# Top **URL:** https://discuss.elastic.co/top.md?page=442&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 443 --- ## [Logstash with multiple conf files](https://discuss.elastic.co/t/logstash-with-multiple-conf-files/255664)
**Author:** [@Kfiro](https://discuss.elastic.co/u/Kfiro)\ **Replies:** 6\ **Last updated:** [November 25, 2020, 1:37pm UTC](https://discuss.elastic.co/t/logstash-with-multiple-conf-files/255664 "2020-11-25T13:37:41Z")
Hi ELK, I'm trying to configure my Logstash to run with 2 "conf" files, First: winlogbeat.conf input { beats { port =\> 5044 } } output { elasticsearch { hosts=\>\["https://elk01:9200"\] index=\>"logstas… --- ## [Elasticsearch 5 conversion](https://discuss.elastic.co/t/elasticsearch-5-conversion/65373)
**Author:** [@frankshad](https://discuss.elastic.co/u/frankshad)\ **Replies:** 6\ **Last updated:** [November 8, 2016, 8:39pm UTC](https://discuss.elastic.co/t/elasticsearch-5-conversion/65373 "2016-11-08T20:39:03Z")
Having spent a while since it was released converting my app from es2.4 to es5, I thought I'd just say that once I'd got over setup changes, it all seems to be working very smoothly. Thank you. The only errors I've had… --- ## [Is there any way to remove duplicated search result in ES?](https://discuss.elastic.co/t/is-there-any-way-to-remove-duplicated-search-result-in-es/15317)
**Author:** [@yang\_ming](https://discuss.elastic.co/u/yang_ming)\ **Replies:** 3\ **Last updated:** [January 20, 2014, 2:02pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-remove-duplicated-search-result-in-es/15317 "2014-01-20T14:02:18Z")
HI, I am looking for a way which can remove the duplicated search result in ES, I am eager to anybody's help. first, i want to explain the requirement. I have created indexs for three documents, each index have … --- ## [Unable to read 'synonym' file while creating index](https://discuss.elastic.co/t/unable-to-read-synonym-file-while-creating-index/183596)
**Author:** [@gauresh\_chavan](https://discuss.elastic.co/u/gauresh_chavan)\ **Replies:** 5\ **Last updated:** [June 5, 2019, 3:56pm UTC](https://discuss.elastic.co/t/unable-to-read-synonym-file-while-creating-index/183596 "2019-06-05T15:56:14Z")
I am trying to build a synonym dictionary and write it to an index. Index is being created in the following way: PUT /test\_index { "settings": { "index" : { "analysis" : { "filter… --- ## [Want Pie Chart Grouped By Browser Name/Version](https://discuss.elastic.co/t/want-pie-chart-grouped-by-browser-name-version/28722)
**Author:** [@bhutchinson](https://discuss.elastic.co/u/bhutchinson)\ **Replies:** 2\ **Last updated:** [September 6, 2015, 4:19pm UTC](https://discuss.elastic.co/t/want-pie-chart-grouped-by-browser-name-version/28722 "2015-09-06T16:19:20Z")
Environment Windows 7 Elasticsearch v1.7.0 Logstash v1.5.4 Kibana v4.1.1 My data is an Apache Access Log File. After running the grok filter {COMBINEDAPACHELOG}, date filter, agent filter, I have used logstash to creat… --- ## [EQL detection rule run on indices created by Transforms](https://discuss.elastic.co/t/eql-detection-rule-run-on-indices-created-by-transforms/268022)
**Author:** [@hilo21](https://discuss.elastic.co/u/hilo21)\ **Replies:** 2\ **Last updated:** [March 24, 2021, 11:02am UTC](https://discuss.elastic.co/t/eql-detection-rule-run-on-indices-created-by-transforms/268022 "2021-03-24T11:02:15Z")
Hello all, I was trying to create an EQL rule that detects port scanning activity. In order to do that I created a tranform that runs an cardinality aggregation on destination port from my netflow logs : { "id": "por… --- ## [Display of multiline error messages](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 8\ **Last updated:** [March 3, 2016, 6:11pm UTC](https://discuss.elastic.co/t/display-of-multiline-error-messages/43152 "2016-03-03T18:11:26Z")
I have FileBeat running with the multiline option feeding Logstash with a grok filter and everything seems to parse properly and ingest into Elasticsearch fine. The problem is display in Kibana. I have a pie-chart that d… --- ## [Fail to enroll: fail to execute request to Kibana](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana/245945)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 7\ **Last updated:** [August 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana/245945 "2020-08-28T12:40:34Z")
Hello there, I´m trying to setting up my elastic-agent but no success. Can you guy´s please help me? PS C:\\Program Files\\Elastic-Agent\> .\\elastic-agent.exe enroll https://0.0.0.0:5601 xxXxxxxXXxXXXXXXXxxxx The Elastic A… --- ## [Logstash - SNMP Input - Trouble Converting / Using MIB Files](https://discuss.elastic.co/t/logstash-snmp-input-trouble-converting-using-mib-files/230374)
**Author:** [@Sinnott](https://discuss.elastic.co/u/Sinnott)\ **Replies:** 4\ **Last updated:** [May 8, 2020, 10:09am UTC](https://discuss.elastic.co/t/logstash-snmp-input-trouble-converting-using-mib-files/230374 "2020-05-08T10:09:46Z")
Hi Elastic-Forum, I am trying to use the Logstash SNMP Input plugin to use OID's from a MIB file but am having trouble. I have tried to follow the guide below and can make standard OID calls, but not device specific on… --- ## [Logstash intergation with AWS Elasticsearch](https://discuss.elastic.co/t/logstash-intergation-with-aws-elasticsearch/36623)
**Author:** [@Siddharth](https://discuss.elastic.co/u/Siddharth)\ **Replies:** 2\ **Last updated:** [December 9, 2015, 5:40am UTC](https://discuss.elastic.co/t/logstash-intergation-with-aws-elasticsearch/36623 "2015-12-09T05:40:06Z")
Hello, I am using AWS Elasticsearch service to configure Elasticsearch Cluster and there is a separate server where I have installed Logstash 2.1.0 Here is my Logstash sample configuration file :- input { fil… --- ## [Java Client api for app-search](https://discuss.elastic.co/t/java-client-api-for-app-search/308047)
**Author:** [@kanavsha](https://discuss.elastic.co/u/kanavsha)\ **Replies:** 4\ **Last updated:** [June 27, 2022, 3:25pm UTC](https://discuss.elastic.co/t/java-client-api-for-app-search/308047 "2022-06-27T15:25:57Z")
Hello, I went through this link (Programming language clients | Elastic Enterprise Search Documentation \[8.2\] | Elastic) and I could not find the client api for Java. I previously used the Java api for Elasticsearch dir… --- ## [Logstash issue with pfSense 2.2.2 (SOLVED)](https://discuss.elastic.co/t/logstash-issue-with-pfsense-2-2-2-solved/27988)
**Author:** [@killmasta93](https://discuss.elastic.co/u/killmasta93)\ **Replies:** 8\ **Last updated:** [August 27, 2015, 2:39am UTC](https://discuss.elastic.co/t/logstash-issue-with-pfsense-2-2-2-solved/27988 "2015-08-27T02:39:51Z")
Hi, I was wondering if someone could guide me or help me with this issue I have been having. I think i know where im wrong i just dont know what do about it. Alright So i have been following 2 guides to get my pfSens… --- ## [Fields are not added](https://discuss.elastic.co/t/fields-are-not-added/71523)
**Author:** [@danivu](https://discuss.elastic.co/u/danivu)\ **Replies:** 3\ **Last updated:** [January 16, 2017, 11:27am UTC](https://discuss.elastic.co/t/fields-are-not-added/71523 "2017-01-16T11:27:36Z")
Hi, I have problem with adding filed in logstash part of the source code: grok { patterns\_dir =\> "../patterns" match =\> \[ "message", "%{TIMESTAMP\_ISO8601:logtime}\\ \[%{NUMBER:ThreadNum}\]\\ %{LOGLEVEL:LogLevel}\\ %{GRE… --- ## [Implement word cloud in Kibana](https://discuss.elastic.co/t/implement-word-cloud-in-kibana/307480)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 2\ **Last updated:** [September 25, 2023, 8:41am UTC](https://discuss.elastic.co/t/implement-word-cloud-in-kibana/307480 "2023-09-25T08:41:28Z")
I wanted to implement Word Cloud visualization using Kibana in my application. The example is attached. I'm looking for reference material on the Elastic site on how to get this done. It would be good if someone can shar… --- ## [Replace double backslashes // with one / in a string](https://discuss.elastic.co/t/replace-double-backslashes-with-one-in-a-string/165858)
**Author:** [@x4cker](https://discuss.elastic.co/u/x4cker)\ **Replies:** 6\ **Last updated:** [January 28, 2019, 4:38pm UTC](https://discuss.elastic.co/t/replace-double-backslashes-with-one-in-a-string/165858 "2019-01-28T16:38:57Z")
Hi, how can I replace the double backslashes with only one? input: domain\\\\user expected output: domain\\user i have tried several methods without success. I could only remove it in this way, but it's not what's neede… --- ## [Elasticsearch Error {type:cluster\_block\_exception,reason:"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];}](https://discuss.elastic.co/t/elasticsearch-error-type-cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/205006)
**Author:** [@ahmadtamimi](https://discuss.elastic.co/u/ahmadtamimi)\ **Replies:** 4\ **Last updated:** [October 24, 2019, 7:29am UTC](https://discuss.elastic.co/t/elasticsearch-error-type-cluster-block-exception-reason-blocked-by-forbidden-12-index-read-only-allow-delete-api/205006 "2019-10-24T07:29:58Z")
Hello before three days i got below error on production enviroment: {"type":"cluster\_block\_exception","reason":"blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];"} i applied below command, then it it wo… --- ## [Birthday Querying](https://discuss.elastic.co/t/birthday-querying/70684)
**Author:** [@Beda\_Bogdan](https://discuss.elastic.co/u/Beda_Bogdan)\ **Replies:** 5\ **Last updated:** [January 9, 2017, 4:32pm UTC](https://discuss.elastic.co/t/birthday-querying/70684 "2017-01-09T16:32:16Z")
Hi guys, I would like to know if anyone else has worked with birthday queries before. I have contact information, for which I have the birthdate and I would like to be able to perform queries like 1. Is on a specific… --- ## [Searching for Emoji Characters / Unicode](https://discuss.elastic.co/t/searching-for-emoji-characters-unicode/31625)
**Author:** [@Ben\_M](https://discuss.elastic.co/u/Ben_M)\ **Replies:** 5\ **Last updated:** [March 16, 2016, 8:40am UTC](https://discuss.elastic.co/t/searching-for-emoji-characters-unicode/31625 "2016-03-16T08:40:23Z")
I have some articles in my ES index that contain emoji characters. I'd like to perform a search for articles that contain specific emojis. Via ElasticHQ I can see the emojis are in the data - they are rendered as icons i… --- ## [Been working for a while and now](https://discuss.elastic.co/t/been-working-for-a-while-and-now/106406)
**Author:** [@KalvinK](https://discuss.elastic.co/u/KalvinK)\ **Replies:** 7\ **Last updated:** [November 7, 2017, 8:03pm UTC](https://discuss.elastic.co/t/been-working-for-a-while-and-now/106406 "2017-11-07T20:03:10Z")
Hi All, I have been using elasticsearch with success for a while now, however over the last two days I found that the service is stopping. I have posted log files here after searching around for the discussion threads … --- ## [How to do custom sorting](https://discuss.elastic.co/t/how-to-do-custom-sorting/68362)
**Author:** [@iti\_netapp.com](https://discuss.elastic.co/u/iti_netapp.com)\ **Replies:** 2\ **Last updated:** [December 12, 2016, 10:20pm UTC](https://discuss.elastic.co/t/how-to-do-custom-sorting/68362 "2016-12-12T22:20:28Z")
Hi, I want to do custom sorting for some of the fields. I am having some issues with it. In my elasticsearch plugin, I had registered a CustomSortFieldBuilder, which builds a CustomSortFieldComparatorSource. CustomS… --- ## [Timelion: how to stack lines?](https://discuss.elastic.co/t/timelion-how-to-stack-lines/103895)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [October 16, 2017, 6:48am UTC](https://discuss.elastic.co/t/timelion-how-to-stack-lines/103895 "2017-10-16T06:48:39Z")
Hi, if I show multiple lines in timelion, how can I stack them? (put one on top of the other instead of plotting on top of 0) Thanks, Andrea --- ## [Search Quote Analyzer question/issue](https://discuss.elastic.co/t/search-quote-analyzer-question-issue/61287)
**Author:** [@srini\_es](https://discuss.elastic.co/u/srini_es)\ **Replies:** 0\ **Last updated:** [September 22, 2016, 4:07pm UTC](https://discuss.elastic.co/t/search-quote-analyzer-question-issue/61287 "2016-09-22T16:07:59Z")
Hi All, We are using ES 5.0.0-alpha5 and seeing an issue with search\_quote\_analyzer parameter, below is our use-case, we would like have full text search on text fields with English stemming, and when user searches usi… --- ## [Listen EACCES 0.0.0.0:443](https://discuss.elastic.co/t/listen-eacces-0-0-0-0-443/117393)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 2\ **Last updated:** [January 29, 2018, 3:46pm UTC](https://discuss.elastic.co/t/listen-eacces-0-0-0-0-443/117393 "2018-01-29T15:46:51Z")
I followed Configuring Kibana on Docker | Kibana User Guide \[6.1\] | Elastic and I tried to adjust server.port to 443 (instead of 5601) and got following error: kibana12-custom | {"type":"error","@timestamp":"2018-01-29T… --- ## [Clear the memory in Elasticsearch](https://discuss.elastic.co/t/clear-the-memory-in-elasticsearch/10014)
**Author:** [@DH1](https://discuss.elastic.co/u/DH1)\ **Replies:** 2\ **Last updated:** [December 10, 2012, 9:43pm UTC](https://discuss.elastic.co/t/clear-the-memory-in-elasticsearch/10014 "2012-12-10T21:43:21Z")
Hi, everyone. I am currently trying to find out how memory works in elasticsearch. I am using BigDesk to monitor the heap space of my nodes, and it seems to me that the heap memory only start to be freed when it is… --- ## [Logstash does not start main pipeline and produces no output on Ubuntu 16.04](https://discuss.elastic.co/t/logstash-does-not-start-main-pipeline-and-produces-no-output-on-ubuntu-16-04/79650)
**Author:** [@esbenp](https://discuss.elastic.co/u/esbenp)\ **Replies:** 3\ **Last updated:** [March 23, 2017, 5:41am UTC](https://discuss.elastic.co/t/logstash-does-not-start-main-pipeline-and-produces-no-output-on-ubuntu-16-04/79650 "2017-03-23T05:41:42Z")
I have installed Logstash and Elasticsearch on an Ubuntu 16.04 machine with 4 gb ram using apt-get install logstash. When I boot the service with systemctl start logstash it does start the process (I can see it using p… --- ## [Formatting strings using scripted fields - inserting line breaks](https://discuss.elastic.co/t/formatting-strings-using-scripted-fields-inserting-line-breaks/138242)
**Author:** [@Warren](https://discuss.elastic.co/u/Warren)\ **Replies:** 4\ **Last updated:** [July 3, 2018, 12:56am UTC](https://discuss.elastic.co/t/formatting-strings-using-scripted-fields-inserting-line-breaks/138242 "2018-07-03T00:56:27Z")
My 'message' contains a stacktrace / exception error like below. But the string is not easy to read in Kibana. I need to insert new lines on each trace line.. so it's neat and tidy etc.. I've read that I can use script… --- ## [Pipeline Aggregations with buckets\_path more than two](https://discuss.elastic.co/t/pipeline-aggregations-with-buckets-path-more-than-two/69454)
**Author:** [@Ruslan\_Didyk](https://discuss.elastic.co/u/Ruslan_Didyk)\ **Replies:** 3\ **Last updated:** [December 19, 2016, 3:14pm UTC](https://discuss.elastic.co/t/pipeline-aggregations-with-buckets-path-more-than-two/69454 "2016-12-19T15:14:48Z")
Hi all, I'm getting an error when I'm trying to use Pipeline Aggregation with bucket\_path more than one (I.e.: "buckets\_path" : "aggOne\>aggTwo\>aggThree"). For example I have query with 'terms' for two fields and some agg… --- ## [ES 2 nodes Master Master Cluster Configuration](https://discuss.elastic.co/t/es-2-nodes-master-master-cluster-configuration/91541)
**Author:** [@Priyanka\_Talwaria](https://discuss.elastic.co/u/Priyanka_Talwaria)\ **Replies:** 7\ **Last updated:** [July 2, 2017, 6:59pm UTC](https://discuss.elastic.co/t/es-2-nodes-master-master-cluster-configuration/91541 "2017-07-02T18:59:17Z")
ES Config: Node 1: cluster.name: mycluster node.name: "node1" node.master: true node.data: true discovery.zen.ping.unicast.hosts: \["192.168.100.103"\] # IP of node2 Node 2: cluster.name: mycluster node.name: "node2… --- ## [Logstash Stopping Pipeline](https://discuss.elastic.co/t/logstash-stopping-pipeline/62858)
**Author:** [@mrognone](https://discuss.elastic.co/u/mrognone)\ **Replies:** 5\ **Last updated:** [January 5, 2017, 6:10pm UTC](https://discuss.elastic.co/t/logstash-stopping-pipeline/62858 "2017-01-05T18:10:42Z")
Hi Guys , two days ago one of my logstash servers crash with Logstash service. the error recieved is :message=\>"stopping pipeline", :id=\>"main" The configuration file is the following: input { udp { po… --- ## [Legend hiding in Kibana 4.5.2](https://discuss.elastic.co/t/legend-hiding-in-kibana-4-5-2/58667)
**Author:** [@sruthi](https://discuss.elastic.co/u/sruthi)\ **Replies:** 4\ **Last updated:** [August 24, 2016, 6:18am UTC](https://discuss.elastic.co/t/legend-hiding-in-kibana-4-5-2/58667 "2016-08-24T06:18:50Z")
As per the documentation https://www.elastic.co/guide/en/kibana/4.5/line-chart.html, there is an option To Show Legend to enable/disable the legend in options tab. Is it not available in version 4.5.2? --- ## [Синонимы для словосочетаний, сохранение исходных слов](https://discuss.elastic.co/t/topic/62797)
**Author:** [@Ilya\_Shipilov](https://discuss.elastic.co/u/Ilya_Shipilov)\ **Replies:** 8\ **Last updated:** [February 7, 2017, 4:11pm UTC](https://discuss.elastic.co/t/topic/62797 "2017-02-07T16:11:53Z")
Есть задача сохранять в индексе синонимы для словосочетаний. Пример: жидкость омывателя -\> омывайка монопод для селфи, палка для селфи -\> селфипалка Настроил анализатор следующим образом: PUT /multiwords\_synonyms\_in… --- ## [Uninstall elasticsearch completely on windows 7](https://discuss.elastic.co/t/uninstall-elasticsearch-completely-on-windows-7/138687)
**Author:** [@vivekranjan](https://discuss.elastic.co/u/vivekranjan)\ **Replies:** 6\ **Last updated:** [July 9, 2018, 9:59am UTC](https://discuss.elastic.co/t/uninstall-elasticsearch-completely-on-windows-7/138687 "2018-07-09T09:59:44Z")
Hi, I have installed elasticsearch on my system and when I hit http://localhost:9200 on the browser I can see the output but when I try to run /bin/elasticsearch.bat from command prompt it gives me some error which I am … --- ## [How to count records using JAVA client api?](https://discuss.elastic.co/t/how-to-count-records-using-java-client-api/67193)
**Author:** [@suman\_santra](https://discuss.elastic.co/u/suman_santra)\ **Replies:** 1\ **Last updated:** [November 25, 2016, 2:31pm UTC](https://discuss.elastic.co/t/how-to-count-records-using-java-client-api/67193 "2016-11-25T14:31:36Z")
Hi, I am using following code to get count of records indexed which satisfy the given criteria, but this is not working and giving me all the records indexed in the type. How do I get count of records satisfying the cr… --- ## [Logstash Filter - Possibility to exec shell commands?](https://discuss.elastic.co/t/logstash-filter-possibility-to-exec-shell-commands/26218)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 4\ **Last updated:** [July 30, 2015, 10:54am UTC](https://discuss.elastic.co/t/logstash-filter-possibility-to-exec-shell-commands/26218 "2015-07-30T10:54:34Z")
Hi guys, i wanted to asked quickly if it is possible in logstash to execute a shell/bash command in the processing line of an event. Background: We wanted to add an field in our events, where an ip address get matc… --- ## [Logstash forwarder, logstash, nxlog, redis, which one to use?](https://discuss.elastic.co/t/logstash-forwarder-logstash-nxlog-redis-which-one-to-use/26220)
**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\ **Replies:** 6\ **Last updated:** [July 28, 2015, 12:21pm UTC](https://discuss.elastic.co/t/logstash-forwarder-logstash-nxlog-redis-which-one-to-use/26220 "2015-07-28T12:21:41Z")
when i started to play with ELK, i followed some article and setup elk like this: logstash -\> redis -\> logstash -\> elastic search -\> kibana. I'm prepared that logstash shipper will use more memory, but i wasn't prepared … --- ## [Prevent swap in docker container](https://discuss.elastic.co/t/prevent-swap-in-docker-container/58801)
**Author:** [@dorr](https://discuss.elastic.co/u/dorr)\ **Replies:** 3\ **Last updated:** [September 8, 2016, 8:09am UTC](https://discuss.elastic.co/t/prevent-swap-in-docker-container/58801 "2016-09-08T08:09:11Z")
Hello, How can I prevent ElasticSearch 1.7 from swapping when running inside a docker container? I am running the container with the -memory-swap=-1 flag, and still seeing around 500 MB of swapping. Is this normal? A… --- ## [Lowercase property names from .NET using NEST](https://discuss.elastic.co/t/lowercase-property-names-from-net-using-nest/13295)
**Author:** [@Liron\_Cohen](https://discuss.elastic.co/u/Liron_Cohen)\ **Replies:** 4\ **Last updated:** [August 24, 2013, 11:48am UTC](https://discuss.elastic.co/t/lowercase-property-names-from-net-using-nest/13295 "2013-08-24T11:48:31Z")
Hello, I'm VERY new to ES and I mainly use C# so I downloaded the NEST .net API. I indexed an object (named "Nation" -\> ES type "Nations") which has the following properties for example: Name, ISO. When I look at … --- ## [\[Elasticsearch 7.6\] How do I fix unassigned shards issue](https://discuss.elastic.co/t/elasticsearch-7-6-how-do-i-fix-unassigned-shards-issue/228714)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 7\ **Last updated:** [April 20, 2020, 12:13pm UTC](https://discuss.elastic.co/t/elasticsearch-7-6-how-do-i-fix-unassigned-shards-issue/228714 "2020-04-20T12:13:22Z")
Hello, I installed an elastic search cluster consists of 3 nodes. after data had been ingested to the cluster, the status of the cluster became yellow due to unassigned shards issue. --- ## [Reading mutilevel nested field in spark dataframe](https://discuss.elastic.co/t/reading-mutilevel-nested-field-in-spark-dataframe/97640)
**Author:** [@prabhushrikant](https://discuss.elastic.co/u/prabhushrikant)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 9:02pm UTC](https://discuss.elastic.co/t/reading-mutilevel-nested-field-in-spark-dataframe/97640 "2017-08-22T21:02:23Z")
I am trying to read a mutli-level nested field “affiliations.org.orgName” using spark connector in following index {"userId": 402885, "userUuid": "F2896A1F1A7D411A69", "firstName": "T… --- ## [{#toJson} not escaping characters properly in Watcher webhook action](https://discuss.elastic.co/t/tojson-not-escaping-characters-properly-in-watcher-webhook-action/71288)
**Author:** [@CommieBobDole](https://discuss.elastic.co/u/CommieBobDole)\ **Replies:** 4\ **Last updated:** [January 12, 2017, 9:40pm UTC](https://discuss.elastic.co/t/tojson-not-escaping-characters-properly-in-watcher-webhook-action/71288 "2017-01-12T21:40:33Z")
I am sending my Cisco ASA logs to Logstash, and am attempting to write a watch that will, when an invalid login is detected, perform a webhook action to post JSON containing some pertinent information about the alert as … --- ## [Maintain a unique field while indexing - equivalent to a UNIQUE INDEX in a relational database](https://discuss.elastic.co/t/maintain-a-unique-field-while-indexing-equivalent-to-a-unique-index-in-a-relational-database/37883)
**Author:** [@tpraizler](https://discuss.elastic.co/u/tpraizler)\ **Replies:** 4\ **Last updated:** [December 23, 2015, 11:02pm UTC](https://discuss.elastic.co/t/maintain-a-unique-field-while-indexing-equivalent-to-a-unique-index-in-a-relational-database/37883 "2015-12-23T23:02:25Z")
Hey, Is there a way to use one of my document fields as a uniq id? making sure there will not be 2 document with the same value in that field? Here are 2 documents for example: { "name": "name1", … --- ## [Programmatically configure ILM](https://discuss.elastic.co/t/programmatically-configure-ilm/190594)
**Author:** [@cuzzo333](https://discuss.elastic.co/u/cuzzo333)\ **Replies:** 3\ **Last updated:** [July 18, 2019, 4:01pm UTC](https://discuss.elastic.co/t/programmatically-configure-ilm/190594 "2019-07-18T16:01:31Z")
Please forgive me if this specific topic has already been discussed elsewhere, I couldn't find much information matching what I'm looking for. I'm managing EFK stacks across multiple Kubernetes clusters and while the de… --- ## [If path containing some string then field value is "somthing"](https://discuss.elastic.co/t/if-path-containing-some-string-then-field-value-is-somthing/184938)
**Author:** [@nitzanm](https://discuss.elastic.co/u/nitzanm)\ **Replies:** 4\ **Last updated:** [June 11, 2019, 4:30pm UTC](https://discuss.elastic.co/t/if-path-containing-some-string-then-field-value-is-somthing/184938 "2019-06-11T16:30:36Z")
hi I'm trying to fill a field based on path substring that is coming for filebeat here's an example for what i tried: input { beats { port =\> 5044 } } filter { if \[fields\]\[logtype\] == "l… --- ## [Unable to delete indices using curator](https://discuss.elastic.co/t/unable-to-delete-indices-using-curator/120328)
**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\ **Replies:** 8\ **Last updated:** [February 27, 2018, 1:40am UTC](https://discuss.elastic.co/t/unable-to-delete-indices-using-curator/120328 "2018-02-27T01:40:37Z")
Hi , Using curator but not performing any action . Can someone help \[root@iacapps-es-node1 elasticsearch-curator\]# curator --config curator.yml delete\_indices.yml 2018-02-18 00:10:01,892 DEBUG cur… --- ## [Slow Index Deletion](https://discuss.elastic.co/t/slow-index-deletion/62428)
**Author:** [@ashokm](https://discuss.elastic.co/u/ashokm)\ **Replies:** 6\ **Last updated:** [October 7, 2016, 6:05pm UTC](https://discuss.elastic.co/t/slow-index-deletion/62428 "2016-10-07T18:05:09Z")
We have a 2 node cluster with closee to 16000 shards (8000 primary and 8000 replicas). Both nodes have 64GB ram, of which 30GB is allocated to ES. We are using ES version 1.4.2. When we try to delete and index, we not… --- ## [From logstash i need to send email to gmail](https://discuss.elastic.co/t/from-logstash-i-need-to-send-email-to-gmail/99419)
**Author:** [@suganth](https://discuss.elastic.co/u/suganth)\ **Replies:** 7\ **Last updated:** [September 6, 2017, 8:08am UTC](https://discuss.elastic.co/t/from-logstash-i-need-to-send-email-to-gmail/99419 "2017-09-06T08:08:19Z")
Hi, I have to send the email from my logstash. my configuration is , What are the prerequisites to achieve the requirement apart from the below configuration. email { to =\> 'xyz@gmail.com' via =\> 'smtp' address =\>… --- ## [Bad Gateway (nginx)](https://discuss.elastic.co/t/bad-gateway-nginx/127473)
**Author:** [@Hackedia](https://discuss.elastic.co/u/Hackedia)\ **Replies:** 2\ **Last updated:** [September 14, 2020, 5:37pm UTC](https://discuss.elastic.co/t/bad-gateway-nginx/127473 "2020-09-14T17:37:38Z")
Hi everyone ! I did a very simple installation (from digital ocean tutorial) of an ELK server on CentOS and i get this "bad gateway" error (after sending htpasswd credentials). More information here : Checking local 5… --- ## [Is there a SysV init script in /etc/init.d/ for logstash?](https://discuss.elastic.co/t/is-there-a-sysv-init-script-in-etc-init-d-for-logstash/92759)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 2\ **Last updated:** [July 12, 2017, 5:37pm UTC](https://discuss.elastic.co/t/is-there-a-sysv-init-script-in-etc-init-d-for-logstash/92759 "2017-07-12T17:37:51Z")
logstash version: 5.4.1 OS version: CentOS6.6 Refer to the official guide, it seems that there is a auto-generated configuration file at /etc/init.d/logstash. I installed logstash with RMP package, but there is no a … --- ## [Can Kibana to connect to data-sources OTHER than Elasticsearch?](https://discuss.elastic.co/t/can-kibana-to-connect-to-data-sources-other-than-elasticsearch/181863)
**Author:** [@Adithyaram](https://discuss.elastic.co/u/Adithyaram)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 4:17pm UTC](https://discuss.elastic.co/t/can-kibana-to-connect-to-data-sources-other-than-elasticsearch/181863 "2019-05-20T16:17:48Z")
Hello, I have a data sources (InfluxDB) other than ElasticSearch. There are two parts to my question: With the Kibana 7.0 (or any other version), are there options to include InfluxDB as a datasource? (This could be c… --- ## [Logstash on IBM AIX](https://discuss.elastic.co/t/logstash-on-ibm-aix/26472)
**Author:** [@bed](https://discuss.elastic.co/u/bed)\ **Replies:** 3\ **Last updated:** [August 1, 2015, 3:35pm UTC](https://discuss.elastic.co/t/logstash-on-ibm-aix/26472 "2015-08-01T15:35:26Z")
Hello, I'm trying to do my first installation of logstash on an IBM AIX 7.1 environment. I've tried to use different JRE version, from 1.7 to 1.8 but I always receive the following error: io/console not supported; tty wi… [Previous page](https://discuss.elastic.co/top.md?page=441&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=443&per_page=50&period=all)