# Top **URL:** https://discuss.elastic.co/top.md?page=292&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 293 --- ## [Painless: problem accessing nested object using dot notation](https://discuss.elastic.co/t/painless-problem-accessing-nested-object-using-dot-notation/150599)
**Author:** [@rozling](https://discuss.elastic.co/u/rozling)\ **Replies:** 3\ **Last updated:** [October 14, 2018, 10:53pm UTC](https://discuss.elastic.co/t/painless-problem-accessing-nested-object-using-dot-notation/150599 "2018-10-14T22:53:36Z")
Hi, I'm having problems reindexing data using a painless script. The nested field context.data.result is mapped as an object in the destination index, but in some cases the source data is either a string or an array of… --- ## [How to uninstall Filebeat using Yum](https://discuss.elastic.co/t/how-to-uninstall-filebeat-using-yum/53555)
**Author:** [@keya](https://discuss.elastic.co/u/keya)\ **Replies:** 2\ **Last updated:** [June 21, 2016, 6:43pm UTC](https://discuss.elastic.co/t/how-to-uninstall-filebeat-using-yum/53555 "2016-06-21T18:43:18Z")
Hi, I am trying to install Filebeat-alpha version on a machine which already had an older version of filebeat running. How can I upgrade to Filebeat-alpha. I tried to follow install instructions for alpha version but I … --- ## [How to remove a cluster setting?](https://discuss.elastic.co/t/how-to-remove-a-cluster-setting/18778)
**Author:** [@Jeffrey\_Zhou](https://discuss.elastic.co/u/Jeffrey_Zhou)\ **Replies:** 3\ **Last updated:** [January 15, 2015, 10:20pm UTC](https://discuss.elastic.co/t/how-to-remove-a-cluster-setting/18778 "2015-01-15T22:20:31Z")
I made the following setting to my Elasticsearch cluster in order to decommission some old nodes in the cluster. After removed these old nodes, now I need to re-enable the cluster to allocate shards on those '10.0.6.… --- ## [\[CH\] ES Meetup in Geneva - Switzerland - 26th October 2016](https://discuss.elastic.co/t/ch-es-meetup-in-geneva-switzerland-26th-october-2016/63002)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [October 13, 2016, 9:27pm UTC](https://discuss.elastic.co/t/ch-es-meetup-in-geneva-switzerland-26th-october-2016/63002 "2016-10-13T21:27:20Z")
For our next ES meetup in Switzerland, we're thrilled to announce a fantastic line-up: David Pilato (@dadoonet from Elastic) will be there to talk about the new Ingest nodes in ES 5.0 Jérôme Steunenberger (from Clev… --- ## [Boundaries - When to use Kibana/ES and when NOT to use](https://discuss.elastic.co/t/boundaries-when-to-use-kibana-es-and-when-not-to-use/208232)
**Author:** [@lbi2000](https://discuss.elastic.co/u/lbi2000)\ **Replies:** 1\ **Last updated:** [November 20, 2019, 3:39am UTC](https://discuss.elastic.co/t/boundaries-when-to-use-kibana-es-and-when-not-to-use/208232 "2019-11-20T03:39:45Z")
I work for a major IT services enterprise that builds analytics solutions for our clients. We have aggressively dug our heals into leveraging/using ElasticSearch and Kibana in places where other RDBMS + Web-SQL-Visua… --- ## [Parsing array of json objects with logstash and injesting to elastic](https://discuss.elastic.co/t/parsing-array-of-json-objects-with-logstash-and-injesting-to-elastic/203197)
**Author:** [@Sidharth\_Sinha](https://discuss.elastic.co/u/Sidharth_Sinha)\ **Replies:** 8\ **Last updated:** [October 15, 2019, 11:49pm UTC](https://discuss.elastic.co/t/parsing-array-of-json-objects-with-logstash-and-injesting-to-elastic/203197 "2019-10-15T23:49:24Z")
Hi, I am trying to injest data from logstash to elastic, and have this array of json objects, such that each element in the array is a doc in elasticsearch, with the key name as the keys in the json. \[ {"name"… --- ## [Dec 16th, 2017: \[FR\]\[Elasticsearch\] Tests de performance pour votre plugin Elasticsearch](https://discuss.elastic.co/t/dec-16th-2017-fr-elasticsearch-tests-de-performance-pour-votre-plugin-elasticsearch/109105)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 16, 2017, 12:00am UTC](https://discuss.elastic.co/t/dec-16th-2017-fr-elasticsearch-tests-de-performance-pour-votre-plugin-elasticsearch/109105 "2017-12-16T00:00:09Z")
Tests de performance pour votre plugin Elasticsearch Imaginons que nous ayons développé un nouveau plugin Ingest pour Elasticsearch. Se pose la question de l'impact éventuel sur les performances lors de l'insertion de n… --- ## [Add current timestamp to a logstash\_processed\_at field](https://discuss.elastic.co/t/add-current-timestamp-to-a-logstash-processed-at-field/109745)
**Author:** [@Claude\_Sanderson](https://discuss.elastic.co/u/Claude_Sanderson)\ **Replies:** 5\ **Last updated:** [December 1, 2017, 6:47am UTC](https://discuss.elastic.co/t/add-current-timestamp-to-a-logstash-processed-at-field/109745 "2017-12-01T06:47:27Z")
Currently there are a lot of FIlebeat instances in our infrastructure. All of them are sending tons of logs to a single Logstash endpoint. Some logs are not in json and come as a text. For example, Postfix logs. Each … --- ## [Overlapping date range](https://discuss.elastic.co/t/overlapping-date-range/29105)
**Author:** [@td583](https://discuss.elastic.co/u/td583)\ **Replies:** 0\ **Last updated:** [September 11, 2015, 8:44am UTC](https://discuss.elastic.co/t/overlapping-date-range/29105 "2015-09-11T08:44:06Z")
Hi I want to retrieve overlapping time ranges for every product\_id. Product\_id's have multiple time ranges (every status change is a new record, so also a new time range). I've already tried it in MySQL and the query l… --- ## [Query Multiple Indexes, but apply queries to specific index](https://discuss.elastic.co/t/query-multiple-indexes-but-apply-queries-to-specific-index/127858)
**Author:** [@Airn5475](https://discuss.elastic.co/u/Airn5475)\ **Replies:** 5\ **Last updated:** [April 13, 2018, 1:03pm UTC](https://discuss.elastic.co/t/query-multiple-indexes-but-apply-queries-to-specific-index/127858 "2018-04-13T13:03:16Z")
I am querying two indexes. They both have the same field. I want to apply one of my queries to one of the indexes and not both. Here's an extremely basic example that represents what I'm trying to do: PUT places { … --- ## [Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/230858)
**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\ **Replies:** 8\ **Last updated:** [May 5, 2020, 2:43pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/230858 "2020-05-05T14:43:51Z")
hi, I've been trying to simulate a Kibana to Elastic Connection. (As per the Link it was related to Kibana OSS, but I tried both Kibana and Kibana-oss, but still no luck.) ./bin/kibana --version 7.6.2 cat custom/co… --- ## [Logstash OutOfMemoryError: Direct buffer memory](https://discuss.elastic.co/t/logstash-outofmemoryerror-direct-buffer-memory/286473)
**Author:** [@Muthu\_Ramachandran\_K](https://discuss.elastic.co/u/Muthu_Ramachandran_K)\ **Replies:** 2\ **Last updated:** [October 19, 2021, 3:41am UTC](https://discuss.elastic.co/t/logstash-outofmemoryerror-direct-buffer-memory/286473 "2021-10-19T03:41:15Z")
Hi, we are using filebeat-\> logstash -\> elastic setup. The set up was working fine without any issues, but recently we noticed that logstash is going down frequently and we could see the below error. can anyone suggest … --- ## [Timelion: how to scale y axis?](https://discuss.elastic.co/t/timelion-how-to-scale-y-axis/75490)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [February 18, 2017, 1:37pm UTC](https://discuss.elastic.co/t/timelion-how-to-scale-y-axis/75490 "2017-02-18T13:37:25Z")
Hi, my values which are shown in a timelion chart are in percent. How can I scale the y axis to a fix range from 0 to 100? --- ## [If conditional with multiple outputs](https://discuss.elastic.co/t/if-conditional-with-multiple-outputs/178201)
**Author:** [@davidbien](https://discuss.elastic.co/u/davidbien)\ **Replies:** 6\ **Last updated:** [April 24, 2019, 11:34am UTC](https://discuss.elastic.co/t/if-conditional-with-multiple-outputs/178201 "2019-04-24T11:34:33Z")
Hi, I have the following configuration in my logstash atm. input { redis { host =\> "\[elasticb.0001.us1.cache.amazonaws.com\]" port =\> 6379 key =\> "filebeat" data\_type =\> "list" } }… --- ## [Elastic Stack 6.6.1 and 5.6.15 security update](https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [February 19, 2019, 5:09pm UTC](https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077 "2019-02-19T17:09:47Z")
Kibana XSS issue (ESA-2019-01) Kibana versions before 5.6.15 and 6.6.1 had a cross-site scripting (XSS) vulnerability that could allow an attacker to obtain sensitive information from or perform destructive actions on b… --- ## [Logstash Multiple File Inputs](https://discuss.elastic.co/t/logstash-multiple-file-inputs/36397)
**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\ **Replies:** 2\ **Last updated:** [December 5, 2015, 9:57am UTC](https://discuss.elastic.co/t/logstash-multiple-file-inputs/36397 "2015-12-05T09:57:03Z")
Hi, Would appreciate a pointer with regard to using multiple file inputs. This works:- input { file { path =\> \[ "//server\_1/Logs/\*", "//server\_2/Logs/\*", "//server\_2/Logs/\*", "//server\_2/Logs/\*",… --- ## [Problem looping through array in each doc with Painless](https://discuss.elastic.co/t/problem-looping-through-array-in-each-doc-with-painless/90648)
**Author:** [@davecranwell](https://discuss.elastic.co/u/davecranwell)\ **Replies:** 3\ **Last updated:** [June 26, 2017, 9:34am UTC](https://discuss.elastic.co/t/problem-looping-through-array-in-each-doc-with-painless/90648 "2017-06-26T09:34:34Z")
Mapping: mappings": { "alert": { "properties": { "history": { "properties": { "category": { "type": "text", "field… --- ## [Logstash S3 input plugin configuration read files from multiple directories](https://discuss.elastic.co/t/logstash-s3-input-plugin-configuration-read-files-from-multiple-directories/170888)
**Author:** [@prabhakar\_talari](https://discuss.elastic.co/u/prabhakar_talari)\ **Replies:** 0\ **Last updated:** [March 5, 2019, 11:52am UTC](https://discuss.elastic.co/t/logstash-s3-input-plugin-configuration-read-files-from-multiple-directories/170888 "2019-03-05T11:52:21Z")
Hi All, We have requirement which is little bit different to write configuration logstash. Below are the files and location details s3bucket/logs/prod/todate/prod.txt s3bucket/logs/dev/todate/dev.txt The input confi… --- ## [Delete assign replica shards](https://discuss.elastic.co/t/delete-assign-replica-shards/229741)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 7\ **Last updated:** [April 27, 2020, 1:35am UTC](https://discuss.elastic.co/t/delete-assign-replica-shards/229741 "2020-04-27T01:35:26Z")
How can I delete replica shards without harming the primary shards? I have to delete the only replica shards I am using elasticsearch version-7.6.2 Please, help me here? Thanks in advance --- ## [X-pack and kibana: Client request error: unable to verify the first certificate](https://discuss.elastic.co/t/x-pack-and-kibana-client-request-error-unable-to-verify-the-first-certificate/64765)
**Author:** [@develxy](https://discuss.elastic.co/u/develxy)\ **Replies:** 5\ **Last updated:** [February 23, 2017, 4:52pm UTC](https://discuss.elastic.co/t/x-pack-and-kibana-client-request-error-unable-to-verify-the-first-certificate/64765 "2017-02-23T16:52:26Z")
Hi, I am evaluating the use of Elasticsearch, Kibana and x-pack 5 and downloaded them, then I followed https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html#enable-message-authentication https… --- ## [Setting Logstash to run as a service and start on reboot](https://discuss.elastic.co/t/setting-logstash-to-run-as-a-service-and-start-on-reboot/168353)
**Author:** [@bradfordaemorton](https://discuss.elastic.co/u/bradfordaemorton)\ **Replies:** 7\ **Last updated:** [February 18, 2019, 1:52pm UTC](https://discuss.elastic.co/t/setting-logstash-to-run-as-a-service-and-start-on-reboot/168353 "2019-02-18T13:52:00Z")
When I log out of an interactive terminal Filebeat and Logstash seem to run in the foreground and stop. Elasticsearch and Kibana services are running OK. This just might be that my Linux fu is not up to scratch but how … --- ## [Need to change 9300 port to connect](https://discuss.elastic.co/t/need-to-change-9300-port-to-connect/18057)
**Author:** [@Ashish\_Raniwala](https://discuss.elastic.co/u/Ashish_Raniwala)\ **Replies:** 2\ **Last updated:** [June 12, 2014, 4:40pm UTC](https://discuss.elastic.co/t/need-to-change-9300-port-to-connect/18057 "2014-06-12T16:40:57Z")
Hi, I want to deploy ES on a server which already has another application using 9300 port. When I start ES, it automatically select next free port like 9302 which is expected. Problem is that I am unable to con… --- ## [Caught exception while handling client http traffic, closing connection](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection/10162)
**Author:** [@effektz](https://discuss.elastic.co/u/effektz)\ **Replies:** 5\ **Last updated:** [October 14, 2016, 9:27am UTC](https://discuss.elastic.co/t/caught-exception-while-handling-client-http-traffic-closing-connection/10162 "2016-10-14T09:27:49Z")
Running into an issue on elastic. Right now elastic is not returning anything, and this is the only thing that keeps being output to the log file: \[2012-12-23 16:30:29,270\]\[WARN \]\[http.netty \] \[Lykos… --- ## [Getting started with JDBC Input Plugin](https://discuss.elastic.co/t/getting-started-with-jdbc-input-plugin/77162)
**Author:** [@matt40413](https://discuss.elastic.co/u/matt40413)\ **Replies:** 2\ **Last updated:** [March 5, 2017, 9:54pm UTC](https://discuss.elastic.co/t/getting-started-with-jdbc-input-plugin/77162 "2017-03-05T21:54:00Z")
Hi, so i've been trying to find some documentation on the JDBC Input Plugin. Since it seems like this is the ideal route taking in what im trying to do: Essentially, I have a table in a Postgres Database that im wantin… --- ## [Change Kibana UI language from English to German](https://discuss.elastic.co/t/change-kibana-ui-language-from-english-to-german/202520)
**Author:** [@astrobalaji](https://discuss.elastic.co/u/astrobalaji)\ **Replies:** 1\ **Last updated:** [October 7, 2019, 2:21pm UTC](https://discuss.elastic.co/t/change-kibana-ui-language-from-english-to-german/202520 "2019-10-07T14:21:46Z")
Hey guys, I recently had a request from my colleague if we can change the UI language of Kibana from English to German or any other language. Is it possible? Thanks in advance. Cheers, Balaji --- ## [Exiting: data path already locked by another beat](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat/220854)
**Author:** [@artherdent](https://discuss.elastic.co/u/artherdent)\ **Replies:** 3\ **Last updated:** [March 6, 2020, 1:52pm UTC](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat/220854 "2020-03-06T13:52:13Z")
Hi, i am new to Elasticstack and am trying to configure filebeat to send logs to logstash-7.6.0. When running ./filebeat -e -c filebeat.yml -d "publish" i am recieving Exiting: data path already locked by another bea… --- ## [Spring Data Version Compatibility with ES 6.x compatibility](https://discuss.elastic.co/t/spring-data-version-compatibility-with-es-6-x-compatibility/175384)
**Author:** [@Dibyakanta](https://discuss.elastic.co/u/Dibyakanta)\ **Replies:** 8\ **Last updated:** [April 5, 2019, 12:22pm UTC](https://discuss.elastic.co/t/spring-data-version-compatibility-with-es-6-x-compatibility/175384 "2019-04-05T12:22:11Z")
Hi, I have my Spring Data version as 3.0.5 and ElasticSearch version as 5.6.10. Now, I want to migrate Elasticsearch version to 6.x. So, will my Spring data be compatible with ElasticSearch 6.x version. Thank you --- ## [Production Mode vs Development Mode in Elastic & Kibana](https://discuss.elastic.co/t/production-mode-vs-development-mode-in-elastic-kibana/91074)
**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\ **Replies:** 5\ **Last updated:** [June 28, 2017, 10:04am UTC](https://discuss.elastic.co/t/production-mode-vs-development-mode-in-elastic-kibana/91074 "2017-06-28T10:04:44Z")
Hi All, What is the difference between the elastic search & Kibana in dev mode and Prod mode or how we can identify the server is running in Prod mode or Dev Mode. According to the docs https://www.elastic.co/guide/e… --- ## [Can't get Logstash to read existing Kafka topic from start](https://discuss.elastic.co/t/cant-get-logstash-to-read-existing-kafka-topic-from-start/73306)
**Author:** [@ankh](https://discuss.elastic.co/u/ankh)\ **Replies:** 7\ **Last updated:** [February 23, 2017, 4:50am UTC](https://discuss.elastic.co/t/cant-get-logstash-to-read-existing-kafka-topic-from-start/73306 "2017-02-23T04:50:22Z")
I'm trying to consume a Kafka topic using Logstash, for indexing by Elasticsearch. The Kafka events are JSON documents. We recently upgraded our Elastic Stack to 5.1.2. I believe that I was able to consume the topic … --- ## [Pod has unbound immediate PersistentVolumeClaims](https://discuss.elastic.co/t/pod-has-unbound-immediate-persistentvolumeclaims/223788)
**Author:** [@tillias](https://discuss.elastic.co/u/tillias)\ **Replies:** 5\ **Last updated:** [March 17, 2020, 11:28am UTC](https://discuss.elastic.co/t/pod-has-unbound-immediate-persistentvolumeclaims/223788 "2020-03-17T11:28:31Z")
Hello, I'm trying to deploy ECK into Open Telekom Cloud. Before I have tested it in GCP Kubernetes Engine and it works like a charm. Unfortunately I have some problem in Open Telekom Cloud related to PersistentVolumeCl… --- ## [Search query issue using "term" and spaces](https://discuss.elastic.co/t/search-query-issue-using-term-and-spaces/3186)
**Author:** [@elasticsearcher](https://discuss.elastic.co/u/elasticsearcher)\ **Replies:** 6\ **Last updated:** [August 4, 2010, 7:14pm UTC](https://discuss.elastic.co/t/search-query-issue-using-term-and-spaces/3186 "2010-08-04T19:14:55Z")
Sorry to bother you about another probably-simple issue I'm having. When I'm using a query to search, with the "term" query, and the field I'm searching for has a space in it, I can't find it. When there is no space i… --- ## [Fetching position of keyword in matched document](https://discuss.elastic.co/t/fetching-position-of-keyword-in-matched-document/94291)
**Author:** [@hugo53](https://discuss.elastic.co/u/hugo53)\ **Replies:** 5\ **Last updated:** [July 29, 2017, 3:52am UTC](https://discuss.elastic.co/t/fetching-position-of-keyword-in-matched-document/94291 "2017-07-29T03:52:45Z")
Hello there, I'm trying to highlight searched keyword in matched document with some custom works. Therefore, I need to know position (or offset) of that keyword in document. However, I found no documentation showing cl… --- ## [Is there a ping function available?](https://discuss.elastic.co/t/is-there-a-ping-function-available/17151)
**Author:** [@Stefan\_Kruse](https://discuss.elastic.co/u/Stefan_Kruse)\ **Replies:** 2\ **Last updated:** [April 23, 2014, 6:42pm UTC](https://discuss.elastic.co/t/is-there-a-ping-function-available/17151 "2014-04-23T18:42:54Z")
Hi, does the PHP API Version a PING Function has included? I know the PING Function from Solar, its to check if the server is available and if not you can make a Fallback. Or how is the best way to check if the elast… --- ## [How to handle Multiple Config files in logstash](https://discuss.elastic.co/t/how-to-handle-multiple-config-files-in-logstash/107520)
**Author:** [@Arun\_Raj](https://discuss.elastic.co/u/Arun_Raj)\ **Replies:** 8\ **Last updated:** [November 14, 2017, 12:18pm UTC](https://discuss.elastic.co/t/how-to-handle-multiple-config-files-in-logstash/107520 "2017-11-14T12:18:39Z")
Hi All I am trying to load two different configurations (different data filters for each ) at a time on single command line I tried the below : from command line ( sudo bin/logstash -f /etc/logstash/conf.d/logstash.c… --- ## [Unable to install Elasticsearch - problem with public key](https://discuss.elastic.co/t/unable-to-install-elasticsearch-problem-with-public-key/154907)
**Author:** [@khalid\_iqbal](https://discuss.elastic.co/u/khalid_iqbal)\ **Replies:** 3\ **Last updated:** [November 1, 2018, 7:07pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-problem-with-public-key/154907 "2018-11-01T19:07:42Z")
Dear Elastic Community, I installed Ubuntu on my PC through virtual Box and I am trying to install / explore Elastic. When in entered following command: sudo apt-get update && sudo apt-get install elasticsearch I got … --- ## [Nested Json to parse](https://discuss.elastic.co/t/nested-json-to-parse/101494)
**Author:** [@gius78](https://discuss.elastic.co/u/gius78)\ **Replies:** 8\ **Last updated:** [September 29, 2017, 7:10am UTC](https://discuss.elastic.co/t/nested-json-to-parse/101494 "2017-09-29T07:10:36Z")
Hi all again, I know this topic has been discussed in tha past, but I am a newbie in this world and could not be able to apply to my case the solutions provided in the old discussions. I have to parse a log like this: … --- ## [Delete by query api - ClusterBlockException\[blocked by: \[FORBIDDEN/8/index write (api)\];\] status": 403](https://discuss.elastic.co/t/delete-by-query-api-clusterblockexception-blocked-by-forbidden-8-index-write-api-status-403/21082)
**Author:** [@pmiles\_mail](https://discuss.elastic.co/u/pmiles_mail)\ **Replies:** 8\ **Last updated:** [April 28, 2017, 3:48am UTC](https://discuss.elastic.co/t/delete-by-query-api-clusterblockexception-blocked-by-forbidden-8-index-write-api-status-403/21082 "2017-04-28T03:48:42Z")
Hi, I'm trying to delete data by query from our elastic search cluster. If i run the delete on the current active index it works fine. However if i try to run the delete against an older index ( which is still o… --- ## [PGP keys fails to install no valid openPGP data found](https://discuss.elastic.co/t/pgp-keys-fails-to-install-no-valid-openpgp-data-found/32710)
**Author:** [@yoram](https://discuss.elastic.co/u/yoram)\ **Replies:** 3\ **Last updated:** [October 8, 2016, 4:49pm UTC](https://discuss.elastic.co/t/pgp-keys-fails-to-install-no-valid-openpgp-data-found/32710 "2016-10-08T16:49:10Z")
Hi, I am new to the elastic search technology and exploring my option with log analysis using Elastic search. The first step that I saw in installing Elasticsearch in to install the PGP key as follows: "wget -qO - http… --- ## [How to elasticsearch return all hits](https://discuss.elastic.co/t/how-to-elasticsearch-return-all-hits/133373)
**Author:** [@Ho\_Duc\_Khoa](https://discuss.elastic.co/u/Ho_Duc_Khoa)\ **Replies:** 1\ **Last updated:** [May 26, 2018, 5:34am UTC](https://discuss.elastic.co/t/how-to-elasticsearch-return-all-hits/133373 "2018-05-26T05:34:25Z")
Code : $client = ClientBuilder::create()-\>build(); $params = \[ 'index' =\> 'rbmq', 'type' =\> 'users', 'body' =\> \[ 'query' =\> \[ 'match' =\> \[ 'email' =\> \[ 'query' =\>'@gmail.com', 'operator'=\>'and' \] \], \] \] \]; $results = $c… --- ## [Defining Custom analyzers globally](https://discuss.elastic.co/t/defining-custom-analyzers-globally/27826)
**Author:** [@pavang6](https://discuss.elastic.co/u/pavang6)\ **Replies:** 4\ **Last updated:** [August 26, 2015, 11:58am UTC](https://discuss.elastic.co/t/defining-custom-analyzers-globally/27826 "2015-08-26T11:58:26Z")
We have created our own custom analyzer definition based on our application-wide needs and that is quite different from available analyzers in ElasticSearch like standard or classical analyzers. We have around 30 indic… --- ## [Can I use comments in JSON request to ES?](https://discuss.elastic.co/t/can-i-use-comments-in-json-request-to-es/100312)
**Author:** [@Freyja](https://discuss.elastic.co/u/Freyja)\ **Replies:** 2\ **Last updated:** [September 13, 2017, 11:12am UTC](https://discuss.elastic.co/t/can-i-use-comments-in-json-request-to-es/100312 "2017-09-13T11:12:05Z")
I created a quite complicated request to ES (I send it via curl), so I wanted to add a bit of documentation to it. I read that JSON does not allow comments, but I put a comment of type /\* ... \*/ inside the request and i… --- ## [Logstash logrotate](https://discuss.elastic.co/t/logstash-logrotate/2530)
**Author:** [@lpurbaelk](https://discuss.elastic.co/u/lpurbaelk)\ **Replies:** 3\ **Last updated:** [September 22, 2016, 8:01am UTC](https://discuss.elastic.co/t/logstash-logrotate/2530 "2016-09-22T08:01:43Z")
Hello all, I have been googling topic about logrotate on logstash file, such as logstash.log and logstash.stdout, for some reason I couldn't make logrotate working. My logstash.log and logstash.stdout are pretty inte… --- ## [Metrics and Time-series Analysis Megathread](https://discuss.elastic.co/t/metrics-and-time-series-analysis-megathread/28136)
**Author:** [@polyfractal](https://discuss.elastic.co/u/polyfractal)\ **Replies:** 2\ **Last updated:** [February 6, 2017, 10:34pm UTC](https://discuss.elastic.co/t/metrics-and-time-series-analysis-megathread/28136 "2017-02-06T22:34:44Z")
With the release of Elasticsearch 2.0.0-beta1, a new aggregation feature is now available for testing: Pipeline Aggregations. Pipeline aggregations are a new type of agg that can be used to perform processing on aggreg… --- ## [Hour Scripted Field](https://discuss.elastic.co/t/hour-scripted-field/263416)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 4\ **Last updated:** [February 9, 2021, 10:53pm UTC](https://discuss.elastic.co/t/hour-scripted-field/263416 "2021-02-09T22:53:33Z")
I am trying to create a scripted field that is the hourly value of each document. The ultimate goal is to filter by specific hours of the day for multiple days (hence why I can't just use the date range on the dashboard… --- ## [Access for Kibana -\>Share -\> CSV Report -\> Generate CSV](https://discuss.elastic.co/t/access-for-kibana-share-csv-report-generate-csv/214840)
**Author:** [@ginu](https://discuss.elastic.co/u/ginu)\ **Replies:** 2\ **Last updated:** [January 13, 2020, 2:42pm UTC](https://discuss.elastic.co/t/access-for-kibana-share-csv-report-generate-csv/214840 "2020-01-13T14:42:25Z")
Hi I have a user with the role which can "read" and "write" access on an index. but when the user tries to Share the content of and index using Share -\> CSV Report -\> Generate CSV user get "Reporting error " \> For… --- ## [All shards failed](https://discuss.elastic.co/t/all-shards-failed/242935)
**Author:** [@Alvaro\_Sanz](https://discuss.elastic.co/u/Alvaro_Sanz)\ **Replies:** 8\ **Last updated:** [August 3, 2020, 6:49am UTC](https://discuss.elastic.co/t/all-shards-failed/242935 "2020-08-03T06:49:13Z")
Hello, I am running elastic Stack (beats -\> logstash -\> elasticsearch -\> kibana). It is a single server (no cluster) that is collecting data from 10 or so servers (auditbeat and filebeat). Today, it stopped working. I … --- ## [Date filter not working \[Solved\]](https://discuss.elastic.co/t/date-filter-not-working-solved/50348)
**Author:** [@ruival](https://discuss.elastic.co/u/ruival)\ **Replies:** 1\ **Last updated:** [May 18, 2016, 4:41pm UTC](https://discuss.elastic.co/t/date-filter-not-working-solved/50348 "2016-05-18T16:41:46Z")
Hi all, my first post on logstash forum :spy: i'm reading events from database using logstash. The events are indexed in elasticsearch. There is a event\_timestamp in the table , the column name is "EVENT\_TIMESTAMP" … --- ## [UTF8 encoding is longer than the max length 32766](https://discuss.elastic.co/t/utf8-encoding-is-longer-than-the-max-length-32766/816)
**Author:** [@avin](https://discuss.elastic.co/u/avin)\ **Replies:** 3\ **Last updated:** [May 18, 2015, 10:05pm UTC](https://discuss.elastic.co/t/utf8-encoding-is-longer-than-the-max-length-32766/816 "2015-05-18T22:05:07Z")
I have a requirement to store a text larger than 64K. I dont want to index it, but still while inserting into the index, I see the following exception. IllegalArgumentException\[Document contains at least one immense t… --- ## [How to read microseconds in grok like hh:mm:ss.SSSSSS](https://discuss.elastic.co/t/how-to-read-microseconds-in-grok-like-hh-mm-ss-ssssss/64792)
**Author:** [@Ramesh\_Janagam](https://discuss.elastic.co/u/Ramesh_Janagam)\ **Replies:** 2\ **Last updated:** [November 8, 2016, 5:38am UTC](https://discuss.elastic.co/t/how-to-read-microseconds-in-grok-like-hh-mm-ss-ssssss/64792 "2016-11-08T05:38:08Z")
Hi I need help on how to read microseconds from my log. Seconds format ss.SSS is working fine but not ss.SSSSSS. Is there anyway read value? When verify %{TIME:logtime} its working fine in online grok debugger but failed… --- ## [Logstasg config error The given configuration is invalid. Reason: Expected one of #, {, } at line 13, column 44 (byte 286) after filter {](https://discuss.elastic.co/t/logstasg-config-error-the-given-configuration-is-invalid-reason-expected-one-of-at-line-13-column-44-byte-286-after-filter/113739)
**Author:** [@Abdur\_Raqeeb1](https://discuss.elastic.co/u/Abdur_Raqeeb1)\ **Replies:** 2\ **Last updated:** [January 2, 2018, 12:21pm UTC](https://discuss.elastic.co/t/logstasg-config-error-the-given-configuration-is-invalid-reason-expected-one-of-at-line-13-column-44-byte-286-after-filter/113739 "2018-01-02T12:21:04Z")
Myself getting an below error while testing the config file The given configuration is invalid. Reason: Expected one of #, {, } at line 13, column 135 (byte 377) after filter { if \[type\] == "syslog" { grok { match =\> … [Previous page](https://discuss.elastic.co/top.md?page=291&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=293&per_page=50&period=all)