# Top **URL:** https://discuss.elastic.co/top.md?page=323&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 324 --- ## [Ingest custom nginx log format](https://discuss.elastic.co/t/ingest-custom-nginx-log-format/170005)
**Author:** [@tback](https://discuss.elastic.co/u/tback)\ **Replies:** 1\ **Last updated:** [February 27, 2019, 8:59am UTC](https://discuss.elastic.co/t/ingest-custom-nginx-log-format/170005 "2019-02-27T08:59:55Z")
I'm using filebeat, my setup is pretty plain: I index nginx log files. Now I wan't to log just one more field ($http\_host). Let's say I prefix every line with that: access\_log /var/log/nginx/access.log main becomes lo… --- ## [Configuring logstash-input-syslog](https://discuss.elastic.co/t/configuring-logstash-input-syslog/130502)
**Author:** [@static](https://discuss.elastic.co/u/static)\ **Replies:** 4\ **Last updated:** [May 4, 2018, 10:36am UTC](https://discuss.elastic.co/t/configuring-logstash-input-syslog/130502 "2018-05-04T10:36:36Z")
Hi guys! I absolutely love the ELK stack - please keep up the great work. Background: We have an Ubuntu 16.04 rsyslog server collecting syslogs from various servers and network equipment. I've been tasked with trying to… --- ## [ES 5 Transport : java.lang.NoSuchMethodError: io.netty.buffer.CompositeByteBuf.addComponents](https://discuss.elastic.co/t/es-5-transport-java-lang-nosuchmethoderror-io-netty-buffer-compositebytebuf-addcomponents/65267)
**Author:** [@quent](https://discuss.elastic.co/u/quent)\ **Replies:** 4\ **Last updated:** [November 9, 2016, 3:14am UTC](https://discuss.elastic.co/t/es-5-transport-java-lang-nosuchmethoderror-io-netty-buffer-compositebytebuf-addcomponents/65267 "2016-11-09T03:14:06Z")
Hi everyone, After fixing the error with log4j as recommended here. I have now the following error: Exception in thread "main" java.lang.NoSuchMethodError: io.netty.buffer.CompositeByteBuf.addComponents(ZLjava/lan… --- ## [Org.elasticsearch.transport.NodeNotConnectedException](https://discuss.elastic.co/t/org-elasticsearch-transport-nodenotconnectedexception/11496)
**Author:** [@ElasticUsers](https://discuss.elastic.co/u/ElasticUsers)\ **Replies:** 5\ **Last updated:** [April 11, 2013, 8:11am UTC](https://discuss.elastic.co/t/org-elasticsearch-transport-nodenotconnectedexception/11496 "2013-04-11T08:11:10Z")
Hi Team, We are using using Java web application to search indices. Sometimes we are getting the following error - 2013-04-04 08:34:45,980 WARNING \[org.elasticsearch.client.transport\] (WorkManager(2)-5) \[Death'… --- ## [Kibana Management missing Role Management](https://discuss.elastic.co/t/kibana-management-missing-role-management/112878)
**Author:** [@neil\_sm](https://discuss.elastic.co/u/neil_sm)\ **Replies:** 7\ **Last updated:** [December 23, 2017, 7:55am UTC](https://discuss.elastic.co/t/kibana-management-missing-role-management/112878 "2017-12-23T07:55:51Z")
Hello. In the current X-Pack documentation it says can manage roles and users in kibana: Role Management UI If you are a Kibana user, make sure to install X-Pack in Kibana. This enables you to easily manage users and… --- ## [Redis Vs Kafka Vs RabbitMQ in ELK](https://discuss.elastic.co/t/redis-vs-kafka-vs-rabbitmq-in-elk/55212)
**Author:** [@kamal\_bisht](https://discuss.elastic.co/u/kamal_bisht)\ **Replies:** 6\ **Last updated:** [July 12, 2016, 5:35am UTC](https://discuss.elastic.co/t/redis-vs-kafka-vs-rabbitmq-in-elk/55212 "2016-07-12T05:35:49Z")
Hi I am going to use ELK for my log analysis/monitoring. I need to use broker between logstash shipper and logstash indexer. Which tool Redis or Kafka or RabbitMQ I should use for this ? Please help me on this. --- ## [How to sum field?](https://discuss.elastic.co/t/how-to-sum-field/214471)
**Author:** [@ja123](https://discuss.elastic.co/u/ja123)\ **Replies:** 4\ **Last updated:** [January 10, 2020, 11:21pm UTC](https://discuss.elastic.co/t/how-to-sum-field/214471 "2020-01-10T23:21:50Z")
I've got many docs in elasticsearch and I want to sum the field Verspätung by the field Linie. When I say Kibana to sum the Verspätung , it sums all Verspätung fields of result. So I got following : Linie Sum… --- ## [How to send NULL DATE value to elasticsearch using logstash](https://discuss.elastic.co/t/how-to-send-null-date-value-to-elasticsearch-using-logstash/49560)
**Author:** [@baneshbanna](https://discuss.elastic.co/u/baneshbanna)\ **Replies:** 7\ **Last updated:** [May 10, 2016, 10:04am UTC](https://discuss.elastic.co/t/how-to-send-null-date-value-to-elasticsearch-using-logstash/49560 "2016-05-10T10:04:49Z")
Hi, Its a blocker to me. I am not able to send NULL DATE value to the elasticsearch using logstash. null value storing as string in elasticsearch. if actual comes with proper date like 2012-01-01 11:11:11 it is also str… --- ## [Elastic cluster: docker or VM for production?](https://discuss.elastic.co/t/elastic-cluster-docker-or-vm-for-production/203567)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 6\ **Last updated:** [October 21, 2019, 6:48am UTC](https://discuss.elastic.co/t/elastic-cluster-docker-or-vm-for-production/203567 "2019-10-21T06:48:10Z")
We have to use 3 old servers as Elasticsearch cluster. Each server is CPU(s): 32 Thread(s) per core: 2 Model name: Intel(R) Xeon(R) CPU E5-2630 v3 @ 2.40GHz Memory: 94GB … --- ## [TOO\_MANY\_REQUESTS/12/disk usage exceeded](https://discuss.elastic.co/t/too-many-requests-12-disk-usage-exceeded/280753)
**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\ **Replies:** 3\ **Last updated:** [August 23, 2021, 1:29am UTC](https://discuss.elastic.co/t/too-many-requests-12-disk-usage-exceeded/280753 "2021-08-23T01:29:42Z")
Recently credentials are failing in the Kibana web interface. Checking the logs there is an error indicating disk usage is exceeded. {"type":"log","@timestamp":"2021-08-08T20:41:52-05:00","tags":\["error","plugins","apm… --- ## [Full GC Allocation Failure](https://discuss.elastic.co/t/full-gc-allocation-failure/52167)
**Author:** [@pecwich](https://discuss.elastic.co/u/pecwich)\ **Replies:** 3\ **Last updated:** [June 9, 2016, 2:30am UTC](https://discuss.elastic.co/t/full-gc-allocation-failure/52167 "2016-06-09T02:30:26Z")
Hi, My cluster just crashed and the error was showing full GC Allocation failure. What can be the reason?? --- ## [Multiple FileBeats](https://discuss.elastic.co/t/multiple-filebeats/153114)
**Author:** [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\ **Replies:** 6\ **Last updated:** [October 23, 2018, 10:30am UTC](https://discuss.elastic.co/t/multiple-filebeats/153114 "2018-10-23T10:30:49Z")
Hi all, Apologies if this is a really dumb question, but been reading so much think I am getting myself confused. I have a filebeat agent running on a machine and its reporting back to my ELK stack server. When I had a… --- ## [Error loading kibana on a web browser - 503 service unavailable](https://discuss.elastic.co/t/error-loading-kibana-on-a-web-browser-503-service-unavailable/260520)
**Author:** [@prajwal93](https://discuss.elastic.co/u/prajwal93)\ **Replies:** 5\ **Last updated:** [January 12, 2021, 10:03am UTC](https://discuss.elastic.co/t/error-loading-kibana-on-a-web-browser-503-service-unavailable/260520 "2021-01-12T10:03:34Z")
I have an ELK cluster running and I have trouble loading Kibana in my web browser. It was working fine until 3 days before I made a change to logstash configuration. I installed Logstash-amazon\_es plugin, used to load da… --- ## [OS setting "transparent huge pages"](https://discuss.elastic.co/t/os-setting-transparent-huge-pages/628)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 6\ **Last updated:** [May 18, 2015, 1:15pm UTC](https://discuss.elastic.co/t/os-setting-transparent-huge-pages/628 "2015-05-18T13:15:16Z")
Hi. I've come across the transparent\_hugepage setting which is enabled by default in newer Linux distributions. It hurts all kinds of databases, Redis, Oracle, TokuDB, and this is no surprise as RedHat says that "THP is… --- ## [Kibana4 search requests time out](https://discuss.elastic.co/t/kibana4-search-requests-time-out/24631)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 5\ **Last updated:** [July 10, 2015, 5:22am UTC](https://discuss.elastic.co/t/kibana4-search-requests-time-out/24631 "2015-07-10T05:22:27Z")
Hey guys, we are using Kibana4 in development now quite a while and created some rather nice dashboards, containing some a hand full of visualizations. It happens now or than, that someone want to search for a long per… --- ## [500 error and some troubles when I search](https://discuss.elastic.co/t/500-error-and-some-troubles-when-i-search/172721)
**Author:** [@Lin\_Zhu](https://discuss.elastic.co/u/Lin_Zhu)\ **Replies:** 6\ **Last updated:** [March 19, 2019, 11:14am UTC](https://discuss.elastic.co/t/500-error-and-some-troubles-when-i-search/172721 "2019-03-19T11:14:03Z")
I'm a beginner, and when I use it, I feel confused. like I write 500+ documents into an index, but when I search it, I wish all can be viewed, but just five, I don't know why. And when I use Chinese as input, it has 500 … --- ## [Python APM Agent for Flask doesn't report metrics](https://discuss.elastic.co/t/python-apm-agent-for-flask-doesnt-report-metrics/223083)
**Author:** [@francois.tarlier](https://discuss.elastic.co/u/francois.tarlier)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 2:45pm UTC](https://discuss.elastic.co/t/python-apm-agent-for-flask-doesnt-report-metrics/223083 "2020-03-13T14:45:54Z")
I'm trying to do a simple example in Flask by following the documentation and online tutorials to see how the flask integration works. I managed to have the span and request working, but I have no metrics reported in Ki… --- ## [Updating node certificate on existing cluster](https://discuss.elastic.co/t/updating-node-certificate-on-existing-cluster/243413)
**Author:** [@TonyLuc](https://discuss.elastic.co/u/TonyLuc)\ **Replies:** 2\ **Last updated:** [August 3, 2020, 5:52pm UTC](https://discuss.elastic.co/t/updating-node-certificate-on-existing-cluster/243413 "2020-08-03T17:52:34Z")
Hello there, How to Update node certificate on existing cluster? On-Premise using Version 7.8.0 Node certificate about to expiry. The trusted chain (CAs) remains the same just new node certificate being issued. Where… --- ## [How to use multiple indices for single dashboard](https://discuss.elastic.co/t/how-to-use-multiple-indices-for-single-dashboard/150154)
**Author:** [@MithunPallakki](https://discuss.elastic.co/u/MithunPallakki)\ **Replies:** 3\ **Last updated:** [September 27, 2018, 11:43am UTC](https://discuss.elastic.co/t/how-to-use-multiple-indices-for-single-dashboard/150154 "2018-09-27T11:43:01Z")
Hello, Is it possible to use multiple indices to plot single dashboard? Overview:- We are running Jmeter scripts on different environment like Dev, test and Pre-Prod, we want all the results in the same dashboard. can… --- ## [Multi output for multi prospectors](https://discuss.elastic.co/t/multi-output-for-multi-prospectors/67861)
**Author:** [@YLombardi](https://discuss.elastic.co/u/YLombardi)\ **Replies:** 1\ **Last updated:** [December 2, 2016, 3:36pm UTC](https://discuss.elastic.co/t/multi-output-for-multi-prospectors/67861 "2016-12-02T15:36:03Z")
I use ELK 5.0.1 + Filebeat 5.0.1. On my server I have 2 kind of prospectors : - json logs - text logs Currently, I configure Filebeat to send the json logs directly to elasticsearch. This works fine. Now I want to… --- ## [More memory or more CPU cores help better performance?](https://discuss.elastic.co/t/more-memory-or-more-cpu-cores-help-better-performance/23457)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 8\ **Last updated:** [April 30, 2015, 7:55am UTC](https://discuss.elastic.co/t/more-memory-or-more-cpu-cores-help-better-performance/23457 "2015-04-30T07:55:57Z")
hi, I am building ES on cloud Virtual machines, the cloud platform provides different tier VMs to choose, say, 4 CPU cores, 28G memory, or 8 CPU cores, 14G memory etc. Different kind VM has different cost. To save o… --- ## [Deprecated document\_type in Logstash 6](https://discuss.elastic.co/t/deprecated-document-type-in-logstash-6/107814)
**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Replies:** 3\ **Last updated:** [November 17, 2017, 8:00pm UTC](https://discuss.elastic.co/t/deprecated-document-type-in-logstash-6/107814 "2017-11-17T20:00:49Z")
Hello, See in the breaking Changes (Breaking changes | Logstash Reference \[8.11\] | Elastic) that: "The default document\_type has changed from logs to doc for consistency with Beats" What does this mean for me? I am… --- ## [Frequency aggregation](https://discuss.elastic.co/t/frequency-aggregation/121946)
**Author:** [@queenstownswords](https://discuss.elastic.co/u/queenstownswords)\ **Replies:** 0\ **Last updated:** [February 28, 2018, 10:05pm UTC](https://discuss.elastic.co/t/frequency-aggregation/121946 "2018-02-28T22:05:34Z")
Howdy, Given: each event with timestamp is already in an index. Problem: I am looking for a way to aggregate (percentile) the frequency of events. For example, between the hours of 8am and 5pm, what is the load in t… --- ## [java.lang.String cannot be cast to java.util.Map while starting kibana 7.5.1](https://discuss.elastic.co/t/java-lang-string-cannot-be-cast-to-java-util-map-while-starting-kibana-7-5-1/213543)
**Author:** [@Arunan\_Ramanathan](https://discuss.elastic.co/u/Arunan_Ramanathan)\ **Replies:** 6\ **Last updated:** [January 19, 2020, 11:26am UTC](https://discuss.elastic.co/t/java-lang-string-cannot-be-cast-to-java-util-map-while-starting-kibana-7-5-1/213543 "2020-01-19T11:26:09Z")
I enabled xpack security in Elasticsearch and it is working fine, I can able to do CRUD in elasticsearch using username/password. Now I downloaded kibana and enabled the following, Blockquote elasticsearch.hosts: \["ht… --- ## [Cannot figure out how to set a username and password with X-Pack in docker](https://discuss.elastic.co/t/cannot-figure-out-how-to-set-a-username-and-password-with-x-pack-in-docker/186145)
**Author:** [@weskerfoot](https://discuss.elastic.co/u/weskerfoot)\ **Replies:** 4\ **Last updated:** [June 24, 2019, 12:11pm UTC](https://discuss.elastic.co/t/cannot-figure-out-how-to-set-a-username-and-password-with-x-pack-in-docker/186145 "2019-06-24T12:11:06Z")
The documentation here https://www.elastic.co/guide/en/x-pack/current/setting-up-authentication.html#set-built-in-user-passwords States that we can use "bin/x-pack/setup-passwords interactive" to set a password. I am t… --- ## [Kibana 4.6.2 released with a security fix for an XSS vulnerability](https://discuss.elastic.co/t/kibana-4-6-2-released-with-a-security-fix-for-an-xss-vulnerability/63807)
**Author:** [@Court](https://discuss.elastic.co/u/Court)\ **Replies:** 0\ **Last updated:** [October 24, 2016, 10:00pm UTC](https://discuss.elastic.co/t/kibana-4-6-2-released-with-a-security-fix-for-an-xss-vulnerability/63807 "2016-10-24T22:00:46Z")
Today, we've published Kibana 4.6.2 as a security release with a fix for an XSS vulnerability with field formatters. Any users of Kibana versions 4.3 to 4.6 are encouraged to update to 4.6.2 immediately. Kibana version 4… --- ## [Downgrading to the previous version of elasticsearch](https://discuss.elastic.co/t/downgrading-to-the-previous-version-of-elasticsearch/34740)
**Author:** [@mramaprasad](https://discuss.elastic.co/u/mramaprasad)\ **Replies:** 5\ **Last updated:** [November 17, 2015, 9:55pm UTC](https://discuss.elastic.co/t/downgrading-to-the-previous-version-of-elasticsearch/34740 "2015-11-17T21:55:06Z")
I am running elasticsearch1.1.1. I am planning to upgrade our test and production cluster to elasticsearch 2.0. I would like to know the steps if I want to revert back to 1.1.1 if the upgrade does not go well. Thanks … --- ## [CLI for creating index-pattens in .kibana in 6.2.x](https://discuss.elastic.co/t/cli-for-creating-index-pattens-in-kibana-in-6-2-x/119361)
**Author:** [@parky118](https://discuss.elastic.co/u/parky118)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 4:42pm UTC](https://discuss.elastic.co/t/cli-for-creating-index-pattens-in-kibana-in-6-2-x/119361 "2018-02-12T16:42:10Z")
Previously in 5.1.2 we used to use the following cURL commands to programmatically create the default index and other indexes within Kibana: curl -XPUT http://localhost:9200/.kibana/index-pattern/\* -d '{"title":"", "tim… --- ## [Elastic index snapshot and restore daily](https://discuss.elastic.co/t/elastic-index-snapshot-and-restore-daily/57358)
**Author:** [@newelasticuser](https://discuss.elastic.co/u/newelasticuser)\ **Replies:** 5\ **Last updated:** [August 5, 2016, 4:43pm UTC](https://discuss.elastic.co/t/elastic-index-snapshot-and-restore-daily/57358 "2016-08-05T16:43:36Z")
Is it possible to snapshot the index by date and time? Wanted to know if snapshots can be done by date and time and can it be restored for particular date and time? What's the syntax for backingup by date and time using … --- ## [ElasticSearch 6.3.2 Could not create JVM when start](https://discuss.elastic.co/t/elasticsearch-6-3-2-could-not-create-jvm-when-start/144856)
**Author:** [@zhuzixiao](https://discuss.elastic.co/u/zhuzixiao)\ **Replies:** 1\ **Last updated:** [August 17, 2018, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-6-3-2-could-not-create-jvm-when-start/144856 "2018-08-17T10:23:51Z")
I have just installed elastic search 6.3.2 on my win 10 pc from msi package. But when I tried to start the elasticsearch.exe in the command line, I was promted some issues related to JVM version. The error messages are: … --- ## [Aggregation exception](https://discuss.elastic.co/t/aggregation-exception/171410)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 4\ **Last updated:** [March 11, 2019, 4:41pm UTC](https://discuss.elastic.co/t/aggregation-exception/171410 "2019-03-11T16:41:31Z")
This aggregation creates too many buckets (10001) and will throw an error in future versions. You should update the \[search.max\_buckets\] cluster setting or use the \[ composite\] aggregation to paginate all buckets in mul… --- ## [How do I get to see elasticsearch own logs in a dockerized elasticsearch?](https://discuss.elastic.co/t/how-do-i-get-to-see-elasticsearch-own-logs-in-a-dockerized-elasticsearch/236839)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 6\ **Last updated:** [June 19, 2020, 10:45am UTC](https://discuss.elastic.co/t/how-do-i-get-to-see-elasticsearch-own-logs-in-a-dockerized-elasticsearch/236839 "2020-06-19T10:45:11Z")
Dear community, i dockerized elasticsearch like this: esnode1: image: docker.elastic.co/elasticsearch/elasticsearch:7.7.1 container\_name: esnode1 environment: - node.name=esnode1 - cluster.name=es-on-docker - disc… --- ## [Transport response handler not found of](https://discuss.elastic.co/t/transport-response-handler-not-found-of/62808)
**Author:** [@caecilie](https://discuss.elastic.co/u/caecilie)\ **Replies:** 6\ **Last updated:** [October 12, 2016, 2:24pm UTC](https://discuss.elastic.co/t/transport-response-handler-not-found-of/62808 "2016-10-12T14:24:55Z")
I have two server, both with logstash 2.4.0 and elasticsearch 2.4.0. I found the following warnings in the elasticsearch log on my master node: \[2016-10-12 14:34:33,957\]\[INFO \]\[cluster.metadata \] \[node-2\] \[fil… --- ## [Logstash jdbc plugin input for mutliple table joins of one to many relationships](https://discuss.elastic.co/t/logstash-jdbc-plugin-input-for-mutliple-table-joins-of-one-to-many-relationships/59933)
**Author:** [@Syed\_Ather](https://discuss.elastic.co/u/Syed_Ather)\ **Replies:** 4\ **Last updated:** [April 13, 2017, 2:42pm UTC](https://discuss.elastic.co/t/logstash-jdbc-plugin-input-for-mutliple-table-joins-of-one-to-many-relationships/59933 "2017-04-13T14:42:28Z")
HI All, I have two tables linked in a one to many relationship , i.e for each row in first table there will be multiple rows in second table . One employee can have many orders assigned to them . ex : how can i a… --- ## [What kind of init script support will we get?](https://discuss.elastic.co/t/what-kind-of-init-script-support-will-we-get/32810)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 7\ **Last updated:** [April 11, 2016, 2:43pm UTC](https://discuss.elastic.co/t/what-kind-of-init-script-support-will-we-get/32810 "2016-04-11T14:43:14Z")
One of the biggest issues I have with LSF is getting "service logstash-forwarder " to work on all my servers. Ubuntu is easy, but CentOS and OES/SLES were painful. On OES/SLES I ended up just using monit to make it work. … --- ## [Percentage after aggregation](https://discuss.elastic.co/t/percentage-after-aggregation/63174)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 5\ **Last updated:** [October 20, 2016, 1:04pm UTC](https://discuss.elastic.co/t/percentage-after-aggregation/63174 "2016-10-20T13:04:58Z")
Hello, i'm running a ssh server and i would like to keep an eye on users that are trying to connect to my server using wrong passwords. available logs are : ( OK/KO ) Oct 16 23:34:40 xxxxxxx xxxxxxx\[26557\]: User to… --- ## [How to uninstall Elastic search 8.0 version in windows](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721)
**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\ **Replies:** 6\ **Last updated:** [May 16, 2022, 4:01am UTC](https://discuss.elastic.co/t/how-to-uninstall-elastic-search-8-0-version-in-windows/304721 "2022-05-16T04:01:33Z")
I want to uninstall Elasticsearch 8.0 version in Windows . Is there a Command that i can use to have it uninstalled completely . Thnks --- ## [How to map fields with dynamic keys](https://discuss.elastic.co/t/how-to-map-fields-with-dynamic-keys/76284)
**Author:** [@besson](https://discuss.elastic.co/u/besson)\ **Replies:** 8\ **Last updated:** [February 26, 2017, 9:17am UTC](https://discuss.elastic.co/t/how-to-map-fields-with-dynamic-keys/76284 "2017-02-26T09:17:57Z")
Hi guys, I need to add some dynamic fields into my documents but those fields have dynamic keys like this example: \[ { "loc\_42": 0.5, "loc\_21": 0.7 }, { "loc\_42": 0.5, "loc\_15": 0.8, "loc\_… --- ## [Kibana 5 | apply regex on scripted fields](https://discuss.elastic.co/t/kibana-5-apply-regex-on-scripted-fields/66898)
**Author:** [@jerome831361](https://discuss.elastic.co/u/jerome831361)\ **Replies:** 6\ **Last updated:** [December 13, 2016, 8:19pm UTC](https://discuss.elastic.co/t/kibana-5-apply-regex-on-scripted-fields/66898 "2016-12-13T20:19:33Z")
Hello, I'm using Kibana to view my logs. I have some URLs like this: /myapp/bla/bla/test.shtml;jsessionid=3CF74CA6abht48753DA243C5338222EE.jvmid?show=blaa At the moment, I'm using the following regex in logstash to… --- ## [Compare fields of different index](https://discuss.elastic.co/t/compare-fields-of-different-index/11325)
**Author:** [@harshyadav](https://discuss.elastic.co/u/harshyadav)\ **Replies:** 4\ **Last updated:** [March 30, 2013, 10:34am UTC](https://discuss.elastic.co/t/compare-fields-of-different-index/11325 "2013-03-30T10:34:42Z")
Please provide solution ASAP. I have two different index and i want to compare two fields value and get result which exist in different index for example :- Index 1: message fields :- 1. message id … --- ## [Elasticsearch service fails to start](https://discuss.elastic.co/t/elasticsearch-service-fails-to-start/113470)
**Author:** [@ShilpiRachna](https://discuss.elastic.co/u/ShilpiRachna)\ **Replies:** 3\ **Last updated:** [December 29, 2017, 10:04am UTC](https://discuss.elastic.co/t/elasticsearch-service-fails-to-start/113470 "2017-12-29T10:04:27Z")
We are using Elasticsearch version 5.4.1 on Windows 10. We have an automation that does the following: Installs Java at a known location (JAVA\_HOME is always defined in System environment variable) Install Elastic… --- ## [Bulk API returns 201 or 200 but no documents in index (confused)](https://discuss.elastic.co/t/bulk-api-returns-201-or-200-but-no-documents-in-index-confused/44240)
**Author:** [@surbas](https://discuss.elastic.co/u/surbas)\ **Replies:** 5\ **Last updated:** [April 10, 2016, 7:55pm UTC](https://discuss.elastic.co/t/bulk-api-returns-201-or-200-but-no-documents-in-index-confused/44240 "2016-04-10T19:55:22Z")
Hello I am using the elasticsearch-py python client to bulk index a bunch of documents. I currently am experimenting with elasticsearch on the cloud. My workflow is: delete index 'blah' if exist create index 'blah' … --- ## [How different are Elasticsearch and OpenSearch?](https://discuss.elastic.co/t/how-different-are-elasticsearch-and-opensearch/343691)
**Author:** [@heermaas3](https://discuss.elastic.co/u/heermaas3)\ **Replies:** 6\ **Last updated:** [September 25, 2023, 2:48pm UTC](https://discuss.elastic.co/t/how-different-are-elasticsearch-and-opensearch/343691 "2023-09-25T14:48:50Z")
I wanted to ask for a neutral opinion on the differences between Elasticsearch and OpenSearch. Are there differences in use/integrating them into my Software? Do I have to write different code to use both of them? Can … --- ## [How to index / search hotel date availability](https://discuss.elastic.co/t/how-to-index-search-hotel-date-availability/148227)
**Author:** [@glo](https://discuss.elastic.co/u/glo)\ **Replies:** 6\ **Last updated:** [October 6, 2018, 9:54pm UTC](https://discuss.elastic.co/t/how-to-index-search-hotel-date-availability/148227 "2018-10-06T21:54:45Z")
Hi All, Relatively new to Elastic - so far loving it. Finding it challenging breaking away from relational databases and denormalizing data in a way that I can access quickly. We run a hotel search system and are tryin… --- ## [Know if one or more indexes are marked as read only](https://discuss.elastic.co/t/know-if-one-or-more-indexes-are-marked-as-read-only/224585)
**Author:** [@Veeresh\_Reddy](https://discuss.elastic.co/u/Veeresh_Reddy)\ **Replies:** 1\ **Last updated:** [March 23, 2020, 10:53am UTC](https://discuss.elastic.co/t/know-if-one-or-more-indexes-are-marked-as-read-only/224585 "2020-03-23T10:53:40Z")
When an elastic index moves into a read only state, it can prevent additional data being written to the cluster. Typically a read only state occurs when an index in on a node that reaches 85% disk space used. The cluste… --- ## [Kibana server is not ready yet suddenly](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-suddenly/235654)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 9:15am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-suddenly/235654 "2020-06-04T09:15:06Z")
everything was fine until suddenly it appears "Kibana server is not ready yet". i have 1 master node (master), and 1 data node(node-1). It was working fine days until i realize. master:9200 \[root@localhost kibana\]# cur… --- ## [Tracking column not found in dataset](https://discuss.elastic.co/t/tracking-column-not-found-in-dataset/216377)
**Author:** [@legolas\_bilbao](https://discuss.elastic.co/u/legolas_bilbao)\ **Replies:** 7\ **Last updated:** [January 28, 2020, 9:10am UTC](https://discuss.elastic.co/t/tracking-column-not-found-in-dataset/216377 "2020-01-28T09:10:15Z")
Good morning, I've an issue with the tracking\_column with the mysql plug-in. the conf.d input { jdbc { jdbc\_connection\_string =\> "jdbc:mysql://localhost:3306/KPIS?useSSL=false" jdbc\_user =\> "labo" jdbc\_p… --- ## [Stop logstash after processing the file](https://discuss.elastic.co/t/stop-logstash-after-processing-the-file/84959)
**Author:** [@skairam](https://discuss.elastic.co/u/skairam)\ **Replies:** 3\ **Last updated:** [May 9, 2017, 6:18pm UTC](https://discuss.elastic.co/t/stop-logstash-after-processing-the-file/84959 "2017-05-09T18:18:32Z")
Hi all, I have a shell script which will be triggered when ever a new file is arrived into a folder called inbound. logstash process needs to be started to read and load the file contents into elastic. I am able to … --- ## [Restarting logstash inside docker](https://discuss.elastic.co/t/restarting-logstash-inside-docker/103180)
**Author:** [@Zama\_Las](https://discuss.elastic.co/u/Zama_Las)\ **Replies:** 7\ **Last updated:** [October 10, 2017, 11:40am UTC](https://discuss.elastic.co/t/restarting-logstash-inside-docker/103180 "2017-10-10T11:40:47Z")
How to restart logstash process inside docker ? Right now I am restarting the container containing logstash but that does not look to be the ideal process to do it. docker restart container-id --- ## [Timezone with logstash](https://discuss.elastic.co/t/timezone-with-logstash/65666)
**Author:** [@dmitry1980](https://discuss.elastic.co/u/dmitry1980)\ **Replies:** 6\ **Last updated:** [November 10, 2016, 2:13pm UTC](https://discuss.elastic.co/t/timezone-with-logstash/65666 "2016-11-10T14:13:16Z")
I have a problem with the @timestamp field. Value of @timestamp is always the real event timestamp -2 hrs. input{ file {...}} filter{ if \[type\]=="apachelogs"{ grok{ match =\> \[ "message", "%{COMBINEDAPACHEL… [Previous page](https://discuss.elastic.co/top.md?page=322&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=324&per_page=50&period=all)