# Top **URL:** https://discuss.elastic.co/top.md?page=261&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 262 --- ## [Why do logstash's internal logs and stdout end up in /var/log/messages?](https://discuss.elastic.co/t/why-do-logstashs-internal-logs-and-stdout-end-up-in-var-log-messages/179485)
**Author:** [@nick-george](https://discuss.elastic.co/u/nick-george)\ **Replies:** 2\ **Last updated:** [May 4, 2019, 2:37am UTC](https://discuss.elastic.co/t/why-do-logstashs-internal-logs-and-stdout-end-up-in-var-log-messages/179485 "2019-05-04T02:37:54Z")
Version: 6.7.2 (RPM) Running on RHEL/Centos. It seems to me that the default configuration of logstash is that every line that is logged to /var/log/logstash/logstash-plain.log also ends up in /var/log/messages. Is that… --- ## [How to increase query results limit of 10,000 results per search in AppSearch](https://discuss.elastic.co/t/how-to-increase-query-results-limit-of-10-000-results-per-search-in-appsearch/280770)
**Author:** [@Subhasis\_Dash](https://discuss.elastic.co/u/Subhasis_Dash)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 3:49pm UTC](https://discuss.elastic.co/t/how-to-increase-query-results-limit-of-10-000-results-per-search-in-appsearch/280770 "2021-08-09T15:49:20Z")
AppSearch has a limit of max 10,000 search results per query. Is this value configurable? We have a requirement where we need to parse through all the search results for a particular filter condition, and update the re… --- ## [Unable to access Kibana with “License is not available.”](https://discuss.elastic.co/t/unable-to-access-kibana-with-license-is-not-available/274323)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 7\ **Last updated:** [June 30, 2021, 2:13am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-with-license-is-not-available/274323 "2021-06-30T02:13:41Z")
I have installed WorkplaceSearch. I added the x-pack configuration to ElasticSearch by referring to the following URL. Specifically, I have made the following statement. $vi /etc/elasticsearch/elasticsearch.yml xpack… --- ## [Validation Failed: 1: this action would add \[2\] total shards, but this cluster currently has \[2000\]/\[2000\] maximum shards open](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/257064)
**Author:** [@rneema1](https://discuss.elastic.co/u/rneema1)\ **Replies:** 5\ **Last updated:** [December 15, 2020, 1:21pm UTC](https://discuss.elastic.co/t/validation-failed-1-this-action-would-add-2-total-shards-but-this-cluster-currently-has-2000-2000-maximum-shards-open/257064 "2020-12-15T13:21:02Z")
I'm using Elastic 7.6.2 I'm creating an index using a pipeline, Reading and sending text file through the filebeat and sending to a pipeline. I'm getting this error : Validation Failed: 1: this action would add \[2\] … --- ## [Position as result, instead of highlighting](https://discuss.elastic.co/t/position-as-result-instead-of-highlighting/128820)
**Author:** [@Despotis](https://discuss.elastic.co/u/Despotis)\ **Replies:** 0\ **Last updated:** [April 20, 2018, 8:00am UTC](https://discuss.elastic.co/t/position-as-result-instead-of-highlighting/128820 "2018-04-20T08:00:10Z")
I try to get positions instead of highlighted text as the result of elasticsearch query. Create the index: PUT /test/ { "mappings": { "article": { "properties": { "text": { "type": "text",… --- ## [Dec 4th 2022: \[EN\] Ingesting JSON logs with Elastic-Agent (and/or Filebeat)](https://discuss.elastic.co/t/dec-4th-2022-en-ingesting-json-logs-with-elastic-agent-and-or-filebeat/319536)
**Author:** [@TiagoQueiroz](https://discuss.elastic.co/u/TiagoQueiroz)\ **Replies:** 2\ **Last updated:** [December 7, 2022, 3:26pm UTC](https://discuss.elastic.co/t/dec-4th-2022-en-ingesting-json-logs-with-elastic-agent-and-or-filebeat/319536 "2022-12-07T15:26:13Z")
This article is also available in Portuguese. Structured logging has almost became a standard in the industry, allowing for easy understanding and parsing of the logs. While the Elastic-Agent provides integrations to… --- ## [Threadpool/ Queue size limitation unsolved](https://discuss.elastic.co/t/threadpool-queue-size-limitation-unsolved/55938)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 1\ **Last updated:** [July 20, 2016, 5:51am UTC](https://discuss.elastic.co/t/threadpool-queue-size-limitation-unsolved/55938 "2016-07-20T05:51:28Z")
I am using ES to do some data indexing in Windows OS. However, I have come across with the following errors always. It seems that it would be a queue size or threadpool size problem. However, I could not find any documen… --- ## [Bearer token in HTTP filter](https://discuss.elastic.co/t/bearer-token-in-http-filter/284641)
**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\ **Replies:** 0\ **Last updated:** [September 20, 2021, 5:03pm UTC](https://discuss.elastic.co/t/bearer-token-in-http-filter/284641 "2021-09-20T17:03:53Z")
Hi, I'm trying to get data from an HTTP API, the main API needs a bearer token to authenticate, a secondary API gives me the token that allows the authentication in the main API. I Solved using http\_poller input to get … --- ## [Range query with should not working](https://discuss.elastic.co/t/range-query-with-should-not-working/83273)
**Author:** [@tushar\_chevulkar](https://discuss.elastic.co/u/tushar_chevulkar)\ **Replies:** 1\ **Last updated:** [April 22, 2017, 3:25pm UTC](https://discuss.elastic.co/t/range-query-with-should-not-working/83273 "2017-04-22T15:25:11Z")
I have a query whose purpose is to get results with should query and filter it via date range. In the below query only the range filter is working and ignoring the should query. I have no idea what am I doing wrong. I… --- ## [\[Solved\] Filebeat -\> Logstash : connection reset by peer](https://discuss.elastic.co/t/solved-filebeat-logstash-connection-reset-by-peer/87012)
**Author:** [@CyrilD](https://discuss.elastic.co/u/CyrilD)\ **Replies:** 4\ **Last updated:** [June 1, 2017, 2:41pm UTC](https://discuss.elastic.co/t/solved-filebeat-logstash-connection-reset-by-peer/87012 "2017-06-01T14:41:53Z")
Hi there ! I'm testing a pipe like that for dumping my logs : filebeat -\> logstash -\> elasticsearch and I have strange errors from filebeat : 2017-05-24T18:08:51+02:00 DBG Try to publish 2 events to logstash with wi… --- ## [Elastic Agent "Unhealthy" - Error while dialing open \\\\\\\\.\\\\pipe\\\\elastic-agent-system: Access Denied](https://discuss.elastic.co/t/elastic-agent-unhealthy-error-while-dialing-open-pipe-elastic-agent-system-access-denied/316617)
**Author:** [@Doriane.R](https://discuss.elastic.co/u/Doriane.R)\ **Replies:** 0\ **Last updated:** [October 14, 2022, 9:36am UTC](https://discuss.elastic.co/t/elastic-agent-unhealthy-error-while-dialing-open-pipe-elastic-agent-system-access-denied/316617 "2022-10-14T09:36:01Z")
Hi, I am new to ELK and I have an issue with my Elastic Agents on my Windows servers. I am working with : Elasticsearch / Kibana version 8.4.2 Elastic-Agent version 8.4.2 I have successfully enroll my Fleet Server (… --- ## [Error: "mapper\_parsing\_exception", "reason": "analyzer \[my\_custom\_analyzer\] not found for field \[topic\_content\]"](https://discuss.elastic.co/t/error-mapper-parsing-exception-reason-analyzer-my-custom-analyzer-not-found-for-field-topic-content/54543)
**Author:** [@kausik93](https://discuss.elastic.co/u/kausik93)\ **Replies:** 4\ **Last updated:** [July 4, 2016, 3:00am UTC](https://discuss.elastic.co/t/error-mapper-parsing-exception-reason-analyzer-my-custom-analyzer-not-found-for-field-topic-content/54543 "2016-07-04T03:00:54Z")
Hi, I'm building an application that uses elasticsearch to store textual data from various csv inputs. i'm running the backend with nodejs and python so the indexing and uploading of data is done in elasticsearch-py. I'm… --- ## [Custom score for fuzzy matching based on Levenshtein distance score](https://discuss.elastic.co/t/custom-score-for-fuzzy-matching-based-on-levenshtein-distance-score/125544)
**Author:** [@maarab](https://discuss.elastic.co/u/maarab)\ **Replies:** 5\ **Last updated:** [March 29, 2018, 7:25am UTC](https://discuss.elastic.co/t/custom-score-for-fuzzy-matching-based-on-levenshtein-distance-score/125544 "2018-03-29T07:25:47Z")
I have a requirement where there needs to be custom scoring on name field based on the Levenshtein distance and not the score returned by elastic search e.g Smith vs Smith = 100%, Smith vs Smithh = 90%, Smith vs SSmi… --- ## [Parse JSON data with filebeat](https://discuss.elastic.co/t/parse-json-data-with-filebeat/80008)
**Author:** [@calmandniceperson](https://discuss.elastic.co/u/calmandniceperson)\ **Replies:** 7\ **Last updated:** [March 27, 2017, 7:34pm UTC](https://discuss.elastic.co/t/parse-json-data-with-filebeat/80008 "2017-03-27T19:34:16Z")
I'm trying to parse JSON logs our server application is producing. It's writing to 3 log files in a directory I'm mounting in a Docker container running Filebeat. So far so good, it's reading the log files all right. How… --- ## [Get all indices associated with a given alias](https://discuss.elastic.co/t/get-all-indices-associated-with-a-given-alias/74944)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 6\ **Last updated:** [March 3, 2017, 9:05pm UTC](https://discuss.elastic.co/t/get-all-indices-associated-with-a-given-alias/74944 "2017-03-03T21:05:14Z")
I know there is a way to get all the aliases associated with given index, but is there a way to get all the indices for a given alias? Input: Alias Output: List\[Index\] The only approach I know of is to get aliases an… --- ## [Elastic Stack 5.4.3 released](https://discuss.elastic.co/t/elastic-stack-5-4-3-released/91011)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [June 27, 2017, 6:21pm UTC](https://discuss.elastic.co/t/elastic-stack-5-4-3-released/91011 "2017-06-27T18:21:02Z")
Hi all, We've just released version 5.4.3 of the Elastic Stack. This is a bug fix release; please see the release notes/blogs for each product to get the details. You can find the individual blog posts here: https://… --- ## [What are .monitoring indices?](https://discuss.elastic.co/t/what-are-monitoring-indices/144855)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 3\ **Last updated:** [August 17, 2018, 9:26am UTC](https://discuss.elastic.co/t/what-are-monitoring-indices/144855 "2018-08-17T09:26:24Z")
We are using ELK but NOT X-Pack and recently upgraded to 6.3. We have noticed the following indices appearing: monitoring-es-6-2018.08.12 monitoring-es-6-2018.08.11 monitoring-es-6-2018.08.17 monitoring-kibana-6-2018… --- ## [Skip header line in CSV input (v 1.5.0)](https://discuss.elastic.co/t/skip-header-line-in-csv-input-v-1-5-0/1386)
**Author:** [@whittssg](https://discuss.elastic.co/u/whittssg)\ **Replies:** 7\ **Last updated:** [August 20, 2015, 1:01pm UTC](https://discuss.elastic.co/t/skip-header-line-in-csv-input-v-1-5-0/1386 "2015-08-20T13:01:43Z")
Hello, I am importing some csv files and would like to skip the first line (headers) - at the moment if the csv has headers the lines will fail to import - if i remove the headers they import fine. I did some searching… --- ## [Format numbers in metric aggregation](https://discuss.elastic.co/t/format-numbers-in-metric-aggregation/71338)
**Author:** [@Tal\_Weiss](https://discuss.elastic.co/u/Tal_Weiss)\ **Replies:** 3\ **Last updated:** [January 16, 2017, 12:12pm UTC](https://discuss.elastic.co/t/format-numbers-in-metric-aggregation/71338 "2017-01-16T12:12:17Z")
I added an average metric aggregation to my Kibana and it works. But it looks like this: Average satisfaction: 4.53030303030303 Is there a way to round off to a single decimal digit? The general question is - can I forma… --- ## [Best practise to read ES from PySpark](https://discuss.elastic.co/t/best-practise-to-read-es-from-pyspark/118372)
**Author:** [@cts](https://discuss.elastic.co/u/cts)\ **Replies:** 4\ **Last updated:** [March 17, 2018, 12:17am UTC](https://discuss.elastic.co/t/best-practise-to-read-es-from-pyspark/118372 "2018-03-17T00:17:25Z")
I am trying to find the best way to read data from Elastic Search ( V: 5.1.1) through Apache Spark ( V: 2.2.1). I am using driver jar version ( elasticsearch-spark-20\_2.11-5.3.1.jar). My question is mainly around readin… --- ## [Dealing with array data](https://discuss.elastic.co/t/dealing-with-array-data/32703)
**Author:** [@ktwo](https://discuss.elastic.co/u/ktwo)\ **Replies:** 3\ **Last updated:** [October 28, 2015, 2:11pm UTC](https://discuss.elastic.co/t/dealing-with-array-data/32703 "2015-10-28T14:11:19Z")
I'm new to Kibana and have an issue I'm trying to resolve. I have some JSON that is similiar to the following: "service": { { "protocol": "tcp", "port": "80", "address": "127.0.0.1" }, { "protocol": "tcp", "port": "8… --- ## [Kibana watcher ctx.payload.hits.hits is empty even though hits.total is a big number](https://discuss.elastic.co/t/kibana-watcher-ctx-payload-hits-hits-is-empty-even-though-hits-total-is-a-big-number/124654)
**Author:** [@Preetiv](https://discuss.elastic.co/u/Preetiv)\ **Replies:** 1\ **Last updated:** [March 19, 2018, 10:54pm UTC](https://discuss.elastic.co/t/kibana-watcher-ctx-payload-hits-hits-is-empty-even-though-hits-total-is-a-big-number/124654 "2018-03-19T22:54:41Z")
A part of my watch is below. Why is hits.hits (array) empty when the hits.total is a big number? "type": "search", "status": "success", "payload": { "\_shards": { "total": 1010, … --- ## [Index management error: "Index is not the write index for alias"](https://discuss.elastic.co/t/index-management-error-index-is-not-the-write-index-for-alias/180894)
**Author:** [@bartong](https://discuss.elastic.co/u/bartong)\ **Replies:** 3\ **Last updated:** [June 3, 2019, 6:04pm UTC](https://discuss.elastic.co/t/index-management-error-index-is-not-the-write-index-for-alias/180894 "2019-06-03T18:04:39Z")
Hello all, While trying to configure Index Lifecycle Policies for my first time, I've encountered an error that I can't resolve. Context: ELK stack v7.0.1 Single-node cluster All indexes were automatically created by… --- ## [Where is ES log file?](https://discuss.elastic.co/t/where-is-es-log-file/72599)
**Author:** [@AmazoneWebService](https://discuss.elastic.co/u/AmazoneWebService)\ **Replies:** 5\ **Last updated:** [January 25, 2017, 3:19am UTC](https://discuss.elastic.co/t/where-is-es-log-file/72599 "2017-01-25T03:19:41Z")
I install ES 2.3.3, and then start elasticsearch but Active status is failed. so i want to see log file. but in /var/lib/elasticsearch folder. there are no log file. :frowning: is any other folder? this is log messag… --- ## [How to assign a new field a certain type and value?](https://discuss.elastic.co/t/how-to-assign-a-new-field-a-certain-type-and-value/34148)
**Author:** [@marv](https://discuss.elastic.co/u/marv)\ **Replies:** 2\ **Last updated:** [November 13, 2015, 7:32am UTC](https://discuss.elastic.co/t/how-to-assign-a-new-field-a-certain-type-and-value/34148 "2015-11-13T07:32:12Z")
Hi, I´m using the grok filter to process logs. Everything works fine but I can´t find a solution for the following problem: I need to extract a numerical value out of my log files. There are two ways they appear in t… --- ## [Error: setting 'filebeat.config.prospectors' has been removed after upgrade to 7.2](https://discuss.elastic.co/t/error-setting-filebeat-config-prospectors-has-been-removed-after-upgrade-to-7-2/188489)
**Author:** [@aleksei.saiko](https://discuss.elastic.co/u/aleksei.saiko)\ **Replies:** 2\ **Last updated:** [July 4, 2019, 11:48am UTC](https://discuss.elastic.co/t/error-setting-filebeat-config-prospectors-has-been-removed-after-upgrade-to-7-2/188489 "2019-07-04T11:48:58Z")
Hi there! I started to upgrade my ELK stack form 6.6.2 to 7.2.0. Changed accordingly Elastic and Kibana configs , but got stuck on Filebeat. After deploy to K8S, I receive this error error: setting 'filebeat.config.p… --- ## [Help - No configuration found in the configured sources](https://discuss.elastic.co/t/help-no-configuration-found-in-the-configured-sources/152436)
**Author:** [@adamdharris](https://discuss.elastic.co/u/adamdharris)\ **Replies:** 2\ **Last updated:** [October 17, 2018, 12:04pm UTC](https://discuss.elastic.co/t/help-no-configuration-found-in-the-configured-sources/152436 "2018-10-17T12:04:58Z")
Having trouble running logstash on local windows 10 instances. I have looked at the other posts but cannot figure it out. Config File input{ file { path =\> "C:/Users/adamd/Data/Invoice\_01062016\_14032018.cs… --- ## [Help: Bulk Update doesn't work](https://discuss.elastic.co/t/help-bulk-update-doesnt-work/36153)
**Author:** [@Ivan\_Ghisleni](https://discuss.elastic.co/u/Ivan_Ghisleni)\ **Replies:** 4\ **Last updated:** [December 22, 2016, 11:31am UTC](https://discuss.elastic.co/t/help-bulk-update-doesnt-work/36153 "2016-12-22T11:31:32Z")
Hi to everyone, I have this problem when I'm trying to to update with the bulk operation: Command: curl -XPOST localhost:9200/\_bulk?pretty -d '{ "update" : { "index" : "test", "type" : "type1", "\_id" : "1"} } { "doc"… --- ## [ElasticSearch is NoSQL?](https://discuss.elastic.co/t/elasticsearch-is-nosql/51576)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 5\ **Last updated:** [June 3, 2016, 12:30am UTC](https://discuss.elastic.co/t/elasticsearch-is-nosql/51576 "2016-06-03T00:30:46Z")
Hi all, Some people consider elasticsearch as NoSQL database. I am confused, Elasticsearch is NoSQL database? --- ## [Running Elasticsearch using docker-compose Exception in thread "main"](https://discuss.elastic.co/t/running-elasticsearch-using-docker-compose-exception-in-thread-main/219082)
**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\ **Replies:** 0\ **Last updated:** [February 12, 2020, 9:13pm UTC](https://discuss.elastic.co/t/running-elasticsearch-using-docker-compose-exception-in-thread-main/219082 "2020-02-12T21:13:00Z")
Hi guys, I'm trying to spin up an elastic cluster using docker compose according to this documentation: https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-docker.html I created the described … --- ## [Offline plugin install of Java plugin](https://discuss.elastic.co/t/offline-plugin-install-of-java-plugin/192439)
**Author:** [@Cory\_Huebner](https://discuss.elastic.co/u/Cory_Huebner)\ **Replies:** 0\ **Last updated:** [July 26, 2019, 12:42pm UTC](https://discuss.elastic.co/t/offline-plugin-install-of-java-plugin/192439 "2019-07-26T12:42:33Z")
I am attempting to install a custom output Logstash plugin on Logstash 7.2; the plugin is written in Java based on the instructions found on this Logstash documentation page. I am attempting to deploy into a Logstash do… --- ## [Dec 21st, 2025: \[EN\] Analyzing traces in Discover faster and clearer](https://discuss.elastic.co/t/dec-21st-2025-en-analyzing-traces-in-discover-faster-and-clearer/383615)
**Author:** [@irene\_blanco](https://discuss.elastic.co/u/irene_blanco)\ **Replies:** 0\ **Last updated:** [December 21, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-21st-2025-en-analyzing-traces-in-discover-faster-and-clearer/383615 "2025-12-21T08:00:30Z")
Este artículo está disponible en Español. Analyzing traces in Discover faster and clearer Having trouble with slow endpoints and not sure where to start? Now in Discover, when the Solution View of the space is set t… --- ## [Default precision of cardinality aggregation](https://discuss.elastic.co/t/default-precision-of-cardinality-aggregation/51665)
**Author:** [@david\_](https://discuss.elastic.co/u/david_)\ **Replies:** 7\ **Last updated:** [February 25, 2017, 10:20pm UTC](https://discuss.elastic.co/t/default-precision-of-cardinality-aggregation/51665 "2017-02-25T22:20:04Z")
Hi, What is the default precision for the cardinality aggregation? When I was running very small JUnit integration tests, I noticed that the default implementation of the cardinality aggregation had an error of 1-2 eve… --- ## [Not whitelisted in reindex.remote.whitelist](https://discuss.elastic.co/t/not-whitelisted-in-reindex-remote-whitelist/111070)
**Author:** [@michael\_gadaev](https://discuss.elastic.co/u/michael_gadaev)\ **Replies:** 7\ **Last updated:** [December 12, 2017, 5:13pm UTC](https://discuss.elastic.co/t/not-whitelisted-in-reindex-remote-whitelist/111070 "2017-12-12T17:13:52Z")
hi all .. please help me with my strange issue ; I want to reindex my old data from 2.3 cluster to 6.0 I tried 2 ways : with reindex.remote.whitelist :: I put my remote host in yaml : reindex.remote.whitelist: 'es… --- ## [Kibana: how to regex query for 'hostname'?](https://discuss.elastic.co/t/kibana-how-to-regex-query-for-hostname/29317)
**Author:** [@daks](https://discuss.elastic.co/u/daks)\ **Replies:** 4\ **Last updated:** [September 16, 2015, 12:09pm UTC](https://discuss.elastic.co/t/kibana-how-to-regex-query-for-hostname/29317 "2015-09-16T12:09:03Z")
Hello, I'm using Kibana 4 with ElasticSearch 1.4.4 to store logs pushed by Logstash. I have a 'hostname' field which is not\_analyzed and can't find how to query with a regex on this field. Field content is a hostname… --- ## [Substring and contains in painless](https://discuss.elastic.co/t/substring-and-contains-in-painless/176294)
**Author:** [@Jravella](https://discuss.elastic.co/u/Jravella)\ **Replies:** 8\ **Last updated:** [April 12, 2019, 8:30pm UTC](https://discuss.elastic.co/t/substring-and-contains-in-painless/176294 "2019-04-12T20:30:03Z")
i have a internal uri which has one of values like /appname/api/v4/bdq/rules/ i want to filter them a nd extract only field v4 from that url using substring function --- ## [Dec 1st, 2019 \[FIN\]\[ES\] Datatieteilijän työkalut: Elasticsearch ja Python](https://discuss.elastic.co/t/dec-1st-2019-fin-es-datatieteilijan-tyokalut-elasticsearch-ja-python/209773)
**Author:** [@Camilla\_Montonen](https://discuss.elastic.co/u/Camilla_Montonen)\ **Replies:** 2\ **Last updated:** [February 3, 2020, 12:04pm UTC](https://discuss.elastic.co/t/dec-1st-2019-fin-es-datatieteilijan-tyokalut-elasticsearch-ja-python/209773 "2020-02-03T12:04:47Z")
Datatieteilijän työkalut: Elasticsearch ja Python Yleensä suurin osa datatieteilijän työajasta saattaa kulua datan keräämiseen ja puhdistamiseen ennen kuin päästään itse koneoppimisalgoritmien käyttämiseen. Yksi osa tätä… --- ## [Dec 11th, 2021: \[en\] On a road trip with Transform](https://discuss.elastic.co/t/dec-11th-2021-en-on-a-road-trip-with-transform/290532)
**Author:** [@Hendrik\_Muhs](https://discuss.elastic.co/u/Hendrik_Muhs)\ **Replies:** 0\ **Last updated:** [December 11, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-11th-2021-en-on-a-road-trip-with-transform/290532 "2021-12-11T08:00:01Z")
Are you already tired of hearing Christmas songs? One of the classics is "Driving home for Christmas". The lyrics of that song have not much content, Chris Rea basically tells about a long boring journey in his car drivi… --- ## [Kibana Logs rotation](https://discuss.elastic.co/t/kibana-logs-rotation/66441)
**Author:** [@Meenakshi.Jindal](https://discuss.elastic.co/u/Meenakshi.Jindal)\ **Replies:** 4\ **Last updated:** [November 19, 2016, 12:10am UTC](https://discuss.elastic.co/t/kibana-logs-rotation/66441 "2016-11-19T00:10:22Z")
How can we enable the logs file rotation for Kibana logs in Production? I tried to create the logging.yml file in config folder, but does not seems to be working. Meenakshi --- ## [Multiple range filters for same field](https://discuss.elastic.co/t/multiple-range-filters-for-same-field/73898)
**Author:** [@tillkruss](https://discuss.elastic.co/u/tillkruss)\ **Replies:** 3\ **Last updated:** [February 3, 2017, 9:37pm UTC](https://discuss.elastic.co/t/multiple-range-filters-for-same-field/73898 "2017-02-03T21:37:20Z")
Hey! We're currently filtering our search with terms and range filters. It seems like filters are combined using AND which is what we need. { body: { bool: { must: { query\_stri… --- ## [Cannon simple change index name in filebeat](https://discuss.elastic.co/t/cannon-simple-change-index-name-in-filebeat/181973)
**Author:** [@patsevanton](https://discuss.elastic.co/u/patsevanton)\ **Replies:** 2\ **Last updated:** [May 21, 2019, 10:51am UTC](https://discuss.elastic.co/t/cannon-simple-change-index-name-in-filebeat/181973 "2019-05-21T10:51:58Z")
ELK - 7.0.1 Filebeat - 7.0.1 cat /etc/filebeat/filebeat.yml filebeat.inputs: - type: log enabled: true paths: - '/var/lib/docker/containers/\*/\*.log' json.keys\_under\_root: true json.message\_key: log encod… --- ## [Best way to send complex logs from NodeJS](https://discuss.elastic.co/t/best-way-to-send-complex-logs-from-nodejs/74670)
**Author:** [@Simon\_Bruneaud](https://discuss.elastic.co/u/Simon_Bruneaud)\ **Replies:** 0\ **Last updated:** [February 10, 2017, 2:35pm UTC](https://discuss.elastic.co/t/best-way-to-send-complex-logs-from-nodejs/74670 "2017-02-10T14:35:28Z")
Hey, I have a NodeJS application, and I would like to send logs to our ELK server (in a docker-container). I read a lot about Logstash pipeline, and a lot of articles about how to send logs. But I can't figure out wha… --- ## [Elasticsearch bulk size/performance](https://discuss.elastic.co/t/elasticsearch-bulk-size-performance/61434)
**Author:** [@abhijith\_reddy](https://discuss.elastic.co/u/abhijith_reddy)\ **Replies:** 1\ **Last updated:** [September 24, 2016, 10:40am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-size-performance/61434 "2016-09-24T10:40:15Z")
I am trying to load test my elasticsearch instance to figure out the optimal bulk size. Below is my setup 1 elasticsearch node running the latest (2.4) 32 GB heap size 1 index, 1 shard, 0 replicas refresh interval = -… --- ## [Log stash Configuration Error](https://discuss.elastic.co/t/log-stash-configuration-error/116280)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 5\ **Last updated:** [January 25, 2018, 10:09am UTC](https://discuss.elastic.co/t/log-stash-configuration-error/116280 "2018-01-25T10:09:40Z")
When I start Logstash I get the below error. I am trying to separate my Gelf and Filebeat input into different indices. Can anyone offer any help? Inputs: input { gelf { host =\> "10.16.0.5" port =\> 20001 … --- ## [Kibana 7.4.0 on windows - command prompt - not able to start](https://discuss.elastic.co/t/kibana-7-4-0-on-windows-command-prompt-not-able-to-start/203877)
**Author:** [@Francisco0](https://discuss.elastic.co/u/Francisco0)\ **Replies:** 8\ **Last updated:** [October 17, 2019, 8:01pm UTC](https://discuss.elastic.co/t/kibana-7-4-0-on-windows-command-prompt-not-able-to-start/203877 "2019-10-17T20:01:44Z")
Hi, I am new to the Elastic Stack, I have ElasticSearch 7.4.0 installed and started successful at the command prompt on Windows server 2016. I am able to go to http://127.0.0.1:9200/\_cat/health?v and I see status gree… --- ## [Job for elasticsearch.service failed because the control process exited with error code](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/109831)
**Author:** [@kyle\_che](https://discuss.elastic.co/u/kyle_che)\ **Replies:** 7\ **Last updated:** [December 5, 2017, 9:26pm UTC](https://discuss.elastic.co/t/job-for-elasticsearch-service-failed-because-the-control-process-exited-with-error-code/109831 "2017-12-05T21:26:35Z")
root@d-gp2-es46-1:~# service elasticsearch start Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and "journalctl -xe" for details. r… --- ## [Free disk space monitoring after deleting records](https://discuss.elastic.co/t/free-disk-space-monitoring-after-deleting-records/146651)
**Author:** [@Alessio\_Frabotta](https://discuss.elastic.co/u/Alessio_Frabotta)\ **Replies:** 5\ **Last updated:** [August 30, 2018, 3:04pm UTC](https://discuss.elastic.co/t/free-disk-space-monitoring-after-deleting-records/146651 "2018-08-30T15:04:33Z")
I deleted a very large number of records via delete\_by\_query but I did not see an increase in free space. Is there any operation to make space available? --- ## [Filtering data in kibana with wildcard not working](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537)
**Author:** [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Replies:** 8\ **Last updated:** [June 20, 2018, 10:10am UTC](https://discuss.elastic.co/t/filtering-data-in-kibana-with-wildcard-not-working/136537 "2018-06-20T10:10:08Z")
Hello, I have files like below \[Kibana\_Issue\] I want to add multiple filters by exclude data with \*.png \*.js \*.jsp etc \[search\] But it doesn't filter like expected. Please help. Regards, Naresh --- ## [Drop old messages using Ruby filter](https://discuss.elastic.co/t/drop-old-messages-using-ruby-filter/151990)
**Author:** [@programagor](https://discuss.elastic.co/u/programagor)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 7:51am UTC](https://discuss.elastic.co/t/drop-old-messages-using-ruby-filter/151990 "2018-10-19T07:51:47Z")
Greetings Occasionally, my logstash receives a message from few days back, and logstash tries to write it into an index which was already marked as readonly and forcemerged. Logstash then receives a 403 error from Elast… --- ## [How to Convert response-time from string to number in Kibana 5.1](https://discuss.elastic.co/t/how-to-convert-response-time-from-string-to-number-in-kibana-5-1/80935)
**Author:** [@cnallapati](https://discuss.elastic.co/u/cnallapati)\ **Replies:** 7\ **Last updated:** [April 6, 2017, 4:32pm UTC](https://discuss.elastic.co/t/how-to-convert-response-time-from-string-to-number-in-kibana-5-1/80935 "2017-04-06T16:32:09Z")
Hello, Log data sending response-time in string format. So it is not showing in aggregations unless it's in number format. How to convert string to number in Painless script Kibana or any other alternative options? Pl… [Previous page](https://discuss.elastic.co/top.md?page=260&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=262&per_page=50&period=all)