# Top **URL:** https://discuss.elastic.co/top.md?page=487&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 488 --- ## [How to use date-filter-plugin?](https://discuss.elastic.co/t/how-to-use-date-filter-plugin/35054)
**Author:** [@Alvin82](https://discuss.elastic.co/u/Alvin82)\ **Replies:** 3\ **Last updated:** [December 15, 2016, 1:37pm UTC](https://discuss.elastic.co/t/how-to-use-date-filter-plugin/35054 "2016-12-15T13:37:09Z")
I'm using date plugin, but i'm not able to match this timestamp log\_ts = 2015-11-19-11:14:23.8704 If i use this snippet code in the conf file date { match =\> \["log\_ts", "yyyy-MM-dd-HH:mm:ss.SSSS"\] } I obt… --- ## [Issues sending monitoring data from logstash to elasticsearch](https://discuss.elastic.co/t/issues-sending-monitoring-data-from-logstash-to-elasticsearch/215103)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 7\ **Last updated:** [January 15, 2020, 11:43am UTC](https://discuss.elastic.co/t/issues-sending-monitoring-data-from-logstash-to-elasticsearch/215103 "2020-01-15T11:43:25Z")
Hi, I have some issues shipping internal monitoring data from logstash to elasticsearch. I don't know if i better place it in logstash or elasticsearch forum. So I start here :wink: I installed logstash and elasticsearc… --- ## [Refresh is very slow](https://discuss.elastic.co/t/refresh-is-very-slow/132706)
**Author:** [@cyberhuman](https://discuss.elastic.co/u/cyberhuman)\ **Replies:** 6\ **Last updated:** [May 22, 2018, 6:25am UTC](https://discuss.elastic.co/t/refresh-is-very-slow/132706 "2018-05-22T06:25:40Z")
Hello, I have an issue with refreshes in an ES cluster. I have a process that does bulk indexing, and few other processes that do multiget requests. And there is an API that bulk writes some documents to ES and must en… --- ## [Redis output replacement](https://discuss.elastic.co/t/redis-output-replacement/37949)
**Author:** [@bsam](https://discuss.elastic.co/u/bsam)\ **Replies:** 5\ **Last updated:** [January 25, 2016, 10:42am UTC](https://discuss.elastic.co/t/redis-output-replacement/37949 "2016-01-25T10:42:32Z")
Hi All! I've purchased the Logstash Book and try to configure a test farm. It is recommended at the Book using a Redis between shipper and logstash. Now I configure filebeat and read here that "Redis output for the Bea… --- ## [System.ValueTuple and .NetFramework 4.7.2](https://discuss.elastic.co/t/system-valuetuple-and-netframework-4-7-2/281768)
**Author:** [@Saket](https://discuss.elastic.co/u/Saket)\ **Replies:** 2\ **Last updated:** [August 18, 2021, 10:03am UTC](https://discuss.elastic.co/t/system-valuetuple-and-netframework-4-7-2/281768 "2021-08-18T10:03:06Z")
APM Agent language and version: .NET Framework and 1.11.0 Description of the problem including expected versus actual behavior. Please include screenshots (if relevant): The primary reference could not be resolved beca… --- ## [Delete by Query and Refresh Interval](https://discuss.elastic.co/t/delete-by-query-and-refresh-interval/251633)
**Author:** [@gavinlee](https://discuss.elastic.co/u/gavinlee)\ **Replies:** 6\ **Last updated:** [October 16, 2020, 8:54am UTC](https://discuss.elastic.co/t/delete-by-query-and-refresh-interval/251633 "2020-10-16T08:54:44Z")
Hi, I have a situation where I take the following steps retrieve lock delete by query refresh insert documents release lock These steps could happen in quick succession. The delete by query is supposed to find all the… --- ## [BulkProcessor creation using RestHighLevelClient compilation error on ES5.6](https://discuss.elastic.co/t/bulkprocessor-creation-using-resthighlevelclient-compilation-error-on-es5-6/140573)
**Author:** [@Rappahannock](https://discuss.elastic.co/u/Rappahannock)\ **Replies:** 6\ **Last updated:** [July 19, 2018, 7:14pm UTC](https://discuss.elastic.co/t/bulkprocessor-creation-using-resthighlevelclient-compilation-error-on-es5-6/140573 "2018-07-19T19:14:49Z")
I have an issue when compiling the following code on ES5.6.6: BulkProcessor bulkProcessor = BulkProcessor.builder(restHighLevelClient::bulkAsync, listener).build(); The following compilation error occurs: /test-bulkpr… --- ## [Index patterns search not finding results of existing index patterns](https://discuss.elastic.co/t/index-patterns-search-not-finding-results-of-existing-index-patterns/190574)
**Author:** [@ec2](https://discuss.elastic.co/u/ec2)\ **Replies:** 6\ **Last updated:** [August 8, 2019, 12:07pm UTC](https://discuss.elastic.co/t/index-patterns-search-not-finding-results-of-existing-index-patterns/190574 "2019-08-08T12:07:02Z")
Hi, I have a number of index patterns which I've imported from a different space. When I try to search for an index pattern which clearly exists in the Index Patterns menu - Kibana doesn't seem to be able to find some o… --- ## [Configuration error](https://discuss.elastic.co/t/configuration-error/119904)
**Author:** [@Sudhakar\_N](https://discuss.elastic.co/u/Sudhakar_N)\ **Replies:** 3\ **Last updated:** [February 15, 2018, 5:04am UTC](https://discuss.elastic.co/t/configuration-error/119904 "2018-02-15T05:04:10Z")
when i run logstash i am getting below error. \[ERROR\] 2018-02-15 09:32:09.497 \[Ruby-0-Thread-1: /home/suryakiran/sudhakar/elk/logstash-6.2.1/usr/share/logstash/vendor/bundle/jruby/2.3.0/gems/stud-0.0.23/lib/stud/task.rb… --- ## [Authentication problem using OIDC](https://discuss.elastic.co/t/authentication-problem-using-oidc/212148)
**Author:** [@firabby](https://discuss.elastic.co/u/firabby)\ **Replies:** 3\ **Last updated:** [January 2, 2020, 6:01pm UTC](https://discuss.elastic.co/t/authentication-problem-using-oidc/212148 "2020-01-02T18:01:51Z")
I am not sure where to post this. As I am seeing this error in kibana, I am posting here. I am using 30 day on premise trial license to test a project where I need to use OIDC. My elasticsearch.yml is: xpack.security.… --- ## [Partial update documents while enable the functionality that the external version provides](https://discuss.elastic.co/t/partial-update-documents-while-enable-the-functionality-that-the-external-version-provides/73522)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 8\ **Last updated:** [February 3, 2017, 6:37am UTC](https://discuss.elastic.co/t/partial-update-documents-while-enable-the-functionality-that-the-external-version-provides/73522 "2017-02-03T06:37:36Z")
We are using Elasticsearch to provide full-text search on our various web sites. Our search platform works like Bing or Google to return all relevant documents with Title, Description, Url from our own wet sites for a gi… --- ## [\[ANNOUNCEMENT\] Execbeat 1.0.0 released](https://discuss.elastic.co/t/announcement-execbeat-1-0-0-released/37984)
**Author:** [@christiangalsterer](https://discuss.elastic.co/u/christiangalsterer)\ **Replies:** 0\ **Last updated:** [December 26, 2015, 3:18pm UTC](https://discuss.elastic.co/t/announcement-execbeat-1-0-0-released/37984 "2015-12-26T15:18:31Z")
I'm happy to announce the availability of Execbeat 1.0.0. Execbeat is a Beat which executes (shell) commands in a regular interval and sends the standard output and standard error as an event to a configured shipper, e… --- ## [Kibana index fields limit](https://discuss.elastic.co/t/kibana-index-fields-limit/79942)
**Author:** [@DravenJohnson](https://discuss.elastic.co/u/DravenJohnson)\ **Replies:** 4\ **Last updated:** [April 10, 2017, 6:16pm UTC](https://discuss.elastic.co/t/kibana-index-fields-limit/79942 "2017-04-10T18:16:51Z")
We noticed some problem, very similar to this one We have one index with ~8900 fields (due to stats reporting different number by region, user etc.) We recently just added two more fields into that index. Then this hap… --- ## [Readiness probe failed: Error: Got HTTP code 503 but expected a 200](https://discuss.elastic.co/t/readiness-probe-failed-error-got-http-code-503-but-expected-a-200/297571)
**Author:** [@shmelkin](https://discuss.elastic.co/u/shmelkin)\ **Replies:** 3\ **Last updated:** [February 28, 2022, 1:30pm UTC](https://discuss.elastic.co/t/readiness-probe-failed-error-got-http-code-503-but-expected-a-200/297571 "2022-02-28T13:30:29Z")
Hello, I have an issue where Kibana is not coming up due to a failed status check. I'm using the Helm charts for Elasticsearch and Kibana with some changes that are reflected by the values below. There was a similar is… --- ## [Conflicting field mappings](https://discuss.elastic.co/t/conflicting-field-mappings/49200)
**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\ **Replies:** 8\ **Last updated:** [May 17, 2016, 8:59pm UTC](https://discuss.elastic.co/t/conflicting-field-mappings/49200 "2016-05-17T20:59:05Z")
We're trying to upgrade from ELK 1.7.1 to 2.3 However until we fixed the conflict field mapping on the .kibana index, we cannot move forward with the upgrade. Error from the Migration Checker: Conflicting field mappings… --- ## [Unable to start Elasticsearch instance. It says Out of Memory error](https://discuss.elastic.co/t/unable-to-start-elasticsearch-instance-it-says-out-of-memory-error/197754)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 4\ **Last updated:** [September 3, 2019, 10:25am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-instance-it-says-out-of-memory-error/197754 "2019-09-03T10:25:57Z")
Hi All, I am facing a serious error in my elasticsearch instance. Before I start explaining what is the error. I want to give a short info about current ecosystem i am playing with. So we have a test server(LINUX) with… --- ## [How to retrieve more than 10,000 results](https://discuss.elastic.co/t/how-to-retrieve-more-than-10-000-results/140594)
**Author:** [@snigdharao](https://discuss.elastic.co/u/snigdharao)\ **Replies:** 6\ **Last updated:** [July 19, 2018, 7:24am UTC](https://discuss.elastic.co/t/how-to-retrieve-more-than-10-000-results/140594 "2018-07-19T07:24:31Z")
I have an use case where i display 10 results on each page and there would be an api call when ever i go to further pages . Currently in solr there is start functionality which returns 10 results by default . But in el… --- ## [Logstash stopped at the line pipeline main started](https://discuss.elastic.co/t/logstash-stopped-at-the-line-pipeline-main-started/81569)
**Author:** [@Daram\_Aparna](https://discuss.elastic.co/u/Daram_Aparna)\ **Replies:** 6\ **Last updated:** [April 14, 2017, 5:20am UTC](https://discuss.elastic.co/t/logstash-stopped-at-the-line-pipeline-main-started/81569 "2017-04-14T05:20:39Z")
Hi .. I'm new to ELK I'm trying to execute simple logstash (version: 2.3.2) command, but it has stopped working Command: D:\\downloads\\elk\\logstash\\bin\>logstash -e 'input { stdin { } } output { stdout { } }' --debug o… --- ## [Export CSV from Dashboard](https://discuss.elastic.co/t/export-csv-from-dashboard/94876)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 1\ **Last updated:** [July 27, 2017, 11:18pm UTC](https://discuss.elastic.co/t/export-csv-from-dashboard/94876 "2017-07-27T23:18:07Z")
Hi, We have developed dashboards in Kibana. From Visualization we can export CSV but how can we export CSV from Dashboard? Please suggest… Thanks! --- ## [Connect Logstash to remote FTP server](https://discuss.elastic.co/t/connect-logstash-to-remote-ftp-server/76189)
**Author:** [@Nejc\_Gutnik](https://discuss.elastic.co/u/Nejc_Gutnik)\ **Replies:** 1\ **Last updated:** [February 23, 2017, 10:27am UTC](https://discuss.elastic.co/t/connect-logstash-to-remote-ftp-server/76189 "2017-02-23T10:27:27Z")
Hi there, I'm trying to connect to password secured remote FTP server where I have a few log files. I want to get a steady stream of new events to Logstash. As far as I know, Logstash can't connect directly to FTP serv… --- ## [Url field formatter to exploit multiple fields](https://discuss.elastic.co/t/url-field-formatter-to-exploit-multiple-fields/83598)
**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\ **Replies:** 4\ **Last updated:** [April 26, 2017, 7:48am UTC](https://discuss.elastic.co/t/url-field-formatter-to-exploit-multiple-fields/83598 "2017-04-26T07:48:00Z")
Is it possible to have url formatted fields with label from another field? something equivalent to html: \< a href="fieldUrl"\>fieldLabel \< /a \> --- ## [Allow Kibana Reporting and CSV Export via "Roles" with "kibana\_dashboard\_only\_user"](https://discuss.elastic.co/t/allow-kibana-reporting-and-csv-export-via-roles-with-kibana-dashboard-only-user/184662)
**Author:** [@lanelivingston](https://discuss.elastic.co/u/lanelivingston)\ **Replies:** 2\ **Last updated:** [June 6, 2019, 11:36pm UTC](https://discuss.elastic.co/t/allow-kibana-reporting-and-csv-export-via-roles-with-kibana-dashboard-only-user/184662 "2019-06-06T23:36:24Z")
Currently, it appears, that only a user with the kibana\_user role can access reporting and CSV export. However, according to this: https://www.elastic.co/guide/en/kibana/current/reporting-settings-kb.html it appears t… --- ## [How can I subtract sum of two metrics visualization](https://discuss.elastic.co/t/how-can-i-subtract-sum-of-two-metrics-visualization/27550)
**Author:** [@ardian](https://discuss.elastic.co/u/ardian)\ **Replies:** 2\ **Last updated:** [August 18, 2015, 7:26am UTC](https://discuss.elastic.co/t/how-can-i-subtract-sum-of-two-metrics-visualization/27550 "2015-08-18T07:26:50Z")
Hello, I want to subtract the sum of two metrics in Kibana. C = A + B If I have metric C which is the sum of metric A and metric B. I created metric C with search query "id1:100 && id2:93" and give the total of 14,000,00… --- ## [Metricbeat 7.15.1 Will Not Start](https://discuss.elastic.co/t/metricbeat-7-15-1-will-not-start/288429)
**Author:** [@ty9001](https://discuss.elastic.co/u/ty9001)\ **Replies:** 8\ **Last updated:** [November 5, 2021, 12:21pm UTC](https://discuss.elastic.co/t/metricbeat-7-15-1-will-not-start/288429 "2021-11-05T12:21:20Z")
Hello! I have noticed in the past few weeks my Metricbeat 7.15.1 monitoring doesn't seem to work. I finally figured out the service won't stay started properly. I was using Fedora 34 and have currently rolled out a new s… --- ## [Javaでのelasticsearch利用について](https://discuss.elastic.co/t/java-elasticsearch/27469)
**Author:** [@konchan](https://discuss.elastic.co/u/konchan)\ **Replies:** 8\ **Last updated:** [August 24, 2015, 8:08am UTC](https://discuss.elastic.co/t/java-elasticsearch/27469 "2015-08-24T08:08:50Z")
現在、以下のようにプログラムを組んでいます。 import static org.elasticsearch.node.NodeBuilder.\*; import java.io.BufferedReader; import java.io.File; import java.io.FileReader; import java.io.FileWriter; import java.io.IOException; import ja… --- ## [ES 5.0 upgrade woes](https://discuss.elastic.co/t/es-5-0-upgrade-woes/65246)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 7\ **Last updated:** [November 7, 2016, 8:54pm UTC](https://discuss.elastic.co/t/es-5-0-upgrade-woes/65246 "2016-11-07T20:54:36Z")
Hello, all. I'm in the process of upgrading ES from version 2.4 to 5.0 on Ubuntu 16.04.1 LTS . I've followed the upgrade documentation to the letter, but at the point where I restart ES, it won't. Here's output from … --- ## [Prefix query insensitive case : normalizer or analyzer ? (nest inside)](https://discuss.elastic.co/t/prefix-query-insensitive-case-normalizer-or-analyzer-nest-inside/252255)
**Author:** [@Nicolas\_Rey](https://discuss.elastic.co/u/Nicolas_Rey)\ **Replies:** 2\ **Last updated:** [October 16, 2020, 1:53pm UTC](https://discuss.elastic.co/t/prefix-query-insensitive-case-normalizer-or-analyzer-nest-inside/252255 "2020-10-16T13:53:43Z")
Hi, I get hard time to figure out which kind of settings should I use, my needs are basics, I got a text field (literally a phrase) that I should be able to query using a prefix ("start with") in an insensitive way. i… --- ## [Frequency distribution Graph in elasticsearch](https://discuss.elastic.co/t/frequency-distribution-graph-in-elasticsearch/94142)
**Author:** [@mussa572](https://discuss.elastic.co/u/mussa572)\ **Replies:** 2\ **Last updated:** [July 23, 2017, 11:20pm UTC](https://discuss.elastic.co/t/frequency-distribution-graph-in-elasticsearch/94142 "2017-07-23T23:20:01Z")
Dear All, We have index that holds the number of orders sent to use by users . Each order holds the Latency value which confirms how long system took to process this order . The latency values Can range from (0.01 ms to… --- ## [Is it possible to make date range queries with multiple date fields](https://discuss.elastic.co/t/is-it-possible-to-make-date-range-queries-with-multiple-date-fields/76278)
**Author:** [@Castronova](https://discuss.elastic.co/u/Castronova)\ **Replies:** 3\ **Last updated:** [February 24, 2017, 7:25pm UTC](https://discuss.elastic.co/t/is-it-possible-to-make-date-range-queries-with-multiple-date-fields/76278 "2017-02-24T19:25:19Z")
Is it possible to make date range queries with multiple date fields? My index has multiple date fields that I would like to use to isolate specific records. I am able to make a query using a hardcoded date (i.e. 2017-0… --- ## [Delete Large Index](https://discuss.elastic.co/t/delete-large-index/233818)
**Author:** [@Oleksandr.Tedikov](https://discuss.elastic.co/u/Oleksandr.Tedikov)\ **Replies:** 3\ **Last updated:** [May 22, 2020, 6:09am UTC](https://discuss.elastic.co/t/delete-large-index/233818 "2020-05-22T06:09:17Z")
Hello, I have Elastic Cluster with Ram, Disk Size 500GB, 3 Master Nodes and 3 Data/Ingest Nodes(1 VCPU, 4GB) Currently I have Large Index which is ~275 GB in 1 Shard. I would like to delete it. Should I just delete it… --- ## [No more local transport on 6.0.x](https://discuss.elastic.co/t/no-more-local-transport-on-6-0-x/102416)
**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\ **Replies:** 3\ **Last updated:** [October 5, 2017, 10:31am UTC](https://discuss.elastic.co/t/no-more-local-transport-on-6-0-x/102416 "2017-10-05T10:31:59Z")
Hi, I'm trying to run ES from my IDE. Everything is fine with 5.x using transport.type: local setting. But as soon as I change to 6.0.0-beta2 I get this exception: \[2017-10-02T10:43:49,295\]\[INFO \]\[o.e.n.Node … --- ## [Discover: Result window is too large, from + size must be less than or equal to: \[10000\]](https://discuss.elastic.co/t/discover-result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000/257112)
**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\ **Replies:** 3\ **Last updated:** [December 2, 2020, 11:44am UTC](https://discuss.elastic.co/t/discover-result-window-is-too-large-from-size-must-be-less-than-or-equal-to-10000/257112 "2020-12-02T11:44:58Z")
Hi All, In an ES 6.8.6 cluster, I created an index pattern in Kibana and when I went to discover tab, I got the error Discover: Result window is too large, from + size must be less than or equal to: \[10000\] but was \[20… --- ## [Scan and Scroll : URI length exceeds the configured limit](https://discuss.elastic.co/t/scan-and-scroll-uri-length-exceeds-the-configured-limit/37851)
**Author:** [@Shabbir\_Challawala](https://discuss.elastic.co/u/Shabbir_Challawala)\ **Replies:** 4\ **Last updated:** [January 11, 2016, 9:18am UTC](https://discuss.elastic.co/t/scan-and-scroll-uri-length-exceeds-the-configured-limit/37851 "2016-01-11T09:18:36Z")
I am working in ElasticSearch 2.1, Php library is elastic/elasticsearch-php and Elasticsearch is hosted on .aws.found.io to work on large dataset of search result, we are using scan and scroll functionality. In scroll … --- ## [Web Crawler input for logstash](https://discuss.elastic.co/t/web-crawler-input-for-logstash/24052)
**Author:** [@Dan](https://discuss.elastic.co/u/Dan)\ **Replies:** 2\ **Last updated:** [August 28, 2015, 6:57am UTC](https://discuss.elastic.co/t/web-crawler-input-for-logstash/24052 "2015-08-28T06:57:09Z")
Hi All, Is their available plugin for webcrawler. If their any please let me now configuration steps. Thanks, Dan. --- ## [Grokparse failure mikrotik](https://discuss.elastic.co/t/grokparse-failure-mikrotik/108237)
**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\ **Replies:** 6\ **Last updated:** [November 22, 2017, 6:29am UTC](https://discuss.elastic.co/t/grokparse-failure-mikrotik/108237 "2017-11-22T06:29:13Z")
Hi I am trying to grok an event log and it looks like following- has\_log: http dstnat: in:\ out:(none), proto TCP (SYN), 10.0.1.215:45306-\>162.235.200.2:80, len 60 I have tested the grok for the above i… --- ## [Setting up elastic search master and data node configuration in two different servers](https://discuss.elastic.co/t/setting-up-elastic-search-master-and-data-node-configuration-in-two-different-servers/98012)
**Author:** [@virat](https://discuss.elastic.co/u/virat)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 5:33pm UTC](https://discuss.elastic.co/t/setting-up-elastic-search-master-and-data-node-configuration-in-two-different-servers/98012 "2017-08-23T17:33:20Z")
I have two elasticsearch running on two different servers, I have same indexes on both servers. I want to have a master and data node configuration, for that below are the configuration changes which I did so far: Maste… --- ## [What is the best throughput for logstash?](https://discuss.elastic.co/t/what-is-the-best-throughput-for-logstash/43711)
**Author:** [@Kimzone](https://discuss.elastic.co/u/Kimzone)\ **Replies:** 1\ **Last updated:** [March 8, 2016, 12:12am UTC](https://discuss.elastic.co/t/what-is-the-best-throughput-for-logstash/43711 "2016-03-08T00:12:32Z")
Hi, I want to use ELK for analyzing big data. I'm talking about 24 files every day, each with ~10GB of data. There are ~ 104 columns in each CSV and about 60M lines. I'm interested to upload those files to elasticsearc… --- ## [How to prevent other people from deleting index?](https://discuss.elastic.co/t/how-to-prevent-other-people-from-deleting-index/7819)
**Author:** [@mrblue](https://discuss.elastic.co/u/mrblue)\ **Replies:** 4\ **Last updated:** [May 23, 2012, 12:12pm UTC](https://discuss.elastic.co/t/how-to-prevent-other-people-from-deleting-index/7819 "2012-05-23T12:12:58Z")
Hi everybody, i am going to start using elasticsearch in my shop these days. I made two little scripts to rebuild and to delete the index and put them in a password protected folder. Everything is working fine :) … --- ## [Multiple Filebeat Inputs to different Logstash ports](https://discuss.elastic.co/t/multiple-filebeat-inputs-to-different-logstash-ports/226273)
**Author:** [@radd](https://discuss.elastic.co/u/radd)\ **Replies:** 2\ **Last updated:** [April 4, 2020, 10:20am UTC](https://discuss.elastic.co/t/multiple-filebeat-inputs-to-different-logstash-ports/226273 "2020-04-04T10:20:36Z")
Hi, I am trying to send 3 total different logs from server A using filebeat, to server B running logstash on 3 different ports, based on different pipelines. Server A,filebeat, file\_1.log ---------\> Server B, logstash… --- ## [How to convert String into JSon format?](https://discuss.elastic.co/t/how-to-convert-string-into-json-format/295703)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 3\ **Last updated:** [January 31, 2022, 10:17am UTC](https://discuss.elastic.co/t/how-to-convert-string-into-json-format/295703 "2022-01-31T10:17:20Z")
Hello Friends, Need your help to parse string into Json format in logstash. { "id":"xxx", "MessageCreateDate":"2022-01-20", "Response":"{'Cardholder':{'cards':\[{'isPrimaryCard':'N','cardNumber':'xxxxxxxxxx','r… --- ## [Query to exclude multiple wildcard values from single field](https://discuss.elastic.co/t/query-to-exclude-multiple-wildcard-values-from-single-field/163399)
**Author:** [@duncOps](https://discuss.elastic.co/u/duncOps)\ **Replies:** 2\ **Last updated:** [January 9, 2019, 8:00am UTC](https://discuss.elastic.co/t/query-to-exclude-multiple-wildcard-values-from-single-field/163399 "2019-01-09T08:00:26Z")
Hi all, I'm trying to do something that should be relatively straightforward. In Kibana, I want to exclude all CSS, PNG and SVG files from my app.req.destination field. I've tried... -app.req.destination:"\*\\.css" -app… --- ## [Trouble matching timestamp](https://discuss.elastic.co/t/trouble-matching-timestamp/83768)
**Author:** [@s58smith](https://discuss.elastic.co/u/s58smith)\ **Replies:** 4\ **Last updated:** [April 28, 2017, 7:58pm UTC](https://discuss.elastic.co/t/trouble-matching-timestamp/83768 "2017-04-28T19:58:35Z")
I'm having trouble getting the ISO8601 to match timestamp in "Date" filter. Below is my filter and output config. I have tried using the commented out lines for "match" but not working. filter { if "CollectorStatus" … --- ## [I want to split the existing index to daily index](https://discuss.elastic.co/t/i-want-to-split-the-existing-index-to-daily-index/260501)
**Author:** [@Rohit\_Kumbhar](https://discuss.elastic.co/u/Rohit_Kumbhar)\ **Replies:** 6\ **Last updated:** [January 12, 2021, 8:08pm UTC](https://discuss.elastic.co/t/i-want-to-split-the-existing-index-to-daily-index/260501 "2021-01-12T20:08:55Z")
Hello, I want to split the existing index of size 200gb into daily index, That index has data of 1 month. I have setup of 8 core cpu and 16gb ram. what query should I write on dev tools or is there any other way to ex… --- ## [How to forward and index the json formatted log files in ELK-docker](https://discuss.elastic.co/t/how-to-forward-and-index-the-json-formatted-log-files-in-elk-docker/65509)
**Author:** [@himaz.m](https://discuss.elastic.co/u/himaz.m)\ **Replies:** 6\ **Last updated:** [November 18, 2016, 8:13am UTC](https://discuss.elastic.co/t/how-to-forward-and-index-the-json-formatted-log-files-in-elk-docker/65509 "2016-11-18T08:13:25Z")
Hi, I'm configuring the ELK-docker for the first time and this is new to me. I'm using, \* filebeat version 5.0 \* elasticsearch version 5.0 \* kibana version 5.0 I have filebeat configured on a different server and ELK-… --- ## [Perform aggregation on the result of a subquery aggregation](https://discuss.elastic.co/t/perform-aggregation-on-the-result-of-a-subquery-aggregation/19815)
**Author:** [@Guillaume1](https://discuss.elastic.co/u/Guillaume1)\ **Replies:** 0\ **Last updated:** [September 16, 2014, 1:55pm UTC](https://discuss.elastic.co/t/perform-aggregation-on-the-result-of-a-subquery-aggregation/19815 "2014-09-16T13:55:43Z")
Hi, I'm newbie with Elastic search. I'm validating Elasticsearch regarding our needs. Lets say I want to monitor disk usage of my VMs. - vm1 and vm2 are in Platform PF\_A, vm3 is in platform PF\_B The mapping… --- ## [PUT .kibana/\_settings { "index": { "blocks": { "read\_only\_allow\_delete": "false" } } }](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381)
**Author:** [@OpSecMonkey](https://discuss.elastic.co/u/OpSecMonkey)\ **Replies:** 7\ **Last updated:** [January 17, 2019, 5:28am UTC](https://discuss.elastic.co/t/put-kibana-settings-index-blocks-read-only-allow-delete-false/164381 "2019-01-17T05:28:12Z")
Good afternoon everyone, So today I was running my config with logstash and everything was working great and then all of a sudden I got this error message with Kibana. It just repeats over and over and over again. \[201… --- ## [Remove duplicates in logstash logs](https://discuss.elastic.co/t/remove-duplicates-in-logstash-logs/134057)
**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\ **Replies:** 3\ **Last updated:** [June 1, 2018, 7:56am UTC](https://discuss.elastic.co/t/remove-duplicates-in-logstash-logs/134057 "2018-06-01T07:56:03Z")
Hello, I use filebeat to send logs to logstash and then I use Logstash to parse them. For exemple this line : 31/5/2018 01:06:24.073 (TACHE) 30/5/2018/D T UE\_TECXXX\_J\_TN\_SSH002\_DELCLONE\_LPSACAS1(14033)/UE\_TECXXX\_X\_LL\_OP… --- ## [How do you install the syslog input plugin?](https://discuss.elastic.co/t/how-do-you-install-the-syslog-input-plugin/150490)
**Author:** [@meatwad](https://discuss.elastic.co/u/meatwad)\ **Replies:** 1\ **Last updated:** [October 3, 2018, 6:01pm UTC](https://discuss.elastic.co/t/how-do-you-install-the-syslog-input-plugin/150490 "2018-10-03T18:01:01Z")
Hi, I got Elastic configured last night and have Logstash listening on port 5000: $ netstat -aptn |grep LIST |grep 5000 tcp 0 0 0.0.0.0:5000 0.0.0.0:\* LISTEN 10743/java I have rsyslog on a different forwarding its … --- ## [How to connect to docker instance of elasticsearch](https://discuss.elastic.co/t/how-to-connect-to-docker-instance-of-elasticsearch/163394)
**Author:** [@P.Satish\_Patro](https://discuss.elastic.co/u/P.Satish_Patro)\ **Replies:** 2\ **Last updated:** [January 24, 2019, 9:20am UTC](https://discuss.elastic.co/t/how-to-connect-to-docker-instance-of-elasticsearch/163394 "2019-01-24T09:20:00Z")
I have used elastic search(rest high level client) in spring boot. The local instance of my computer running fine. But, when I am trying to access the azure vm docker instance I can't able to use. I can able to get json … --- ## [Kubernetes pods are not ready in a Cluster with xpack.security.enabled: true after the pod restart](https://discuss.elastic.co/t/kubernetes-pods-are-not-ready-in-a-cluster-with-xpack-security-enabled-true-after-the-pod-restart/248010)
**Author:** [@ratnakar](https://discuss.elastic.co/u/ratnakar)\ **Replies:** 3\ **Last updated:** [September 16, 2020, 10:38am UTC](https://discuss.elastic.co/t/kubernetes-pods-are-not-ready-in-a-cluster-with-xpack-security-enabled-true-after-the-pod-restart/248010 "2020-09-16T10:38:16Z")
I have created an elasticsearch in Kubernetes using helm charts(helm version 3) by enabling xpack.security. It was working fine and did not find any issues. Today I have deleted those pods and after that Pods are not onl… [Previous page](https://discuss.elastic.co/top.md?page=486&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=488&per_page=50&period=all)