# Top **URL:** https://discuss.elastic.co/top.md?page=371&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 372 --- ## [Docker max virtual memory areas vm.max\_map\_count is too low,](https://discuss.elastic.co/t/docker-max-virtual-memory-areas-vm-max-map-count-is-too-low/221779)
**Author:** [@Andres\_Guerrero](https://discuss.elastic.co/u/Andres_Guerrero)\ **Replies:** 1\ **Last updated:** [March 29, 2020, 5:52pm UTC](https://discuss.elastic.co/t/docker-max-virtual-memory-areas-vm-max-map-count-is-too-low/221779 "2020-03-29T17:52:42Z")
Hello, what is the correct way to add the following settings to my container "vm.max\_map\_count=262144" I've added to my project the Official dockerfile Then i added the following line on the dockerfile without suc… --- ## [How to Display Total Sum of counts available on Table visualisation?](https://discuss.elastic.co/t/how-to-display-total-sum-of-counts-available-on-table-visualisation/218916)
**Author:** [@vaseemQA](https://discuss.elastic.co/u/vaseemQA)\ **Replies:** 2\ **Last updated:** [February 14, 2020, 7:29am UTC](https://discuss.elastic.co/t/how-to-display-total-sum-of-counts-available-on-table-visualisation/218916 "2020-02-14T07:29:25Z")
Hi Team, I have a use case where I need to display the sum of counts available on the table. Example Customer A bought 10 Apples Customer B bought 11 Apples I can have the above details on a table by customer wise a… --- ## [Kibana Timelion Legend Position](https://discuss.elastic.co/t/kibana-timelion-legend-position/135296)
**Author:** [@Dhanashree](https://discuss.elastic.co/u/Dhanashree)\ **Replies:** 6\ **Last updated:** [June 26, 2018, 10:20am UTC](https://discuss.elastic.co/t/kibana-timelion-legend-position/135296 "2018-06-26T10:20:35Z")
Hi, How can i change the legend position to top of the graph in timelion? Currently i am getting options for the legend position as north,south or no legend. I am using kibana 6.2.2. version --- ## [How to update a document using index alias](https://discuss.elastic.co/t/how-to-update-a-document-using-index-alias/88866)
**Author:** [@ESCoder](https://discuss.elastic.co/u/ESCoder)\ **Replies:** 5\ **Last updated:** [June 13, 2017, 2:07pm UTC](https://discuss.elastic.co/t/how-to-update-a-document-using-index-alias/88866 "2017-06-13T14:07:04Z")
Hi, I have created an index "index-000001" with primary shards = 5 and replica = 1. And I have created two aliases 1) alias-read -\> index-000001 2) alias-write -\> index-000001 for indexing and searching purposes. … --- ## [Redis input SSL](https://discuss.elastic.co/t/redis-input-ssl/119804)
**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\ **Replies:** 2\ **Last updated:** [February 28, 2018, 5:46pm UTC](https://discuss.elastic.co/t/redis-input-ssl/119804 "2018-02-28T17:46:46Z")
As raised in the following posts: Redis input plugin -proxy and ssl Azure Redis Input plugin is it possible to read / write to Redis via TLS using the logstash input & output plugins? We're currently using Stunnel to … --- ## [Node not discovering master node properly, "Cluster state has not been recovered yet, cannot write to the \[null\] index" error \[503\]](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692)
**Author:** [@dheist](https://discuss.elastic.co/u/dheist)\ **Replies:** 3\ **Last updated:** [May 3, 2022, 12:32am UTC](https://discuss.elastic.co/t/node-not-discovering-master-node-properly-cluster-state-has-not-been-recovered-yet-cannot-write-to-the-null-index-error-503/303692 "2022-05-03T00:32:29Z")
Hello, I have 2 servers in 2 different locations I am trying to make into a cluster. Both are running Elasticsearch v8.1.3. I have the master server, which is configured like this: cluster.name: yyz-news-prod node.name… --- ## [Обработка запросов в инвертированной раскладке](https://discuss.elastic.co/t/topic/84427)
**Author:** [@Elena\_Panova](https://discuss.elastic.co/u/Elena_Panova)\ **Replies:** 3\ **Last updated:** [May 10, 2017, 6:33pm UTC](https://discuss.elastic.co/t/topic/84427 "2017-05-10T18:33:25Z")
Добрый День, Помогите, пожалуйста, разобраться в следующем: Существует ли в ElasticSearch возможность определять, что запрос введен в неверной раскладке клавиатуры и что поиск по индексу необходимо выполнять по инверт… --- ## [Setup filebeat module](https://discuss.elastic.co/t/setup-filebeat-module/247658)
**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\ **Replies:** 6\ **Last updated:** [September 6, 2020, 11:35am UTC](https://discuss.elastic.co/t/setup-filebeat-module/247658 "2020-09-06T11:35:12Z")
I'm trying to set up the apache module in filebeat. I output filebeat to logstash. Just for some context I've enabled pipelines with this command: filebeat setup --pipelines --dashboards --modules apache -E output.logst… --- ## [Nodejs APM - Can't resolve 'async\_hooks'](https://discuss.elastic.co/t/nodejs-apm-cant-resolve-async-hooks/302644)
**Author:** [@jsoule6](https://discuss.elastic.co/u/jsoule6)\ **Replies:** 4\ **Last updated:** [April 19, 2022, 5:54pm UTC](https://discuss.elastic.co/t/nodejs-apm-cant-resolve-async-hooks/302644 "2022-04-19T17:54:32Z")
Hello, We are trying to use APM for our React nodejs app. We have added the dependency in our package.json to install the elastic-apm-node module: "elastic-apm-node": "^3.31.0" And then we added the below line in our… --- ## [Best practice for Kubernetes liveness probe?](https://discuss.elastic.co/t/best-practice-for-kubernetes-liveness-probe/113967)
**Author:** [@JamesB](https://discuss.elastic.co/u/JamesB)\ **Replies:** 0\ **Last updated:** [January 3, 2018, 5:38pm UTC](https://discuss.elastic.co/t/best-practice-for-kubernetes-liveness-probe/113967 "2018-01-03T17:38:25Z")
I'm going to run Logstash in Kubernetes and was wondering what the best practice was for knowing that logstash is alive and functioning? I can then create a liveness and readiness probe in Kubernetes, whether it's HTTP o… --- ## [Parse json "message" into separate fields in Kibana](https://discuss.elastic.co/t/parse-json-message-into-separate-fields-in-kibana/164572)
**Author:** [@yash\_sachdeva](https://discuss.elastic.co/u/yash_sachdeva)\ **Replies:** 2\ **Last updated:** [January 18, 2019, 5:22am UTC](https://discuss.elastic.co/t/parse-json-message-into-separate-fields-in-kibana/164572 "2019-01-18T05:22:47Z")
Hi Team, I am looking to parse my json message into individual fields in Kibana. I have been trying out a lot of the recommendations online and on this forum but to no avail. The conf file I have created is as follows: … --- ## [How to search substring from log field using the scripted fields in painless without regex](https://discuss.elastic.co/t/how-to-search-substring-from-log-field-using-the-scripted-fields-in-painless-without-regex/173408)
**Author:** [@vampire](https://discuss.elastic.co/u/vampire)\ **Replies:** 5\ **Last updated:** [March 25, 2019, 6:19pm UTC](https://discuss.elastic.co/t/how-to-search-substring-from-log-field-using-the-scripted-fields-in-painless-without-regex/173408 "2019-03-25T18:19:55Z")
I am trying to create to some scripted fields using painless by capturing some "keyword" in the log field, which is a long text field. for example, I have bunch of the log fields: "Error: Duplicate entry in user1" "Err… --- ## [ELK returns 502 bad gateway, kibana4 not listening on port 5601](https://discuss.elastic.co/t/elk-returns-502-bad-gateway-kibana4-not-listening-on-port-5601/1629)
**Author:** [@bobkabir](https://discuss.elastic.co/u/bobkabir)\ **Replies:** 5\ **Last updated:** [June 2, 2015, 12:30am UTC](https://discuss.elastic.co/t/elk-returns-502-bad-gateway-kibana4-not-listening-on-port-5601/1629 "2015-06-02T00:30:38Z")
today i couldnt access my ELK page, only getting 502 bad gateway from nginx. i havent changed anything in nginx, but after some research and testing i found out that it has something to do with 5601. i did a netstat -tap… --- ## [REST input for logstash?](https://discuss.elastic.co/t/rest-input-for-logstash/25580)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [July 15, 2015, 6:37am UTC](https://discuss.elastic.co/t/rest-input-for-logstash/25580 "2015-07-15T06:37:18Z")
Hello, We have replaced our old central logging with ELK. However, we have one client which used to talk with earlier service using REST template. Can we somehow, store xml ( coming from Rest post request) to redis or ra… --- ## [Install Previous Versions from Apt-Get Repositories?](https://discuss.elastic.co/t/install-previous-versions-from-apt-get-repositories/70441)
**Author:** [@jameswatson3](https://discuss.elastic.co/u/jameswatson3)\ **Replies:** 3\ **Last updated:** [January 4, 2017, 5:01am UTC](https://discuss.elastic.co/t/install-previous-versions-from-apt-get-repositories/70441 "2017-01-04T05:01:57Z")
I need to add a node to my cluster but see that the version available from the apt-get respository (I'm using Ubuntu 16.04) defaults to the current version 5.1.1. I've tried using: apt-get install elasticsearch=5.0.0 b… --- ## [Cannot connect to the Docker daemon](https://discuss.elastic.co/t/cannot-connect-to-the-docker-daemon/135406)
**Author:** [@cdrouin](https://discuss.elastic.co/u/cdrouin)\ **Replies:** 5\ **Last updated:** [June 12, 2018, 4:03pm UTC](https://discuss.elastic.co/t/cannot-connect-to-the-docker-daemon/135406 "2018-06-12T16:03:12Z")
Hi I'm getting an error running a custom image on my local dev maching using Docker for Windows (in Linux Container Mode). Error 2018-06-11T15:16:44.491Z ERROR instance/beat.go:667 Exiting: Cannot connect … --- ## [Index warm up to speed up query time](https://discuss.elastic.co/t/index-warm-up-to-speed-up-query-time/70523)
**Author:** [@DBS](https://discuss.elastic.co/u/DBS)\ **Replies:** 7\ **Last updated:** [January 8, 2017, 10:36pm UTC](https://discuss.elastic.co/t/index-warm-up-to-speed-up-query-time/70523 "2017-01-08T22:36:09Z")
Hi, I'd like to know whether there is a way that I can perform some kind of warm-up to speed up query process. Say if I have 50,000 documents in an index, and need to warm up 500 query strings. What I found was if I run… --- ## [How can i add field in ingest pipeline:](https://discuss.elastic.co/t/how-can-i-add-field-in-ingest-pipeline/182913)
**Author:** [@Vishnu\_mk](https://discuss.elastic.co/u/Vishnu_mk)\ **Replies:** 2\ **Last updated:** [May 28, 2019, 6:02am UTC](https://discuss.elastic.co/t/how-can-i-add-field-in-ingest-pipeline/182913 "2019-05-28T06:02:08Z")
PUT \_ingest/pipeline/test { "description" : "fscrawler res2", "processors" : \[ { "grok": { "field": "content", "patterns": \["(^|\\\\s)(?\(\\\\+\\\\d{1,3}\[- \]?)?\\\\d{10})($|\\\\s)"\] … --- ## [How to use dm\_crypt with elasticsearch](https://discuss.elastic.co/t/how-to-use-dm-crypt-with-elasticsearch/214781)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [January 16, 2020, 5:41am UTC](https://discuss.elastic.co/t/how-to-use-dm-crypt-with-elasticsearch/214781 "2020-01-16T05:41:38Z")
In my case, the data stored in elasticsearch must be encrypted. So i will use dm\_crypt + LUKS. Here is my file system. elasticsearch.yml In the current state, inserting and searching data using kibana dev tools w… --- ## [Kibana error "fielddata is disabled by default on text fields"](https://discuss.elastic.co/t/kibana-error-fielddata-is-disabled-by-default-on-text-fields/57615)
**Author:** [@marminthibaut](https://discuss.elastic.co/u/marminthibaut)\ **Replies:** 6\ **Last updated:** [February 21, 2017, 4:00am UTC](https://discuss.elastic.co/t/kibana-error-fielddata-is-disabled-by-default-on-text-fields/57615 "2017-02-21T04:00:58Z")
Hi, Kibana gives me an error when I try to render a vizualisation : Visualize: Fielddata is disabled on text fields by default. Set fielddata=true on \[bytes\] in order to load fielddata in memory by bla bla bla... The… --- ## [Export elasticsearch data into csv file](https://discuss.elastic.co/t/export-elasticsearch-data-into-csv-file/79978)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 8\ **Last updated:** [March 29, 2017, 10:16am UTC](https://discuss.elastic.co/t/export-elasticsearch-data-into-csv-file/79978 "2017-03-29T10:16:57Z")
Hi I want to export data which is indexed in elasticsearch Here is my config file input { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "mongolog1" query =\> ' { "query": { "bool": { "… --- ## [Filebeat sending old logs on restart](https://discuss.elastic.co/t/filebeat-sending-old-logs-on-restart/46189)
**Author:** [@bbach](https://discuss.elastic.co/u/bbach)\ **Replies:** 5\ **Last updated:** [April 4, 2016, 11:59pm UTC](https://discuss.elastic.co/t/filebeat-sending-old-logs-on-restart/46189 "2016-04-04T23:59:36Z")
I upgraded about 50 servers to filebeat 1.2. Two of the servers seem to be sending lines from old log files (from log files that are over a year old). I stopped filebeat and added an "ignore\_older: 24h" line to to the … --- ## [\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError", :message=\>"Expected one of #,](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of/139651)
**Author:** [@Shraddha\_Srivastav](https://discuss.elastic.co/u/Shraddha_Srivastav)\ **Replies:** 4\ **Last updated:** [July 12, 2018, 5:36pm UTC](https://discuss.elastic.co/t/error-logstash-agent-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror-message-expected-one-of/139651 "2018-07-12T17:36:58Z")
Following is my config file: input { file{ path =\> "C:\\Users\\shraddhasrivastav\\Downloads\\cars.csv" start\_position =\> "beginning" sincedb\_path =\> "dev/null" } stdin { } } filter{ csv{ columns =\> \["TimeOfDay… --- ## [Logstash split String](https://discuss.elastic.co/t/logstash-split-string/84946)
**Author:** [@Thomas-cc](https://discuss.elastic.co/u/Thomas-cc)\ **Replies:** 1\ **Last updated:** [May 8, 2017, 2:47pm UTC](https://discuss.elastic.co/t/logstash-split-string/84946 "2017-05-08T14:47:07Z")
Hallo all togehter, i have build a new instance with icinga-beat-\>logstash-\>elasticsearch-\>kibana (all with the newest version) Everything works fine, but i have a litte problem with split one string to an array. T… --- ## [Installing logstash 6.7 with OpenJDK-11](https://discuss.elastic.co/t/installing-logstash-6-7-with-openjdk-11/177771)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 4\ **Last updated:** [April 23, 2019, 5:18pm UTC](https://discuss.elastic.co/t/installing-logstash-6-7-with-openjdk-11/177771 "2019-04-23T17:18:54Z")
Hi there Now that Oracle has decided to make the Java installation more troublesome I decided to try Openjdk instead. It says on the Elastic support matrix that both ElasticSearch and Logstash supports Openjdk-11. Howe… --- ## [Very Large Terms Query](https://discuss.elastic.co/t/very-large-terms-query/39838)
**Author:** [@johari](https://discuss.elastic.co/u/johari)\ **Replies:** 4\ **Last updated:** [January 25, 2016, 9:03pm UTC](https://discuss.elastic.co/t/very-large-terms-query/39838 "2016-01-25T21:03:39Z")
I'm pretty new but it seems one of the most obvious applications of Elasticsearch is to filter a vast number of large documents with a terms filter containing the few words you're interested in. However, i have the inver… --- ## [Max file descriptors \[4096\] for elasticsearch process is too low, increase to at least \[65536\]](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low-increase-to-at-least-65536/76792)
**Author:** [@Prasen\_Gupta1](https://discuss.elastic.co/u/Prasen_Gupta1)\ **Replies:** 1\ **Last updated:** [February 28, 2017, 3:12pm UTC](https://discuss.elastic.co/t/max-file-descriptors-4096-for-elasticsearch-process-is-too-low-increase-to-at-least-65536/76792 "2017-02-28T15:12:17Z")
Guys, When I'm trying to start the elastic service below exceptions is raised and the service is getting closed. Exception: \[2017-02-28T19:31:41,528\]\[INFO \]\[o.e.t.TransportService \] \[VcBevGV\] publish\_address {1… --- ## [Issues with installing elastic-cloud-enterprise-installer](https://discuss.elastic.co/t/issues-with-installing-elastic-cloud-enterprise-installer/71199)
**Author:** [@Henk](https://discuss.elastic.co/u/Henk)\ **Replies:** 8\ **Last updated:** [January 13, 2017, 10:11am UTC](https://discuss.elastic.co/t/issues-with-installing-elastic-cloud-enterprise-installer/71199 "2017-01-13T10:11:31Z")
Hi. I am trying to install Elastic Cloud Enterprise on a Ubuntu 14 machine. Got everything in place, but the installer is stuck on Loaded bootstrap settings. Even after waiting for more then 24 hours the installer is… --- ## [Filebeat locking files](https://discuss.elastic.co/t/filebeat-locking-files/70501)
**Author:** [@Prathap\_Reddy](https://discuss.elastic.co/u/Prathap_Reddy)\ **Replies:** 2\ **Last updated:** [January 4, 2017, 3:27am UTC](https://discuss.elastic.co/t/filebeat-locking-files/70501 "2017-01-04T03:27:39Z")
Hi, I installed filebeat to monitor logs. Below are the environment details: OS: windows 7 filebeat version: 5.1.1 Config Details Prospectors config: - input\_type: log paths: - C:\\myfiles\\ELKStack\\Learning\*… --- ## [Logstash, http filter, problem with sending arrays in body](https://discuss.elastic.co/t/logstash-http-filter-problem-with-sending-arrays-in-body/191337)
**Author:** [@agone](https://discuss.elastic.co/u/agone)\ **Replies:** 2\ **Last updated:** [July 19, 2019, 2:17pm UTC](https://discuss.elastic.co/t/logstash-http-filter-problem-with-sending-arrays-in-body/191337 "2019-07-19T14:17:04Z")
I am trying to use http filter plugin to make POST requests to third party API while processing evens in logstash. This API requires requests to be json-encoded in following format: { "type": "alert", "source":… --- ## [NEST API SUCKS](https://discuss.elastic.co/t/nest-api-sucks/214128)
**Author:** [@han1](https://discuss.elastic.co/u/han1)\ **Replies:** 5\ **Last updated:** [January 26, 2020, 4:33am UTC](https://discuss.elastic.co/t/nest-api-sucks/214128 "2020-01-26T04:33:13Z")
Not only is there no Documentation for important things we need to do, even when we ask a question due to lack of docs, No one bothers to respond. NEST seems to be not only useless as far as providing an API it actually… --- ## [Configuring FileBeat.yml For Windows](https://discuss.elastic.co/t/configuring-filebeat-yml-for-windows/88623)
**Author:** [@jshahid](https://discuss.elastic.co/u/jshahid)\ **Replies:** 6\ **Last updated:** [June 8, 2017, 7:32pm UTC](https://discuss.elastic.co/t/configuring-filebeat-yml-for-windows/88623 "2017-06-08T19:32:40Z")
Hi, I have been looking for some time on how set up configuration of filebeat.yml on a windows client to ship logs to a ubuntu host that has the elk stack installed. I have the service installed and running, but am compl… --- ## [Breakdown Y-Axis value by other terms](https://discuss.elastic.co/t/breakdown-y-axis-value-by-other-terms/226911)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 1\ **Last updated:** [April 7, 2020, 2:23pm UTC](https://discuss.elastic.co/t/breakdown-y-axis-value-by-other-terms/226911 "2020-04-07T14:23:40Z")
Hi, I am working on building a vizualisation that shows the amount of time a person has worked on tasks. I am able to create a vizualisation showing the total amount of time a person has spent on a task, but now I want t… --- ## [Single Index vs. Multiple Indices](https://discuss.elastic.co/t/single-index-vs-multiple-indices/154141)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 8\ **Last updated:** [October 28, 2018, 2:57pm UTC](https://discuss.elastic.co/t/single-index-vs-multiple-indices/154141 "2018-10-28T14:57:19Z")
Hello, What is better to use, a single index or multiple ones? Which of the two gives a better performance in terms of searching? Knowing that if I stored data in multiple indices, I will search only in one of these i… --- ## [Visualizing CPU usage](https://discuss.elastic.co/t/visualizing-cpu-usage/191521)
**Author:** [@broccoli](https://discuss.elastic.co/u/broccoli)\ **Replies:** 2\ **Last updated:** [July 27, 2019, 10:44am UTC](https://discuss.elastic.co/t/visualizing-cpu-usage/191521 "2019-07-27T10:44:10Z")
Hi all, I'm trying to visualize my systems' current CPU usage which I receive through metricbeat. The field I'm interested in is system.cpu.system.norm.pct. As I can see in the discovery tab, the data is shipped correct… --- ## [Filebeat stops updating the registry](https://discuss.elastic.co/t/filebeat-stops-updating-the-registry/67553)
**Author:** [@tom.dewire](https://discuss.elastic.co/u/tom.dewire)\ **Replies:** 7\ **Last updated:** [December 5, 2016, 2:19pm UTC](https://discuss.elastic.co/t/filebeat-stops-updating-the-registry/67553 "2016-12-05T14:19:12Z")
UPDATE: This discussion is being tracked as bug #3098 UPDATE: Adding the affected OS as CentOS 6.x (2.6.32-642.3.1.el6.x86\_64) Per the title, Filebeat (5.0.0) appears to stop updating the registry, breaking state dur… --- ## [APM Server -\> AWS Elasticsearch Service: "cannot retrieve the elasticsearch license: unauthorized access, could not connect to the xpack endpoint, verify your credentials"](https://discuss.elastic.co/t/apm-server-aws-elasticsearch-service-cannot-retrieve-the-elasticsearch-license-unauthorized-access-could-not-connect-to-the-xpack-endpoint-verify-your-credentials/207759)
**Author:** [@hickeroar](https://discuss.elastic.co/u/hickeroar)\ **Replies:** 6\ **Last updated:** [November 19, 2019, 4:22pm UTC](https://discuss.elastic.co/t/apm-server-aws-elasticsearch-service-cannot-retrieve-the-elasticsearch-license-unauthorized-access-could-not-connect-to-the-xpack-endpoint-verify-your-credentials/207759 "2019-11-19T16:22:52Z")
Kibana version: 7.1.1 Elasticsearch version: 7.1.1 APM Server version: 7.1.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: DEB: curl -L -O https://artifacts.elastic.co/downlo… --- ## [Correct way to use the mutate rename filter](https://discuss.elastic.co/t/correct-way-to-use-the-mutate-rename-filter/274683)
**Author:** [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Replies:** 4\ **Last updated:** [June 2, 2021, 12:23am UTC](https://discuss.elastic.co/t/correct-way-to-use-the-mutate-rename-filter/274683 "2021-06-02T00:23:25Z")
Hello, this is weird, For the last couple of years I've been using the mutate rename filter in the following way, with one rename option for every field inside the same mutate block. mutate { rename =\> { "field1" =\>… --- ## [Dec 2nd, 2023: Meeting Recording Sharing as a Service](https://discuss.elastic.co/t/dec-2nd-2023-meeting-recording-sharing-as-a-service/347282)
**Author:** [@gil](https://discuss.elastic.co/u/gil)\ **Replies:** 0\ **Last updated:** [December 2, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-2nd-2023-meeting-recording-sharing-as-a-service/347282 "2023-12-02T08:00:15Z")
Zoom Recording Sharing Service We’re distributed by design, which means our company policies and values revolve around how to best work when Elasticians are spread around the world. One consequence of this design is t… --- ## [When mounting \`elasticsearch.yml\`, docker displays \`Device or resource busy\`](https://discuss.elastic.co/t/when-mounting-elasticsearch-yml-docker-displays-device-or-resource-busy/300981)
**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\ **Replies:** 3\ **Last updated:** [March 31, 2022, 2:49am UTC](https://discuss.elastic.co/t/when-mounting-elasticsearch-yml-docker-displays-device-or-resource-busy/300981 "2022-03-31T02:49:12Z")
I tried to mount elasticsearch.yml and kibana.yml inside docker-compose.yml. For kibana, it is very smooth, but for Elasticsearch, an exception is thrown and the corresponding service is aborted, which confuses me. The … --- ## [Trouble visualizing CPU utilization](https://discuss.elastic.co/t/trouble-visualizing-cpu-utilization/99856)
**Author:** [@Matty](https://discuss.elastic.co/u/Matty)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 2:59pm UTC](https://discuss.elastic.co/t/trouble-visualizing-cpu-utilization/99856 "2017-09-08T14:59:15Z")
I am using metricbeat to visualize system and network performance across my fleet. It works great! One thing I' having a hard time with is getting CPU used vs. CPU idle. I would like to be able to subtract system.cpu.id… --- ## [Logstash plugin is installed and listed but not found by logstash](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-listed-but-not-found-by-logstash/259895)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 3:43pm UTC](https://discuss.elastic.co/t/logstash-plugin-is-installed-and-listed-but-not-found-by-logstash/259895 "2021-01-04T15:43:34Z")
Hello Elasticians ! I installed syslog output plug in (logstash-output-syslog-3.0.5.gem) using offline method as I don't have wan access on target server. Plug in has been successfully installed and is listed with lo… --- ## [Error event executor terminated](https://discuss.elastic.co/t/error-event-executor-terminated/144565)
**Author:** [@perryparktung](https://discuss.elastic.co/u/perryparktung)\ **Replies:** 2\ **Last updated:** [August 16, 2018, 5:37pm UTC](https://discuss.elastic.co/t/error-event-executor-terminated/144565 "2018-08-16T17:37:19Z")
Logstash was having pipeline error: event executor terminated. What would possibly be the problem?? Filebeat (v. 6.3.2) - filebeat.yml: filebeat.inputs: - type: log enabled: true paths: - c:\\var\\logs\\oob-demo\\sa… --- ## [Can't open ElasticSearch on browser from outside the server](https://discuss.elastic.co/t/cant-open-elasticsearch-on-browser-from-outside-the-server/229717)
**Author:** [@Hamza\_Dev](https://discuss.elastic.co/u/Hamza_Dev)\ **Replies:** 6\ **Last updated:** [March 24, 2022, 2:43pm UTC](https://discuss.elastic.co/t/cant-open-elasticsearch-on-browser-from-outside-the-server/229717 "2022-03-24T14:43:11Z")
Hi , I'm new with ES I've installed it from the official site on an Azure VM with Centos 7 System, it's successfully installed, when I start the service it started correctly, and when I check the availability of ES, usi… --- ## [How to label visualization axes?](https://discuss.elastic.co/t/how-to-label-visualization-axes/980)
**Author:** [@Dave\_G](https://discuss.elastic.co/u/Dave_G)\ **Replies:** 3\ **Last updated:** [May 21, 2015, 2:48am UTC](https://discuss.elastic.co/t/how-to-label-visualization-axes/980 "2015-05-21T02:48:28Z")
I'm experimenting with Kibana 4 for the first time and liking what I can do with it. However, I'm having trouble with a really simple thing: how can I label the axes of a graph? No matter what kind of visualization I … --- ## [Filebeat vs. rsyslog imfile module](https://discuss.elastic.co/t/filebeat-vs-rsyslog-imfile-module/64257)
**Author:** [@dandrestor](https://discuss.elastic.co/u/dandrestor)\ **Replies:** 5\ **Last updated:** [October 28, 2016, 4:57pm UTC](https://discuss.elastic.co/t/filebeat-vs-rsyslog-imfile-module/64257 "2016-10-28T16:57:55Z")
Hi there, In the context of a modern enterprise Linux environment, where rsyslog is pretty much omnipresent, I was wondering if there is any reason to prefer Filebeat vs. just using the imfile module of rsyslog. Has an… --- ## [Find and replace string in \[message\] field](https://discuss.elastic.co/t/find-and-replace-string-in-message-field/96319)
**Author:** [@ash007](https://discuss.elastic.co/u/ash007)\ **Replies:** 8\ **Last updated:** [August 17, 2017, 7:34pm UTC](https://discuss.elastic.co/t/find-and-replace-string-in-message-field/96319 "2017-08-17T19:34:11Z")
Hi, I want to replace a string in my message field. How should i proceed in logstash filter. Below is a sample \[message\] log: input to logstash:(before parsing) some text in the beginning Auth: Sec slghltrgj;sjtg;St… --- ## [Ulimits for elasticsearch instances](https://discuss.elastic.co/t/ulimits-for-elasticsearch-instances/300189)
**Author:** [@INS](https://discuss.elastic.co/u/INS)\ **Replies:** 7\ **Last updated:** [March 21, 2022, 10:16pm UTC](https://discuss.elastic.co/t/ulimits-for-elasticsearch-instances/300189 "2022-03-21T22:16:54Z")
Hi I'm facing with issue related to configuration with resource limits. On the host I've 18 nodes with Elasticsearch (build over docker-compose) I have taken the following into consideration setting from elastic doc (… --- ## [Elasticsearch for mid/long term storage](https://discuss.elastic.co/t/elasticsearch-for-mid-long-term-storage/6190)
**Author:** [@GambitK](https://discuss.elastic.co/u/GambitK)\ **Replies:** 7\ **Last updated:** [December 20, 2011, 7:30pm UTC](https://discuss.elastic.co/t/elasticsearch-for-mid-long-term-storage/6190 "2011-12-20T19:30:49Z")
Is elasticsearch a good solution for storing logs for some time? I was asking around on the logstash irc channel and the general consensus is that elasticsearch is not storage friendly. Does somoene her have any expe… --- ## [Discovery.zen.ping.unicast.hosts setting for master and client nodes?](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-setting-for-master-and-client-nodes/64757)
**Author:** [@ZillaG](https://discuss.elastic.co/u/ZillaG)\ **Replies:** 8\ **Last updated:** [March 30, 2017, 6:07am UTC](https://discuss.elastic.co/t/discovery-zen-ping-unicast-hosts-setting-for-master-and-client-nodes/64757 "2017-03-30T06:07:45Z")
If I have 3 master nodes and 1 client node, what should the "discovery.zen.ping.unicast.hosts" setting be in elasticsearch.yml? Say I have ip\_master0, ip\_master1, ip\_master2, and ip\_client Should it be this? - For the … [Previous page](https://discuss.elastic.co/top.md?page=370&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=372&per_page=50&period=all)