documents/148452 "2018-09-13T16:33:48Z")

</div>

I have a index that contains a field with the text contents of .docx, .pptx and .pdf documents. I have another index that holds documents that have a field with a string of characters representing a piece of equipment. …

---

## [Multi-master cluster](https://discuss.elastic.co/t/multi-master-cluster/8569)

<div class="topic-metadata">

**Author:** [@Adam\_Estrada](https://discuss.elastic.co/u/Adam_Estrada)\
**Replies:** 9\
**Last updated:** [August 1, 2012, 6:21pm UTC](https://discuss.elastic.co/t/multi-master-cluster/8569 "2012-08-01T18:21:14Z")

</div>

I am wondering what the default behavior (see title) in my cluster is supposed to be. I am collecting tweets in a cluster called Twitter. Right now there are 2 nodes, server1 and server2. If one of these nodes fails…

---

## [Getting error while connecting logstash to elastic](https://discuss.elastic.co/t/getting-error-while-connecting-logstash-to-elastic/363830)

<div class="topic-metadata">

**Author:** [@Amol\_Nagotkar](https://discuss.elastic.co/u/Amol_Nagotkar)\
**Replies:** 17\
**Last updated:** [July 31, 2024, 4:01am UTC](https://discuss.elastic.co/t/getting-error-while-connecting-logstash-to-elastic/363830 "2024-07-31T04:01:41Z")

</div>

Hi all, elastic -\> sudo docker run -d --name es01 --net elastic -p 9200:9200 -e "discovery.type=single-node" -it -m 2GB docker.elastic.co/elasticsearch/elasticsearch:8.14.3 kibana-\> sudo docker run -d --name kib01 --net…

---

## [Query\_string can't find token that \_analyze shows is generated, but term query can](https://discuss.elastic.co/t/query-string-cant-find-token-that--analyze-shows-is-generated-but-term-query-can/19394)

<div class="topic-metadata">

**Author:** [@ben1](https://discuss.elastic.co/u/ben1)\
**Replies:** 11\
**Last updated:** [August 21, 2014, 5:58pm UTC](https://discuss.elastic.co/t/query-string-cant-find-token-that--analyze-shows-is-generated-but-term-query-can/19394 "2014-08-21T17:58:48Z")

</div>

I have attached a short bash script to recreate the situation. I have a fairly simple custom analyzer that I want to break on camel case so lowercase is last. Using the \_analyze endpoint I can see the token I am se…

---

## [Could not pack/validate JSON response](https://discuss.elastic.co/t/could-not-pack-validate-json-response/356938)

<div class="topic-metadata">

**Author:** [@rock1013](https://discuss.elastic.co/u/rock1013)\
**Replies:** 9\
**Last updated:** [April 10, 2024, 9:18am UTC](https://discuss.elastic.co/t/could-not-pack-validate-json-response/356938 "2024-04-10T09:18:20Z")

</div>

Elasticsearch Version Version: 8.13.1, Build: deb/9287f29bba5e270bd51d557b8daccb7d118ba247/2024-03-29T10:05:29.787251984Z, JVM: 22 Installed Plugins none Java Version bundled OS Version Linux server102 5.15.0-101-gene…

---

## [Knapsack export limit](https://discuss.elastic.co/t/knapsack-export-limit/10808)

<div class="topic-metadata">

**Author:** [@krispyjala](https://discuss.elastic.co/u/krispyjala)\
**Replies:** 9\
**Last updated:** [March 22, 2013, 5:28pm UTC](https://discuss.elastic.co/t/knapsack-export-limit/10808 "2013-03-22T17:28:14Z")

</div>

Anybody played around with the knapsack export plugin? What I'm encountering is some indices will export fully ok (100k+ docs), but for one that was over 31.5gb with 600k+ docs, it seems to have capped my export at …

---

## [I got this error in using logstash](https://discuss.elastic.co/t/i-got-this-error-in-using-logstash/348665)

<div class="topic-metadata">

**Author:** [@musk\_elon](https://discuss.elastic.co/u/musk_elon)\
**Replies:** 13\
**Last updated:** [December 7, 2023, 5:11pm UTC](https://discuss.elastic.co/t/i-got-this-error-in-using-logstash/348665 "2023-12-07T17:11:08Z")

</div>

Hello. I installed the logstash and set the configuration. # Sample Logstash configuration for creating a simple # Beats -\> Logstash -\> Elasticsearch pipeline. input { file{ type =\>"csv" path =\> "Z:/5/upwork/…

---

## [Grok Filter For my Log file](https://discuss.elastic.co/t/grok-filter-for-my-log-file/170276)

<div class="topic-metadata">

**Author:** [@sana1](https://discuss.elastic.co/u/sana1)\
**Replies:** 14\
**Last updated:** [March 4, 2019, 4:34am UTC](https://discuss.elastic.co/t/grok-filter-for-my-log-file/170276 "2019-03-04T04:34:27Z")

</div>

\[\] \[1:1000039:0\] updatelocation - Alert \[\] \[Priority: 0\] 02/27-14:29:46.412090 0A:01:01:01:01:01 -\> 0A:02:02:02:02:02 type:0x800 len:0xC6 10.1.1.1 -\> 10.2.2.2 SCTP TTL:255 TOS:0x0 ID:4660 IpLen:20 DgmLen:184 This is …

---

## [Need help for RUM configuration for Angular 1.13](https://discuss.elastic.co/t/need-help-for-rum-configuration-for-angular-1-13/324535)

<div class="topic-metadata">

**Author:** [@Dixit](https://discuss.elastic.co/u/Dixit)\
**Replies:** 11\
**Last updated:** [February 10, 2023, 12:09am UTC](https://discuss.elastic.co/t/need-help-for-rum-configuration-for-angular-1-13/324535 "2023-02-10T00:09:33Z")

</div>

Hi @basepi & @lwintergerst , Need help on how to configure RUM for AngularJS 1.13 ? Thanks, Dixit

---

## [Issue with a conditional statement](https://discuss.elastic.co/t/issue-with-a-conditional-statement/296327)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 11\
**Last updated:** [February 4, 2022, 6:19pm UTC](https://discuss.elastic.co/t/issue-with-a-conditional-statement/296327 "2022-02-04T18:19:35Z")

</div>

Hello, I'm debugging my configuration and I'm having an issue comparing two fields, both are date fields and one eventually will become a multi-valued field. All my data is static and once a record is updated, a time st…

---

## ["Index IF NO DUPLICATE" Operation](https://discuss.elastic.co/t/index-if-no-duplicate-operation/11186)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\
**Replies:** 11\
**Last updated:** [March 18, 2013, 7:33pm UTC](https://discuss.elastic.co/t/index-if-no-duplicate-operation/11186 "2013-03-18T19:33:14Z")

</div>

Hi , I want to index a feed but then i need to make sure there is no duplicates for it. Is this available as a atomic operation at ES side. My application pumps feeds in parallel fashion to ES. So adding somethin…

---

## ['Shard Allocation' dashboard in Marvel 1.2 showing SearchParseExceptions](https://discuss.elastic.co/t/shard-allocation-dashboard-in-marvel-1-2-showing-searchparseexceptions/17969)

<div class="topic-metadata">

**Author:** [@philsttr](https://discuss.elastic.co/u/philsttr)\
**Replies:** 12\
**Last updated:** [December 2, 2014, 10:46am UTC](https://discuss.elastic.co/t/shard-allocation-dashboard-in-marvel-1-2-showing-searchparseexceptions/17969 "2014-12-02T10:46:49Z")

</div>

I'm running elasticsearch 1.2.1, and just upgraded to Marvel 1.2. When I go to the new "Shard Allocation" dashboard in Marvel, I see the following error: SearchPhaseExecutionException\[Failed to execute phase \[que…

---

## [ElasticSearch S3 Snapshot Retrieval Failing in DR- EC2](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-retrieval-failing-in-dr-ec2/122801)

<div class="topic-metadata">

**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\
**Replies:** 10\
**Last updated:** [March 7, 2018, 9:59pm UTC](https://discuss.elastic.co/t/elasticsearch-s3-snapshot-retrieval-failing-in-dr-ec2/122801 "2018-03-07T21:59:06Z")

</div>

Gurus, I've successfully managed to setup Snapshots PUT and GET when using s3-repositories in us-east-1 bucket. However, when I try to pull the snapshot or even repositories via GET when my ec2 instances are in us-west-…

---

## [Aggregation bug? Or user error?](https://discuss.elastic.co/t/aggregation-bug-or-user-error/17257)

<div class="topic-metadata">

**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\
**Replies:** 10\
**Last updated:** [June 6, 2014, 6:55pm UTC](https://discuss.elastic.co/t/aggregation-bug-or-user-error/17257 "2014-06-06T18:55:17Z")

</div>

I am seeing some very odd aggregation results - where the sum of the sub-aggregations is more than the parent bucket. Results: "CSSX" : { "doc\_count" : \*24\*, "intentDate" : { "buckets" : …

---

## [Edit kibana login UI Title](https://discuss.elastic.co/t/edit-kibana-login-ui-title/335962)

<div class="topic-metadata">

**Author:** [@mr\_ph](https://discuss.elastic.co/u/mr_ph)\
**Replies:** 9\
**Last updated:** [June 20, 2023, 8:36am UTC](https://discuss.elastic.co/t/edit-kibana-login-ui-title/335962 "2023-06-20T08:36:23Z")

</div>

how can i edit the title seeing in the loging page of kibana, Where i can find the respective file. how can i add other logos and title texts in it. Change the welcome to elastic into any other title, for that wher…

---

## [ES error while creating index on Solaris](https://discuss.elastic.co/t/es-error-while-creating-index-on-solaris/20321)

<div class="topic-metadata">

**Author:** [@xsreality](https://discuss.elastic.co/u/xsreality)\
**Replies:** 9\
**Last updated:** [October 20, 2014, 8:14pm UTC](https://discuss.elastic.co/t/es-error-while-creating-index-on-solaris/20321 "2014-10-20T20:14:39Z")

</div>

Hello, I am using ES 1.3.4 with Logstash 1.4.2 on Solaris sparc. Everyday when Logstash tries to create a new index ES stops responding (process is active) with below error: \[2014-10-19 12:23:02,264\]\[DEBUG\]\[act…

---

## [CSV and XLS import to Elastic Cloud](https://discuss.elastic.co/t/csv-and-xls-import-to-elastic-cloud/339120)

<div class="topic-metadata">

**Author:** [@Vog93](https://discuss.elastic.co/u/Vog93)\
**Replies:** 14\
**Last updated:** [August 1, 2023, 9:36pm UTC](https://discuss.elastic.co/t/csv-and-xls-import-to-elastic-cloud/339120 "2023-08-01T21:36:08Z")

</div>

Hello, I would like to automatically integrate some CSV and XLS files into Elastic Cloud. How could I do this?

---

## [Sharding Issue](https://discuss.elastic.co/t/sharding-issue/153593)

<div class="topic-metadata">

**Author:** [@abhinav.dwivedi](https://discuss.elastic.co/u/abhinav.dwivedi)\
**Replies:** 12\
**Last updated:** [October 23, 2018, 3:07pm UTC](https://discuss.elastic.co/t/sharding-issue/153593 "2018-10-23T15:07:11Z")

</div>

Team We are using the Dockerize ELK cluster and we are using logtrail pugin also in kibana.So we have 2 dashborad one is for discover and one is for logtrail But our shard limit is set as 1250 . So not we are facing is…

---

## [Esrally will hang if I use elasticsearch 8.0.0-alpha1](https://discuss.elastic.co/t/esrally-will-hang-if-i-use-elasticsearch-8-0-0-alpha1/288082)

<div class="topic-metadata">

**Author:** [@shankang](https://discuss.elastic.co/u/shankang)\
**Replies:** 11\
**Last updated:** [November 9, 2021, 3:39am UTC](https://discuss.elastic.co/t/esrally-will-hang-if-i-use-elasticsearch-8-0-0-alpha1/288082 "2021-11-09T03:39:10Z")

</div>

Hi, My OS is Ubuntu 21.04. esrally will hang when I tried the following command. esrally --pipeline=from-distribution --distribution-version=8.0.0-alpha1 --track=geonames --challenge=append-no-conflicts --include-tasks…

---

## [Question about elasticsearch index and logstash ingestion](https://discuss.elastic.co/t/question-about-elasticsearch-index-and-logstash-ingestion/335057)

<div class="topic-metadata">

**Author:** [@Hanni](https://discuss.elastic.co/u/Hanni)\
**Replies:** 20\
**Last updated:** [June 14, 2023, 9:10am UTC](https://discuss.elastic.co/t/question-about-elasticsearch-index-and-logstash-ingestion/335057 "2023-06-14T09:10:27Z")

</div>

Hello everyone I'd like to ask you 2 questions. I receive approximately 270 csv per month, 9 of them per day. Each csv is between 1kB and 3MG in size. All these csv are sent to the same index on elasticsearch with log…

[Previous page](https://discuss.elastic.co/top.md?page=215&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=217&per_page=50&period=all)
