# Top **URL:** https://discuss.elastic.co/top.md?page=351&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 352 --- ## [Not eligible for data streams because config contains one or more settings that are not compatible with data streams](https://discuss.elastic.co/t/not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams/337594)
**Author:** [@Cruz](https://discuss.elastic.co/u/Cruz)\ **Replies:** 4\ **Last updated:** [July 5, 2023, 3:27am UTC](https://discuss.elastic.co/t/not-eligible-for-data-streams-because-config-contains-one-or-more-settings-that-are-not-compatible-with-data-streams/337594 "2023-07-05T03:27:44Z")
I tried to upload my template using Logstash, but it did not. It says that \[2023-07-05T00:03:53,496\]\[INFO \]\[logstash.outputs.elasticsearch\]\[main\] Not eligible for data streams because config contains one or more settin… --- ## [Pipelines.yml pipeline to pipeline address unavailable error](https://discuss.elastic.co/t/pipelines-yml-pipeline-to-pipeline-address-unavailable-error/170808)
**Author:** [@kharvey](https://discuss.elastic.co/u/kharvey)\ **Replies:** 4\ **Last updated:** [March 5, 2019, 9:10pm UTC](https://discuss.elastic.co/t/pipelines-yml-pipeline-to-pipeline-address-unavailable-error/170808 "2019-03-05T21:10:38Z")
Logstash version 6.6.1 Logstash command: /usr/share/logstash/bin/logstash --config.reload.automatic --path.settings=/etc/logstash I am attempting to handle multiple pipelines using the distributor pattern in my pipeli… --- ## [Performance difference between af\_packet/libpcap?](https://discuss.elastic.co/t/performance-difference-between-af-packet-libpcap/69766)
**Author:** [@wofanli](https://discuss.elastic.co/u/wofanli)\ **Replies:** 4\ **Last updated:** [December 23, 2016, 1:58am UTC](https://discuss.elastic.co/t/performance-difference-between-af-packet-libpcap/69766 "2016-12-23T01:58:59Z")
Hi Guys, I'm looking at the packetbeat document, and it declares af\_packet has better performance than pcap. Do we have any number regarding this performance difference? As far as I know libpcap has leveraged af\_p… --- ## [Help with Geo\_point (longitude and latitude)](https://discuss.elastic.co/t/help-with-geo-point-longitude-and-latitude/117333)
**Author:** [@Prakash\_Punj](https://discuss.elastic.co/u/Prakash_Punj)\ **Replies:** 6\ **Last updated:** [February 23, 2018, 2:53pm UTC](https://discuss.elastic.co/t/help-with-geo-point-longitude-and-latitude/117333 "2018-02-23T14:53:27Z")
need help wiith importing Latitude and Longitude as geo\_point. My data has longitude and latitude field I have a conf file to pull the data to ES: mutate {convert =\> \["latitude", "float"\]} mutate {convert =\> \["longit… --- ## [Elasticsearch is initializing](https://discuss.elastic.co/t/elasticsearch-is-initializing/48931)
**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\ **Replies:** 8\ **Last updated:** [May 6, 2016, 1:37pm UTC](https://discuss.elastic.co/t/elasticsearch-is-initializing/48931 "2016-05-06T13:37:31Z")
Hi, My ES version is 2.3.0. My Kibana version is 4.5.0 I can start ES. But when I start kibana It didn't work true. I have not log file. My error : \[root@localhost kibana-4.5.0-linux-x64\]# bin/kibana log \[10:07:57… --- ## [How to solve - "We couldn't log you in. Please try again." - error in kibana](https://discuss.elastic.co/t/how-to-solve-we-couldnt-log-you-in-please-try-again-error-in-kibana/332658)
**Author:** [@M\_S](https://discuss.elastic.co/u/M_S)\ **Replies:** 3\ **Last updated:** [May 8, 2023, 5:10pm UTC](https://discuss.elastic.co/t/how-to-solve-we-couldnt-log-you-in-please-try-again-error-in-kibana/332658 "2023-05-08T17:10:36Z")
I tried to open kibana on my properly working ELK stack one fine morning only to discover this error message - We couldn't log you in. Please try again. I opened kibana.log to discover this following log entry coming r… --- ## [Installed 6.6 -- Could not find java; set JAVA\_HOME or ensure java is in PATH](https://discuss.elastic.co/t/installed-6-6-could-not-find-java-set-java-home-or-ensure-java-is-in-path/172026)
**Author:** [@kb2295](https://discuss.elastic.co/u/kb2295)\ **Replies:** 3\ **Last updated:** [March 19, 2019, 10:02am UTC](https://discuss.elastic.co/t/installed-6-6-could-not-find-java-set-java-home-or-ensure-java-is-in-path/172026 "2019-03-19T10:02:01Z")
Hi, I just installed Elastic Search 6.6. I ran it and it worked fine until I tried again a few hours later: # /export1/opt/ELK\_Bin/elasticsearch-6.6.1/bin/elasticsearch which: no java in (/usr/lib64/qt-3.3/bin:/usr/loc… --- ## [Транслит/Фонетика](https://discuss.elastic.co/t/topic/62375)
**Author:** [@Ilya\_Shipilov](https://discuss.elastic.co/u/Ilya_Shipilov)\ **Replies:** 6\ **Last updated:** [October 25, 2016, 4:29pm UTC](https://discuss.elastic.co/t/topic/62375 "2016-10-25T16:29:44Z")
Задача построить такой индекс, который бы успешно находил запись "Johnson's Baby" по запросам "Джонсон с бэби", "Жонсон бэйби". Мне кажется, что правильно использовать фильтр фонетики, с поддержкой английского и русско… --- ## [Changing kibana colors](https://discuss.elastic.co/t/changing-kibana-colors/80122)
**Author:** [@Maher.Glenza](https://discuss.elastic.co/u/Maher.Glenza)\ **Replies:** 6\ **Last updated:** [March 27, 2017, 2:43pm UTC](https://discuss.elastic.co/t/changing-kibana-colors/80122 "2017-03-27T14:43:40Z")
hi plz i want to change the sidebar color and the logo of kibana 5.1.2 plz i found articles about kibana 4.X but not kibana5 --- ## [Installing plugins auto approval (-y)](https://discuss.elastic.co/t/installing-plugins-auto-approval-y/65706)
**Author:** [@\_117228](https://discuss.elastic.co/u/_117228)\ **Replies:** 2\ **Last updated:** [November 10, 2016, 7:01pm UTC](https://discuss.elastic.co/t/installing-plugins-auto-approval-y/65706 "2016-11-10T19:01:41Z")
I'm trying to install ES on EC2 instances via userdata. I use this command bin/plugin install cloud-aws to install a plugin but it requires an answer to this in order to install : Continue with installation? \[y/N\] I… --- ## [Deleting and recreating index sometimes gives 400 Bad Request error](https://discuss.elastic.co/t/deleting-and-recreating-index-sometimes-gives-400-bad-request-error/207562)
**Author:** [@amkoehler](https://discuss.elastic.co/u/amkoehler)\ **Replies:** 4\ **Last updated:** [November 16, 2019, 1:12am UTC](https://discuss.elastic.co/t/deleting-and-recreating-index-sometimes-gives-400-bad-request-error/207562 "2019-11-16T01:12:25Z")
I'm writing a script using the elasticsearch node JS API for bulk adding indices. Some of these indices may already exist, so I first do a check to see if the index already exists and delete it prior to recreating the in… --- ## [Kibana doesn't show logs](https://discuss.elastic.co/t/kibana-doesnt-show-logs/70935)
**Author:** [@wrkilu](https://discuss.elastic.co/u/wrkilu)\ **Replies:** 6\ **Last updated:** [January 11, 2017, 9:51am UTC](https://discuss.elastic.co/t/kibana-doesnt-show-logs/70935 "2017-01-11T09:51:44Z")
Hi, I think this is some problem with timestamp of logs but I don't know how to solve this. Generally when I create index without 'contains time-based events ' (this checkbox during creating), then I see logs but of cou… --- ## [X-Pack installation, does not seem to be creating indices](https://discuss.elastic.co/t/x-pack-installation-does-not-seem-to-be-creating-indices/111398)
**Author:** [@ajwillo](https://discuss.elastic.co/u/ajwillo)\ **Replies:** 8\ **Last updated:** [December 19, 2017, 1:58pm UTC](https://discuss.elastic.co/t/x-pack-installation-does-not-seem-to-be-creating-indices/111398 "2017-12-19T13:58:14Z")
Hi, Im following the guide for installing x-pack https://www.elastic.co/guide/en/elasticsearch/reference/6.0/installing-xpack-es.html but when it comes to generate the passwords I am met with error: ubuntu@ip-10:~$ su… --- ## [Share your feedback with Elastic APM Product Management](https://discuss.elastic.co/t/share-your-feedback-with-elastic-apm-product-management/303844)
**Author:** [@Chris\_DiStasio](https://discuss.elastic.co/u/Chris_DiStasio)\ **Replies:** 0\ **Last updated:** [May 3, 2022, 1:55pm UTC](https://discuss.elastic.co/t/share-your-feedback-with-elastic-apm-product-management/303844 "2022-05-03T13:55:37Z")
Help us make Elastic APM better by sharing your experience with Elastic Product Management. Schedule a 45-minute session with Elastic Product Management and share your feedback. --- ## [Kibana running on localhost but cant accessible by public IP](https://discuss.elastic.co/t/kibana-running-on-localhost-but-cant-accessible-by-public-ip/118164)
**Author:** [@Kishan\_Lal](https://discuss.elastic.co/u/Kishan_Lal)\ **Replies:** 2\ **Last updated:** [February 2, 2018, 9:16am UTC](https://discuss.elastic.co/t/kibana-running-on-localhost-but-cant-accessible-by-public-ip/118164 "2018-02-02T09:16:46Z")
kibana.yml server.port: 5601 server.host : 'localhost' server.name: ".eastus.cloudapp.azure.com" elasticsearch.url: "http://localhost:9200" port is are enabled inbound rules added please tell me what I am doing wr… --- ## [Logstash cant connect to Elasticsearch on localhost](https://discuss.elastic.co/t/logstash-cant-connect-to-elasticsearch-on-localhost/111699)
**Author:** [@bittujindani](https://discuss.elastic.co/u/bittujindani)\ **Replies:** 6\ **Last updated:** [December 15, 2017, 10:15am UTC](https://discuss.elastic.co/t/logstash-cant-connect-to-elasticsearch-on-localhost/111699 "2017-12-15T10:15:03Z")
Hi, I have setup Logstash, ES and Kibana on EC2 server and used localhost:9200 in all three setup yml file. curl command is also working fine. but once I am pushing msg using jdbc I am getting below error. JDBC working… --- ## [Cannot allocate memory error, when I try to get the Elasticsearch version (v 5.6.8)](https://discuss.elastic.co/t/cannot-allocate-memory-error-when-i-try-to-get-the-elasticsearch-version-v-5-6-8/130081)
**Author:** [@Jose\_Enrique\_Hernand](https://discuss.elastic.co/u/Jose_Enrique_Hernand)\ **Replies:** 4\ **Last updated:** [May 1, 2018, 8:55pm UTC](https://discuss.elastic.co/t/cannot-allocate-memory-error-when-i-try-to-get-the-elasticsearch-version-v-5-6-8/130081 "2018-05-01T20:55:01Z")
Hello everyone, I am in the process of configuring an Elasticsearch environment. After set up the parameters according to the documentation, I get an error message when I try to get the version, even though there is fre… --- ## [Logstash : JSON Array in input file . Pas si simple](https://discuss.elastic.co/t/logstash-json-array-in-input-file-pas-si-simple/172671)
**Author:** [@elastock](https://discuss.elastic.co/u/elastock)\ **Replies:** 4\ **Last updated:** [March 17, 2019, 3:49pm UTC](https://discuss.elastic.co/t/logstash-json-array-in-input-file-pas-si-simple/172671 "2019-03-17T15:49:22Z")
Bonjour , Je pensais pouvoir résoudre ce problème en 2 minutes , mais finalement je suis bloqué dessus depuis un bon moment en testant tout un tas de solutions trouvés sur le net . Mon problème est simple . Je dispos… --- ## [Logstash 5.0 A plugin had an unrecoverable error](https://discuss.elastic.co/t/logstash-5-0-a-plugin-had-an-unrecoverable-error/64403)
**Author:** [@bopa](https://discuss.elastic.co/u/bopa)\ **Replies:** 6\ **Last updated:** [April 12, 2017, 2:05pm UTC](https://discuss.elastic.co/t/logstash-5-0-a-plugin-had-an-unrecoverable-error/64403 "2017-04-12T14:05:52Z")
I have upgraded my ELK stack to 5.0. All seems running well but I'm not receiving any events to my elastic search from logstash. Following error occurs in logstash-plain.log file, \[2016-10-31T10:59:30,638\]\[ERROR\]\[logst… --- ## [Hot to get all document \_id of an elasticsearch index](https://discuss.elastic.co/t/hot-to-get-all-document-id-of-an-elasticsearch-index/176297)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 2\ **Last updated:** [April 15, 2019, 10:01pm UTC](https://discuss.elastic.co/t/hot-to-get-all-document-id-of-an-elasticsearch-index/176297 "2019-04-15T22:01:16Z")
I am trying to pull list of all doc\_ids in Elasticsearch index. the index contains 15 million docs, I am only interested in doc\_id. I have set search query in java by setting "size" parameter to 15 million, but i got exc… --- ## [Index.lifecycle.rollover\_alias is Empty](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-is-empty/206323)
**Author:** [@stevetso](https://discuss.elastic.co/u/stevetso)\ **Replies:** 0\ **Last updated:** [November 4, 2019, 3:45am UTC](https://discuss.elastic.co/t/index-lifecycle-rollover-alias-is-empty/206323 "2019-11-04T03:45:55Z")
Hi, In the index template, I forgot to define the index.lifecycle.rollover\_alias and triggered the following error: Index lifecycle error illegal\_argument\_exception: setting \[index.lifecycle.rollover\_alias\] for index… --- ## [How to set java path for elasticsearch](https://discuss.elastic.co/t/how-to-set-java-path-for-elasticsearch/258686)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [December 15, 2020, 9:36am UTC](https://discuss.elastic.co/t/how-to-set-java-path-for-elasticsearch/258686 "2020-12-15T09:36:14Z")
I have java-11 i want to add JAVA\_HOME path in elasticsearch how can i do this i edit this in /etc/default/elasticsearch but when do GET /\_cluster/stats/ it give me output "jvm" : { "max\_uptime\_in\_millis" : 105897… --- ## [Separate index per application or name space](https://discuss.elastic.co/t/separate-index-per-application-or-name-space/194257)
**Author:** [@raju.d](https://discuss.elastic.co/u/raju.d)\ **Replies:** 6\ **Last updated:** [August 9, 2019, 12:06pm UTC](https://discuss.elastic.co/t/separate-index-per-application-or-name-space/194257 "2019-08-09T12:06:43Z")
Hello, I have setup filebeat in kubernetes clusters, that is collecting logs from all containers with a specific annotation. The annotation its looking for is kubernetes.labels.apps Elastic search cluster is running in… --- ## [\[logstash.outputs.elasticsearch\] Attempted to resurrect connection to dead ES instance](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/216027)
**Author:** [@pyerunka](https://discuss.elastic.co/u/pyerunka)\ **Replies:** 3\ **Last updated:** [January 22, 2020, 2:05pm UTC](https://discuss.elastic.co/t/logstash-outputs-elasticsearch-attempted-to-resurrect-connection-to-dead-es-instance/216027 "2020-01-22T14:05:48Z")
Hello, I am trying to use jdbc input plugin using logstash so that i can fetch data from sql database and create the index. But when i am running config file for logstash. It is showing me below error: \[2020-01-22T10… --- ## [No connection could be made because the target machine actively refused it](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/251961)
**Author:** [@jdehnert](https://discuss.elastic.co/u/jdehnert)\ **Replies:** 3\ **Last updated:** [October 13, 2020, 10:31pm UTC](https://discuss.elastic.co/t/no-connection-could-be-made-because-the-target-machine-actively-refused-it/251961 "2020-10-13T22:31:21Z")
I have searched all the other posts on this topic, but none of the other answers seemed to help resolve my problem. My configuration is pretty simple. It's basically straight out of the documentation. I have Elasticse… --- ## [How to stop table row text truncation in Kibana?](https://discuss.elastic.co/t/how-to-stop-table-row-text-truncation-in-kibana/276327)
**Author:** [@rak](https://discuss.elastic.co/u/rak)\ **Replies:** 1\ **Last updated:** [June 18, 2021, 6:33am UTC](https://discuss.elastic.co/t/how-to-stop-table-row-text-truncation-in-kibana/276327 "2021-06-18T06:33:40Z")
I have made a data table in Kibana however long lines of text (stored as a keyword) are truncated and do not completely show (view image below). I have changed the table height setting within the advanced settings to 0 a… --- ## [Is it possible to have a Kibana 4 "Data table" without aggregations?](https://discuss.elastic.co/t/is-it-possible-to-have-a-kibana-4-data-table-without-aggregations/22473)
**Author:** [@Celio\_Nogueira\_de\_Fa](https://discuss.elastic.co/u/Celio_Nogueira_de_Fa)\ **Replies:** 4\ **Last updated:** [July 15, 2015, 3:26pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-a-kibana-4-data-table-without-aggregations/22473 "2015-07-15T15:26:22Z")
Hi all, is there a way of replicating Kibana 3 "table" widget behavior within Kibana 4? I just need to show a filtered table and the new "Data table" widget is only for showing the results of composed aggregation(… --- ## [Elastic 6.6 Elasticsearch Unrestricted Access Information Disclosure](https://discuss.elastic.co/t/elastic-6-6-elasticsearch-unrestricted-access-information-disclosure/211579)
**Author:** [@pugdummy](https://discuss.elastic.co/u/pugdummy)\ **Replies:** 8\ **Last updated:** [December 12, 2019, 2:06pm UTC](https://discuss.elastic.co/t/elastic-6-6-elasticsearch-unrestricted-access-information-disclosure/211579 "2019-12-12T14:06:22Z")
Hello, I'm new with Elastic and we are only using this on UiPath for monitoring. We recently got this vulnerability: Elasticsearch Unrestricted Access Information Disclosure Can anyone help me on what to do to fix this… --- ## [How can I save the aggregated results to another index?](https://discuss.elastic.co/t/how-can-i-save-the-aggregated-results-to-another-index/156243)
**Author:** [@fookfook](https://discuss.elastic.co/u/fookfook)\ **Replies:** 8\ **Last updated:** [November 13, 2018, 4:11pm UTC](https://discuss.elastic.co/t/how-can-i-save-the-aggregated-results-to-another-index/156243 "2018-11-13T16:11:38Z")
Now, I can save the results of the query to another index,like this: POST \_reindex { "source": { "index": "twitter", "query":{ "term":{"author.keyword":"Alex"} } }, "dest": { "index": "new… --- ## [Conditional color coding of entire row in Data Tables](https://discuss.elastic.co/t/conditional-color-coding-of-entire-row-in-data-tables/187063)
**Author:** [@bpallagani](https://discuss.elastic.co/u/bpallagani)\ **Replies:** 4\ **Last updated:** [June 28, 2019, 6:14am UTC](https://discuss.elastic.co/t/conditional-color-coding-of-entire-row-in-data-tables/187063 "2019-06-28T06:14:41Z")
Hi, I want to change the color of entire row in a Data Table in Kibana depending on the value of one field (cell) in that row. I am able to change the particular field/cell from index pattern. But I want to know if it … --- ## [SSL Configuration in Kibana](https://discuss.elastic.co/t/ssl-configuration-in-kibana/77926)
**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\ **Replies:** 6\ **Last updated:** [March 16, 2017, 12:02pm UTC](https://discuss.elastic.co/t/ssl-configuration-in-kibana/77926 "2017-03-16T12:02:50Z")
My company has issued an ssl certificate in 3 formats xxxxBase64.cer, xxxxDERCert.cer and xxxx.p7b Kibana-4.3.0 on linux machine I want to have ssl configuration for kibana when opened in browser, not for requests betw… --- ## [Unable to create an enrollment token](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token/327917)
**Author:** [@geb](https://discuss.elastic.co/u/geb)\ **Replies:** 2\ **Last updated:** [March 20, 2023, 8:47am UTC](https://discuss.elastic.co/t/unable-to-create-an-enrollment-token/327917 "2023-03-20T08:47:36Z")
Hi, i try to add a node at at new formed 8.6 cluster. As the first step i configured the ca, certificates and modified the elasticsearch.yml Cluster started -\> fine The error is also described in: This statement does… --- ## [Snapshot failed with partial state](https://discuss.elastic.co/t/snapshot-failed-with-partial-state/160613)
**Author:** [@Mouglou](https://discuss.elastic.co/u/Mouglou)\ **Replies:** 6\ **Last updated:** [December 14, 2018, 7:24pm UTC](https://discuss.elastic.co/t/snapshot-failed-with-partial-state/160613 "2018-12-14T19:24:54Z")
Hi all ! We are using elasticsearch for a long time now and we get an error during a snapshot. These snapshot storing metrics (1 indice by day / 12 shards), so they are pretty big: ~180G / 900M of documents. Until now… --- ## [Logstash kafka output: Failed to construct kafka producer](https://discuss.elastic.co/t/logstash-kafka-output-failed-to-construct-kafka-producer/73049)
**Author:** [@ixonok](https://discuss.elastic.co/u/ixonok)\ **Replies:** 0\ **Last updated:** [January 27, 2017, 5:26pm UTC](https://discuss.elastic.co/t/logstash-kafka-output-failed-to-construct-kafka-producer/73049 "2017-01-27T17:26:48Z")
i have a problem connection to kafka cluster with Logstash. Version: logstash 5.1.2 Plugin Version logstash-output-kafka (5.1.1) Operating System: Debian GNU/Linux 7.5 (wheezy) ruby version: ruby 1.9.3p194 (2012-04-20 … --- ## [How to index a custom field that has been added to logstash.conf](https://discuss.elastic.co/t/how-to-index-a-custom-field-that-has-been-added-to-logstash-conf/162625)
**Author:** [@baidurjya](https://discuss.elastic.co/u/baidurjya)\ **Replies:** 8\ **Last updated:** [January 2, 2019, 12:10pm UTC](https://discuss.elastic.co/t/how-to-index-a-custom-field-that-has-been-added-to-logstash-conf/162625 "2019-01-02T12:10:59Z")
I've added a custom field to the logstash.conf , it is shown in kibana UI Console but the field "actual\_host\_is" is not indexed. how to index a custom field added to logstash.conf mutate{ add\_field =\> { "actual\_host\_i… --- ## [Logstash heap size](https://discuss.elastic.co/t/logstash-heap-size/622)
**Author:** [@it2](https://discuss.elastic.co/u/it2)\ **Replies:** 5\ **Last updated:** [May 23, 2015, 10:35am UTC](https://discuss.elastic.co/t/logstash-heap-size/622 "2015-05-23T10:35:26Z")
Hello friends! Just say, I'm not an expert in Logstash or elasticsearch. I have logstash 1.4.2 cluster, one master and two nodes for data. I have a lot of logs sending to my cluster every day. And once, logstash stopped … --- ## [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/311338)
**Author:** [@Medel](https://discuss.elastic.co/u/Medel)\ **Replies:** 4\ **Last updated:** [August 10, 2022, 12:53am UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/311338 "2022-08-10T00:53:33Z")
Hello Elastic Users, I am trying to check if my Elasticsearch is working fine and I got the following problem: and Im trying to change elastic super-user password, I got this error : root@Master-node:/usr/share/ela… --- ## [Why not always use %{DATA} as the semantic in the initial grok match?](https://discuss.elastic.co/t/why-not-always-use-data-as-the-semantic-in-the-initial-grok-match/48180)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 3\ **Last updated:** [April 25, 2016, 3:20pm UTC](https://discuss.elastic.co/t/why-not-always-use-data-as-the-semantic-in-the-initial-grok-match/48180 "2016-04-25T15:20:46Z")
From the grok page, the suggested matching for log entries might look like this. %{IP:client} %{WORD:method} %{URIPATHPARAM:request} %{NUMBER:bytes} %{NUMBER:duration} In other words, the suggestion is to use syntax … --- ## [Filter ratio in TSVB](https://discuss.elastic.co/t/filter-ratio-in-tsvb/244842)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 4\ **Last updated:** [August 13, 2020, 11:17am UTC](https://discuss.elastic.co/t/filter-ratio-in-tsvb/244842 "2020-08-13T11:17:09Z")
Hi , i use kibana 7.7.0 i want to calculate the occupancy rate in hotels: i have 5 documents in my index: occupancy rate % = (sum of soldrooms)/ (sum of available rooms) first : i create two scripted fields "sold-ro… --- ## [APM agent surveys](https://discuss.elastic.co/t/apm-agent-surveys/132808)
**Author:** [@felixbarny](https://discuss.elastic.co/u/felixbarny)\ **Replies:** 0\ **Last updated:** [May 22, 2018, 12:04pm UTC](https://discuss.elastic.co/t/apm-agent-surveys/132808 "2018-05-22T12:04:50Z")
We'd love to hear your feedback to help us decide what to include in our agents next. If you're interested, please take a minute to fill out our surveys: .NET: Go: Java: JS (Real User Monitoring): Ruby: … --- ## [Got "java.lang.NoClassDefFoundError: Could not initialize class org.apache.hadoop.util.StringUtils" in repository-hdfs using Elasticsearch-Yarn](https://discuss.elastic.co/t/got-java-lang-noclassdeffounderror-could-not-initialize-class-org-apache-hadoop-util-stringutils-in-repository-hdfs-using-elasticsearch-yarn/37183)
**Author:** [@bewang.tech](https://discuss.elastic.co/u/bewang.tech)\ **Replies:** 3\ **Last updated:** [March 17, 2017, 8:32pm UTC](https://discuss.elastic.co/t/got-java-lang-noclassdeffounderror-could-not-initialize-class-org-apache-hadoop-util-stringutils-in-repository-hdfs-using-elasticsearch-yarn/37183 "2017-03-17T20:32:12Z")
I'm using CDH 5.3.2 and elasticsearch-2.1.0. I built the the zip file of repository-hdfs and install it as a plugin. Then using elasticsearch-yarn to start the elasticsearch cluster. But when I created a HDFS repository,… --- ## [How to change delimiter with json\_lines](https://discuss.elastic.co/t/how-to-change-delimiter-with-json-lines/85286)
**Author:** [@henrilabarre](https://discuss.elastic.co/u/henrilabarre)\ **Replies:** 8\ **Last updated:** [May 12, 2017, 9:21am UTC](https://discuss.elastic.co/t/how-to-change-delimiter-with-json-lines/85286 "2017-05-12T09:21:56Z")
Hi here is my conf file input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "sirene" query =\> '{"query": {"query\_string" : {"query": "((DEPET:54 AND provider:sp\_mairie) OR (DEPET:55 AND provider:sp\_m… --- ## [Elasticsearch 7.13.4 Security Update](https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177)
**Author:** [@douglasday](https://discuss.elastic.co/u/douglasday)\ **Replies:** 0\ **Last updated:** [July 20, 2021, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177 "2021-07-20T15:14:29Z")
Elasticsearch memory disclosure issue (ESA-2021-16) A memory disclosure vulnerability was identified in Elasticsearch’s error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit … --- ## [Curl against Kibana does not work at all](https://discuss.elastic.co/t/curl-against-kibana-does-not-work-at-all/128546)
**Author:** [@va1entin](https://discuss.elastic.co/u/va1entin)\ **Replies:** 7\ **Last updated:** [April 18, 2018, 3:46pm UTC](https://discuss.elastic.co/t/curl-against-kibana-does-not-work-at-all/128546 "2018-04-18T15:46:54Z")
Hey folks, I am currently trying to trigger an Elasticsearch snapshot using curl. However curl against Kibana does not work at all for me. I am trying to execute the commands from the documentation: https://www.elastic.… --- ## [\[ERROR\]\[o.e.x.w.i.s.ExecutableSearchInput\] \[node-1\] failed to execute \[search\] input for watch](https://discuss.elastic.co/t/error-o-e-x-w-i-s-executablesearchinput-node-1-failed-to-execute-search-input-for-watch/121857)
**Author:** [@rcaicedo](https://discuss.elastic.co/u/rcaicedo)\ **Replies:** 6\ **Last updated:** [March 2, 2018, 3:20pm UTC](https://discuss.elastic.co/t/error-o-e-x-w-i-s-executablesearchinput-node-1-failed-to-execute-search-input-for-watch/121857 "2018-03-02T15:20:46Z")
Hi, i'm new using Elastic and we have an error 1 week ago, this error write in elasticsearch.log the next line: \[ERROR\]\[o.e.x.w.i.s.ExecutableSearchInput\] \[node-1\] failed to execute \[search\] input for watch \[eh-CXD5GQV6… --- ## [Array support for YML environment values](https://discuss.elastic.co/t/array-support-for-yml-environment-values/76657)
**Author:** [@PicoCreator](https://discuss.elastic.co/u/PicoCreator)\ **Replies:** 5\ **Last updated:** [March 3, 2017, 3:49pm UTC](https://discuss.elastic.co/t/array-support-for-yml-environment-values/76657 "2017-03-03T15:49:56Z")
For example, the environment value of LOG\_EXCLUDE\_LINES='\["^A", "^B"\]' With yml configuration line exclude\_lines: "${LOG\_EXCLUDE\_LINES}" Is currently not possible, as it will be replaced with quotes. Though, t… --- ## [Error while performing resurretion after restarting elasticsearch](https://discuss.elastic.co/t/error-while-performing-resurretion-after-restarting-elasticsearch/63980)
**Author:** [@nick.e](https://discuss.elastic.co/u/nick.e)\ **Replies:** 6\ **Last updated:** [April 12, 2017, 2:47pm UTC](https://discuss.elastic.co/t/error-while-performing-resurretion-after-restarting-elasticsearch/63980 "2017-04-12T14:47:58Z")
Hello together, I installed a single-node-cluster with the 5.0.0rc1 version of the ELK-Stack for some testing. When restarting the elasticsearch-service logstash tries to reconnect: \[ERROR\]\[logstash.outputs.elastics… --- ## [What are Elasticsearch querying guarantees?](https://discuss.elastic.co/t/what-are-elasticsearch-querying-guarantees/162706)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 2\ **Last updated:** [January 2, 2019, 9:20pm UTC](https://discuss.elastic.co/t/what-are-elasticsearch-querying-guarantees/162706 "2019-01-02T21:20:54Z")
We're looking into extending our use of Elasticsearch into a new use cases and I wanted to get some clarity on what Elasticsearch can and cannot do. The one particular area I am concerned with is the data retrieval guara… --- ## [If condition not working in logstash output](https://discuss.elastic.co/t/if-condition-not-working-in-logstash-output/145671)
**Author:** [@ashok9177](https://discuss.elastic.co/u/ashok9177)\ **Replies:** 8\ **Last updated:** [August 24, 2018, 6:37am UTC](https://discuss.elastic.co/t/if-condition-not-working-in-logstash-output/145671 "2018-08-24T06:37:56Z")
Here is my logstash config file, the issue is logstash not forwarding logs to all outputs, only 2 outputs are working output { if \[fields\]\[component\] == "cat" { file { path =\> "/data/cat/cat.%{+yyyy.MM.dd}" }… --- ## [Is it possible to add a Space in Regex - Elasticsearch 1.7?](https://discuss.elastic.co/t/is-it-possible-to-add-a-space-in-regex-elasticsearch-1-7/57119)
**Author:** [@Muru](https://discuss.elastic.co/u/Muru)\ **Replies:** 7\ **Last updated:** [August 3, 2016, 3:40pm UTC](https://discuss.elastic.co/t/is-it-possible-to-add-a-space-in-regex-elasticsearch-1-7/57119 "2016-08-03T15:40:13Z")
"query" : { "regexp":{ "my field": "wild nature" } } [Previous page](https://discuss.elastic.co/top.md?page=350&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=352&per_page=50&period=all)