# Top

**URL:** https://discuss.elastic.co/top.md?page=231&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 232

---

## [Elasticsearch always uses the default mapping](https://discuss.elastic.co/t/elasticsearch-always-uses-the-default-mapping/18970)

<div class="topic-metadata">

**Author:** [@Amirah](https://discuss.elastic.co/u/Amirah)\
**Replies:** 10\
**Last updated:** [July 30, 2014, 6:26pm UTC](https://discuss.elastic.co/t/elasticsearch-always-uses-the-default-mapping/18970 "2014-07-30T18:26:24Z")

</div>

Hello, Am trying to create an index using "CSV River Plugin for ElasticSearch" , my csv file contains \*String\*, \*long\* and\* date\* values. My problem is : - ElasticSearch always consider\* long\* values as \*str…

---

## [Send only one field in pipeline to pipeline communication](https://discuss.elastic.co/t/send-only-one-field-in-pipeline-to-pipeline-communication/308002)

<div class="topic-metadata">

**Author:** [@Laetitia\_RICHARD](https://discuss.elastic.co/u/Laetitia_RICHARD)\
**Replies:** 9\
**Last updated:** [July 5, 2022, 2:17pm UTC](https://discuss.elastic.co/t/send-only-one-field-in-pipeline-to-pipeline-communication/308002 "2022-07-05T14:17:08Z")

</div>

Hello, I'd like my 1st pipeline to send the event to an Elasticsearch output and only a field's event to the input of a 2nd pipeline. Is it possible to send only one field in a pipeline and not a complete event?

---

## [Same query, different CPU util when run with Java API versus REST](https://discuss.elastic.co/t/same-query-different-cpu-util-when-run-with-java-api-versus-rest/21238)

<div class="topic-metadata">

**Author:** [@Jeff\_Potts](https://discuss.elastic.co/u/Jeff_Potts)\
**Replies:** 9\
**Last updated:** [December 17, 2014, 12:27am UTC](https://discuss.elastic.co/t/same-query-different-cpu-util-when-run-with-java-api-versus-rest/21238 "2014-12-17T00:27:01Z")

</div>

I have two JMeter tests. Let's call them "Straight Elasticsearch Test" and "Service Test". Both tests use the same settings in terms of number of threads (users), number of times the URL is invoked (loops), and rando…

---

## [Extending the API (executing distributed actions)](https://discuss.elastic.co/t/extending-the-api-executing-distributed-actions/9981)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 9\
**Last updated:** [December 13, 2012, 7:57pm UTC](https://discuss.elastic.co/t/extending-the-api-executing-distributed-actions/9981 "2012-12-13T19:57:29Z")

</div>

I just built a plugin that provides a synonym token filter that loads terms from a database and not from a file. One additional feature that I would like to implement is the ability to reload the terms on demand. I …

---

## [Kibana visualisation-](https://discuss.elastic.co/t/kibana-visualisation/333176)

<div class="topic-metadata">

**Author:** [@Neelam\_Zanvar](https://discuss.elastic.co/u/Neelam_Zanvar)\
**Replies:** 12\
**Last updated:** [May 31, 2023, 9:15am UTC](https://discuss.elastic.co/t/kibana-visualisation/333176 "2023-05-31T09:15:18Z")

</div>

Hi I am creating a Kibana visualization. Using table in kibana lens I want to fetch the time a token is first created in the log file. I am able to view the last value of it. but how can i see the timestamp when the tok…

---

## [Indeces is being created on the master machines](https://discuss.elastic.co/t/indeces-is-being-created-on-the-master-machines/221206)

<div class="topic-metadata">

**Author:** [@Burga](https://discuss.elastic.co/u/Burga)\
**Replies:** 12\
**Last updated:** [February 27, 2020, 3:26pm UTC](https://discuss.elastic.co/t/indeces-is-being-created-on-the-master-machines/221206 "2020-02-27T15:26:15Z")

</div>

Hi , I'm new in Elastic world , we have a few master nodes , data nodes , logstash nodes and 2 ing nodes , 4 days a go indexes began to be written to the master nodes also , need your advice , what could be the reas…

---

## [JSON Filter works but filter refresh doesn't fix cache mapping error](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708)

<div class="topic-metadata">

**Author:** [@Jim\_Thunder](https://discuss.elastic.co/u/Jim_Thunder)\
**Replies:** 10\
**Last updated:** [May 16, 2022, 3:44pm UTC](https://discuss.elastic.co/t/json-filter-works-but-filter-refresh-doesnt-fix-cache-mapping-error/304708 "2022-05-16T15:44:48Z")

</div>

Hello, I have JSON messages coming to logstash and they are getting parsed properly, however, I get the error message "no cache mapping, refresh index field list". I have done this multiple times but the error does not g…

---

## [Not able to form 2 node cluster with SSL,version - 7.2.0](https://discuss.elastic.co/t/not-able-to-form-2-node-cluster-with-ssl-version-7-2-0/197122)

<div class="topic-metadata">

**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\
**Replies:** 9\
**Last updated:** [August 29, 2019, 12:23pm UTC](https://discuss.elastic.co/t/not-able-to-form-2-node-cluster-with-ssl-version-7-2-0/197122 "2019-08-29T12:23:30Z")

</div>

Hi All, Im trying to create 2 node cluster with SSL but 2 nodes are running individually fine but not able form the cluster. Below are the details : Node-1 Config : http.port: 9200 node.name: node-1 cluster.name: de…

---

## [Access Elasticsearch Data as a Remote Oracle Database](https://discuss.elastic.co/t/access-elasticsearch-data-as-a-remote-oracle-database/349350)

<div class="topic-metadata">

**Author:** [@onr1onr1](https://discuss.elastic.co/u/onr1onr1)\
**Replies:** 11\
**Last updated:** [December 14, 2023, 2:38pm UTC](https://discuss.elastic.co/t/access-elasticsearch-data-as-a-remote-oracle-database/349350 "2023-12-14T14:38:03Z")

</div>

We want to set up a dblink from the Oracle database to eleastic search and pull information, but we get the following error in the dblink. We could not find a source on this site, so we did it by following the steps in …

---

## [Static look up disappearing after logout and login](https://discuss.elastic.co/t/static-look-up-disappearing-after-logout-and-login/224195)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 11\
**Last updated:** [March 26, 2020, 12:48am UTC](https://discuss.elastic.co/t/static-look-up-disappearing-after-logout-and-login/224195 "2020-03-26T00:48:07Z")

</div>

Kibana version : 7.6 Elasticsearch version : 7.6 APM Server version : 7.3.2 APM Agent language and version : java 1.9.0 Fresh install or upgraded from other version? fresh install Is there anything special in your s…

---

## [New to logstash need help with config](https://discuss.elastic.co/t/new-to-logstash-need-help-with-config/197987)

<div class="topic-metadata">

**Author:** [@rajdeep101](https://discuss.elastic.co/u/rajdeep101)\
**Replies:** 11\
**Last updated:** [September 5, 2019, 2:03pm UTC](https://discuss.elastic.co/t/new-to-logstash-need-help-with-config/197987 "2019-09-05T14:03:33Z")

</div>

Hi all, I basically want to visualize response time and api url in kibana with users. i have written a simple config file that should only parse the required log line but i am getting error at just before match in \_grok…

---

## [Can plugin be written for TCP transport?](https://discuss.elastic.co/t/can-plugin-be-written-for-tcp-transport/19257)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 10\
**Last updated:** [August 15, 2014, 3:35pm UTC](https://discuss.elastic.co/t/can-plugin-be-written-for-tcp-transport/19257 "2014-08-15T15:35:43Z")

</div>

Hi I have been looking at the various transport plugins. Correct me if I am wrong but those are for the http rest interface... Can plugins be written for the node transport? Bassically this leads to securing ES. My ES…

---

## [Help with scripted filed to compute difference between timestamps](https://discuss.elastic.co/t/help-with-scripted-filed-to-compute-difference-between-timestamps/281835)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 9\
**Last updated:** [September 16, 2021, 7:20am UTC](https://discuss.elastic.co/t/help-with-scripted-filed-to-compute-difference-between-timestamps/281835 "2021-09-16T07:20:40Z")

</div>

Hello, I'm trying to create a Scripted Field to compute the delay between timestamps: the time when logstashs sees the event - the actual timestamp from the log/event. And so far I'm having a terrible time getting to und…

---

## [Kibana status become RED](https://discuss.elastic.co/t/kibana-status-become-red/254743)

<div class="topic-metadata">

**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\
**Replies:** 9\
**Last updated:** [November 12, 2020, 6:20am UTC](https://discuss.elastic.co/t/kibana-status-become-red/254743 "2020-11-12T06:20:53Z")

</div>

Hi Kibana status becomes RED. {"type":"log","@timestamp":"2020-11-06T19:59:34Z","tags":\["status","plugin:elasticsearch@undefined","error"\],"pid":10,"state":"red","message":"Status changed from green to red - Request Ti…

---

## [Parse numbers from Storage units in logs](https://discuss.elastic.co/t/parse-numbers-from-storage-units-in-logs/218400)

<div class="topic-metadata">

**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\
**Replies:** 9\
**Last updated:** [February 23, 2020, 9:23pm UTC](https://discuss.elastic.co/t/parse-numbers-from-storage-units-in-logs/218400 "2020-02-23T21:23:44Z")

</div>

Extract the NUMBER from logs with storage sizes. Sample Logs - physical.memory.total=31.4G, physical.memory.free=18.8G, swap.space.total=7.8G, swap.space.free=7.8G, heap.memory.used=4.5G, heap.memory.free=536.5M, heap.…

---

## [Problem with index restoration](https://discuss.elastic.co/t/problem-with-index-restoration/183813)

<div class="topic-metadata">

**Author:** [@Arkadiusz\_Porada](https://discuss.elastic.co/u/Arkadiusz_Porada)\
**Replies:** 9\
**Last updated:** [June 1, 2019, 2:21pm UTC](https://discuss.elastic.co/t/problem-with-index-restoration/183813 "2019-06-01T14:21:59Z")

</div>

Hello, Today, I've noticed a strange behaviour of my elasticsearch server (7.1.0). When I tried to restore an index from a tar archive nothing happened. Later I noticed that my index didn't exist at elasticearch reposit…

---

## [Document indexing](https://discuss.elastic.co/t/document-indexing/7637)

<div class="topic-metadata">

**Author:** [@tullio0106](https://discuss.elastic.co/u/tullio0106)\
**Replies:** 9\
**Last updated:** [May 15, 2012, 8:22pm UTC](https://discuss.elastic.co/t/document-indexing/7637 "2012-05-15T20:22:39Z")

</div>

I'd like to use elasticsearch to store indexes about my documents. I've documents like .doc files or .pdf files or whatever. Is there any way/tool to index such kind of documents ? Tks Tullio

---

## [API key does or does not rely on permissions from user that created it](https://discuss.elastic.co/t/api-key-does-or-does-not-rely-on-permissions-from-user-that-created-it/383663)

<div class="topic-metadata">

**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Replies:** 14\
**Last updated:** [December 31, 2025, 10:08pm UTC](https://discuss.elastic.co/t/api-key-does-or-does-not-rely-on-permissions-from-user-that-created-it/383663 "2025-12-31T22:08:43Z")

</div>

We had previously been creating API keys with our SSO user accounts. Then we found that after an SSO IdP provider change our users were effectively “different” such that we could no longer edit API keys (e.g. to add or r…

---

## [Could use some help with using Doc Values](https://discuss.elastic.co/t/could-use-some-help-with-using-doc-values/23262)

<div class="topic-metadata">

**Author:** [@Scott\_Chapman](https://discuss.elastic.co/u/Scott_Chapman)\
**Replies:** 11\
**Last updated:** [April 18, 2015, 4:48am UTC](https://discuss.elastic.co/t/could-use-some-help-with-using-doc-values/23262 "2015-04-18T04:48:39Z")

</div>

So, I am a bit (ok more than a bit) of a newbie. We are using ELK for collecting storing logs, and recently we started seeing these errors: \[FIELDDATA\] New used memory 2570680025 \[2.3gb\] from field \[@timestamp\] woul…

---

## [Document update/fetch rate suddenly floored](https://discuss.elastic.co/t/document-update-fetch-rate-suddenly-floored/9671)

<div class="topic-metadata">

**Author:** [@Nitish\_Sharma](https://discuss.elastic.co/u/Nitish_Sharma)\
**Replies:** 11\
**Last updated:** [November 13, 2012, 1:35pm UTC](https://discuss.elastic.co/t/document-update-fetch-rate-suddenly-floored/9671 "2012-11-13T13:35:33Z")

</div>

Hi, We have a elasticsearch setup in which we index documents and with the user data pouring in, we update documents. Every document has an expiry of 30 days and with every update the \_ttl is also updated. At any gi…

---

## [Filebeat dont share data with Kibana](https://discuss.elastic.co/t/filebeat-dont-share-data-with-kibana/337992)

<div class="topic-metadata">

**Author:** [@enp2s6](https://discuss.elastic.co/u/enp2s6)\
**Replies:** 12\
**Last updated:** [July 22, 2023, 5:14pm UTC](https://discuss.elastic.co/t/filebeat-dont-share-data-with-kibana/337992 "2023-07-22T17:14:44Z")

</div>

Hi, I am trying to enable the Kibana Logs integration. I have gone through the tutorial without errors and there are no error messages in the respective logs. However, in the last item "Module Status" I get the messag…

---

## [Uncontrolled merge process on few indices](https://discuss.elastic.co/t/uncontrolled-merge-process-on-few-indices/160103)

<div class="topic-metadata">

**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\
**Replies:** 10\
**Last updated:** [December 17, 2018, 11:19am UTC](https://discuss.elastic.co/t/uncontrolled-merge-process-on-few-indices/160103 "2018-12-17T11:19:09Z")

</div>

Hi , We have a 7 node cluster running on ES version 5.2.1. We have observed that ES internal merge process sometimes goes berserk for couple of indices, runs for more than 3 days and consumes the server resources (li…

---

## [Expired Certificate (agent / fleet)](https://discuss.elastic.co/t/expired-certificate-agent-fleet/376403)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 9\
**Last updated:** [March 30, 2025, 1:22pm UTC](https://discuss.elastic.co/t/expired-certificate-agent-fleet/376403 "2025-03-30T13:22:40Z")

</div>

First - this is all about a private, protected and insecure test environment! I decided to install agents with the --insecure option and since some days i found out that there's no more data received in the server. Fle…

---

## [Minimum cluster config on the same machine for test](https://discuss.elastic.co/t/minimum-cluster-config-on-the-same-machine-for-test/178404)

<div class="topic-metadata">

**Author:** [@icirco](https://discuss.elastic.co/u/icirco)\
**Replies:** 9\
**Last updated:** [April 26, 2019, 12:24pm UTC](https://discuss.elastic.co/t/minimum-cluster-config-on-the-same-machine-for-test/178404 "2019-04-26T12:24:09Z")

</div>

hi, I tried to explore the cluster config and I can't configure the minimum config to run 2 nodes on the same machine (only for testing of course !) so, what is the minimum config for cluster config (ES 5) elasticsear…

---

## [0.90.0.Beta1 Released](https://discuss.elastic.co/t/0-90-0-beta1-released/10904)

<div class="topic-metadata">

**Author:** [@kimchy](https://discuss.elastic.co/u/kimchy)\
**Replies:** 11\
**Last updated:** [March 11, 2013, 5:28pm UTC](https://discuss.elastic.co/t/0-90-0-beta1-released/10904 "2013-03-11T17:28:58Z")

</div>

Heya fellows, I am happy to announce that 0.90.0.Beta1 has just been released. More info in the blog post: http://www.elasticsearch.org/blog/2013/02/26/0.90.0.Beta1-released.html. -- You received this message becaus…

---

## [While expanding document getting red overlay in chrome](https://discuss.elastic.co/t/while-expanding-document-getting-red-overlay-in-chrome/361946)

<div class="topic-metadata">

**Author:** [@asharma08](https://discuss.elastic.co/u/asharma08)\
**Replies:** 9\
**Last updated:** [June 28, 2024, 10:17am UTC](https://discuss.elastic.co/t/while-expanding-document-getting-red-overlay-in-chrome/361946 "2024-06-28T10:17:45Z")

</div>

While expanding document getting red overlay in chrome (windows) but the same is working fine in chrome (macbook) and mozilla firefox (windows). Chrome Version 126.0.6478.115 (Official Build) (64-bit)

---

## [Filebeat restarting continuously with high memory usage on version 7.9.0](https://discuss.elastic.co/t/filebeat-restarting-continuously-with-high-memory-usage-on-version-7-9-0/346132)

<div class="topic-metadata">

**Author:** [@kait](https://discuss.elastic.co/u/kait)\
**Replies:** 9\
**Last updated:** [November 21, 2023, 9:07am UTC](https://discuss.elastic.co/t/filebeat-restarting-continuously-with-high-memory-usage-on-version-7-9-0/346132 "2023-11-21T09:07:43Z")

</div>

Hi, Filebeat is deployed as daemonset in all kubernetes nodes and it's restarting continuously in specific nodes which is loaded due to high memory usage. Filebeat version : 7.9.0 In filebeat.yml , tried to disable th…

---

## [\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[node1\] master not discovered yet, this node has not previously joined a bootstrapped cluster](https://discuss.elastic.co/t/warn-o-e-c-c-clusterformationfailurehelper-node1-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-cluster/329267)

<div class="topic-metadata">

**Author:** [@Raghulvishal](https://discuss.elastic.co/u/Raghulvishal)\
**Replies:** 9\
**Last updated:** [April 4, 2023, 7:56am UTC](https://discuss.elastic.co/t/warn-o-e-c-c-clusterformationfailurehelper-node1-master-not-discovered-yet-this-node-has-not-previously-joined-a-bootstrapped-cluster/329267 "2023-04-04T07:56:16Z")

</div>

Hi Team, I am using ES 8.6 version and configured 3 nodes,while starting the node i'am getting master not discovered yet exception. This is my elastic .yml given below. cluster.name: es-8\_6 node.name: node1 path.dat…

---

## [Corrupted search using 0.11 Smile format](https://discuss.elastic.co/t/corrupted-search-using-0-11-smile-format/3373)

<div class="topic-metadata">

**Author:** [@dbenson](https://discuss.elastic.co/u/dbenson)\
**Replies:** 10\
**Last updated:** [September 27, 2010, 10:49pm UTC](https://discuss.elastic.co/t/corrupted-search-using-0-11-smile-format/3373 "2010-09-27T22:49:10Z")

</div>

Submitting the following JSON via the Java jsonBuilder works correctly. Submitting the same content through the smileBuilder causes an exception, but the content is still indexed, in a manner than is not searchable. …

---

## [Impossible format date](https://discuss.elastic.co/t/impossible-format-date/166355)

<div class="topic-metadata">

**Author:** [@Viti](https://discuss.elastic.co/u/Viti)\
**Replies:** 13\
**Last updated:** [February 4, 2019, 3:50pm UTC](https://discuss.elastic.co/t/impossible-format-date/166355 "2019-02-04T15:50:58Z")

</div>

Hello, I need to format a date. The log line is this: 2019-01-29 12:59:51,8345358246519 ERROR - RGKAS055551 \* INFO \* 00003 \* method \* initSystem \* =====\> fail system down I have this: 2019-01-29 12:59:51,83453582465…

---

## [Create arrays based on certain text in a field](https://discuss.elastic.co/t/create-arrays-based-on-certain-text-in-a-field/246811)

<div class="topic-metadata">

**Author:** [@kopacko](https://discuss.elastic.co/u/kopacko)\
**Replies:** 11\
**Last updated:** [September 3, 2020, 4:29pm UTC](https://discuss.elastic.co/t/create-arrays-based-on-certain-text-in-a-field/246811 "2020-09-03T16:29:51Z")

</div>

I am parsing chat messages and I want to create three arrays for tag cloud purposes. One for normal chat words, one for user tags, and one for chat emotes. For example, take this chat message: WE LOVE YOU @CHANDLER, Y…

---

## [Plot a table with custom rule based color in background](https://discuss.elastic.co/t/plot-a-table-with-custom-rule-based-color-in-background/318844)

<div class="topic-metadata">

**Author:** [@Tukaram](https://discuss.elastic.co/u/Tukaram)\
**Replies:** 9\
**Last updated:** [November 15, 2022, 2:45pm UTC](https://discuss.elastic.co/t/plot-a-table-with-custom-rule-based-color-in-background/318844 "2022-11-15T14:45:03Z")

</div>

Hi, I want to plot a table with custom rule based color for each cell. so, for below table, if debt is more than income, it should be red. if income is more than debt, it should be green. is this possible? how?

---

## [JDBC River && \_parent](https://discuss.elastic.co/t/jdbc-river--parent/10783)

<div class="topic-metadata">

**Author:** [@Yann\_Barraud](https://discuss.elastic.co/u/Yann_Barraud)\
**Replies:** 9\
**Last updated:** [May 17, 2013, 2:38pm UTC](https://discuss.elastic.co/t/jdbc-river--parent/10783 "2013-05-17T14:38:35Z")

</div>

Hi, I'm currently trying to understand how to use JDBC River. I just got some good results this afternoon. :-) Now I have a few questions regarding the river : - if I have 2 tables with 1 for parent items & two…

---

## [Modifying Refresh Settings for BulkIngester Instances](https://discuss.elastic.co/t/modifying-refresh-settings-for-bulkingester-instances/353699)

<div class="topic-metadata">

**Author:** [@Ivelin\_Yanev](https://discuss.elastic.co/u/Ivelin_Yanev)\
**Replies:** 10\
**Last updated:** [February 22, 2024, 9:49am UTC](https://discuss.elastic.co/t/modifying-refresh-settings-for-bulkingester-instances/353699 "2024-02-22T09:49:49Z")

</div>

Hi team, I'm currently working with the BulkIngester in my Elasticsearch project and I have a question regarding the refresh setting. After creating the BulkIngester instance using the following code snippet: ingester…

---

## [Potential for realtime search?](https://discuss.elastic.co/t/potential-for-realtime-search/11220)

<div class="topic-metadata">

**Author:** [@MarcusLongmuir](https://discuss.elastic.co/u/MarcusLongmuir)\
**Replies:** 13\
**Last updated:** [March 21, 2013, 4:02pm UTC](https://discuss.elastic.co/t/potential-for-realtime-search/11220 "2013-03-21T16:02:24Z")

</div>

I understand that ES is "near" realtime (updating every second by default). I think ES is awesome and I'm using it to great effect, but this minor issue keeps popping up and workarounds that make sure the user reads …

---

## [Metricbeat setup: one-time?](https://discuss.elastic.co/t/metricbeat-setup-one-time/327959)

<div class="topic-metadata">

**Author:** [@NominaSumpta](https://discuss.elastic.co/u/NominaSumpta)\
**Replies:** 11\
**Last updated:** [March 21, 2023, 2:02pm UTC](https://discuss.elastic.co/t/metricbeat-setup-one-time/327959 "2023-03-21T14:02:55Z")

</div>

Is metricbeat setup meant to be run once per cluster? The documentation (Metricbeat quick start: installation and configuration | Metricbeat Reference \[8.6\] | Elastic) does not say. It is implied that this command is m…

---

## [Logstash config with Grok](https://discuss.elastic.co/t/logstash-config-with-grok/359299)

<div class="topic-metadata">

**Author:** [@iceman0410](https://discuss.elastic.co/u/iceman0410)\
**Replies:** 15\
**Last updated:** [May 21, 2024, 5:31am UTC](https://discuss.elastic.co/t/logstash-config-with-grok/359299 "2024-05-21T05:31:48Z")

</div>

Hi Everyone, I am trying to config logstash parse the log with 3 field : date & time (dts), Log level (lvl) and rest message. But the out put always show timestamp is not correct, timestamp i want to show is the time i…

---

## [How to use EXISTING multi-domain SSL cert to secure Kibana](https://discuss.elastic.co/t/how-to-use-existing-multi-domain-ssl-cert-to-secure-kibana/316934)

<div class="topic-metadata">

**Author:** [@Bitdoctor](https://discuss.elastic.co/u/Bitdoctor)\
**Replies:** 9\
**Last updated:** [October 24, 2022, 4:03pm UTC](https://discuss.elastic.co/t/how-to-use-existing-multi-domain-ssl-cert-to-secure-kibana/316934 "2022-10-24T16:03:00Z")

</div>

Simple case - the kibana guide to securing kibana with SSL assumes generating CSR 'from' Kibana server and submitting to SSL provider. I need instructions how to use my existing multi-domain certificate to secure Browser…

---

## [Path.data v0.18.1](https://discuss.elastic.co/t/path-data-v0-18-1/5712)

<div class="topic-metadata">

**Author:** [@Gustavo\_Maia](https://discuss.elastic.co/u/Gustavo_Maia)\
**Replies:** 13\
**Last updated:** [November 2, 2011, 11:53pm UTC](https://discuss.elastic.co/t/path-data-v0-18-1/5712 "2011-11-02T23:53:04Z")

</div>

Hello, I'm using version 0.18.1 and configuring path.data as follows: path.data:/apps/elasticsearch-0.18.1/data/data1,/apps/elasticsearch-0.18.1/data/data2,/apps/elasticsearch-0.18.1/data/data3,/apps/elasticsearch-0.…

---

## [Doc Values](https://discuss.elastic.co/t/doc-values/22027)

<div class="topic-metadata">

**Author:** [@jbaranick](https://discuss.elastic.co/u/jbaranick)\
**Replies:** 9\
**Last updated:** [February 8, 2015, 8:43am UTC](https://discuss.elastic.co/t/doc-values/22027 "2015-02-08T08:43:56Z")

</div>

Is there a way to turn doc\_values on cluster wide and override any index specific settings? -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from th…

---

## [Issue with Elasticsearch java version and Transport Client](https://discuss.elastic.co/t/issue-with-elasticsearch-java-version-and-transport-client/15700)

<div class="topic-metadata">

**Author:** [@redrubia](https://discuss.elastic.co/u/redrubia)\
**Replies:** 9\
**Last updated:** [February 10, 2014, 8:42pm UTC](https://discuss.elastic.co/t/issue-with-elasticsearch-java-version-and-transport-client/15700 "2014-02-10T20:42:41Z")

</div>

I just wondered how do you find out the exact version of Java your Elasticsearch is using. I have checked my IDE running on 1.7.0\_21 and my JAVA\_HOME is also 1.7.0\_21. I've been told Java versions, must match ex…

---

## [Which filter(s) to extract array of JSON values, then use array to look up nested JSON objects?](https://discuss.elastic.co/t/which-filter-s-to-extract-array-of-json-values-then-use-array-to-look-up-nested-json-objects/343814)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 11\
**Last updated:** [October 10, 2023, 3:08pm UTC](https://discuss.elastic.co/t/which-filter-s-to-extract-array-of-json-values-then-use-array-to-look-up-nested-json-objects/343814 "2023-10-10T15:08:32Z")

</div>

I have a Logstash pipeline which is processing JSON data from a flat file. The data is somewhat structured like this: { "name": "job1", "tasks": { "75fc": { "name": "restAction", "variables": { "incoming"…

---

## [RabbitMQ VS IBM MQ For integrate with ELK](https://discuss.elastic.co/t/rabbitmq-vs-ibm-mq-for-integrate-with-elk/322297)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 9\
**Last updated:** [January 3, 2023, 11:23am UTC](https://discuss.elastic.co/t/rabbitmq-vs-ibm-mq-for-integrate-with-elk/322297 "2023-01-03T11:23:49Z")

</div>

Hello Everybody, I need from ELK integrations Expertise to Recommend for me Whet is the best from between IBM MQ and Rabbit MQ to pull Messages in terms of performance and compatibility with ELK 7.11.2.

---

## [Issue after migration from geo\_shape pre-fix based to geo\_shape based bkd tree mapping](https://discuss.elastic.co/t/issue-after-migration-from-geo-shape-pre-fix-based-to-geo-shape-based-bkd-tree-mapping/311406)

<div class="topic-metadata">

**Author:** [@Abhilash\_Venkatesh](https://discuss.elastic.co/u/Abhilash_Venkatesh)\
**Replies:** 9\
**Last updated:** [August 12, 2022, 3:54am UTC](https://discuss.elastic.co/t/issue-after-migration-from-geo-shape-pre-fix-based-to-geo-shape-based-bkd-tree-mapping/311406 "2022-08-12T03:54:46Z")

</div>

Hi Problem Description We want to migrate from elastic 7.x to 8. Migrated to 7.17.5 and resolved issues. One of it was was location field with geo\_shape mapping, we used strategy : recursive . To resolve took backup …

---

## [Logstash - A plugin had an unrecoverable error. Will restart this plugin. java.util.concurrent.ScheduledThreadPoolExecutor](https://discuss.elastic.co/t/logstash-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin-java-util-concurrent-scheduledthreadpoolexecutor/326007)

<div class="topic-metadata">

**Author:** [@Grant\_Hope](https://discuss.elastic.co/u/Grant_Hope)\
**Replies:** 10\
**Last updated:** [March 3, 2023, 3:01pm UTC](https://discuss.elastic.co/t/logstash-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin-java-util-concurrent-scheduledthreadpoolexecutor/326007 "2023-03-03T15:01:03Z")

</div>

I'm running into a problem with java.util.concurrent.ScheduledThreadPoolExecutor. Setup details: logstash 8.5.1 Logstash was installed via RPM Linux server1 4.18.0-372.26.1.el8\_6.x86\_64 #1 SMP Sat Aug 27 02:44:20 EDT…

---

## [Is it possible to perform an operation on fields from two different indexes?](https://discuss.elastic.co/t/is-it-possible-to-perform-an-operation-on-fields-from-two-different-indexes/191883)

<div class="topic-metadata">

**Author:** [@EZprogramming](https://discuss.elastic.co/u/EZprogramming)\
**Replies:** 10\
**Last updated:** [July 25, 2019, 7:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-perform-an-operation-on-fields-from-two-different-indexes/191883 "2019-07-25T19:25:39Z")

</div>

These are my indexes: stage-api-athena-fruitcount: upload\_time \[other fields\] stage-cloudwatch: Timestamp \[other fields\] I want to perform the following action. Is it possible to do this operation on two separate …

---

## [ERROR in bootstrap. ES 0.7.1](https://discuss.elastic.co/t/error-in-bootstrap-es-0-7-1/2960)

<div class="topic-metadata">

**Author:** [@tfreitas](https://discuss.elastic.co/u/tfreitas)\
**Replies:** 10\
**Last updated:** [May 25, 2010, 7:19pm UTC](https://discuss.elastic.co/t/error-in-bootstrap-es-0-7-1/2960 "2010-05-25T19:19:23Z")

</div>

Hi When I test ES 0.7.1 with zero configuration (elasticsearch.yml empty) This error occurs \[17:26:45,627\] \[ERROR\] \[bootstrap\] \[Duquesne, Jacques\] () ElasticSearch/0.7.1: Startup Failed ... - DiscoveryExcept…

---

## [Logstash tags entries as\_grokparsefailures but multiple online debuggers says otherwise](https://discuss.elastic.co/t/logstash-tags-entries-as-grokparsefailures-but-multiple-online-debuggers-says-otherwise/283753)

<div class="topic-metadata">

**Author:** [@stillfreem](https://discuss.elastic.co/u/stillfreem)\
**Replies:** 11\
**Last updated:** [September 23, 2021, 2:56pm UTC](https://discuss.elastic.co/t/logstash-tags-entries-as-grokparsefailures-but-multiple-online-debuggers-says-otherwise/283753 "2021-09-23T14:56:19Z")

</div>

Hi All, I've a very strange question that I hope to explain eloquently. I'm dealing with FW logs. Already wrote a grok parser that works like a charm (prefer not to provided it here, let me know if it's going to be need…

---

## [Documents not editable of index](https://discuss.elastic.co/t/documents-not-editable-of-index/337307)

<div class="topic-metadata">

**Author:** [@Jay\_Desai](https://discuss.elastic.co/u/Jay_Desai)\
**Replies:** 13\
**Last updated:** [July 4, 2023, 12:37pm UTC](https://discuss.elastic.co/t/documents-not-editable-of-index/337307 "2023-07-04T12:37:55Z")

</div>

PUT /your-index/\_settings { "index.blocks.write": true } not working

---

## [Extract hostname from log file name](https://discuss.elastic.co/t/extract-hostname-from-log-file-name/345761)

<div class="topic-metadata">

**Author:** [@Indeed2000](https://discuss.elastic.co/u/Indeed2000)\
**Replies:** 9\
**Last updated:** [October 26, 2023, 8:44pm UTC](https://discuss.elastic.co/t/extract-hostname-from-log-file-name/345761 "2023-10-26T20:44:26Z")

</div>

Hi on logstash need to use file as input, output as http. now question is how can i extract hostname from log filename, here is file name: /tmp/log.hostname1.20230720 /tmp/log.hostname2.20230720 Any idea Thanks

[Previous page](https://discuss.elastic.co/top.md?page=230&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=232&per_page=50&period=all)
