# Top **URL:** https://discuss.elastic.co/top.md?page=348&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 349 --- ## [Split string using Painless Scripted field](https://discuss.elastic.co/t/split-string-using-painless-scripted-field/265956)
**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\ **Replies:** 1\ **Last updated:** [March 2, 2021, 2:04pm UTC](https://discuss.elastic.co/t/split-string-using-painless-scripted-field/265956 "2021-03-02T14:04:57Z")
I recently started working on Kibana, had a query regarding scripted field. Can scripted field return multiple value at same time? I have a field named Tags like "Tags": "Release-102;Release-103;version.1.0". I want to c… --- ## [Convert timezone of @timestamp field](https://discuss.elastic.co/t/convert-timezone-of-timestamp-field/212703)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 7\ **Last updated:** [January 2, 2020, 8:41pm UTC](https://discuss.elastic.co/t/convert-timezone-of-timestamp-field/212703 "2020-01-02T20:41:20Z")
I need to do this because we are putting all out index with Etc/UTC timezone and setting up all user on kibana with Etc/UTC timezone. that way when use login to kibana they see data on proper time when we run sql quer… --- ## [How to monitor servers cpu, memory with kibana](https://discuss.elastic.co/t/how-to-monitor-servers-cpu-memory-with-kibana/35682)
**Author:** [@marcmga](https://discuss.elastic.co/u/marcmga)\ **Replies:** 4\ **Last updated:** [November 30, 2015, 10:16am UTC](https://discuss.elastic.co/t/how-to-monitor-servers-cpu-memory-with-kibana/35682 "2015-11-30T10:16:16Z")
Im getting information through collectd to logstash, filtering with elastic search, but i cannot make a graph with the usage of cpu or memory. Is it possible? Thank you --- ## [ES Prod cluster Receive Timeout Transport Exception](https://discuss.elastic.co/t/es-prod-cluster-receive-timeout-transport-exception/39055)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 6\ **Last updated:** [January 14, 2016, 7:40am UTC](https://discuss.elastic.co/t/es-prod-cluster-receive-timeout-transport-exception/39055 "2016-01-14T07:40:50Z")
Hi All, In our Production cluster ES 1.7.2 we are using 3 master nodes, 3 data nodes & 1 client node and in the dedicated master log I can see the below warning message, Master Log details \[2016-01-12 23:39:58,436\]… --- ## [Difference between disk.indices vs disk.used in cat allocation](https://discuss.elastic.co/t/difference-between-disk-indices-vs-disk-used-in-cat-allocation/99134)
**Author:** [@snobear](https://discuss.elastic.co/u/snobear)\ **Replies:** 1\ **Last updated:** [September 1, 2017, 3:24pm UTC](https://discuss.elastic.co/t/difference-between-disk-indices-vs-disk-used-in-cat-allocation/99134 "2017-09-01T15:24:23Z")
I have a cluster (ES 2.4.5) consisting of 8 nodes, and was checking the size with the cat allocation API: $ curl -s localhost:9200/\_cat/allocation?v shards disk.indices disk.used disk.avail disk.total disk.percent node … --- ## [I need to split the message term field into different terms](https://discuss.elastic.co/t/i-need-to-split-the-message-term-field-into-different-terms/120830)
**Author:** [@DRDL](https://discuss.elastic.co/u/DRDL)\ **Replies:** 2\ **Last updated:** [February 21, 2018, 12:12pm UTC](https://discuss.elastic.co/t/i-need-to-split-the-message-term-field-into-different-terms/120830 "2018-02-21T12:12:34Z")
\[message\] I need the switch logs to be displayed separately like in the image the whole message field is combined . can i split that message into different fields ? example: message : the exact message looks like this… --- ## [Force an object type into a text field?](https://discuss.elastic.co/t/force-an-object-type-into-a-text-field/118609)
**Author:** [@TheBronx](https://discuss.elastic.co/u/TheBronx)\ **Replies:** 4\ **Last updated:** [February 6, 2018, 11:27am UTC](https://discuss.elastic.co/t/force-an-object-type-into-a-text-field/118609 "2018-02-06T11:27:14Z")
I have a problem. We store http requests in elastic, and it turns out we are using the same parameter name in two different requests with different types. Request A is sending a parameter named "operation" as a JSON obj… --- ## [Error \[ProductNotSupportedSecurityError\]: The client is unable to verify that the server is Elasticsearch due to security privileges on the server side. Some functionality may not be compatible if the server is running an unsupported product](https://discuss.elastic.co/t/error-productnotsupportedsecurityerror-the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-security-privileges-on-the-server-side-some-functionality-may-not-be-compatible-if-the-server-is-running-an-unsupported-product/307554)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [June 29, 2022, 9:24pm UTC](https://discuss.elastic.co/t/error-productnotsupportedsecurityerror-the-client-is-unable-to-verify-that-the-server-is-elasticsearch-due-to-security-privileges-on-the-server-side-some-functionality-may-not-be-compatible-if-the-server-is-running-an-unsupported-product/307554 "2022-06-29T21:24:53Z")
Hello World! I'm trying to follow Install Kibana with Docker | Kibana Guide \[7.17\] | Elastic and running into following error: Error \[ProductNotSupportedSecurityError\]: The client is unable to verify that the server i… --- ## [Kibana service start failed](https://discuss.elastic.co/t/kibana-service-start-failed/189460)
**Author:** [@wenchaodu](https://discuss.elastic.co/u/wenchaodu)\ **Replies:** 8\ **Last updated:** [July 11, 2019, 3:31pm UTC](https://discuss.elastic.co/t/kibana-service-start-failed/189460 "2019-07-11T15:31:00Z")
I install Elasticsearch & Kibana 7.2.0, elasticsearch is working with basic license and enable xpack.security, and I create build-in accounts, all of them working with elasticsearch. But when I start kibana, unfortunate… --- ## [Logstash reading rate is max 8-9k per second](https://discuss.elastic.co/t/logstash-reading-rate-is-max-8-9k-per-second/127977)
**Author:** [@ashurawat](https://discuss.elastic.co/u/ashurawat)\ **Replies:** 4\ **Last updated:** [April 16, 2018, 5:05am UTC](https://discuss.elastic.co/t/logstash-reading-rate-is-max-8-9k-per-second/127977 "2018-04-16T05:05:57Z")
I am running a filebeat which is sending logs from my server to REDIS. and the data is huge here. But the logstash is not able to read those data very frequently. And because of this speed, logstash taking lot of time to… --- ## [DNS Protocol and reading PCAP files](https://discuss.elastic.co/t/dns-protocol-and-reading-pcap-files/31868)
**Author:** [@Brian\_KITHEN](https://discuss.elastic.co/u/Brian_KITHEN)\ **Replies:** 8\ **Last updated:** [October 13, 2015, 3:12pm UTC](https://discuss.elastic.co/t/dns-protocol-and-reading-pcap-files/31868 "2015-10-13T15:12:07Z")
Hello, I'm currently working in a company where we intend to use PacketBeat with ELK. It will initially only deal with DNS packets. We don't have any real experience with ELK, so its kind of a challenge. I'm testing th… --- ## [Unknown field , parser not found](https://discuss.elastic.co/t/unknown-field-parser-not-found/166857)
**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\ **Replies:** 1\ **Last updated:** [February 3, 2019, 4:43pm UTC](https://discuss.elastic.co/t/unknown-field-parser-not-found/166857 "2019-02-03T16:43:09Z")
When I follow the instructions in the getting started with elasticsearch video on https://www.elastic.co/webinars/getting-started-elasticsearch. I found that: "type": "x\_content\_parse\_exception", "reason": "\[10:9\] \[fie… --- ## [Curl argument size limit?](https://discuss.elastic.co/t/curl-argument-size-limit/5604)
**Author:** [@searchersteve](https://discuss.elastic.co/u/searchersteve)\ **Replies:** 2\ **Last updated:** [October 15, 2011, 12:15am UTC](https://discuss.elastic.co/t/curl-argument-size-limit/5604 "2011-10-15T00:15:11Z")
This appears to be a cURL issue more than an ES issue, but I couldn't find any discussion of it on http://curl.haxx.se, and it seemed likely that some other ES user has hit the same roadblock. I frequently use \_bulk… --- ## [Result Sets of Aggregation Partitioning](https://discuss.elastic.co/t/result-sets-of-aggregation-partitioning/87117)
**Author:** [@blaineparker](https://discuss.elastic.co/u/blaineparker)\ **Replies:** 4\ **Last updated:** [May 26, 2017, 9:18am UTC](https://discuss.elastic.co/t/result-sets-of-aggregation-partitioning/87117 "2017-05-26T09:18:51Z")
How is partitioning in aggregations achieved? How is the data selected for each partition and what guarantees can be made surrounding the ordering of results in each partition and across partitions? How can partitionin… --- ## [Low disk watermark exceeded](https://discuss.elastic.co/t/low-disk-watermark-exceeded/170663)
**Author:** [@huzefabootwala](https://discuss.elastic.co/u/huzefabootwala)\ **Replies:** 8\ **Last updated:** [April 3, 2019, 4:29am UTC](https://discuss.elastic.co/t/low-disk-watermark-exceeded/170663 "2019-04-03T04:29:37Z")
Hello, I have installed Elasticsearch, Kibana and filebeat 6.5.4. I am planning to fetch Windows logs and logs from a custom directory. I have been successful in doing this but with some issues. Issue 1: \[2019-03-04T… --- ## [Error: "no handler found for uri \[/api/security/role/my\_kibana\_role?pretty\] and method \[PUT\]"](https://discuss.elastic.co/t/error-no-handler-found-for-uri-api-security-role-my-kibana-role-pretty-and-method-put/207482)
**Author:** [@daniellienert](https://discuss.elastic.co/u/daniellienert)\ **Replies:** 2\ **Last updated:** [November 13, 2019, 2:11pm UTC](https://discuss.elastic.co/t/error-no-handler-found-for-uri-api-security-role-my-kibana-role-pretty-and-method-put/207482 "2019-11-13T14:11:28Z")
Hey there, I would like to add Kibana roles using the role management API as described in: https://www.elastic.co/guide/en/kibana/7.4/role-management-api-put.html For a PUT /api/security/role/my\_kibana\_role { "meta… --- ## [How can i use grok to match a single character of word](https://discuss.elastic.co/t/how-can-i-use-grok-to-match-a-single-character-of-word/130929)
**Author:** [@regex99](https://discuss.elastic.co/u/regex99)\ **Replies:** 3\ **Last updated:** [May 9, 2018, 12:23am UTC](https://discuss.elastic.co/t/how-can-i-use-grok-to-match-a-single-character-of-word/130929 "2018-05-09T00:23:35Z")
hi, I have a string like SAMPLE DATA 08X71 +F(9)L. i can match each word with %{WORD} like this, %{WORD:1}\\s\*%{WORD:2}\\s\*%{WORD} but how can I match each character separately from the last word in the same grok patte… --- ## [Elasticsearch failing to start due to X-Pack](https://discuss.elastic.co/t/elasticsearch-failing-to-start-due-to-x-pack/85125)
**Author:** [@arorvig](https://discuss.elastic.co/u/arorvig)\ **Replies:** 7\ **Last updated:** [May 19, 2017, 1:59pm UTC](https://discuss.elastic.co/t/elasticsearch-failing-to-start-due-to-x-pack/85125 "2017-05-19T13:59:02Z")
I am running Elasticsearch 5.4.0 in a Docker container, using Alpine 3.5 (based off official image), Elasticsearch is failing to start with the following error: \[2017-05-09T14:58:09,259\]\[WARN \]\[o.e.b.ElasticsearchUncau… --- ## [RestClient always gives "I/O reactor status: STOPPED"](https://discuss.elastic.co/t/restclient-always-gives-i-o-reactor-status-stopped/117534)
**Author:** [@Kevin\_Bourne](https://discuss.elastic.co/u/Kevin_Bourne)\ **Replies:** 2\ **Last updated:** [February 2, 2018, 2:54pm UTC](https://discuss.elastic.co/t/restclient-always-gives-i-o-reactor-status-stopped/117534 "2018-02-02T14:54:51Z")
I am using ES 5.6.3. In my program I am using the rest-client 5.6.3 jar files. This is how I am constructing my RestClient: RestClient restClient = RestClient.Builder(new HttpHost("localhost", 9200, "http")).build(); I… --- ## [Grok pattern for this syslog message for Logstash?](https://discuss.elastic.co/t/grok-pattern-for-this-syslog-message-for-logstash/285896)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 8\ **Last updated:** [October 5, 2021, 2:35pm UTC](https://discuss.elastic.co/t/grok-pattern-for-this-syslog-message-for-logstash/285896 "2021-10-05T14:35:18Z")
Hello I have this syslog message which is ALMOST like the standard RFC3164 so the default syslog plugin should pick it up: \<134\>1 2021-10-05T08:48:18Z MYSERVER iLO5 - - - XML logout: SomeUser - 1.2.3.4(DNS name not fou… --- ## [Docker and disk size](https://discuss.elastic.co/t/docker-and-disk-size/113453)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 8\ **Last updated:** [January 3, 2018, 6:54am UTC](https://discuss.elastic.co/t/docker-and-disk-size/113453 "2018-01-03T06:54:32Z")
Hi, running ES 6.1.0 I have 10 nodes: 3 masters, 3 data, 3 coordinators, 1 ingest. The 10 nodes are running in docker on 3 hosts. The 3 hosts have 1.7TB of disk available. Kibana monitoring on the main cluster page cl… --- ## [Logstash does not create index on elasticsearch](https://discuss.elastic.co/t/logstash-does-not-create-index-on-elasticsearch/243773)
**Author:** [@asuarez](https://discuss.elastic.co/u/asuarez)\ **Replies:** 4\ **Last updated:** [August 5, 2020, 6:38pm UTC](https://discuss.elastic.co/t/logstash-does-not-create-index-on-elasticsearch/243773 "2020-08-05T18:38:07Z")
Hello, I am new to Elastic, I need help with the development of Logstash, I could not get any logstash to automatically create indexes in ElasticSearch. I have created 2 logstast .conf and none create the indexes, I lea… --- ## [What is Query Duration and Request Duration in Kibana?](https://discuss.elastic.co/t/what-is-query-duration-and-request-duration-in-kibana/50553)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 4\ **Last updated:** [May 24, 2016, 4:07am UTC](https://discuss.elastic.co/t/what-is-query-duration-and-request-duration-in-kibana/50553 "2016-05-24T04:07:36Z")
Hi Experts, My Kibana 4.1.1 Discover page is slow , so i want to check the response time of the query . Not sure the exact difference between Query Duration and Request Duration in Kibana statistics . Thanks Vikas --- ## [Permission denied when running elasticsearch](https://discuss.elastic.co/t/permission-denied-when-running-elasticsearch/39383)
**Author:** [@apanimesh061](https://discuss.elastic.co/u/apanimesh061)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 4:57pm UTC](https://discuss.elastic.co/t/permission-denied-when-running-elasticsearch/39383 "2017-01-17T16:57:19Z")
I downloaded ES 2.1.0 as ran using the shell script available in bin folder. animesh@ubuntu:~/Documents/elasticsearch-2.1.0/bin$ sudo ./elasticsearch Exception in thread "main" java.lang.RuntimeException: don't run ela… --- ## [Case insensitive wildcard search in 7.17.0](https://discuss.elastic.co/t/case-insensitive-wildcard-search-in-7-17-0/306903)
**Author:** [@mej101](https://discuss.elastic.co/u/mej101)\ **Replies:** 2\ **Last updated:** [June 10, 2022, 6:33pm UTC](https://discuss.elastic.co/t/case-insensitive-wildcard-search-in-7-17-0/306903 "2022-06-10T18:33:27Z")
I'm running Elasticsearch 7.17.0, and when I try to run the following query: GET index\_name/\_search { "query": { "wildcard": { "fieldName.subfield": "\*view", "case\_insensitive": true } } } I get… --- ## [Any admin UI to manage elastic search?](https://discuss.elastic.co/t/any-admin-ui-to-manage-elastic-search/84002)
**Author:** [@vijayramachandran](https://discuss.elastic.co/u/vijayramachandran)\ **Replies:** 3\ **Last updated:** [April 28, 2017, 12:51pm UTC](https://discuss.elastic.co/t/any-admin-ui-to-manage-elastic-search/84002 "2017-04-28T12:51:31Z")
Hello, Is there any UI/Plugin to manage elastic search in GUI? Tasks I am looking forward that this plugin should include, 1.) Assigning roles 2.) Creating users 3.) X-pack integration with LDAP. P.S: I don't hav… --- ## [Is not a configured pattern ID. Using the default index pattern](https://discuss.elastic.co/t/is-not-a-configured-pattern-id-using-the-default-index-pattern/136848)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 2\ **Last updated:** [June 21, 2018, 3:18pm UTC](https://discuss.elastic.co/t/is-not-a-configured-pattern-id-using-the-default-index-pattern/136848 "2018-06-21T15:18:52Z")
After upgrading to Elastic Stack 6, I usually get this error message on starting Kibana: "... is not a configured pattern ID. Using the default index pattern ..." Does it mean anything? Do I care? How do I stop it? --- ## [Filebeats/Logstash compatibility](https://discuss.elastic.co/t/filebeats-logstash-compatibility/64130)
**Author:** [@danieljamesscott](https://discuss.elastic.co/u/danieljamesscott)\ **Replies:** 2\ **Last updated:** [October 27, 2016, 10:56am UTC](https://discuss.elastic.co/t/filebeats-logstash-compatibility/64130 "2016-10-27T10:56:34Z")
Is there any documentation on version compatibility between LogStash and Filebeat for upgrading? For example, I have a currently running system using logstash 2.3, and Filebeat 1.2. How should I proceed with an upgra… --- ## [Need help with errors during starting filebeat service, please help with verifying the yml file](https://discuss.elastic.co/t/need-help-with-errors-during-starting-filebeat-service-please-help-with-verifying-the-yml-file/163654)
**Author:** [@clouddev](https://discuss.elastic.co/u/clouddev)\ **Replies:** 3\ **Last updated:** [January 12, 2019, 5:10am UTC](https://discuss.elastic.co/t/need-help-with-errors-during-starting-filebeat-service-please-help-with-verifying-the-yml-file/163654 "2019-01-12T05:10:49Z")
When I am trying to start the filebeat service I get an error saying.. graylog@graylog:/etc/filebeat$ service filebeat status ● filebeat.service - filebeat Loaded: loaded (/lib/systemd/system/filebeat.service; enable… --- ## [Elasticsearch cluster status is red. Allocate missing primary shards and replica shards](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-red-allocate-missing-primary-shards-and-replica-shards/160987)
**Author:** [@samwzm](https://discuss.elastic.co/u/samwzm)\ **Replies:** 1\ **Last updated:** [December 16, 2018, 9:07am UTC](https://discuss.elastic.co/t/elasticsearch-cluster-status-is-red-allocate-missing-primary-shards-and-replica-shards/160987 "2018-12-16T09:07:04Z")
Hi, there, We just upgrade ES from 6.3.2 to 6.5.1. Our cluster includes 3 master and 2 hot data nodes. At first it works fine, until recently got restarted. The only change is the data location (we uses docker image). S… --- ## [Single Node Cluster](https://discuss.elastic.co/t/single-node-cluster/172095)
**Author:** [@srirama](https://discuss.elastic.co/u/srirama)\ **Replies:** 6\ **Last updated:** [March 13, 2019, 12:45pm UTC](https://discuss.elastic.co/t/single-node-cluster/172095 "2019-03-13T12:45:01Z")
In my local elastic setup, if I set the setting discovery.zen.ping.multicast.enabled: false Elastic is not coming up. After checking https://github.com/elastic/elasticsearch/issues/22909, I removed the setting. Now, … --- ## [Getting version conflict even while updating sequentially using update\_by\_query](https://discuss.elastic.co/t/getting-version-conflict-even-while-updating-sequentially-using-update-by-query/188657)
**Author:** [@Prakash\_Sharma1](https://discuss.elastic.co/u/Prakash_Sharma1)\ **Replies:** 0\ **Last updated:** [July 3, 2019, 9:00am UTC](https://discuss.elastic.co/t/getting-version-conflict-even-while-updating-sequentially-using-update-by-query/188657 "2019-07-03T09:00:51Z")
I am trying to update a document's nested type field using painless script by \_update\_by\_query. The script is executing sequentially that means the next \_update\_by\_query is run only when the previous one has successfully… --- ## [Docker module: Can't connect to /var/run/docker.sock](https://discuss.elastic.co/t/docker-module-cant-connect-to-var-run-docker-sock/86835)
**Author:** [@BeLi4L](https://discuss.elastic.co/u/BeLi4L)\ **Replies:** 1\ **Last updated:** [May 25, 2017, 12:39pm UTC](https://discuss.elastic.co/t/docker-module-cant-connect-to-var-run-docker-sock/86835 "2017-05-25T12:39:49Z")
Hi, I'm running metricbeat with the docker module, with the following configuration: metricbeat.modules: - module: docker period: 20s metricsets: - container - cpu - diskio - image - info - … --- ## [@timestamp in log file getting replaced by processing time](https://discuss.elastic.co/t/timestamp-in-log-file-getting-replaced-by-processing-time/54195)
**Author:** [@ttl](https://discuss.elastic.co/u/ttl)\ **Replies:** 6\ **Last updated:** [July 4, 2016, 7:06am UTC](https://discuss.elastic.co/t/timestamp-in-log-file-getting-replaced-by-processing-time/54195 "2016-07-04T07:06:39Z")
I recently switched over from using Logstash as my shipper to filebeat. The flow is Filebeat -\> Logstash -\> ES -\> Kibana 4. Previously, it was LS Shipper -\> Redis -\> LS -\> ES -\> K Log files themselves are json and con… --- ## [Timestamp difference calculation](https://discuss.elastic.co/t/timestamp-difference-calculation/105866)
**Author:** [@paulk4633](https://discuss.elastic.co/u/paulk4633)\ **Replies:** 5\ **Last updated:** [November 8, 2017, 6:21am UTC](https://discuss.elastic.co/t/timestamp-difference-calculation/105866 "2017-11-08T06:21:39Z")
Hello, I have a problem with the calculation of a time difference between two timestamps: "time1" =\> "31/10/2017:10:18:19.928 +0200", "time2" =\> "31/10/2017:10:19:00.190 +0200" As a result I want to have a field in Lo… --- ## [Combining Multiple Function Scores](https://discuss.elastic.co/t/combining-multiple-function-scores/183857)
**Author:** [@gidgid](https://discuss.elastic.co/u/gidgid)\ **Replies:** 3\ **Last updated:** [June 5, 2019, 7:46am UTC](https://discuss.elastic.co/t/combining-multiple-function-scores/183857 "2019-06-05T07:46:15Z")
I've got several different Elasticsearch function\_score but I'm not sure how to combine them This is the test set I'm looking at (I added comments to be able to refer to specific items in the question, these comments ar… --- ## [Accessing kibana remotely](https://discuss.elastic.co/t/accessing-kibana-remotely/88064)
**Author:** [@joshi](https://discuss.elastic.co/u/joshi)\ **Replies:** 3\ **Last updated:** [June 2, 2017, 1:08pm UTC](https://discuss.elastic.co/t/accessing-kibana-remotely/88064 "2017-06-02T13:08:00Z")
I've setup an ELK stack (versions 5.4) running on an ubuntu 17.04 vm. This is hosted in azure. Aside from the Azure network security group settings, what do I need to do to enable connections to kibana via a browser over… --- ## [Filebeat Process multilne XML](https://discuss.elastic.co/t/filebeat-process-multilne-xml/77761)
**Author:** [@Sourabh\_Narang](https://discuss.elastic.co/u/Sourabh_Narang)\ **Replies:** 2\ **Last updated:** [March 11, 2017, 12:29am UTC](https://discuss.elastic.co/t/filebeat-process-multilne-xml/77761 "2017-03-11T00:29:12Z")
I have a log file where I am printing request and response XML bodies. This log file also has some additional lines that are not XML. Example below -- =========================================== \ \ … --- ## [Unable to connect to Elasticsearch from another machine](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-from-another-machine/101392)
**Author:** [@jxz](https://discuss.elastic.co/u/jxz)\ **Replies:** 6\ **Last updated:** [September 22, 2017, 1:45am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-from-another-machine/101392 "2017-09-22T01:45:53Z")
I am trying to connect to Elasticsearch from another machine in C# code. I specified the Elasticsearch host machine's fully qualified domain name in the uri and tried to connect with something like the following: Uri e… --- ## [Insserv-compat required on openSUSE Leap 15](https://discuss.elastic.co/t/insserv-compat-required-on-opensuse-leap-15/138034)
**Author:** [@NiceGuyIT](https://discuss.elastic.co/u/NiceGuyIT)\ **Replies:** 2\ **Last updated:** [July 9, 2018, 3:02am UTC](https://discuss.elastic.co/t/insserv-compat-required-on-opensuse-leap-15/138034 "2018-07-09T03:02:31Z")
After installing several beats, they failed to start with the following. # systemctl enable packetbeat.service Synchronizing state of packetbeat.service with SysV service script with /usr/lib/systemd/systemd-sysv-instal… --- ## [Filebeat multiline docker logs](https://discuss.elastic.co/t/filebeat-multiline-docker-logs/117336)
**Author:** [@meril](https://discuss.elastic.co/u/meril)\ **Replies:** 5\ **Last updated:** [January 29, 2018, 3:55pm UTC](https://discuss.elastic.co/t/filebeat-multiline-docker-logs/117336 "2018-01-29T15:55:12Z")
Hi In production system we use filebeat 6.1 to manage docker log files with format like: ... {"log":"2017-11-26T16:59:56.912-0000 - INFO - blahblah","stream":"stdout","time":"2017-11-26T16:59:56.91609507Z"} ... Conf… --- ## [Http\_poller – Run once and terminate](https://discuss.elastic.co/t/http-poller-run-once-and-terminate/163195)
**Author:** [@darefilz](https://discuss.elastic.co/u/darefilz)\ **Replies:** 6\ **Last updated:** [January 10, 2019, 8:04am UTC](https://discuss.elastic.co/t/http-poller-run-once-and-terminate/163195 "2019-01-10T08:04:27Z")
Hi, I want to use the Http\_poller input plugin to call a REST API only once. The actual scheduling is done outside of Logstash (Docker). To make this happen, I set the schedule attribute to { "in" =\> "0" }, which indee… --- ## [JDBC for input and output](https://discuss.elastic.co/t/jdbc-for-input-and-output/186722)
**Author:** [@Donny\_Nightfrost](https://discuss.elastic.co/u/Donny_Nightfrost)\ **Replies:** 4\ **Last updated:** [June 25, 2019, 3:50am UTC](https://discuss.elastic.co/t/jdbc-for-input-and-output/186722 "2019-06-25T03:50:52Z")
Hello everyone, me and my friends are working in a project and stumbling upon a quiet confused method. So we want for logstash to read logs given from source (syslog) and then insert them to mysql database if it matches … --- ## [Index作成後のmapping情報の変更について](https://discuss.elastic.co/t/index-mapping/161957)
**Author:** [@hmlhmz](https://discuss.elastic.co/u/hmlhmz)\ **Replies:** 4\ **Last updated:** [December 24, 2018, 11:02pm UTC](https://discuss.elastic.co/t/index-mapping/161957 "2018-12-24T23:02:18Z")
添付のようなcsvをjson形式に変換してElasticsearchにアップロードしたいと思っています。A列に日時、B～C列にサーバ名があり、時間毎の値(ここでは例としてCPU使用率)が記載されています。 以下のようなコードでindexを作成し、作成後、mapping情報を変更しようとしたところエラーが出ます。原因と対処法を教えていただけませんでしょうか？ import csv import json import pand… --- ## [Lucene version for Elastic Search release](https://discuss.elastic.co/t/lucene-version-for-elastic-search-release/8510)
**Author:** [@jeyendran](https://discuss.elastic.co/u/jeyendran)\ **Replies:** 2\ **Last updated:** [July 26, 2012, 6:23am UTC](https://discuss.elastic.co/t/lucene-version-for-elastic-search-release/8510 "2012-07-26T06:23:01Z")
How can I find out the Lucene library version for a given Elastic Search release? In particular, how can I find out the Lucene version for the lastest release (\*0.19.8\* )? Thanks a lot, Jeyendran --- ## [Logstash - split array into individual events](https://discuss.elastic.co/t/logstash-split-array-into-individual-events/181422)
**Author:** [@RonGros](https://discuss.elastic.co/u/RonGros)\ **Replies:** 6\ **Last updated:** [May 19, 2019, 6:17am UTC](https://discuss.elastic.co/t/logstash-split-array-into-individual-events/181422 "2019-05-19T06:17:45Z")
Hi! One of our logs contains lines of arrays of json objects.... I want to take each one of the items in the array and make it a single even. I read some posts on how to do it : https://discuss.elastic.co/t/split-nest… --- ## [Filtering documents in kibana by prefix - inconsistent results](https://discuss.elastic.co/t/filtering-documents-in-kibana-by-prefix-inconsistent-results/36332)
**Author:** [@Fritz](https://discuss.elastic.co/u/Fritz)\ **Replies:** 3\ **Last updated:** [December 9, 2015, 6:03pm UTC](https://discuss.elastic.co/t/filtering-documents-in-kibana-by-prefix-inconsistent-results/36332 "2015-12-09T18:03:13Z")
Hi folks, I'm playing with building some Kibana dashboards and I noticed a peculiar behavior - when I try to filter documents by very simple prefix queries involving one string field (i.e. field:value\*) some fields can… --- ## [Offline plugin install](https://discuss.elastic.co/t/offline-plugin-install/98850)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 4\ **Last updated:** [August 30, 2017, 3:18pm UTC](https://discuss.elastic.co/t/offline-plugin-install/98850 "2017-08-30T15:18:21Z")
I am attempting an offline install the logstash-filter-cidr plugin on logstash 5.4. I have tried: Downloading the gem from rubygems.org and executing: sudo /usr/share/logstash/bin/logstash-plugin install file:///tmp… --- ## [Control number of buckets created in an aggregation](https://discuss.elastic.co/t/control-number-of-buckets-created-in-an-aggregation/194360)
**Author:** [@Ahmad\_Mozafarnia](https://discuss.elastic.co/u/Ahmad_Mozafarnia)\ **Replies:** 6\ **Last updated:** [August 8, 2019, 8:32am UTC](https://discuss.elastic.co/t/control-number-of-buckets-created-in-an-aggregation/194360 "2019-08-08T08:32:05Z")
This question was originally posted on StackOverflow: I'm having trouble with controlling the number of buckets an aggregation is going to create. This is a simple aggregation containing no nested or sub aggregation… --- ## [How to configure syslog output in winlogbeat](https://discuss.elastic.co/t/how-to-configure-syslog-output-in-winlogbeat/137490)
**Author:** [@Nickname\_Yu](https://discuss.elastic.co/u/Nickname_Yu)\ **Replies:** 7\ **Last updated:** [June 26, 2018, 7:18pm UTC](https://discuss.elastic.co/t/how-to-configure-syslog-output-in-winlogbeat/137490 "2018-06-26T19:18:50Z")
In the documentation https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-logging.html there is a configuration option: logging.to\_syslog When true, writes all logging output to the syslog. while th… [Previous page](https://discuss.elastic.co/top.md?page=347&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=349&per_page=50&period=all)