# Top **URL:** https://discuss.elastic.co/top.md?page=317&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 318 --- ## [Grok regex with escaped "\[", "\]", "(", and ")" chars doesn't work](https://discuss.elastic.co/t/grok-regex-with-escaped-and-chars-doesnt-work/93842)
**Author:** [@timk519](https://discuss.elastic.co/u/timk519)\ **Replies:** 4\ **Last updated:** [July 31, 2017, 1:17pm UTC](https://discuss.elastic.co/t/grok-regex-with-escaped-and-chars-doesnt-work/93842 "2017-07-31T13:17:13Z")
Elastic newbie here - working with a new 5.5 install. I have a log line that looks like so: \[2015/10/01@19:48:22.785-0400\] P-4780 T-2208 I DBUTIL : (451) prostrct create session begin for timk519 on CON:. I… --- ## [Error: Unable to complete saved object migrations for the \[.kibana\_task\_manager\] index](https://discuss.elastic.co/t/error-unable-to-complete-saved-object-migrations-for-the-kibana-task-manager-index/309619)
**Author:** [@wonderland14](https://discuss.elastic.co/u/wonderland14)\ **Replies:** 5\ **Last updated:** [July 23, 2022, 11:25am UTC](https://discuss.elastic.co/t/error-unable-to-complete-saved-object-migrations-for-the-kibana-task-manager-index/309619 "2022-07-23T11:25:51Z")
Hi Elasticsearch Team, earlier I tried to close some indexes while performing Restore, and the Kibana turns down and not accessible. Can I have your help on this? {"type":"log","@timestamp":"2022-07-14T16:36:17+10:00",… --- ## [Wildcard usage in index pattern](https://discuss.elastic.co/t/wildcard-usage-in-index-pattern/58695)
**Author:** [@BorisS](https://discuss.elastic.co/u/BorisS)\ **Replies:** 1\ **Last updated:** [August 23, 2016, 8:13pm UTC](https://discuss.elastic.co/t/wildcard-usage-in-index-pattern/58695 "2016-08-23T20:13:21Z")
We can use a wildcard (\*) in index name if we want to search multiple indexes. All examples show wildcard at the end of the pattern. Can we place a wildcard in the middle of the pattern or have several wildcards in the s… --- ## [Mapping type is missing](https://discuss.elastic.co/t/mapping-type-is-missing/201577)
**Author:** [@Reena\_Raghavan](https://discuss.elastic.co/u/Reena_Raghavan)\ **Replies:** 8\ **Last updated:** [October 1, 2019, 7:40am UTC](https://discuss.elastic.co/t/mapping-type-is-missing/201577 "2019-10-01T07:40:21Z")
--- ## [@timestamp not match with the log date](https://discuss.elastic.co/t/timestamp-not-match-with-the-log-date/78551)
**Author:** [@Michael\_TRAN](https://discuss.elastic.co/u/Michael_TRAN)\ **Replies:** 8\ **Last updated:** [March 21, 2017, 10:33am UTC](https://discuss.elastic.co/t/timestamp-not-match-with-the-log-date/78551 "2017-03-21T10:33:10Z")
Hi guys, I'm new in the ELK universe. I have a trouble with the date of my log. On kibana, Timestamp shows the date when I put it on my server but not when the log were created. I try to modify my logstash configuration… --- ## [Performance different if searching on normal or keyword field?](https://discuss.elastic.co/t/performance-different-if-searching-on-normal-or-keyword-field/78692)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 6\ **Last updated:** [March 16, 2017, 7:20pm UTC](https://discuss.elastic.co/t/performance-different-if-searching-on-normal-or-keyword-field/78692 "2017-03-16T19:20:47Z")
Hi, is there a difference in performance / cpu usage if I search for the complete string of a field or if i search on the .keyword field? example: type: myLog1 versus type.keyword: mylog1 thanks, Andreas --- ## [New install - error setting certificate verify locations](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455)
**Author:** [@BRosenberg](https://discuss.elastic.co/u/BRosenberg)\ **Replies:** 8\ **Last updated:** [June 20, 2022, 8:05pm UTC](https://discuss.elastic.co/t/new-install-error-setting-certificate-verify-locations/307455 "2022-06-20T20:05:30Z")
Following the instructions here: Install Elasticsearch with Debian Package | Elasticsearch Guide \[8.2\] | Elastic Installing from apt on Ubuntu server 20.04 wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch … --- ## [Node not connected](https://discuss.elastic.co/t/node-not-connected/13866)
**Author:** [@Benoit](https://discuss.elastic.co/u/Benoit)\ **Replies:** 3\ **Last updated:** [October 9, 2013, 11:51am UTC](https://discuss.elastic.co/t/node-not-connected/13866 "2013-10-09T11:51:39Z")
Hi all, This morning, my two nodes cluster was in bad states. The first server was initially the master. after a long GC it seem's to have a network problem. The second server after 3 timeout ping become the … --- ## [Elasticsearch sizing calculation](https://discuss.elastic.co/t/elasticsearch-sizing-calculation/62835)
**Author:** [@sartsj](https://discuss.elastic.co/u/sartsj)\ **Replies:** 2\ **Last updated:** [October 13, 2016, 5:51am UTC](https://discuss.elastic.co/t/elasticsearch-sizing-calculation/62835 "2016-10-13T05:51:38Z")
I'm sorry if this question has been asked many times before, but the usual response to this types of questions seems that it depends on what you're planning on doing, so I figured I'd ask if my own calculations are corre… --- ## [Can we use regex check in if conditional?](https://discuss.elastic.co/t/can-we-use-regex-check-in-if-conditional/129786)
**Author:** [@RameshNagargoje](https://discuss.elastic.co/u/RameshNagargoje)\ **Replies:** 8\ **Last updated:** [April 30, 2018, 9:49am UTC](https://discuss.elastic.co/t/can-we-use-regex-check-in-if-conditional/129786 "2018-04-30T09:49:40Z")
Hi, I want to check if regex matched in if conditional then extract the line which is matched and add in ES. if regexMatched { add\_field for matched lines } --- ## [Mongodb input plugin for logstash](https://discuss.elastic.co/t/mongodb-input-plugin-for-logstash/57254)
**Author:** [@sivapuvvada](https://discuss.elastic.co/u/sivapuvvada)\ **Replies:** 8\ **Last updated:** [June 9, 2020, 6:02am UTC](https://discuss.elastic.co/t/mongodb-input-plugin-for-logstash/57254 "2020-06-09T06:02:00Z")
Anyone could you please provide me the link to download mongoDB input plugin for logstash --- ## [Extract/export Kibana charts to embed/inport them somewhere else](https://discuss.elastic.co/t/extract-export-kibana-charts-to-embed-inport-them-somewhere-else/716)
**Author:** [@lgs](https://discuss.elastic.co/u/lgs)\ **Replies:** 5\ **Last updated:** [May 15, 2015, 3:41am UTC](https://discuss.elastic.co/t/extract-export-kibana-charts-to-embed-inport-them-somewhere-else/716 "2015-05-15T03:41:23Z")
Is there a convenient way of snapshotting Kibana charts in static svg/png/jpg formats or CSS/javascript widgets eventually, to display or embed them within other application views outside Kibana? --- ## [Can not convert 'object' into 'string'](https://discuss.elastic.co/t/can-not-convert-object-into-string/97028)
**Author:** [@prophoto](https://discuss.elastic.co/u/prophoto)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 12:32pm UTC](https://discuss.elastic.co/t/can-not-convert-object-into-string/97028 "2017-08-16T12:32:09Z")
Getting these errors, did a ton of searching around but no luck. Running bitnam elki vm on debian. and filebeat on centos7. 2017-08-14T21:44:38Z INFO Home path: \[/usr/share/filebeat\] Config path: \[/etc/filebeat\] Data pa… --- ## [Reindex multiple indices from remote with the same name](https://discuss.elastic.co/t/reindex-multiple-indices-from-remote-with-the-same-name/171674)
**Author:** [@hokkun-dayo](https://discuss.elastic.co/u/hokkun-dayo)\ **Replies:** 4\ **Last updated:** [March 11, 2019, 11:04am UTC](https://discuss.elastic.co/t/reindex-multiple-indices-from-remote-with-the-same-name/171674 "2019-03-11T11:04:19Z")
I'd like to use Reindex API with remote and create indices with the same name as sources. I tried: POST \_reindex { "source": { "remote": { "host": "http://myremote:9200" }, "index": "source-\*" }, … --- ## [Filebeat package for AIX 7.1 and AIX 7.2 b versions](https://discuss.elastic.co/t/filebeat-package-for-aix-7-1-and-aix-7-2-b-versions/190577)
**Author:** [@ridhima](https://discuss.elastic.co/u/ridhima)\ **Replies:** 1\ **Last updated:** [July 16, 2019, 2:11pm UTC](https://discuss.elastic.co/t/filebeat-package-for-aix-7-1-and-aix-7-2-b-versions/190577 "2019-07-16T14:11:51Z")
We have filebeat package builded "filebeat-5.5.1-1.aix6.1.ppc.rpm" and it is working on AIX 6.1 . Can we use the same package on AIX 7.1 and AIX 7.2 versions ? if not what changes we have to do in filebeat-… --- ## [TLS Between Elastic & Kibana...Certs Not Working](https://discuss.elastic.co/t/tls-between-elastic-kibana-certs-not-working/236996)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 6\ **Last updated:** [June 21, 2020, 7:45am UTC](https://discuss.elastic.co/t/tls-between-elastic-kibana-certs-not-working/236996 "2020-06-21T07:45:52Z")
We have established TLS on our cluster (v7.7.1) by generating self-signed certificates as described in this document. Entire cluster seems to be working fine. However, to establish TLS between Kibana (residing on a sepa… --- ## [Failed to publish events caused by: EOF](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-eof/64356)
**Author:** [@s.vin](https://discuss.elastic.co/u/s.vin)\ **Replies:** 5\ **Last updated:** [October 31, 2016, 6:05pm UTC](https://discuss.elastic.co/t/failed-to-publish-events-caused-by-eof/64356 "2016-10-31T18:05:55Z")
Hello, I am running filebeat v5 and logstash version 5 as well. I have the pretty much identical filebeat config files on the local server (the one with the rest of the ELK stack) as a remote server. I am getting logs … --- ## [Disable Data Usage in Config File](https://discuss.elastic.co/t/disable-data-usage-in-config-file/222296)
**Author:** [@heydo](https://discuss.elastic.co/u/heydo)\ **Replies:** 1\ **Last updated:** [March 5, 2020, 2:31pm UTC](https://discuss.elastic.co/t/disable-data-usage-in-config-file/222296 "2020-03-05T14:31:21Z")
Hi, in Kibana, I get a notification "Help us improve the Elastic Stack". Is there a way to disable the usage data in the config files? Or alternatively to suppress banners in general using the config files? Thanks! --- ## [Get current time using ruby filter in logstash](https://discuss.elastic.co/t/get-current-time-using-ruby-filter-in-logstash/90084)
**Author:** [@sachintanpure85](https://discuss.elastic.co/u/sachintanpure85)\ **Replies:** 8\ **Last updated:** [June 20, 2017, 2:10pm UTC](https://discuss.elastic.co/t/get-current-time-using-ruby-filter-in-logstash/90084 "2017-06-20T14:10:46Z")
I need to add the filed value for my index as current time. like Updated\_date column value as current time. As reference of post :https://discuss.elastic.co/t/add-field-timestamp-with-current-time/59862 we need ruby f… --- ## [If statement in grok filter](https://discuss.elastic.co/t/if-statement-in-grok-filter/112186)
**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\ **Replies:** 2\ **Last updated:** [December 18, 2017, 10:27am UTC](https://discuss.elastic.co/t/if-statement-in-grok-filter/112186 "2017-12-18T10:27:35Z")
hi everyone! is there anyway to check aws logstream name in logstash grok filter? eg: filter { if "cloudwatch\_logs.log\_stream" == "TEST1" { grok { # type1 match =\> { "message" =\> \[ "^(?\\\d… --- ## [Logstash 6.0.0 Command Line error](https://discuss.elastic.co/t/logstash-6-0-0-command-line-error/98748)
**Author:** [@thomasdang](https://discuss.elastic.co/u/thomasdang)\ **Replies:** 6\ **Last updated:** [September 8, 2017, 1:09pm UTC](https://discuss.elastic.co/t/logstash-6-0-0-command-line-error/98748 "2017-09-08T13:09:18Z")
I’m testing out the Logstash 6.0.0 on Windows server 2012. Here’s the pipelines.yml (under directory C:\\logstash600\\config): - pipeline.id: winevents path.config: "C:/logstash600/pipelines/winevents.cfg" Here’s the f… --- ## [Kibana 7.13.1 Windows - kibana-encryption-keys](https://discuss.elastic.co/t/kibana-7-13-1-windows-kibana-encryption-keys/275695)
**Author:** [@KSib](https://discuss.elastic.co/u/KSib)\ **Replies:** 2\ **Last updated:** [June 12, 2021, 2:33pm UTC](https://discuss.elastic.co/t/kibana-7-13-1-windows-kibana-encryption-keys/275695 "2021-06-12T14:33:56Z")
Hi there, from a fresh install of Kibana, I see the following warnings log \[17:57:12.982\] \[info\]\[plugins\]\[taskManager\] TaskManager is identified by the Kibana UUID: 2e13faf3-b90d-44dd-bfe8-07962b2b6a2a log \[17:5… --- ## [Elastic Cloud custom domain?](https://discuss.elastic.co/t/elastic-cloud-custom-domain/214853)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 2\ **Last updated:** [January 20, 2020, 3:10pm UTC](https://discuss.elastic.co/t/elastic-cloud-custom-domain/214853 "2020-01-20T15:10:31Z")
When it is going to be possible to have a custom domain for elastic in cloud? like elastic.mydomain.com so that we can embed url in applications and doesnt change and can enable fw rules for that. --- ## [SOLUTION FOR ERROR \*\*\* Could not find or load main class Files\*\*\*](https://discuss.elastic.co/t/solution-for-error-could-not-find-or-load-main-class-files/145241)
**Author:** [@ARTUSO](https://discuss.elastic.co/u/ARTUSO)\ **Replies:** 0\ **Last updated:** [August 20, 2018, 8:51pm UTC](https://discuss.elastic.co/t/solution-for-error-could-not-find-or-load-main-class-files/145241 "2018-08-20T20:51:21Z")
Hi folks, For fix the error Could not find or load main class Files when to run logstash.bat, you must add quote in the environment variable %CLASSPATH%. See it below more detais: Before: %JAVA% %JAVA\_OPTS% -cp %C… --- ## [Java.io.StreamCorruptedException: invalid internal transport message format, got (3,41,4d,52)](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-3-41-4d-52/25247)
**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\ **Replies:** 3\ **Last updated:** [July 10, 2015, 3:57am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception-invalid-internal-transport-message-format-got-3-41-4d-52/25247 "2015-07-10T03:57:36Z")
Hi all. I have a 13 node cluster running 1.6.0: 3 dedicated masters 4 dedicated clients 6 dedicated data nodes All was well until one of the data nodes logged the following exception, and disconnected itself from m… --- ## [Default ingest pipeline for index](https://discuss.elastic.co/t/default-ingest-pipeline-for-index/77647)
**Author:** [@tipuban](https://discuss.elastic.co/u/tipuban)\ **Replies:** 0\ **Last updated:** [March 7, 2017, 11:43am UTC](https://discuss.elastic.co/t/default-ingest-pipeline-for-index/77647 "2017-03-07T11:43:46Z")
Hi there, Currently our application is ingesting data from multiple sources, and those sources don't always know about our ingest pipelines, which is why it would be very useful to allow setting of a default pipeline for… --- ## [Wildcard search with \_ (underscore) is giving no result](https://discuss.elastic.co/t/wildcard-search-with-underscore-is-giving-no-result/114010)
**Author:** [@RohanKumbhar](https://discuss.elastic.co/u/RohanKumbhar)\ **Replies:** 6\ **Last updated:** [January 4, 2018, 6:41am UTC](https://discuss.elastic.co/t/wildcard-search-with-underscore-is-giving-no-result/114010 "2018-01-04T06:41:43Z")
Hi Team, I facing the issue while using wild card search with query containing understore (\_) in it with elasticsearch version 6.0.1 And i'm using word\_delimiter\_filter for the field my\_field as mentioned in below quer… --- ## [Change data stream name in filebeat 8.\*](https://discuss.elastic.co/t/change-data-stream-name-in-filebeat-8/301531)
**Author:** [@Andres\_Altamirano](https://discuss.elastic.co/u/Andres_Altamirano)\ **Replies:** 6\ **Last updated:** [April 13, 2022, 3:58pm UTC](https://discuss.elastic.co/t/change-data-stream-name-in-filebeat-8/301531 "2022-04-13T15:58:35Z")
We used to store filebeat data from different sources in a different index due to storage size and document category using different ILM policies. Now we can't do that because if we use ILM, we can't change the index na… --- ## [Logstash: installing plugin results in certificate verify failed error](https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076)
**Author:** [@an.schall](https://discuss.elastic.co/u/an.schall)\ **Replies:** 1\ **Last updated:** [October 17, 2019, 3:31pm UTC](https://discuss.elastic.co/t/logstash-installing-plugin-results-in-certificate-verify-failed-error/204076 "2019-10-17T15:31:51Z")
Hi, I am behind a corporate firewall with SSL interception. As many people here in this forum, I receive an SSL-related error when installing a logstash plugin: root@kali:/etc/ssl/certs# /usr/share/logstash/bin/logstash… --- ## [How to set watcher condition when aggregations doc\_count greater then a value](https://discuss.elastic.co/t/how-to-set-watcher-condition-when-aggregations-doc-count-greater-then-a-value/242283)
**Author:** [@hanase](https://discuss.elastic.co/u/hanase)\ **Replies:** 2\ **Last updated:** [July 23, 2020, 9:31am UTC](https://discuss.elastic.co/t/how-to-set-watcher-condition-when-aggregations-doc-count-greater-then-a-value/242283 "2020-07-23T09:31:32Z")
Hi, I search heartbeat-\* indices when status is down and want to send message to telegram My DSL is , GET heartbeat-7.7.0\*/\_search { "query": { "bool": { "must": \[ { "match": { … --- ## [Memory consumption in io.netty.buffer.PoolThreadCache](https://discuss.elastic.co/t/memory-consumption-in-io-netty-buffer-poolthreadcache/103254)
**Author:** [@tberne](https://discuss.elastic.co/u/tberne)\ **Replies:** 1\ **Last updated:** [October 13, 2017, 8:21am UTC](https://discuss.elastic.co/t/memory-consumption-in-io-netty-buffer-poolthreadcache/103254 "2017-10-13T08:21:26Z")
Hi guys, I'm facing a large memory consumption in io.netty.buffer.PoolThreadCache. This is happening in our CI environment, where lots of tests are executed, and lots of index / search / delete are performed in ES. I … --- ## [Cannot access Kibana on port 5601](https://discuss.elastic.co/t/cannot-access-kibana-on-port-5601/174121)
**Author:** [@SubjectXXX](https://discuss.elastic.co/u/SubjectXXX)\ **Replies:** 6\ **Last updated:** [March 27, 2019, 9:08pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-on-port-5601/174121 "2019-03-27T21:08:47Z")
Greetings, I hope this is correct section for this kind of problems. Browser on http(s)://domain.name:5601 returns ERR\_CONNECTION\_RESET. If I do curl http://127.0.0.1:5601, I get empty response, nothing, no error. Er… --- ## [Possible to show multiple columns on a data table?](https://discuss.elastic.co/t/possible-to-show-multiple-columns-on-a-data-table/191880)
**Author:** [@cgmelastic](https://discuss.elastic.co/u/cgmelastic)\ **Replies:** 4\ **Last updated:** [July 25, 2019, 12:07pm UTC](https://discuss.elastic.co/t/possible-to-show-multiple-columns-on-a-data-table/191880 "2019-07-25T12:07:01Z")
I'm fairly proficient with Data Table visualizations, but have mostly kept them to 2-3 columns. E.G. |bucket|count| or something like |bucket|count|sibling aggregation|. Now I'd like to do something a little more compli… --- ## [Kibana service fails to start after upgrading from 4.5.1 to 5.0.0-alpha4](https://discuss.elastic.co/t/kibana-service-fails-to-start-after-upgrading-from-4-5-1-to-5-0-0-alpha4/55022)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [July 13, 2016, 1:18am UTC](https://discuss.elastic.co/t/kibana-service-fails-to-start-after-upgrading-from-4-5-1-to-5-0-0-alpha4/55022 "2016-07-13T01:18:10Z")
Hi ! I would like to confirm what I am trying to do is right thing or not. It looks like similar issue to https://github.com/elastic/kibana/issues/7475 but since its upgrade issue , I have created a new thread. Probl… --- ## [Could not find or load main class org.elasticsearch.tools.launchers.JavaVersionChecker](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-tools-launchers-javaversionchecker/120046)
**Author:** [@lengthy\_preamble](https://discuss.elastic.co/u/lengthy_preamble)\ **Replies:** 4\ **Last updated:** [February 17, 2018, 10:30pm UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class-org-elasticsearch-tools-launchers-javaversionchecker/120046 "2018-02-17T22:30:54Z")
I'm using CentOS and have downloaded Elasticsearch 6.2.1. I created a new user "elastic" and when I run ./bin/elasticsearch I get the error: Could not find or load main class org.elasticsearch.tools.launchers.JavaVersio… --- ## [How much clusters must I use in elastic stack?](https://discuss.elastic.co/t/how-much-clusters-must-i-use-in-elastic-stack/289735)
**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\ **Replies:** 1\ **Last updated:** [November 20, 2021, 7:10pm UTC](https://discuss.elastic.co/t/how-much-clusters-must-i-use-in-elastic-stack/289735 "2021-11-20T19:10:27Z")
I am confused which approach would be better having single cluster with 12 nodes or having 3 cluster with 4 nodes each in elastic stack. What are the advantages and disadvantages of single cluster? Does elastic charge me… --- ## [No config files found in path \[Need Help\]](https://discuss.elastic.co/t/no-config-files-found-in-path-need-help/227915)
**Author:** [@elktail](https://discuss.elastic.co/u/elktail)\ **Replies:** 6\ **Last updated:** [April 15, 2020, 2:48pm UTC](https://discuss.elastic.co/t/no-config-files-found-in-path-need-help/227915 "2020-04-15T14:48:16Z")
I am very new to ELK stack. I have installed ELK stack via debian package on Ubuntu Server. I made two changes in logstash.yml: config.reload.automatic: true config.reload.interval: 3s Despite these two changes every… --- ## [Ingesting JSON logs with filebeat and logstash](https://discuss.elastic.co/t/ingesting-json-logs-with-filebeat-and-logstash/286874)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 8\ **Last updated:** [October 19, 2021, 4:47am UTC](https://discuss.elastic.co/t/ingesting-json-logs-with-filebeat-and-logstash/286874 "2021-10-19T04:47:05Z")
I hope this messages finds the community member's safe and healthy. I am trying to ingest around 600 GB of logs spread across multiple JSON files. Here are few lings of logs (these are scrubbed DNS logs) {"timestamp":"… --- ## [What is difference between BASIC, Gold, Platinum Enterprise 'Elasticsearch'](https://discuss.elastic.co/t/what-is-difference-between-basic-gold-platinum-enterprise-elasticsearch/140872)
**Author:** [@katiyar](https://discuss.elastic.co/u/katiyar)\ **Replies:** 3\ **Last updated:** [July 20, 2018, 10:50am UTC](https://discuss.elastic.co/t/what-is-difference-between-basic-gold-platinum-enterprise-elasticsearch/140872 "2018-07-20T10:50:45Z")
What is difference between BASIC, Gold, Platinum Enterprise 'Elasticsearch' ? --- ## [Custom queries in kibana](https://discuss.elastic.co/t/custom-queries-in-kibana/91313)
**Author:** [@philv](https://discuss.elastic.co/u/philv)\ **Replies:** 2\ **Last updated:** [June 30, 2017, 9:42pm UTC](https://discuss.elastic.co/t/custom-queries-in-kibana/91313 "2017-06-30T21:42:04Z")
Is there a way to run custom queries (more complex ones using Elastic Search syntax) in kibana ? I can see you can run such a query in the Console, but not sure how I could run this in the Discover panel. I'd like to be … --- ## [Custom Logs Ingest Pipeline](https://discuss.elastic.co/t/custom-logs-ingest-pipeline/294409)
**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\ **Replies:** 8\ **Last updated:** [January 24, 2022, 9:34am UTC](https://discuss.elastic.co/t/custom-logs-ingest-pipeline/294409 "2022-01-24T09:34:47Z")
@ruflin This is more or less a duplicate of Fleet Custom Logs Ingest Pipeline, but I still find it hard to figure out which steps I have to follow. I would really appreciate better documentation or some useful direction… --- ## [How to list the array type field](https://discuss.elastic.co/t/how-to-list-the-array-type-field/120308)
**Author:** [@Eric\_Yin](https://discuss.elastic.co/u/Eric_Yin)\ **Replies:** 5\ **Last updated:** [February 27, 2018, 5:24pm UTC](https://discuss.elastic.co/t/how-to-list-the-array-type-field/120308 "2018-02-27T17:24:21Z")
Dear ELK developers, It seems that we cannot list the array type field based on the data table of visualization. It Only can show the max, sum, count value which is not the raw array value. There are some requirements … --- ## [Sorting on a boolean field](https://discuss.elastic.co/t/sorting-on-a-boolean-field/21491)
**Author:** [@mbaker](https://discuss.elastic.co/u/mbaker)\ **Replies:** 3\ **Last updated:** [January 12, 2015, 8:44am UTC](https://discuss.elastic.co/t/sorting-on-a-boolean-field/21491 "2015-01-12T08:44:19Z")
I would like to sort the results of a query such that all of the records with a value of true in the expires field will be at the top. I am not using relevance for sorting. I tried adding this as a sort, but it doesn… --- ## [Jdbc: record\_last\_run always saves 2017-01-01 as last run date](https://discuss.elastic.co/t/jdbc-record-last-run-always-saves-2017-01-01-as-last-run-date/85972)
**Author:** [@sivabalan19](https://discuss.elastic.co/u/sivabalan19)\ **Replies:** 3\ **Last updated:** [May 19, 2017, 12:45pm UTC](https://discuss.elastic.co/t/jdbc-record-last-run-always-saves-2017-01-01-as-last-run-date/85972 "2017-05-19T12:45:39Z")
Hi , I am using Logstash 5.4.0. Trying to pull all the new records that are in my Db after my last run. Below is my configuration. However, I am finding the content of the file mentioned in last\_run\_metadata\_path alwa… --- ## [Merge multiple indices in one](https://discuss.elastic.co/t/merge-multiple-indices-in-one/220543)
**Author:** [@Norman\_Khine](https://discuss.elastic.co/u/Norman_Khine)\ **Replies:** 6\ **Last updated:** [February 24, 2020, 11:13am UTC](https://discuss.elastic.co/t/merge-multiple-indices-in-one/220543 "2020-02-24T11:13:19Z")
Hello, We have an ES cluster that stores daily indexes, like elb-2020.01.09 logs. Apart from Index Life Cycle, is there are other ways to merge all elb-2020.01.\* indexes into elb-2020.01 index and then delete all the e… --- ## [Error in visualisation; \[esaggs\] \> when trying to load a dashboard](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081)
**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\ **Replies:** 6\ **Last updated:** [December 29, 2020, 8:45am UTC](https://discuss.elastic.co/t/error-in-visualisation-esaggs-when-trying-to-load-a-dashboard/259081 "2020-12-29T08:45:35Z")
Hello, We are using 4 dashboards in Kibana, of which 3 are working just fine. The 4th one however always crashes when loading more than the last 7 days. When loading the last 30 days, we get 1 or 2 'Error in visualizati… --- ## [Unable to remotely access ES server hosted on AWS EC2 on port 9200](https://discuss.elastic.co/t/unable-to-remotely-access-es-server-hosted-on-aws-ec2-on-port-9200/33243)
**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\ **Replies:** 6\ **Last updated:** [October 30, 2015, 8:22am UTC](https://discuss.elastic.co/t/unable-to-remotely-access-es-server-hosted-on-aws-ec2-on-port-9200/33243 "2015-10-30T08:22:28Z")
Hi, I upgraded an existing 1.7 installation to 2.0 and installed marvel and kibana on the same server. By SSHing to the server and doing curl command I am able to index, search and do everything possible on the cluster… --- ## [Template is missing](https://discuss.elastic.co/t/template-is-missing/21692)
**Author:** [@Gabriele\_Angeli\_2](https://discuss.elastic.co/u/Gabriele_Angeli_2)\ **Replies:** 4\ **Last updated:** [September 28, 2016, 6:00pm UTC](https://discuss.elastic.co/t/template-is-missing/21692 "2016-09-28T18:00:29Z")
i guys, I try to put a new template in ES 1.3.6 but i always obtain the same result: {"error":"ActionRequestValidationException\[Validation Failed: 1: template is missing;\]","status":500} Someone know something about… --- ## [Proper Configuration for SMTP Email Action in Watcher?](https://discuss.elastic.co/t/proper-configuration-for-smtp-email-action-in-watcher/92114)
**Author:** [@ccampbell](https://discuss.elastic.co/u/ccampbell)\ **Replies:** 6\ **Last updated:** [July 6, 2017, 8:23pm UTC](https://discuss.elastic.co/t/proper-configuration-for-smtp-email-action-in-watcher/92114 "2017-07-06T20:23:27Z")
I've been digging through the forum and the X-Pack Documentation but can't seem to find the right configuration for Watcher to send email through an SMTP connection. The Watch is executing correctly, but it cannot seem t… --- ## [Logstash input TCP with TLS and handshake](https://discuss.elastic.co/t/logstash-input-tcp-with-tls-and-handshake/70126)
**Author:** [@alesnav](https://discuss.elastic.co/u/alesnav)\ **Replies:** 2\ **Last updated:** [December 28, 2016, 12:54pm UTC](https://discuss.elastic.co/t/logstash-input-tcp-with-tls-and-handshake/70126 "2016-12-28T12:54:50Z")
Hello there! I am trying to set up Logstash input TCP plugin with TLS enabled to receive logs from rsyslog using rsyslog-gnutls; and encountered one problem related to SSL handshake. I tried with gnutls and openssl w… [Previous page](https://discuss.elastic.co/top.md?page=316&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=318&per_page=50&period=all)