# Top **URL:** https://discuss.elastic.co/top.md?page=438&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 439 --- ## [Help with sending PHP-FPM logs with custom pipeline](https://discuss.elastic.co/t/help-with-sending-php-fpm-logs-with-custom-pipeline/207588)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 10:46pm UTC](https://discuss.elastic.co/t/help-with-sending-php-fpm-logs-with-custom-pipeline/207588 "2019-11-14T22:46:24Z")
I have Debian 9 server with Nginx+PHP. Installed Filebeat 7.4.2. I have PHP-FPM log, which has entries like this: slavik@deb96:/var/log/php$ sudo cat php7.0-fpm.log \[11-Nov-2019 23:02:37\] WARNING: \[pool www\] child 133… --- ## [Bootstrap checks failed while upgrading 5.6 to 6.3](https://discuss.elastic.co/t/bootstrap-checks-failed-while-upgrading-5-6-to-6-3/138363)
**Author:** [@lochanm](https://discuss.elastic.co/u/lochanm)\ **Replies:** 5\ **Last updated:** [July 4, 2018, 7:14am UTC](https://discuss.elastic.co/t/bootstrap-checks-failed-while-upgrading-5-6-to-6-3/138363 "2018-07-04T07:14:19Z")
Hello, I am upgrading ES cluster from version 5.6 to 6.3 and facing the below issue. I tried to set up everything as per recommendation but still getting below error. Can someone please help with that? \[2018-07-03T11:05… --- ## [Color coded conditional formatting for rows in tables](https://discuss.elastic.co/t/color-coded-conditional-formatting-for-rows-in-tables/87701)
**Author:** [@NandhaKrishna](https://discuss.elastic.co/u/NandhaKrishna)\ **Replies:** 5\ **Last updated:** [February 22, 2018, 2:41pm UTC](https://discuss.elastic.co/t/color-coded-conditional-formatting-for-rows-in-tables/87701 "2018-02-22T14:41:51Z")
Hi, Is this enhancement done? I want to color the rows according to a condition if the data in the other row is Y then the row should be green else it should be red. --- ## [Data base Synchronize with elastic search in real time](https://discuss.elastic.co/t/data-base-synchronize-with-elastic-search-in-real-time/120192)
**Author:** [@dnguptha](https://discuss.elastic.co/u/dnguptha)\ **Replies:** 5\ **Last updated:** [February 19, 2018, 4:26pm UTC](https://discuss.elastic.co/t/data-base-synchronize-with-elastic-search-in-real-time/120192 "2018-02-19T16:26:44Z")
Hi, I am new to elastic search, the data being inserted into the database I wanna load the data into elastic search. when new record has being inserted into database elastic search has to Synchronize with DB automatica… --- ## [Logstash Configuration Error: "Expected one of #,"](https://discuss.elastic.co/t/logstash-configuration-error-expected-one-of/150827)
**Author:** [@rohini\_basu](https://discuss.elastic.co/u/rohini_basu)\ **Replies:** 2\ **Last updated:** [October 3, 2018, 6:48am UTC](https://discuss.elastic.co/t/logstash-configuration-error-expected-one-of/150827 "2018-10-03T06:48:54Z")
Hello, I am using Logstash to ingest CSV files into Elasticsearch. I am using a Linux Machine (CentOS7). I have Latitude and Longitude information in my csv. Hence I have created a mapping like below: PUT mks\_locdata… --- ## [Question regarding Logstash Horizontal Scaling](https://discuss.elastic.co/t/question-regarding-logstash-horizontal-scaling/179768)
**Author:** [@krokodil](https://discuss.elastic.co/u/krokodil)\ **Replies:** 4\ **Last updated:** [May 6, 2019, 2:07pm UTC](https://discuss.elastic.co/t/question-regarding-logstash-horizontal-scaling/179768 "2019-05-06T14:07:47Z")
Hi All, Hope I can get some clarity on the documentation supplied by Logstash. We're looking at implementing high availability for Logstash (Elasticsearch clustering is working fine). As per the Logstash documentation… --- ## [Logstash HA](https://discuss.elastic.co/t/logstash-ha/247956)
**Author:** [@aksshm](https://discuss.elastic.co/u/aksshm)\ **Replies:** 8\ **Last updated:** [September 10, 2020, 2:07pm UTC](https://discuss.elastic.co/t/logstash-ha/247956 "2020-09-10T14:07:21Z")
Hi, We're trying to install/achieve logstash HA. Is logstash support HA? or Is there any way to achieve the same? --- ## [Logstash-Logback Encoder: "IllegalAccessError: failed to access class \[...\]"](https://discuss.elastic.co/t/logstash-logback-encoder-illegalaccesserror-failed-to-access-class/219216)
**Author:** [@Ruhrpottler](https://discuss.elastic.co/u/Ruhrpottler)\ **Replies:** 2\ **Last updated:** [February 21, 2020, 4:17pm UTC](https://discuss.elastic.co/t/logstash-logback-encoder-illegalaccesserror-failed-to-access-class/219216 "2020-02-21T16:17:52Z")
I try to send logs from a java application with the Logstash tcp socket appender to logstash. The java app. already works with logback 1.1.9 (slf4j) and other appenders. Now I added the following lines to the logback-te… --- ## [How to decrease memory footprint of ElasticSearch](https://discuss.elastic.co/t/how-to-decrease-memory-footprint-of-elasticsearch/9542)
**Author:** [@Axsuul](https://discuss.elastic.co/u/Axsuul)\ **Replies:** 2\ **Last updated:** [November 5, 2012, 8:57am UTC](https://discuss.elastic.co/t/how-to-decrease-memory-footprint-of-elasticsearch/9542 "2012-11-05T08:57:59Z")
Is it me or does ElasticSearch require a hefty memory footprint even at its bare minimum? Currently, I have it at -Xms32 -Xmx32 and it shows that it's using 380m RES. I tried changing it to 16 but it wouldn't … --- ## [How to combine multiple AND with OR in a query?](https://discuss.elastic.co/t/how-to-combine-multiple-and-with-or-in-a-query/198364)
**Author:** [@porunov](https://discuss.elastic.co/u/porunov)\ **Replies:** 3\ **Last updated:** [September 9, 2019, 6:17am UTC](https://discuss.elastic.co/t/how-to-combine-multiple-and-with-or-in-a-query/198364 "2019-09-09T06:17:25Z")
I am trying to figure out if it is possible to combine multiple AND with OR in a single request. The query I am trying to make is: field1 == 1 && field2 == 2 && field3!=3 && ( field4==4 || field5==5 || field6!=6 ). I d… --- ## [How can I visualize "top-talkers" from netflow data?](https://discuss.elastic.co/t/how-can-i-visualize-top-talkers-from-netflow-data/69791)
**Author:** [@sliddjur](https://discuss.elastic.co/u/sliddjur)\ **Replies:** 6\ **Last updated:** [December 25, 2016, 9:35am UTC](https://discuss.elastic.co/t/how-can-i-visualize-top-talkers-from-netflow-data/69791 "2016-12-25T09:35:12Z")
Hello I want to visualize top-talkers from netflow data. With a top-talkers I mean data sent from source to destination, as well as the data replied from the same dst and src. I would like to stack this data in a ver… --- ## [Kibana 6.1.1 security update](https://discuss.elastic.co/t/kibana-6-1-1-security-update/112520)
**Author:** [@joshbressers](https://discuss.elastic.co/u/joshbressers)\ **Replies:** 0\ **Last updated:** [December 19, 2017, 10:57pm UTC](https://discuss.elastic.co/t/kibana-6-1-1-security-update/112520 "2017-12-19T22:57:22Z")
Kibana arbitrary code execution issue (ESA-2017-24) Kibana version 6.1.0 had an arbitrary code execution vulnerability in the Math.js package which is used by math aggregations in Time Series Visual Builder. Kibana user… --- ## [How to map unstructured data in elastic](https://discuss.elastic.co/t/how-to-map-unstructured-data-in-elastic/159256)
**Author:** [@Lucyj](https://discuss.elastic.co/u/Lucyj)\ **Replies:** 4\ **Last updated:** [December 4, 2018, 7:22am UTC](https://discuss.elastic.co/t/how-to-map-unstructured-data-in-elastic/159256 "2018-12-04T07:22:13Z")
Hi, I’m new to elastic and was wondering how elastic handles/deals with unstructured data and if their was a way to have it so that if there was a phone number in the following format, 0412 345 678, that it will take it … --- ## [Filebeat memory usage](https://discuss.elastic.co/t/filebeat-memory-usage/160883)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 2\ **Last updated:** [December 21, 2018, 9:56am UTC](https://discuss.elastic.co/t/filebeat-memory-usage/160883 "2018-12-21T09:56:01Z")
I've seen a number of threads on this but none that seem to give any diagnosis or recommendations. We are running Filebeat (various 6.x versions) in Kubernetes, and it seems that whatever memory limit we set the pods ev… --- ## [Exact match not working with fields having space](https://discuss.elastic.co/t/exact-match-not-working-with-fields-having-space/137398)
**Author:** [@Vishnu\_P\_S](https://discuss.elastic.co/u/Vishnu_P_S)\ **Replies:** 2\ **Last updated:** [June 26, 2018, 9:35am UTC](https://discuss.elastic.co/t/exact-match-not-working-with-fields-having-space/137398 "2018-06-26T09:35:41Z")
I have a set of data loaded in elasticsearch. I ran the below query. GET /xxxxxxx/\_search { "query": { "bool": { "filter":\[{"term":{"title": "Product order details" }}\]}} } And it returns { "took": 0, "timed\_ou… --- ## [Rename filebeat default fields](https://discuss.elastic.co/t/rename-filebeat-default-fields/88002)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 6\ **Last updated:** [June 6, 2017, 10:48pm UTC](https://discuss.elastic.co/t/rename-filebeat-default-fields/88002 "2017-06-06T22:48:03Z")
Is there a way for me to rename "beat.hostname" to "hostname" in filebeat output? the documentation mentioned filter, but this seems like a filter setup in logstash, not in filebeat, right? per https://www.elastic.co/… --- ## [Using should and must\_not in bool query](https://discuss.elastic.co/t/using-should-and-must-not-in-bool-query/7486)
**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\ **Replies:** 3\ **Last updated:** [April 30, 2012, 12:29pm UTC](https://discuss.elastic.co/t/using-should-and-must-not-in-bool-query/7486 "2012-04-30T12:29:32Z")
Hi, I have a query that is very similar to the terms query, but with more restriction. I would like to get the documents that have specific terms appear in the query. for example: 1. {"doc":{"title"… --- ## [How to combine 2 log entries to show in one line of Data Table based on a common field?](https://discuss.elastic.co/t/how-to-combine-2-log-entries-to-show-in-one-line-of-data-table-based-on-a-common-field/221026)
**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\ **Replies:** 4\ **Last updated:** [February 27, 2020, 3:39pm UTC](https://discuss.elastic.co/t/how-to-combine-2-log-entries-to-show-in-one-line-of-data-table-based-on-a-common-field/221026 "2020-02-27T15:39:52Z")
Hi Team, I have my application log files in way that one entry has 'Start Time' field as timestamp (where as 'End Time' as NA) and another entry has 'End Time' field with timestamp('Start Time' field as NA) which have a… --- ## [Rounding issues](https://discuss.elastic.co/t/rounding-issues/95563)
**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\ **Replies:** 4\ **Last updated:** [August 4, 2017, 6:16am UTC](https://discuss.elastic.co/t/rounding-issues/95563 "2017-08-04T06:16:56Z")
I have a watch that performs an average on a value. I would like to round it to two decimal places. For some reason when I put the script in to round the result is wrong, plus it doesn’t even round. In the below code avt… --- ## [Document ID](https://discuss.elastic.co/t/document-id/45773)
**Author:** [@Sameer\_Dharur](https://discuss.elastic.co/u/Sameer_Dharur)\ **Replies:** 3\ **Last updated:** [April 1, 2016, 6:02am UTC](https://discuss.elastic.co/t/document-id/45773 "2016-04-01T06:02:47Z")
Where exactly do I get the ID of an Elasticsearch document? I need it for the R module I'm using with Elasticsearch to import data. When I do a GET query, I only see the IDs of each log within the document. See attached … --- ## [Filebeat Implementation Details](https://discuss.elastic.co/t/filebeat-implementation-details/38416)
**Author:** [@NikolaeVarius](https://discuss.elastic.co/u/NikolaeVarius)\ **Replies:** 5\ **Last updated:** [January 5, 2016, 8:18pm UTC](https://discuss.elastic.co/t/filebeat-implementation-details/38416 "2016-01-05T20:18:16Z")
Hi, I'm using filebeat for tons of servers in my Production environment and have some questions. Does Filebeat compress logs while they're being streamed? We're trying to limit bandwidth usage between our servers and a… --- ## [Formatting dates in logstash.conf](https://discuss.elastic.co/t/formatting-dates-in-logstash-conf/57337)
**Author:** [@dlastIDBS](https://discuss.elastic.co/u/dlastIDBS)\ **Replies:** 7\ **Last updated:** [August 10, 2016, 10:28am UTC](https://discuss.elastic.co/t/formatting-dates-in-logstash-conf/57337 "2016-08-10T10:28:16Z")
Hi, I am trying to import historical data into elastic and having issues getting the dates to be accepted so I can use them as @timestamp for histograms and the like. First I am creating the index by doing a PUT requ… --- ## [Diagnosing slow dashboard/Viz performance in elastic cloud](https://discuss.elastic.co/t/diagnosing-slow-dashboard-viz-performance-in-elastic-cloud/270158)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 8\ **Last updated:** [April 20, 2021, 2:41pm UTC](https://discuss.elastic.co/t/diagnosing-slow-dashboard-viz-performance-in-elastic-cloud/270158 "2021-04-20T14:41:43Z")
Hi - I am looking for some pointers or starting places to diagnose our slow dashboards. If I look at a visualization (they are all 'slow' to render in kibana) by going to inspect\>request\>statistics I see two timing numb… --- ## [Kubernetes and elk](https://discuss.elastic.co/t/kubernetes-and-elk/55569)
**Author:** [@nanshan](https://discuss.elastic.co/u/nanshan)\ **Replies:** 8\ **Last updated:** [August 4, 2016, 9:10am UTC](https://discuss.elastic.co/t/kubernetes-and-elk/55569 "2016-08-04T09:10:25Z")
Hey, I am trying to ship logs from kubernates containers. Any idea how to connect kubernates with filebeat? How to find the kubernetes container logs? --- ## [Best way to search/index the data - with and without whitespace](https://discuss.elastic.co/t/best-way-to-search-index-the-data-with-and-without-whitespace/15482)
**Author:** [@thale\_jacobs](https://discuss.elastic.co/u/thale_jacobs)\ **Replies:** 5\ **Last updated:** [February 7, 2014, 7:27pm UTC](https://discuss.elastic.co/t/best-way-to-search-index-the-data-with-and-without-whitespace/15482 "2014-02-07T19:27:56Z")
Hello - I am having a problem indexing and searching for words that may or may not contain whitespace...Below is an example Here is how the index is created: curl -s -XPUT 'localhost:9200/test/name/1' -d '{ "stre… --- ## [ElasticSearch mapping template validation](https://discuss.elastic.co/t/elasticsearch-mapping-template-validation/28186)
**Author:** [@Weiwei\_Wang](https://discuss.elastic.co/u/Weiwei_Wang)\ **Replies:** 0\ **Last updated:** [August 27, 2015, 2:05pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping-template-validation/28186 "2015-08-27T14:05:04Z")
I found mapping template is not well validated when put to ES, for example(part of template): "reports": { "type": "object", "properties": { "source": { … --- ## [Elasticsearch num processors/bulk threads detection](https://discuss.elastic.co/t/elasticsearch-num-processors-bulk-threads-detection/54584)
**Author:** [@abhijith\_reddy](https://discuss.elastic.co/u/abhijith_reddy)\ **Replies:** 4\ **Last updated:** [July 3, 2016, 7:38pm UTC](https://discuss.elastic.co/t/elasticsearch-num-processors-bulk-threads-detection/54584 "2016-07-03T19:38:05Z")
How does elasticsearch detect the number of available processors ? Each node in our cluster has 48 cores but the bulk thread pool size is 32, just trying to find out how elasticsearch is arriving at the number. Below is… --- ## [How to reset Fleet Server default output configuration?](https://discuss.elastic.co/t/how-to-reset-fleet-server-default-output-configuration/313178)
**Author:** [@GustavoPires](https://discuss.elastic.co/u/GustavoPires)\ **Replies:** 7\ **Last updated:** [August 31, 2022, 4:34pm UTC](https://discuss.elastic.co/t/how-to-reset-fleet-server-default-output-configuration/313178 "2022-08-31T16:34:55Z")
Hello, I am trying to change default output fleet server configuration, It is possible? I don't want to reinstall all my elasticsearch again. --- ## [Index size on disk](https://discuss.elastic.co/t/index-size-on-disk/124224)
**Author:** [@chhavi\_bahekar](https://discuss.elastic.co/u/chhavi_bahekar)\ **Replies:** 7\ **Last updated:** [March 19, 2018, 5:20am UTC](https://discuss.elastic.co/t/index-size-on-disk/124224 "2018-03-19T05:20:49Z")
Hi All, I am small query related to raw data vs size of disk.I am using es 5.7 and below is the observation. Can someone please help me to understand this size factor. Here raw data is having 1.5 KB data but when i am… --- ## [How to overwrite the default template](https://discuss.elastic.co/t/how-to-overwrite-the-default-template/145694)
**Author:** [@Jing\_Wang](https://discuss.elastic.co/u/Jing_Wang)\ **Replies:** 5\ **Last updated:** [August 27, 2018, 2:50am UTC](https://discuss.elastic.co/t/how-to-overwrite-the-default-template/145694 "2018-08-27T02:50:10Z")
hello everyone I have a default template setting using pattern \* and set some dynamic mapping PUT /\_template/template\_default { "index\_patterns" : \["\*"\], "order" : 0, "settings": { "index": { … --- ## [Elastic nodes large heap usage - "Data too large, data for \[\\] would be..."](https://discuss.elastic.co/t/elastic-nodes-large-heap-usage-data-too-large-data-for-http-request-would-be/195420)
**Author:** [@jenga](https://discuss.elastic.co/u/jenga)\ **Replies:** 4\ **Last updated:** [August 21, 2019, 6:50am UTC](https://discuss.elastic.co/t/elastic-nodes-large-heap-usage-data-too-large-data-for-http-request-would-be/195420 "2019-08-21T06:50:01Z")
Hi, I have a 2-node Elastic cluster, each node has 6GB RAM and 2CPUs. I've assigned a max heap of 2GB to ElasticSearch. There's a tiny amount of data in there as I'm still trying to get it set up properly. At least onc… --- ## [Creating animation in title Map](https://discuss.elastic.co/t/creating-animation-in-title-map/46219)
**Author:** [@darshanvsvs](https://discuss.elastic.co/u/darshanvsvs)\ **Replies:** 4\ **Last updated:** [October 28, 2016, 5:42pm UTC](https://discuss.elastic.co/t/creating-animation-in-title-map/46219 "2016-10-28T17:42:50Z")
Hi All , I wanted to know if we can create animation in the Tile Map which is existing in kibana how can i create it ? i want to create a flight kind of animation like this check this link with the first image and 2n… --- ## [Need help with : failed to find geo\_point field](https://discuss.elastic.co/t/need-help-with-failed-to-find-geo-point-field/50492)
**Author:** [@shaykeren](https://discuss.elastic.co/u/shaykeren)\ **Replies:** 1\ **Last updated:** [May 24, 2016, 6:44am UTC](https://discuss.elastic.co/t/need-help-with-failed-to-find-geo-point-field/50492 "2016-05-24T06:44:32Z")
Hi, I'm using the following mapping(Node.Js): function initMapping() { return elasticClient.indices.putMapping({ index: indexName, type: "marker", body: { properties: { … --- ## [How to find Mapping conflict?](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [October 13, 2021, 12:54am UTC](https://discuss.elastic.co/t/how-to-find-mapping-conflict/286497 "2021-10-13T00:54:17Z")
We upgraded cluster from 7.12 to 7.15 new index created metricbeat-7.15.0 but now in index pattern it says I have mapping conflict in older version there was a field type=conflict but no longer. how do I find which fi… --- ## [Reset elastic user password in docker container](https://discuss.elastic.co/t/reset-elastic-user-password-in-docker-container/311884)
**Author:** [@single.track.mind](https://discuss.elastic.co/u/single.track.mind)\ **Replies:** 3\ **Last updated:** [August 11, 2022, 12:30am UTC](https://discuss.elastic.co/t/reset-elastic-user-password-in-docker-container/311884 "2022-08-11T00:30:55Z")
I have inherited a 7.16.2 elastic cluster with Basic license, running in docker containers(using docker-compose) and am trying to add xpack.security.enabled=true as an intermediate step to configure internal user passwo… --- ## [Entity detection in text](https://discuss.elastic.co/t/entity-detection-in-text/14123)
**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\ **Replies:** 6\ **Last updated:** [October 28, 2013, 11:35am UTC](https://discuss.elastic.co/t/entity-detection-in-text/14123 "2013-10-28T11:35:12Z")
I have a solution in mind for a problem that I have that I would like some feedback on before I embark on experimenting with it. My situation is as follows: I have a large data set with named locations that each … --- ## [Error when indexing document and analysing with "word delimiter" in ES 6.0.0-rc1](https://discuss.elastic.co/t/error-when-indexing-document-and-analysing-with-word-delimiter-in-es-6-0-0-rc1/105263)
**Author:** [@Upptec\_Isak](https://discuss.elastic.co/u/Upptec_Isak)\ **Replies:** 1\ **Last updated:** [October 27, 2017, 3:10pm UTC](https://discuss.elastic.co/t/error-when-indexing-document-and-analysing-with-word-delimiter-in-es-6-0-0-rc1/105263 "2017-10-27T15:10:19Z")
PUT foo { "index": { "analysis": { "filter": { "starts\_with": {"type": "edgeNGram", "max\_gram": 50, "min\_gram": 1}, "contains": {"type": "nGram", "max\_gram": 5… --- ## [How can we Reload full filebeat.yml?](https://discuss.elastic.co/t/how-can-we-reload-full-filebeat-yml/157754)
**Author:** [@talbehat](https://discuss.elastic.co/u/talbehat)\ **Replies:** 3\ **Last updated:** [November 22, 2018, 4:07pm UTC](https://discuss.elastic.co/t/how-can-we-reload-full-filebeat-yml/157754 "2018-11-22T16:07:59Z")
please help........ Can we implement this feature using signal and channel in windows. --- ## [Failed to Parse Date Field](https://discuss.elastic.co/t/failed-to-parse-date-field/284576)
**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\ **Replies:** 2\ **Last updated:** [September 19, 2021, 10:34pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field/284576 "2021-09-19T22:34:18Z")
I have some CSV files I'm trying to ingest using Logstash's CVS filter plugin. I'm needing the "Date" column to represent the event time field in Kibana (rather than @timestamp, which just tells me when I imported the CS… --- ## [Using Winlogbeat for custom logfiles?](https://discuss.elastic.co/t/using-winlogbeat-for-custom-logfiles/100482)
**Author:** [@tobys](https://discuss.elastic.co/u/tobys)\ **Replies:** 5\ **Last updated:** [September 14, 2017, 2:24pm UTC](https://discuss.elastic.co/t/using-winlogbeat-for-custom-logfiles/100482 "2017-09-14T14:24:16Z")
Hi, A newbee question... I'm evaluating Winlogbeat as an option for log management of an application that has it's own custom log file on a windows-server. Is Winlogbeat only using the Windows event log as input sourc… --- ## [If condition matching json with "in"](https://discuss.elastic.co/t/if-condition-matching-json-with-in/89946)
**Author:** [@Enrico\_Maria\_Fusi](https://discuss.elastic.co/u/Enrico_Maria_Fusi)\ **Replies:** 5\ **Last updated:** [June 19, 2017, 9:00pm UTC](https://discuss.elastic.co/t/if-condition-matching-json-with-in/89946 "2017-06-19T21:00:08Z")
Hello all, I have problem with a configuration which is supposed to select only lines containing a specific text inside. The source is a json\_line file. What I want is that only the messages matching a given string are … --- ## [Script\_lang not supported \[groovy\] error for script\_fields](https://discuss.elastic.co/t/script-lang-not-supported-groovy-error-for-script-fields/43940)
**Author:** [@toofan](https://discuss.elastic.co/u/toofan)\ **Replies:** 3\ **Last updated:** [March 16, 2016, 4:28am UTC](https://discuss.elastic.co/t/script-lang-not-supported-groovy-error-for-script-fields/43940 "2016-03-16T04:28:30Z")
I am running an elasticsearch instance (from elasticsearch master code) on localhost. I ran this query - { "query" : { "match\_all": {} }, "script\_fields": { "test": { … --- ## [Internet Explorer 11 can't open dashboard](https://discuss.elastic.co/t/internet-explorer-11-cant-open-dashboard/46430)
**Author:** [@rezwu](https://discuss.elastic.co/u/rezwu)\ **Replies:** 7\ **Last updated:** [April 5, 2016, 9:25pm UTC](https://discuss.elastic.co/t/internet-explorer-11-cant-open-dashboard/46430 "2016-04-05T21:25:52Z")
Hi, I created a dashboard and confirmed it was working in the latest version of Chrome. However, when I open the same url from IE 11, it shows me this page Apply now will redirect the page to discover tab but dashbo… --- ## [Boosting results based on boolean field value](https://discuss.elastic.co/t/boosting-results-based-on-boolean-field-value/54979)
**Author:** [@Bakhtiyor\_Homidov](https://discuss.elastic.co/u/Bakhtiyor_Homidov)\ **Replies:** 6\ **Last updated:** [July 8, 2016, 5:31pm UTC](https://discuss.elastic.co/t/boosting-results-based-on-boolean-field-value/54979 "2016-07-08T17:31:26Z")
i found similar question http://stackoverflow.com/questions/27569686/boosting-elasticsearch-based-on-boolean-field-value, but the answer is incorrect, because it also returns all active articles which maybe to contain th… --- ## [How to properly config Logstash for multiple Pipelines](https://discuss.elastic.co/t/how-to-properly-config-logstash-for-multiple-pipelines/121894)
**Author:** [@a\_nicewood](https://discuss.elastic.co/u/a_nicewood)\ **Replies:** 1\ **Last updated:** [February 28, 2018, 5:59pm UTC](https://discuss.elastic.co/t/how-to-properly-config-logstash-for-multiple-pipelines/121894 "2018-02-28T17:59:27Z")
Hello, im currently having an issue with creating a multiple pipelines in logstash. I can't get enough information out of the documentation to get the pipelines running. Where in the logstash.yml config should i refer… --- ## [Best Method to Manipulate Date & TimeStamp](https://discuss.elastic.co/t/best-method-to-manipulate-date-timestamp/152992)
**Author:** [@londonx](https://discuss.elastic.co/u/londonx)\ **Replies:** 2\ **Last updated:** [October 18, 2018, 1:31pm UTC](https://discuss.elastic.co/t/best-method-to-manipulate-date-timestamp/152992 "2018-10-18T13:31:00Z")
Hi all, looking for a way to efficiently convert an ISO8601 date/time stamp into the full ISO8601 format containing the "T" and "Z" The log contains a date timestamp in the following format: 2018-10-16 00:10:01.7764 … --- ## [Load Cloud Kibana dashboard in iframe with API KEY or credentials](https://discuss.elastic.co/t/load-cloud-kibana-dashboard-in-iframe-with-api-key-or-credentials/274307)
**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\ **Replies:** 2\ **Last updated:** [May 28, 2021, 9:59am UTC](https://discuss.elastic.co/t/load-cloud-kibana-dashboard-in-iframe-with-api-key-or-credentials/274307 "2021-05-28T09:59:11Z")
Well there are different way how to do the auth in on-prem Elastic and Kibana: But is this somehow also possible in Elastic Cloud? I cannot find a way doing that. I simply need a iframe that links to a specific Dashb… --- ## [When/Why to use Routing for indexing/searching](https://discuss.elastic.co/t/when-why-to-use-routing-for-indexing-searching/6846)
**Author:** [@Paul\_Smith](https://discuss.elastic.co/u/Paul_Smith)\ **Replies:** 8\ **Last updated:** [July 11, 2013, 7:20pm UTC](https://discuss.elastic.co/t/when-why-to-use-routing-for-indexing-searching/6846 "2013-07-11T19:20:36Z")
I'm intrigued by the routing property that can be used during indexing/searching. The documentation sort of explains how to use it, but I feel like it's missing some recommendations on \_why\_ one should use it; under … --- ## [Restoring a single index for a datastream cheatsheet](https://discuss.elastic.co/t/restoring-a-single-index-for-a-datastream-cheatsheet/348180)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 0\ **Last updated:** [November 28, 2023, 9:52pm UTC](https://discuss.elastic.co/t/restoring-a-single-index-for-a-datastream-cheatsheet/348180 "2023-11-28T21:52:22Z")
I feel like it took me a long time to figure this out and it may be helpful for others. These are the sets of commands that I send when I need to get back an index that already got deleted by ILM but I want to see the da… --- ## [Elasticsearch indices closed?](https://discuss.elastic.co/t/elasticsearch-indices-closed/102790)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 3\ **Last updated:** [October 5, 2017, 7:12am UTC](https://discuss.elastic.co/t/elasticsearch-indices-closed/102790 "2017-10-05T07:12:41Z")
curl http://localhost:9200/\_cat/indices close .kibana a5uRVhCtRnWFGbTCKh7AyA close report 4b4yfjgsRfKDZ7a5kz2X4g close varun v392Yg4LRcCx7VBkpNhb9A close myindex e8f-VNuWSRKfXJag0oshLw … [Previous page](https://discuss.elastic.co/top.md?page=437&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=439&per_page=50&period=all)