# Top **URL:** https://discuss.elastic.co/top.md?page=437&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 438 --- ## [Building a plugin with Gradle and Elasticsearch 5.0](https://discuss.elastic.co/t/building-a-plugin-with-gradle-and-elasticsearch-5-0/65313)
**Author:** [@Damien\_Alexandre](https://discuss.elastic.co/u/Damien_Alexandre)\ **Replies:** 4\ **Last updated:** [November 8, 2016, 3:04pm UTC](https://discuss.elastic.co/t/building-a-plugin-with-gradle-and-elasticsearch-5-0/65313 "2016-11-08T15:04:48Z")
Hi there, I'm trying to build a plugin for Elasticsearch, but I have to tell the documentation is very thin :cry:. Basically all we have is an example plugin in the ES core, but that doesn't say how to build, how to star… --- ## [Delete By Query using Java High Level Rest Client](https://discuss.elastic.co/t/delete-by-query-using-java-high-level-rest-client/102507)
**Author:** [@kumar1993](https://discuss.elastic.co/u/kumar1993)\ **Replies:** 2\ **Last updated:** [October 9, 2017, 12:39pm UTC](https://discuss.elastic.co/t/delete-by-query-using-java-high-level-rest-client/102507 "2017-10-09T12:39:09Z")
Is there a way to achieve delete by query using the java high level rest client ? previously i was using transport client to achieve the same thing, turns out that there is no straight forward way of doing this with the … --- ## [Intégrer des visualisations/dashboards de Kibana dans une application Angular 2](https://discuss.elastic.co/t/integrer-des-visualisations-dashboards-de-kibana-dans-une-application-angular-2/134441)
**Author:** [@Akimbo](https://discuss.elastic.co/u/Akimbo)\ **Replies:** 7\ **Last updated:** [June 6, 2018, 10:01am UTC](https://discuss.elastic.co/t/integrer-des-visualisations-dashboards-de-kibana-dans-une-application-angular-2/134441 "2018-06-06T10:01:58Z")
Quelle est la meilleure solution pour intégrer des visualisations/dashboards de Kibana dans une application Angular 2 ? Je travaille actuellement sur une application Angular 2 (V6) et je cherche à intégrer Kibana dans l… --- ## [Unable to install Logstash 5.0 - Need help](https://discuss.elastic.co/t/unable-to-install-logstash-5-0-need-help/64489)
**Author:** [@VIJAYP](https://discuss.elastic.co/u/VIJAYP)\ **Replies:** 7\ **Last updated:** [November 3, 2016, 3:03pm UTC](https://discuss.elastic.co/t/unable-to-install-logstash-5-0-need-help/64489 "2016-11-03T15:03:43Z")
Hello, I'm able to install Elasticsearch 5.0 and Kibana 5.0 successfully. Running on Linux 3.10.0-123.el7.x86\_64. Installing Logstash 5.0 through YUM following the steps provided in https://www.elastic.co/guide/e… --- ## [How to get all nested docs by doc values](https://discuss.elastic.co/t/how-to-get-all-nested-docs-by-doc-values/59951)
**Author:** [@jdgiauzn](https://discuss.elastic.co/u/jdgiauzn)\ **Replies:** 7\ **Last updated:** [September 8, 2016, 9:44am UTC](https://discuss.elastic.co/t/how-to-get-all-nested-docs-by-doc-values/59951 "2016-09-08T09:44:14Z")
Hi, all, i have mapping like this: {id: 1, name: 'x', types: \[{price: 1, status: true}, {price: 2, status: false}\]}. types is nested. Now, i want to custom score with script, in the script, i can use \_source\['types'\] t… --- ## [Metricbeat failed to start at system reboot](https://discuss.elastic.co/t/metricbeat-failed-to-start-at-system-reboot/116256)
**Author:** [@ijazadm](https://discuss.elastic.co/u/ijazadm)\ **Replies:** 5\ **Last updated:** [January 19, 2018, 8:32pm UTC](https://discuss.elastic.co/t/metricbeat-failed-to-start-at-system-reboot/116256 "2018-01-19T20:32:29Z")
Hi , Metricbeat is running fine , and is enabled to start at system boot through systemd, rhel7. but when I reboot the system , it fails to start and I have to restart is manually. Any ideas? log: \[root@wp-p3s-2c ~\]… --- ## [View full stack trace in Discover search](https://discuss.elastic.co/t/view-full-stack-trace-in-discover-search/171157)
**Author:** [@MSkiLLz](https://discuss.elastic.co/u/MSkiLLz)\ **Replies:** 1\ **Last updated:** [March 6, 2019, 10:27pm UTC](https://discuss.elastic.co/t/view-full-stack-trace-in-discover-search/171157 "2019-03-06T22:27:00Z")
Hello, I'm a first time Kibana user. Currently I am able to view the log details of my application within Kibana but the entire stack trace does not show within one message. The stack trace is being split line by line w… --- ## [About index.unassigned.node\_left.delayed\_timeout setting](https://discuss.elastic.co/t/about-index-unassigned-node-left-delayed-timeout-setting/58097)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 3\ **Last updated:** [August 17, 2016, 7:44am UTC](https://discuss.elastic.co/t/about-index-unassigned-node-left-delayed-timeout-setting/58097 "2016-08-17T07:44:32Z")
Per ES reference, we can delay the allocation when node leaves with following setting: PUT /\_all/\_settings { "settings": { "index.unassigned.node\_left.delayed\_timeout": "5m" } } My questions is, If I put this… --- ## [Cisco asa - grok failure probably](https://discuss.elastic.co/t/cisco-asa-grok-failure-probably/142897)
**Author:** [@trustbyte](https://discuss.elastic.co/u/trustbyte)\ **Replies:** 8\ **Last updated:** [August 6, 2018, 9:33am UTC](https://discuss.elastic.co/t/cisco-asa-grok-failure-probably/142897 "2018-08-06T09:33:46Z")
Hey guys! I am having a hard time with the logstash and a syslog file which gets info from multiple cisco routers/firewalls. syslog file is like this: Aug 3 00:00:03 host233.domain.com %ASA-6-305011: Built dynamic TC… --- ## [Kibana reporting pdf with error: "Error: Error spawning Chromium browser: Error: socket hang up"](https://discuss.elastic.co/t/kibana-reporting-pdf-with-error-error-error-spawning-chromium-browser-error-socket-hang-up/168714)
**Author:** [@saiergon](https://discuss.elastic.co/u/saiergon)\ **Replies:** 6\ **Last updated:** [February 24, 2019, 5:58am UTC](https://discuss.elastic.co/t/kibana-reporting-pdf-with-error-error-error-spawning-chromium-browser-error-socket-hang-up/168714 "2019-02-24T05:58:15Z")
hi, i want to use kibana reporting pdf dashbord, but i got follow error and i foudn error logs in my kibana log: {"type":"error","@timestamp":"2019-02-17T07:03:46Z","tags":\["warning","process"\],"pid":18769,"level":"e… --- ## [How to delete elasticsearch data which is older than 90 days from a static Index](https://discuss.elastic.co/t/how-to-delete-elasticsearch-data-which-is-older-than-90-days-from-a-static-index/42591)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 6\ **Last updated:** [February 25, 2016, 1:30pm UTC](https://discuss.elastic.co/t/how-to-delete-elasticsearch-data-which-is-older-than-90-days-from-a-static-index/42591 "2016-02-25T13:30:56Z")
Hi Experts, I have one static Index(I mean I do not create index every day) , but data is keep on coming on daily basis . My requirement is to delete old data from this single index to make more disk space . I found E… --- ## [How to take EPOCH time as @timestamp](https://discuss.elastic.co/t/how-to-take-epoch-time-as-timestamp/32673)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 5\ **Last updated:** [October 21, 2015, 3:46pm UTC](https://discuss.elastic.co/t/how-to-take-epoch-time-as-timestamp/32673 "2015-10-21T15:46:36Z")
Hi Experts, I have a filed which has EPOCH time in it e.g "1443463933000". I want to use it as a @ timestamp filed in kibana . So this is what I have done . Step 1 --\> In logstash i used a date filter and set target … --- ## [ML job not updating in real time](https://discuss.elastic.co/t/ml-job-not-updating-in-real-time/142709)
**Author:** [@chrillebile](https://discuss.elastic.co/u/chrillebile)\ **Replies:** 3\ **Last updated:** [August 3, 2018, 1:01pm UTC](https://discuss.elastic.co/t/ml-job-not-updating-in-real-time/142709 "2018-08-03T13:01:44Z")
Hey, I'm having a strange problem. I have an ML job (with a bucket span of 1 day) that are running in real time, but it has the "latest timestamp" on 2018-07-26 even though the latest data is from 2018-08-01. If I stop … --- ## [How to start logstash as root](https://discuss.elastic.co/t/how-to-start-logstash-as-root/155107)
**Author:** [@mancharagopan](https://discuss.elastic.co/u/mancharagopan)\ **Replies:** 2\ **Last updated:** [November 2, 2018, 1:19pm UTC](https://discuss.elastic.co/t/how-to-start-logstash-as-root/155107 "2018-11-02T13:19:47Z")
Hello, Can anyone tell me how to start logstash as root? I am trying to use port 514 to syslog messages because some of my devices like WLC send syslog messages only to udp port 514. --- ## [Incorrect HTTP method for uri /\_template/ and method PUT, allowed: GET (404)](https://discuss.elastic.co/t/incorrect-http-method-for-uri-template-and-method-put-allowed-get-404/161559)
**Author:** [@tlacuache](https://discuss.elastic.co/u/tlacuache)\ **Replies:** 3\ **Last updated:** [December 19, 2018, 5:57pm UTC](https://discuss.elastic.co/t/incorrect-http-method-for-uri-template-and-method-put-allowed-get-404/161559 "2018-12-19T17:57:49Z")
I'm having an issue getting a custom beat to load the template into elasticsearch. Here is the section from my beat's config file: setup.template.enabled: true setup.template.name: "foobarbeat-%{\[beat.version\]}" setup.… --- ## [Dangling index warning in elasticsearch](https://discuss.elastic.co/t/dangling-index-warning-in-elasticsearch/82495)
**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\ **Replies:** 3\ **Last updated:** [April 17, 2017, 6:04am UTC](https://discuss.elastic.co/t/dangling-index-warning-in-elasticsearch/82495 "2017-04-17T06:04:54Z")
I have deleted a few indices from Elasticsearch and I am seeing dangling index warning in my elasticsearch logs \[2017-04-16T07:12:38,760\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[coordinate-node\] \[\[trial-2017.03.29/jgEtpX6l… --- ## [Elasticsearch not starting on Second Run... Voting Configuration and Quorum Issue](https://discuss.elastic.co/t/elasticsearch-not-starting-on-second-run-voting-configuration-and-quorum-issue/189416)
**Author:** [@oriondark](https://discuss.elastic.co/u/oriondark)\ **Replies:** 7\ **Last updated:** [July 10, 2019, 3:38pm UTC](https://discuss.elastic.co/t/elasticsearch-not-starting-on-second-run-voting-configuration-and-quorum-issue/189416 "2019-07-10T15:38:15Z")
Startup error: (not on initial run of new elasticsearch instance) "org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: cannot start with \[discovery.type\] set to \[single-node\] when local node … --- ## [Error: IndexPattern's configured pattern does not match any indices](https://discuss.elastic.co/t/error-indexpatterns-configured-pattern-does-not-match-any-indices/81370)
**Author:** [@jroberto](https://discuss.elastic.co/u/jroberto)\ **Replies:** 4\ **Last updated:** [April 10, 2017, 5:22pm UTC](https://discuss.elastic.co/t/error-indexpatterns-configured-pattern-does-not-match-any-indices/81370 "2017-04-10T17:22:16Z")
Guys, Help me with this error. I'm banging my head against the wall ... curl http://elastic:changeme@elasticsearch:9200/\_cat/indices?v health status index uuid pri rep d… --- ## [Concurrent requests and queue](https://discuss.elastic.co/t/concurrent-requests-and-queue/57520)
**Author:** [@lorisbc](https://discuss.elastic.co/u/lorisbc)\ **Replies:** 2\ **Last updated:** [August 9, 2016, 1:16pm UTC](https://discuss.elastic.co/t/concurrent-requests-and-queue/57520 "2016-08-09T13:16:20Z")
Hi, I am working on performances of ElasticSearch and concurrent requests, this is my last test: The test was made with 3 instances m4.large on Amazon AWS: 1 instance with one master node - index queue : 1000 - o… --- ## [Logstash parsing syslog](https://discuss.elastic.co/t/logstash-parsing-syslog/57686)
**Author:** [@rth](https://discuss.elastic.co/u/rth)\ **Replies:** 7\ **Last updated:** [August 10, 2016, 12:45pm UTC](https://discuss.elastic.co/t/logstash-parsing-syslog/57686 "2016-08-10T12:45:29Z")
Hello all, I have a syslog server and the ELK stack on the same server. I create a directory for each syslog source. I'm trying to parse syslog events with Logstash, and I'd like to keep the ip adress of the syslog sou… --- ## [Docker elastic 6 unknown authority](https://discuss.elastic.co/t/docker-elastic-6-unknown-authority/123863)
**Author:** [@HugoRomaniCortes](https://discuss.elastic.co/u/HugoRomaniCortes)\ **Replies:** 5\ **Last updated:** [March 21, 2018, 4:23pm UTC](https://discuss.elastic.co/t/docker-elastic-6-unknown-authority/123863 "2018-03-21T16:23:18Z")
Hello, I'm struggling while pulling elastic 6.x images from elastic docker repository. I get the message: https://docker.elastic.co/v2/: x509: certificate signed by unknown authority I'm running the command on a linux… --- ## [Visualize \> Metric aggregation on terms](https://discuss.elastic.co/t/visualize-metric-aggregation-on-terms/84023)
**Author:** [@dgaillard](https://discuss.elastic.co/u/dgaillard)\ **Replies:** 5\ **Last updated:** [May 4, 2017, 1:24pm UTC](https://discuss.elastic.co/t/visualize-metric-aggregation-on-terms/84023 "2017-05-04T13:24:22Z")
Hi everyone, I'm trying to use Kibana 5.X to render data from an ES 5.X that is populate using an open source project, Apache Unomi. I'm pretty new to ES and even more to Kibana so I could be miss understanding how to… --- ## [How to filter json string field value](https://discuss.elastic.co/t/how-to-filter-json-string-field-value/176391)
**Author:** [@Sonu\_Pajai\_Save](https://discuss.elastic.co/u/Sonu_Pajai_Save)\ **Replies:** 2\ **Last updated:** [April 16, 2019, 11:23am UTC](https://discuss.elastic.co/t/how-to-filter-json-string-field-value/176391 "2019-04-16T11:23:57Z")
in my elasticsearch index it has pagedata filed under message field which contains following data message.PageData: {"survey\_details":{"survey\_status":0,"survey\_ref\_id":1,"skip\_status":0,"question\_count":21,"survey\_ope… --- ## [Elasticsearchへのデータ登録について](https://discuss.elastic.co/t/elasticsearch/152920)
**Author:** [@hmlhmz](https://discuss.elastic.co/u/hmlhmz)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 7:19am UTC](https://discuss.elastic.co/t/elasticsearch/152920 "2018-10-18T07:19:43Z")
elasticsearchへデータの登録をしたいのですが以下の通り失敗します。 考えられる理由を教えて下さい。 \[環境\] ・CentOS 7.5 (64bit) ・elasticsearch 6.4.2 ・kibana 6.4.2 \[実行\] sudo curl -H 'Content-Type: application/json' -XPOST http://localhost:9200/hoge\_index/hoge\_t… --- ## [Default\_field setting](https://discuss.elastic.co/t/default-field-setting/214311)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 7\ **Last updated:** [January 13, 2020, 4:21pm UTC](https://discuss.elastic.co/t/default-field-setting/214311 "2020-01-13T16:21:05Z")
Is there any way to set a default field for an index, such that when a user types an expression in kibana discover, the query will be to that default field and not every field in the index? I'm looking all over the docu… --- ## [Supervised machine learning plugins or tools for elasticsearch?](https://discuss.elastic.co/t/supervised-machine-learning-plugins-or-tools-for-elasticsearch/59501)
**Author:** [@Shrikanth\_N\_C](https://discuss.elastic.co/u/Shrikanth_N_C)\ **Replies:** 8\ **Last updated:** [September 2, 2016, 5:11am UTC](https://discuss.elastic.co/t/supervised-machine-learning-plugins-or-tools-for-elasticsearch/59501 "2016-09-02T05:11:08Z")
Similar to carrot2 plugin are there any plugins or tools on top of elk, that can be used to train and execute supervised learning algorithms ? ( preferably java ) I want to classify search results based on training dat… --- ## [Creating custom filebeat module](https://discuss.elastic.co/t/creating-custom-filebeat-module/162956)
**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\ **Replies:** 3\ **Last updated:** [January 10, 2019, 10:56am UTC](https://discuss.elastic.co/t/creating-custom-filebeat-module/162956 "2019-01-10T10:56:43Z")
Okay, i read https://www.elastic.co/guide/en/beats/devguide/current/filebeat-modules-devguide.html And i almost have done: mkdir -p ${GOPATH}/src/github.com/elastic cd ${GOPATH}/src/github.com/elastic git clone https:/… --- ## [Painful! postgres--\>logstash--\>elasticsearch mapper\_parsing\_exception!](https://discuss.elastic.co/t/painful-postgres-logstash-elasticsearch-mapper-parsing-exception/44918)
**Author:** [@past2010yeah](https://discuss.elastic.co/u/past2010yeah)\ **Replies:** 4\ **Last updated:** [March 21, 2016, 3:46am UTC](https://discuss.elastic.co/t/painful-postgres-logstash-elasticsearch-mapper-parsing-exception/44918 "2016-03-21T03:46:51Z")
hi, I am so sorry to bother you, but now I am painful and rage about a problem. the problem has spent more that one weeks. and so sad I cann't find any useful information, anyone any comments and suggestions, I real… --- ## [Painless null pointer exception](https://discuss.elastic.co/t/painless-null-pointer-exception/128245)
**Author:** [@Syed\_ali\_abbas\_shah](https://discuss.elastic.co/u/Syed_ali_abbas_shah)\ **Replies:** 5\ **Last updated:** [April 20, 2018, 5:47am UTC](https://discuss.elastic.co/t/painless-null-pointer-exception/128245 "2018-04-20T05:47:20Z")
Here is My query , I am using elastic search 6.2 and my java version is 1.9 GET /users\_small/user/\_search { "\_source": \[ "id", "username", "full\_name", "picture", "message\_privacy" \], "from": 0… --- ## [What "index\_time\_in\_millis" means?](https://discuss.elastic.co/t/what-index-time-in-millis-means/105842)
**Author:** [@trelo](https://discuss.elastic.co/u/trelo)\ **Replies:** 0\ **Last updated:** [October 31, 2017, 7:03am UTC](https://discuss.elastic.co/t/what-index-time-in-millis-means/105842 "2017-10-31T07:03:23Z")
Hi! I've a cluster with 3 nodes(3 master/2 data). This cluster is monitoring by Zabbix several weeks and now I notice, that metric "index\_time\_in\_millis"(curl -s http://localhost:9200/index\_name/\_stats?pretty | jq ".\_a… --- ## [How to define multiple path.data pointing to separate volumes or PVC using ECK?](https://discuss.elastic.co/t/how-to-define-multiple-path-data-pointing-to-separate-volumes-or-pvc-using-eck/218644)
**Author:** [@ykozlov](https://discuss.elastic.co/u/ykozlov)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 9:23am UTC](https://discuss.elastic.co/t/how-to-define-multiple-path-data-pointing-to-separate-volumes-or-pvc-using-eck/218644 "2020-03-02T09:23:35Z")
Hi! elasticsearch.yml supports configuration setting where I can specify multiple data path for the ES data node as follows: path.data: - "/mnt/data1', - "/mnt/data2" - "/mnt/data3" I can define additional volumes an… --- ## [Index is not creating](https://discuss.elastic.co/t/index-is-not-creating/115911)
**Author:** [@Sumit\_Gupta1](https://discuss.elastic.co/u/Sumit_Gupta1)\ **Replies:** 5\ **Last updated:** [January 23, 2018, 8:39pm UTC](https://discuss.elastic.co/t/index-is-not-creating/115911 "2018-01-23T20:39:24Z")
I' getting following error: status=\>400, : action=\>\[ "index", { : \_id=\>nil, : \_index=\>"mongodata", : \_type=\>"mytype1", : \_routing=\>nil }, # \], : response=\>{ "index"=\>{ "\_index"=\>"mongodata", "\_type"=\>"myty… --- ## [How to solve this using ElasticSearch and NLP features](https://discuss.elastic.co/t/how-to-solve-this-using-elasticsearch-and-nlp-features/2145)
**Author:** [@Prasoon\_Nigam](https://discuss.elastic.co/u/Prasoon_Nigam)\ **Replies:** 4\ **Last updated:** [July 5, 2016, 8:47am UTC](https://discuss.elastic.co/t/how-to-solve-this-using-elasticsearch-and-nlp-features/2145 "2016-07-05T08:47:40Z")
Need help in modeling and solving this problem through Elastic Search and its NLP features. We will get a query and we have to extract and out of it. There are Products are like: 1 JNM Gold Plan 2 JNM Gold & More 3… --- ## [Dashboard creation with a query](https://discuss.elastic.co/t/dashboard-creation-with-a-query/326064)
**Author:** [@Haneesha](https://discuss.elastic.co/u/Haneesha)\ **Replies:** 7\ **Last updated:** [February 22, 2023, 3:07pm UTC](https://discuss.elastic.co/t/dashboard-creation-with-a-query/326064 "2023-02-22T15:07:27Z")
Hi Team, Could you please let me know how to create a dashboard using a query. I have a query, i am supposed to create a dashboard. Query: select type\_cd,status\_cd, count(row\_id) from siebel.s\_loy\_txn where TXN\_DT \>=… --- ## [Logstash Templates Incorrect](https://discuss.elastic.co/t/logstash-templates-incorrect/112816)
**Author:** [@Borrelworst](https://discuss.elastic.co/u/Borrelworst)\ **Replies:** 5\ **Last updated:** [December 27, 2017, 3:52pm UTC](https://discuss.elastic.co/t/logstash-templates-incorrect/112816 "2017-12-27T15:52:54Z")
Hi All, This is not a real issue, well maybe for some of you, but I want to clear some things out: I am already using Elasticseach for a couple of years and really like the software and what you can do with it. However… --- ## [Error: 403 Forbidden while trying to Create IndexPattern for filebeat. Tried Most of The Solutions!](https://discuss.elastic.co/t/error-403-forbidden-while-trying-to-create-indexpattern-for-filebeat-tried-most-of-the-solutions/172182)
**Author:** [@ishashank](https://discuss.elastic.co/u/ishashank)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 12:31pm UTC](https://discuss.elastic.co/t/error-403-forbidden-while-trying-to-create-indexpattern-for-filebeat-tried-most-of-the-solutions/172182 "2019-03-22T12:31:37Z")
Hi All, I've gone through many posts regarding this and still couldn't manage to fix the issue. Below are the details of the environment and the index details: A Clean Installation of ELK followed steps mentioned on: … --- ## [Error creating runner from config: 1 error: no metricsets configured for module 'jolokia'](https://discuss.elastic.co/t/error-creating-runner-from-config-1-error-no-metricsets-configured-for-module-jolokia/168434)
**Author:** [@josemtobar](https://discuss.elastic.co/u/josemtobar)\ **Replies:** 8\ **Last updated:** [February 21, 2019, 4:43am UTC](https://discuss.elastic.co/t/error-creating-runner-from-config-1-error-no-metricsets-configured-for-module-jolokia/168434 "2019-02-21T04:43:59Z")
Unable to send Jolokia metrics, I get this error in my /var/log/metricbeat/metricbeat error log 2019-02-14T14:52:26.415Z ERROR \[reload\] cfgfile/list.go:104 Error creating runner from config: 1 error: no metricsets confi… --- ## [Logstash/Kibana: Filter AWS ELB logs based on the old timestamp](https://discuss.elastic.co/t/logstash-kibana-filter-aws-elb-logs-based-on-the-old-timestamp/33413)
**Author:** [@quadrim](https://discuss.elastic.co/u/quadrim)\ **Replies:** 8\ **Last updated:** [November 3, 2015, 6:03pm UTC](https://discuss.elastic.co/t/logstash-kibana-filter-aws-elb-logs-based-on-the-old-timestamp/33413 "2015-11-03T18:03:11Z")
Recently I set up the ELK stack to filter logs of my Load Balancer. But the timestamp which is getting showed up in Kibana is not from the log files, but is the one at which the file was downloaded to the server. I am n… --- ## [Solution for multiple patterns for multiline configuration](https://discuss.elastic.co/t/solution-for-multiple-patterns-for-multiline-configuration/43807)
**Author:** [@Marine](https://discuss.elastic.co/u/Marine)\ **Replies:** 2\ **Last updated:** [March 10, 2016, 12:47pm UTC](https://discuss.elastic.co/t/solution-for-multiple-patterns-for-multiline-configuration/43807 "2016-03-10T12:47:51Z")
In the multiline documentation the setting "pattern" is a string and it's not possible to put an array of patterns, but I have a really hard logfile to parse and I need to do something similar. I have two type of logs … --- ## [Elastic APM with ASP.Net and IIS server configuration](https://discuss.elastic.co/t/elastic-apm-with-asp-net-and-iis-server-configuration/305135)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 6\ **Last updated:** [May 20, 2022, 11:20am UTC](https://discuss.elastic.co/t/elastic-apm-with-asp-net-and-iis-server-configuration/305135 "2022-05-20T11:20:27Z")
Hi, I want to instrument asp.net MVC application with Elastic APM agent and got through this link Configuration on ASP.NET | APM .NET Agent Reference \[1.12\] | Elastic which requires to add the configuration in the web.c… --- ## [Delete after Total Disk Space Reaches Threshold](https://discuss.elastic.co/t/delete-after-total-disk-space-reaches-threshold/27136)
**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\ **Replies:** 4\ **Last updated:** [August 10, 2015, 4:40pm UTC](https://discuss.elastic.co/t/delete-after-total-disk-space-reaches-threshold/27136 "2015-08-10T16:40:55Z")
I found that curator can do many tasks but the delete --disk-space works in a very specific way. It will delete certain indices that are beyond a certain memory threshold. I want to ask if there is a way to check if the … --- ## [Count accuracy is an approximate, but I need actual counts](https://discuss.elastic.co/t/count-accuracy-is-an-approximate-but-i-need-actual-counts/93671)
**Author:** [@Aldo\_Sarmiento](https://discuss.elastic.co/u/Aldo_Sarmiento)\ **Replies:** 3\ **Last updated:** [July 19, 2017, 5:02pm UTC](https://discuss.elastic.co/t/count-accuracy-is-an-approximate-but-i-need-actual-counts/93671 "2017-07-19T17:02:52Z")
As can be seen in the screenshot, our app has counts for tagged contacts. The arrow above shows that there are 63 contacts that have the "New" tag. These are stored as keywords on each contact, currently, and we're do… --- ## [JSON parse error, original data now in message field](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/242459)
**Author:** [@nisaxena](https://discuss.elastic.co/u/nisaxena)\ **Replies:** 7\ **Last updated:** [August 4, 2020, 2:12pm UTC](https://discuss.elastic.co/t/json-parse-error-original-data-now-in-message-field/242459 "2020-08-04T14:12:13Z")
Hi There, I am new to ELK, and need support. I have deployed a new ELK stack \[7.8.0\] & I am trying to ingest my rsyslogs to logstash. I am able to retrieve the logs to logstash but with following errors, logstash-plain… --- ## [Connection refused when trying to run on aws ec2](https://discuss.elastic.co/t/connection-refused-when-trying-to-run-on-aws-ec2/104595)
**Author:** [@lemongrab](https://discuss.elastic.co/u/lemongrab)\ **Replies:** 3\ **Last updated:** [October 19, 2017, 9:52pm UTC](https://discuss.elastic.co/t/connection-refused-when-trying-to-run-on-aws-ec2/104595 "2017-10-19T21:52:29Z")
Hello. I tried curling to my ec2 instance's instance of elasticsearch but got a connection refused error. I tried doing this while remoting into it via ssh as follows: curl -X GET http://127.0.0.1:9200 and variations… --- ## [Converting bytes to gb in logstash configuration file](https://discuss.elastic.co/t/converting-bytes-to-gb-in-logstash-configuration-file/102026)
**Author:** [@somu411](https://discuss.elastic.co/u/somu411)\ **Replies:** 8\ **Last updated:** [September 28, 2017, 2:51pm UTC](https://discuss.elastic.co/t/converting-bytes-to-gb-in-logstash-configuration-file/102026 "2017-09-28T14:51:09Z")
Hi All, I have logstash conf file, where I have field with bytes but when I Load to Kibana I should see new field with bytes coverted to GB. I tried using ruby filter but it is failing with error "\[2017-09-27T15:16:43,… --- ## [Disable response logging (access log) in Kibana \[7.16.3\]](https://discuss.elastic.co/t/disable-response-logging-access-log-in-kibana-7-16-3/297889)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 4\ **Last updated:** [March 2, 2022, 6:15pm UTC](https://discuss.elastic.co/t/disable-response-logging-access-log-in-kibana-7-16-3/297889 "2022-03-02T18:15:59Z")
Hi, everyone I have configured Kibana 7.16.3 logging in order not to be so verbose. Here you are an example: logging: root: level: error However, I would like to disable response information: {"type":"response"… --- ## [Syslog filebeat input, how to get sender IP address?](https://discuss.elastic.co/t/syslog-filebeat-input-how-to-get-sender-ip-address/214809)
**Author:** [@emilie](https://discuss.elastic.co/u/emilie)\ **Replies:** 7\ **Last updated:** [January 20, 2020, 5:03pm UTC](https://discuss.elastic.co/t/syslog-filebeat-input-how-to-get-sender-ip-address/214809 "2020-01-20T17:03:06Z")
Hello, I'm using filebeat to send syslog input to a kafka server (it works wonderfully, thank you). But I'm wondering: how can I add the IP from the machine that is sending its syslog input in my logs? (I'm aware of p… --- ## [Parsing string and assigning fields](https://discuss.elastic.co/t/parsing-string-and-assigning-fields/54086)
**Author:** [@apomerenk](https://discuss.elastic.co/u/apomerenk)\ **Replies:** 7\ **Last updated:** [June 30, 2016, 7:24am UTC](https://discuss.elastic.co/t/parsing-string-and-assigning-fields/54086 "2016-06-30T07:24:45Z")
How would I use a logstash filter to parse the message: 0.00 pool 3041 and assign fields CPU\_USAGE, PROCESS\_NAME, and PROCESS\_ID to it? For example CPU\_USAGE: 0.00 (type float) PROCESS\_… --- ## [Does Logstash has a output plugin for mysql?](https://discuss.elastic.co/t/does-logstash-has-a-output-plugin-for-mysql/48658)
**Author:** [@gfafei](https://discuss.elastic.co/u/gfafei)\ **Replies:** 2\ **Last updated:** [May 3, 2016, 5:11am UTC](https://discuss.elastic.co/t/does-logstash-has-a-output-plugin-for-mysql/48658 "2016-05-03T05:11:46Z")
Like the title. --- ## [Store binary files in elastic search](https://discuss.elastic.co/t/store-binary-files-in-elastic-search/295805)
**Author:** [@Arpita11](https://discuss.elastic.co/u/Arpita11)\ **Replies:** 8\ **Last updated:** [January 31, 2022, 11:36am UTC](https://discuss.elastic.co/t/store-binary-files-in-elastic-search/295805 "2022-01-31T11:36:19Z")
For my project, we are storing the data in Elasticsearch. I have new requirement regarding documents (i.e. the actual binaries): Store documents and be able to search the text within the document binary. Allow the use… [Previous page](https://discuss.elastic.co/top.md?page=436&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=438&per_page=50&period=all)