# Top **URL:** https://discuss.elastic.co/top.md?page=414&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 415 --- ## [How to get count of returned data in match query?](https://discuss.elastic.co/t/how-to-get-count-of-returned-data-in-match-query/193618)
**Author:** [@Bidzina\_Goginashvili](https://discuss.elastic.co/u/Bidzina_Goginashvili)\ **Replies:** 3\ **Last updated:** [August 4, 2019, 7:29am UTC](https://discuss.elastic.co/t/how-to-get-count-of-returned-data-in-match-query/193618 "2019-08-04T07:29:53Z")
GET index/\_search { "query": {"terms": { "id": \[ "114383" \] }} get the count of this matched data } and also get the count of this GET products/\_search { "query": { "match" : { "inStorage": "true" … --- ## [Fail to ship data from Metribeat to Logstash](https://discuss.elastic.co/t/fail-to-ship-data-from-metribeat-to-logstash/208876)
**Author:** [@LuigiDelavega](https://discuss.elastic.co/u/LuigiDelavega)\ **Replies:** 5\ **Last updated:** [November 22, 2019, 10:39am UTC](https://discuss.elastic.co/t/fail-to-ship-data-from-metribeat-to-logstash/208876 "2019-11-22T10:39:53Z")
Hello, Im pretty new to the ELK stack and i need your help to identify where my problem come from, please. I installed ElasticSearch, Kibana and logstash and they are working well. I used with sample data to be more fa… --- ## [Kibana Red timeout on healthy cluster](https://discuss.elastic.co/t/kibana-red-timeout-on-healthy-cluster/133587)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 7\ **Last updated:** [June 4, 2018, 4:10pm UTC](https://discuss.elastic.co/t/kibana-red-timeout-on-healthy-cluster/133587 "2018-06-04T16:10:13Z")
Hi running Kibana 6.2.4 Kibana was working fine and now I'm getting. plugin:elasticsearch@6.2.4 Request Timeout after 30000ms The cluster is 100% healthy. I also have another window open of the same Kibana UI but I h… --- ## [Get Results of individual jenkins job and create Dashboard](https://discuss.elastic.co/t/get-results-of-individual-jenkins-job-and-create-dashboard/173205)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 3\ **Last updated:** [March 22, 2019, 3:03am UTC](https://discuss.elastic.co/t/get-results-of-individual-jenkins-job-and-create-dashboard/173205 "2019-03-22T03:03:29Z")
HI Thanks in advance. I am new to kibana and see it is possible to show time series data in kibana. I have a different requirement. I am trying to setup a dashboard for monitoring our software flow. The process looks l… --- ## [Unable to port forward localhost:5601 to kibana's port 5601 in Virtual machine in my laptop](https://discuss.elastic.co/t/unable-to-port-forward-localhost-5601-to-kibanas-port-5601-in-virtual-machine-in-my-laptop/233720)
**Author:** [@jibitgeorge](https://discuss.elastic.co/u/jibitgeorge)\ **Replies:** 2\ **Last updated:** [May 24, 2020, 11:39am UTC](https://discuss.elastic.co/t/unable-to-port-forward-localhost-5601-to-kibanas-port-5601-in-virtual-machine-in-my-laptop/233720 "2020-05-24T11:39:45Z")
I have a VM running on my laptop using Oracle virtual box in which I have installed kibana. It not a docker installation. And it is accessible on 127.0.0.1:5601 from my virtual machine Then I did a port forwarding in O… --- ## [Kibana TimeZone doesn't change](https://discuss.elastic.co/t/kibana-timezone-doesnt-change/97923)
**Author:** [@Huffs](https://discuss.elastic.co/u/Huffs)\ **Replies:** 6\ **Last updated:** [August 23, 2017, 6:59pm UTC](https://discuss.elastic.co/t/kibana-timezone-doesnt-change/97923 "2017-08-23T18:59:14Z")
Hi everybody, Before everything, I´m sorry for my bad english. I´ll try to be clear and brief. I´ve already tried changing my timezone, but I didn't succeed. I changed the timezone on "Advanced Settings", "dateForma… --- ## [Elasticsearch Java client much slower than rest call](https://discuss.elastic.co/t/elasticsearch-java-client-much-slower-than-rest-call/9703)
**Author:** [@DMAC](https://discuss.elastic.co/u/DMAC)\ **Replies:** 6\ **Last updated:** [October 3, 2016, 3:05pm UTC](https://discuss.elastic.co/t/elasticsearch-java-client-much-slower-than-rest-call/9703 "2016-10-03T15:05:27Z")
Hi We are starting to use the Java API in ElasticSearch. The only problem is that the queries seem to take much longer to retrieve data than simply using curl. Our development server(19.08) has very small ind… --- ## [How to use XContentBuilder in Elasticsearch 8.0](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256)
**Author:** [@Michael\_Gattinger](https://discuss.elastic.co/u/Michael_Gattinger)\ **Replies:** 8\ **Last updated:** [October 27, 2022, 5:56am UTC](https://discuss.elastic.co/t/how-to-use-xcontentbuilder-in-elasticsearch-8-0/317256 "2022-10-27T05:56:59Z")
Hi, i found some examples how to use XContentBuilder in Elasticsearch 7.x but these examples do not work any more since ESJAC is completely new programmed. But as XContentBuilder still exists: XContentBuilder (elasticse… --- ## [Kibana Dashboard not showing all data](https://discuss.elastic.co/t/kibana-dashboard-not-showing-all-data/151433)
**Author:** [@steven97](https://discuss.elastic.co/u/steven97)\ **Replies:** 3\ **Last updated:** [October 9, 2018, 9:55am UTC](https://discuss.elastic.co/t/kibana-dashboard-not-showing-all-data/151433 "2018-10-09T09:55:19Z")
I have set up a test environment recently with an Elasticsearch cluster, a Logstash and a Kibana server. I use it to monitor serveral ESXi hosts, collecting their messages. Everything works fine, I have build up a dashb… --- ## [If condition in Kibana Table Visualization](https://discuss.elastic.co/t/if-condition-in-kibana-table-visualization/305751)
**Author:** [@micaelle](https://discuss.elastic.co/u/micaelle)\ **Replies:** 5\ **Last updated:** [June 1, 2022, 8:34am UTC](https://discuss.elastic.co/t/if-condition-in-kibana-table-visualization/305751 "2022-06-01T08:34:24Z")
Hi, is it possible to use if condition in a Kibana Table Visualization? I want to build a financial table that counts a line item and then multiply the quantity with a specific value for each volume level. --- ## [Filebeat for Fail2Ban via Logstash?](https://discuss.elastic.co/t/filebeat-for-fail2ban-via-logstash/201115)
**Author:** [@Dan\_Kennedy](https://discuss.elastic.co/u/Dan_Kennedy)\ **Replies:** 0\ **Last updated:** [September 25, 2019, 11:07pm UTC](https://discuss.elastic.co/t/filebeat-for-fail2ban-via-logstash/201115 "2019-09-25T23:07:28Z")
Hi All, need a bit of advice. I'm using Elasticsearch to collect and categorise logs from network devices. These are being sent to Logstash before being forwarded to Elasticsearch. I want to forward some Linux server F… --- ## [\[apm-reporter\] ERROR co.elastic.apm.agent.report.IntakeV2ReportingEventHandler - Error sending data to APM server: cannot retry due to server authentication, in streaming mode, response code is 401](https://discuss.elastic.co/t/apm-reporter-error-co-elastic-apm-agent-report-intakev2reportingeventhandler-error-sending-data-to-apm-server-cannot-retry-due-to-server-authentication-in-streaming-mode-response-code-is-401/217564)
**Author:** [@kumar\_kung](https://discuss.elastic.co/u/kumar_kung)\ **Replies:** 6\ **Last updated:** [February 3, 2020, 11:07am UTC](https://discuss.elastic.co/t/apm-reporter-error-co-elastic-apm-agent-report-intakev2reportingeventhandler-error-sending-data-to-apm-server-cannot-retry-due-to-server-authentication-in-streaming-mode-response-code-is-401/217564 "2020-02-03T11:07:09Z")
Kibana version : 7.5.2 Elasticsearch version : 7.5.2 APM Server version : 7.5.2 \*\*APM Agent language \*\*: java Original install method : ECK operator 1.0.0 GA I have updated apm-server-quickstart-apm-token secret-t… --- ## [Shards Failing](https://discuss.elastic.co/t/shards-failing/140978)
**Author:** [@Sulaiman](https://discuss.elastic.co/u/Sulaiman)\ **Replies:** 1\ **Last updated:** [July 21, 2018, 5:33am UTC](https://discuss.elastic.co/t/shards-failing/140978 "2018-07-21T05:33:14Z")
Recently I have upgrade ElasticSearch version "6.3.1" but I am facing too many shards failing with old data. I am using Elastic search with kibana,logstash, wazuh curl -XGET localhost:9200/\_cat/shards?h=index,shard,pri… --- ## [Extract IP from message into a separate field](https://discuss.elastic.co/t/extract-ip-from-message-into-a-separate-field/111193)
**Author:** [@VamPikmin](https://discuss.elastic.co/u/VamPikmin)\ **Replies:** 3\ **Last updated:** [December 12, 2017, 8:35am UTC](https://discuss.elastic.co/t/extract-ip-from-message-into-a-separate-field/111193 "2017-12-12T08:35:54Z")
Hey all, I've got syslog setup on my router and I've been wanting to extract the IPV4 field from the message into a new field This is what one type of message looks like 36\> 2017-12-11 11:46:3 0 System Detected UDP po… --- ## [Windows event logs, NXLog, and Logstash - Oh My!](https://discuss.elastic.co/t/windows-event-logs-nxlog-and-logstash-oh-my/35936)
**Author:** [@edgoad](https://discuss.elastic.co/u/edgoad)\ **Replies:** 3\ **Last updated:** [November 30, 2015, 7:13pm UTC](https://discuss.elastic.co/t/windows-event-logs-nxlog-and-logstash-oh-my/35936 "2015-11-30T19:13:52Z")
I am trying to forward the event logs from my Domain Controllers into Logstash, but something isnt working. I have followed many of the examples out there, but can't get it going. Environment: Ubuntu 15.04 server, Elas… --- ## [How do you use script fields with datetime subtraction](https://discuss.elastic.co/t/how-do-you-use-script-fields-with-datetime-subtraction/39360)
**Author:** [@gsaray101](https://discuss.elastic.co/u/gsaray101)\ **Replies:** 2\ **Last updated:** [January 16, 2016, 12:08am UTC](https://discuss.elastic.co/t/how-do-you-use-script-fields-with-datetime-subtraction/39360 "2016-01-16T00:08:59Z")
I am trying to use scripted fields to subtrack two datetime fields to determine how long it took for a file to processed. doc.\['time\_var1'\].value - doc.\['time\_var2'\].value doc being the index name. I get this error… --- ## [Convert the file into base64 in elasticsearch for attachment](https://discuss.elastic.co/t/convert-the-file-into-base64-in-elasticsearch-for-attachment/8971)
**Author:** [@Suraj](https://discuss.elastic.co/u/Suraj)\ **Replies:** 8\ **Last updated:** [August 18, 2016, 8:18am UTC](https://discuss.elastic.co/t/convert-the-file-into-base64-in-elasticsearch-for-attachment/8971 "2016-08-18T08:18:48Z")
Actually, I want to change the file into base64 and attach with my elastic search JSON data. My Code is given below: curl -XDELETE "http://localhost:9200/test" curl -XPUT "http://localhost:9200/t… --- ## [Curator example not taking action & w/error](https://discuss.elastic.co/t/curator-example-not-taking-action-w-error/125766)
**Author:** [@gigabyte](https://discuss.elastic.co/u/gigabyte)\ **Replies:** 7\ **Last updated:** [March 28, 2018, 4:03pm UTC](https://discuss.elastic.co/t/curator-example-not-taking-action-w-error/125766 "2018-03-28T16:03:25Z")
Forgive me. Used ~v2 of the ELK and jumping forward and believe it's something simple but it's not jumping out at me after staring at the screen for a couple of days now. Get the same ~error from curator at the command… --- ## [Trying to understand APM Architecture -- why a dedicated APM Server process?](https://discuss.elastic.co/t/trying-to-understand-apm-architecture-why-a-dedicated-apm-server-process/117876)
**Author:** [@ninapavlich](https://discuss.elastic.co/u/ninapavlich)\ **Replies:** 2\ **Last updated:** [February 14, 2018, 1:16pm UTC](https://discuss.elastic.co/t/trying-to-understand-apm-architecture-why-a-dedicated-apm-server-process/117876 "2018-02-14T13:16:25Z")
Hello! I've been setting up a Elastic Stack over the last few months to monitor infrastructure (using MetricBeat + Logstash on my clients, sending that data to Elasticsearch + Kibana). I'm interested in expanding the mo… --- ## [Logstash Unexpected character ('-' (code 45)): was expecting comma to separate Array entries](https://discuss.elastic.co/t/logstash-unexpected-character-code-45-was-expecting-comma-to-separate-array-entries/224821)
**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\ **Replies:** 5\ **Last updated:** [March 30, 2020, 8:05am UTC](https://discuss.elastic.co/t/logstash-unexpected-character-code-45-was-expecting-comma-to-separate-array-entries/224821 "2020-03-30T08:05:51Z")
Hi i am trying to move my application logs to kibana through logstash. 1.This is my logstash.conf file: input { file { path =\> "/home/ubuntu/\*" } } filter { json { source =\> "message" } … --- ## [API calls inaccessible in Elasticsearch PY client](https://discuss.elastic.co/t/api-calls-inaccessible-in-elasticsearch-py-client/27596)
**Author:** [@james\_mtl](https://discuss.elastic.co/u/james_mtl)\ **Replies:** 3\ **Last updated:** [August 18, 2015, 10:34pm UTC](https://discuss.elastic.co/t/api-calls-inaccessible-in-elasticsearch-py-client/27596 "2015-08-18T22:34:38Z")
I am trying to port my code from py-elasticsearch to the official python client. from elasticsearch import Elasticsearch, RequestsHttpConnection es\_server = \["http://server:9200/"\] es\_index = "index\_pattern\*" es = Elas… --- ## [Creating Index ES 5 error for type "text"](https://discuss.elastic.co/t/creating-index-es-5-error-for-type-text/67045)
**Author:** [@David\_she](https://discuss.elastic.co/u/David_she)\ **Replies:** 8\ **Last updated:** [November 24, 2016, 10:52pm UTC](https://discuss.elastic.co/t/creating-index-es-5-error-for-type-text/67045 "2016-11-24T22:52:46Z")
Hi, I'm trying to create an index using mappings and I get an error using a type text or keyword. It works with string of course but I want to use the new types in ES 5. ERROR: { "error": { "root\_cause… --- ## [Google Analytics on Kibana dashboards](https://discuss.elastic.co/t/google-analytics-on-kibana-dashboards/36485)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 4\ **Last updated:** [December 1, 2016, 11:17am UTC](https://discuss.elastic.co/t/google-analytics-on-kibana-dashboards/36485 "2016-12-01T11:17:13Z")
Is there a plugin that comes with a prefab front-end displaying generic "usage" metrics of you Kibana instance? I'm thinking the easiest thing to do would probably be to deploy google analytics on every Kibana page. Is t… --- ## [Convert epoch time to date](https://discuss.elastic.co/t/convert-epoch-time-to-date/223153)
**Author:** [@mehulshah](https://discuss.elastic.co/u/mehulshah)\ **Replies:** 2\ **Last updated:** [March 12, 2020, 10:32am UTC](https://discuss.elastic.co/t/convert-epoch-time-to-date/223153 "2020-03-12T10:32:14Z")
\[Edited\] I am using Logstash 7.x version I have log like below where scheduledTime is in epoch long number, {"scheduledTime":1580634058274,"processTime":1580634073293,"mailingType":1,"userId":123} I want it to be inde… --- ## [Metricbeat: "More than one write index" errors in version 7.13.x](https://discuss.elastic.co/t/metricbeat-more-than-one-write-index-errors-in-version-7-13-x/275355)
**Author:** [@bwright1558](https://discuss.elastic.co/u/bwright1558)\ **Replies:** 6\ **Last updated:** [July 5, 2021, 12:03pm UTC](https://discuss.elastic.co/t/metricbeat-more-than-one-write-index-errors-in-version-7-13-x/275355 "2021-07-05T12:03:47Z")
Ever since upgrading the elastic stack from 7.12.1 to 7.13.x, we've been getting frequent hang ups with running metricbeat (or any other beat) due to the following error: 2021-06-08T22:01:05.930Z ERROR \[index-management… --- ## [Streaming transactional data from AWS RDS instance to Elasticsearch](https://discuss.elastic.co/t/streaming-transactional-data-from-aws-rds-instance-to-elasticsearch/103960)
**Author:** [@wsadiq](https://discuss.elastic.co/u/wsadiq)\ **Replies:** 3\ **Last updated:** [October 17, 2017, 8:16pm UTC](https://discuss.elastic.co/t/streaming-transactional-data-from-aws-rds-instance-to-elasticsearch/103960 "2017-10-17T20:16:18Z")
Hello, Our application keeps all its transactional data in an AWS RDS instance. I would like to provide business intelligence over this transactional data using Elasticsearch and Kibana. So my first task is to figure … --- ## [How do I get the actual content of the HTTP messages body?](https://discuss.elastic.co/t/how-do-i-get-the-actual-content-of-the-http-messages-body/102951)
**Author:** [@mtrivedi](https://discuss.elastic.co/u/mtrivedi)\ **Replies:** 5\ **Last updated:** [October 8, 2017, 11:35am UTC](https://discuss.elastic.co/t/how-do-i-get-the-actual-content-of-the-http-messages-body/102951 "2017-10-08T11:35:36Z")
I am using Packetbeat on a remote machine running CentOS. \> \[root@bng1 bin\]# ./packetbeat -version \> packetbeat version 5.6.1 (amd64), libbeat 5.6.1 I want to fetch the raw content of the http 200 request and the respo… --- ## [Parsing mixing of json and kv filter in logstash](https://discuss.elastic.co/t/parsing-mixing-of-json-and-kv-filter-in-logstash/146878)
**Author:** [@ramesh87](https://discuss.elastic.co/u/ramesh87)\ **Replies:** 5\ **Last updated:** [September 3, 2018, 6:06am UTC](https://discuss.elastic.co/t/parsing-mixing-of-json-and-kv-filter-in-logstash/146878 "2018-09-03T06:06:36Z")
Hi, I am using the logstash configuration version 6.3. I am trying to parsing my log files with conjunction of json and kv filter in the logstash configuration. Logstash Configuration: input { beats { port =\> 5990 … --- ## [Some efficient ways to export data other then JSON from Elasticsearch](https://discuss.elastic.co/t/some-efficient-ways-to-export-data-other-then-json-from-elasticsearch/19816)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 5\ **Last updated:** [September 16, 2014, 3:12pm UTC](https://discuss.elastic.co/t/some-efficient-ways-to-export-data-other-then-json-from-elasticsearch/19816 "2014-09-16T15:12:02Z")
Hi, building some sort of internal tool to export data from Elasticsearch and I would liek to offer csv or XML. Just wondering what options there are... Bassically a user can login to a front end (No I cannot u… --- ## [Added new field in elasticsearch](https://discuss.elastic.co/t/added-new-field-in-elasticsearch/69651)
**Author:** [@anonymous4](https://discuss.elastic.co/u/anonymous4)\ **Replies:** 5\ **Last updated:** [December 21, 2016, 10:38am UTC](https://discuss.elastic.co/t/added-new-field-in-elasticsearch/69651 "2016-12-21T10:38:47Z")
Hi, I have added new field in the existing index using- POST honeypot/\_mapping/type { "properties" : { "extract\_only\_url" : { "type":"string", "index" :"not\_analyzed" … --- ## [How to get 95th percentile and 99th percentile for response-times?](https://discuss.elastic.co/t/how-to-get-95th-percentile-and-99th-percentile-for-response-times/179584)
**Author:** [@pinakinab](https://discuss.elastic.co/u/pinakinab)\ **Replies:** 3\ **Last updated:** [May 8, 2019, 9:27pm UTC](https://discuss.elastic.co/t/how-to-get-95th-percentile-and-99th-percentile-for-response-times/179584 "2019-05-08T21:27:07Z")
We want to extract performance-metrics from Elastic-Search using telegraf or any API from Elastic-Search. But it seems that both telegraf and elastic-search APIs have no way to find that. They report the following: "s… --- ## [Upsert With Script](https://discuss.elastic.co/t/upsert-with-script/175631)
**Author:** [@Anurag\_Mankar](https://discuss.elastic.co/u/Anurag_Mankar)\ **Replies:** 2\ **Last updated:** [April 8, 2019, 2:23pm UTC](https://discuss.elastic.co/t/upsert-with-script/175631 "2019-04-08T14:23:41Z")
I am trying to write a query to update or insert a document. The query is given below. POST /abc/\_doc/108/\_update { "script" : { "source": """ // some process is done here """, "lang": "painless", "params" : { … --- ## [Time without a date field](https://discuss.elastic.co/t/time-without-a-date-field/27282)
**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\ **Replies:** 3\ **Last updated:** [October 5, 2016, 11:02am UTC](https://discuss.elastic.co/t/time-without-a-date-field/27282 "2016-10-05T11:02:21Z")
I have logs that only have a time field i.e. HH:mm:ss.SSS but for some reason there are no dates! I want to include today's date to this field called logstoretime. Because if I do not specify a date filter the time diffe… --- ## [ElasticSearch nodes not responding anymore - please help!](https://discuss.elastic.co/t/elasticsearch-nodes-not-responding-anymore-please-help/59972)
**Author:** [@renego](https://discuss.elastic.co/u/renego)\ **Replies:** 8\ **Last updated:** [September 11, 2016, 8:53am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-not-responding-anymore-please-help/59972 "2016-09-11T08:53:45Z")
Hi, I have the problem, that until some days of running the nodes of ES doesn't respond anymore until I restart them. I have installed for this reason Marvel to take a look into the system. I am attaching the Marvel st… --- ## [ERR Connecting error publishing events (retrying): Get https://localhost:9200: http: server gave HTTP response to HTTPS client](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-get-https-localhost-9200-http-server-gave-http-response-to-https-client/69973)
**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\ **Replies:** 6\ **Last updated:** [December 26, 2016, 6:38am UTC](https://discuss.elastic.co/t/err-connecting-error-publishing-events-retrying-get-https-localhost-9200-http-server-gave-http-response-to-https-client/69973 "2016-12-26T06:38:29Z")
I had installed Elastic Search , Kibana running with 5.1.1 version, And I tried to run the Win log beats, where I couldn't get any data, instead throws the error in the logs. ERR Connecting error publishing events (re… --- ## [Wildcard search Kibana + Filepath + Filename](https://discuss.elastic.co/t/wildcard-search-kibana-filepath-filename/236466)
**Author:** [@Yashwant\_Shettigar](https://discuss.elastic.co/u/Yashwant_Shettigar)\ **Replies:** 3\ **Last updated:** [June 12, 2020, 6:55am UTC](https://discuss.elastic.co/t/wildcard-search-kibana-filepath-filename/236466 "2020-06-12T06:55:48Z")
Hello, There are multiple files present at location supposedly: /test/1/2/3/file123.txt /test/1/2/3/file145.txt /test/1/2/3/fileoutput.txt /test/1/2/3/fileout123.txt /test/1/2/3/file167sdw.txt /test/1/2/3/testou… --- ## [How to use pagination in Elastic Search SQL?](https://discuss.elastic.co/t/how-to-use-pagination-in-elastic-search-sql/191135)
**Author:** [@KrishK](https://discuss.elastic.co/u/KrishK)\ **Replies:** 4\ **Last updated:** [July 19, 2019, 7:48am UTC](https://discuss.elastic.co/t/how-to-use-pagination-in-elastic-search-sql/191135 "2019-07-19T07:48:49Z")
Hi We are using elastic search SQL REST API. POST /\_sql?format=json { "query": "SELECT \* FROM library limit 100" } If i use limit 0,100, its not working. And, i want to use pagination in application. is there any … --- ## [Cannot Start Logstash](https://discuss.elastic.co/t/cannot-start-logstash/167697)
**Author:** [@Murr](https://discuss.elastic.co/u/Murr)\ **Replies:** 4\ **Last updated:** [February 9, 2019, 3:19pm UTC](https://discuss.elastic.co/t/cannot-start-logstash/167697 "2019-02-09T15:19:16Z")
I cannot install logstash successfully. I tried to do this sudo /usr/share/logstash/bin/system-install /etc/logstash/startup.options systemd The output is Using provided startup.options file: /etc/logstash/startup.o… --- ## [Shard routing and consistency in Elasticsearch](https://discuss.elastic.co/t/shard-routing-and-consistency-in-elasticsearch/260361)
**Author:** [@peterol](https://discuss.elastic.co/u/peterol)\ **Replies:** 2\ **Last updated:** [January 6, 2021, 4:08pm UTC](https://discuss.elastic.co/t/shard-routing-and-consistency-in-elasticsearch/260361 "2021-01-06T16:08:13Z")
Hello everyone, I have two questions regarding comprehension of shard routing and consistency in Elasticsearch. I read this documentation Reading and Writing documents and made the conclusion that Elasticsearch is even… --- ## [Date format with month's name](https://discuss.elastic.co/t/date-format-with-months-name/94344)
**Author:** [@mlassnig](https://discuss.elastic.co/u/mlassnig)\ **Replies:** 2\ **Last updated:** [July 24, 2017, 8:46pm UTC](https://discuss.elastic.co/t/date-format-with-months-name/94344 "2017-07-24T20:46:04Z")
Hello there! I'm new to Elasticsearch, so please be patient. I didn't find a solution for my issue, so i thought I might try here. I use a Logstash pipeline to parse my logs to Elasticsearch. My date format looks lik… --- ## [Visualize in Data Table](https://discuss.elastic.co/t/visualize-in-data-table/55792)
**Author:** [@piyush](https://discuss.elastic.co/u/piyush)\ **Replies:** 6\ **Last updated:** [July 19, 2016, 9:30pm UTC](https://discuss.elastic.co/t/visualize-in-data-table/55792 "2016-07-19T21:30:15Z")
Hi Team, I am trying to build an informative Data table that includes fields, arrays and objects, they are "not analyzed" for better aggregation. But when i am adding few fields, query is not returning any result and it … --- ## [Setting a field on Input and Referencing on output](https://discuss.elastic.co/t/setting-a-field-on-input-and-referencing-on-output/88482)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 3\ **Last updated:** [June 12, 2017, 5:38pm UTC](https://discuss.elastic.co/t/setting-a-field-on-input-and-referencing-on-output/88482 "2017-06-12T17:38:40Z")
I'm using the HTTP Logstash (5.4.0) input plugin to receive json input data. I'm having users send data to a different port depending on whether it's test, staging or production data. I then need to reference that field … --- ## [Aggregegation buckets count](https://discuss.elastic.co/t/aggregegation-buckets-count/21270)
**Author:** [@Tom\_4](https://discuss.elastic.co/u/Tom_4)\ **Replies:** 3\ **Last updated:** [December 16, 2014, 12:48pm UTC](https://discuss.elastic.co/t/aggregegation-buckets-count/21270 "2014-12-16T12:48:35Z")
Hi, is there a way to get just the count of buckets (not the count of docs, which works i know) of an aggregation without receiving the whole buckets content? thx, Tom -- You received this message becaus… --- ## [Dynamic fields](https://discuss.elastic.co/t/dynamic-fields/35309)
**Author:** [@vikas.saini](https://discuss.elastic.co/u/vikas.saini)\ **Replies:** 7\ **Last updated:** [November 30, 2015, 7:14am UTC](https://discuss.elastic.co/t/dynamic-fields/35309 "2015-11-30T07:14:42Z")
i want a nestod json like this and my fields contains this string alice@22#bob@34 i want this json "dataclass":{ "tags":{ "alice":22, "bob":34 } } where i am wrong please suggest ruby { code =\> ' … --- ## [End-To-End Security w/JWT](https://discuss.elastic.co/t/end-to-end-security-w-jwt/45994)
**Author:** [@serac](https://discuss.elastic.co/u/serac)\ **Replies:** 4\ **Last updated:** [June 20, 2016, 8:11pm UTC](https://discuss.elastic.co/t/end-to-end-security-w-jwt/45994 "2016-06-20T20:11:05Z")
We are endeavoring to build a large ELK deployment for a large US university and I'm participating in the working group devoted to security and RBAC. I believe our planned architecture is fairly common: Beats -\> Kafka … --- ## [Insert Tooltip in canvas´s visualizations](https://discuss.elastic.co/t/insert-tooltip-in-canvas-s-visualizations/231692)
**Author:** [@Marcos\_David\_Moreno](https://discuss.elastic.co/u/Marcos_David_Moreno)\ **Replies:** 1\ **Last updated:** [May 13, 2020, 7:53pm UTC](https://discuss.elastic.co/t/insert-tooltip-in-canvas-s-visualizations/231692 "2020-05-13T19:53:11Z")
Hello, Is there any way to include tooltip in canvas´s visualizations such as donut chart or histograms? Thank you --- ## [Exiting: data path already locked by another beat (packetbeat)](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-packetbeat/238368)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 3:40am UTC](https://discuss.elastic.co/t/exiting-data-path-already-locked-by-another-beat-packetbeat/238368 "2020-06-25T03:40:48Z")
Hello Just installed and configured packetbeat (7.6.2) on the elastic server (7.6.2). filebeat and metricbeat also run on the same server(s), and of course elasticsearch. packetbeat is not sending any data, so I wante… --- ## [Filebeat harvesters don't restart after stopping due to ignore\_older](https://discuss.elastic.co/t/filebeat-harvesters-dont-restart-after-stopping-due-to-ignore-older/38046)
**Author:** [@pghalliday](https://discuss.elastic.co/u/pghalliday)\ **Replies:** 4\ **Last updated:** [December 28, 2015, 3:17pm UTC](https://discuss.elastic.co/t/filebeat-harvesters-dont-restart-after-stopping-due-to-ignore-older/38046 "2015-12-28T15:17:08Z")
I've been trawling these topics and may have found a couple of issues that sound similar but I can't figure out what the expected behaviour is in the following use case (which seems quite straight forward): I have some… --- ## [Elastic Cluster Architecture Best Practices](https://discuss.elastic.co/t/elastic-cluster-architecture-best-practices/335138)
**Author:** [@A.Hani](https://discuss.elastic.co/u/A.Hani)\ **Replies:** 5\ **Last updated:** [June 4, 2023, 4:57am UTC](https://discuss.elastic.co/t/elastic-cluster-architecture-best-practices/335138 "2023-06-04T04:57:20Z")
Hi all, I have an upcoming project to set up a small cluster and thought would use the community help to validate the design scenario that I have in mind. A little background about available resources for that project: … --- ## [Unable to connect to Beats input on Logstash](https://discuss.elastic.co/t/unable-to-connect-to-beats-input-on-logstash/82020)
**Author:** [@Vinay\_Binny](https://discuss.elastic.co/u/Vinay_Binny)\ **Replies:** 6\ **Last updated:** [April 12, 2017, 2:38pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-beats-input-on-logstash/82020 "2017-04-12T14:38:47Z")
Hi, I am running logstash service on a Ubuntu image in Virtual Box. When I try to connect to the beats service using curl http://localhost:5044 I get the below error. curl: (56) Recv failure: Connection reset by pee… [Previous page](https://discuss.elastic.co/top.md?page=413&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=415&per_page=50&period=all)