# Top **URL:** https://discuss.elastic.co/top.md?page=489&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 490 --- ## [Collecting Windows event log](https://discuss.elastic.co/t/collecting-windows-event-log/43049)
**Author:** [@miko370](https://discuss.elastic.co/u/miko370)\ **Replies:** 7\ **Last updated:** [March 2, 2016, 4:11am UTC](https://discuss.elastic.co/t/collecting-windows-event-log/43049 "2016-03-02T04:11:00Z")
Hi. I have read about different options to collect Windows eventlog to LogStash. I am trying to understand what is currently the preferred way. Moreover, since I want to do it remotely, I need to do it efficiently - pe… --- ## [Why was the Logstash web ui discontinued?](https://discuss.elastic.co/t/why-was-the-logstash-web-ui-discontinued/25067)
**Author:** [@gdeconto](https://discuss.elastic.co/u/gdeconto)\ **Replies:** 1\ **Last updated:** [July 7, 2015, 5:14pm UTC](https://discuss.elastic.co/t/why-was-the-logstash-web-ui-discontinued/25067 "2015-07-07T17:14:57Z")
if there is an issue with the data that logstash is receiving, wouldn't a monitoring page be of use? even if all it did was to tail the logstash error log file(s). --- ## [Dashboard filter via click not working](https://discuss.elastic.co/t/dashboard-filter-via-click-not-working/211178)
**Author:** [@Brian\_Lamb1](https://discuss.elastic.co/u/Brian_Lamb1)\ **Replies:** 4\ **Last updated:** [December 24, 2019, 3:46pm UTC](https://discuss.elastic.co/t/dashboard-filter-via-click-not-working/211178 "2019-12-24T15:46:57Z")
Hi all, I had to reinstall kibana and recreate our dashboard. The visualizations all look correct but when I click on the visualization to create a filter, nothing happens. When I manually type in a filter (gender is "… --- ## [How to use grok filter on JSON field](https://discuss.elastic.co/t/how-to-use-grok-filter-on-json-field/90578)
**Author:** [@sachiiit](https://discuss.elastic.co/u/sachiiit)\ **Replies:** 1\ **Last updated:** [June 26, 2017, 5:34am UTC](https://discuss.elastic.co/t/how-to-use-grok-filter-on-json-field/90578 "2017-06-26T05:34:56Z")
I have an http input plugin in my logstash configuration with codec as json as http { host =\> "0.0.0.0" port =\> "8080" user =\> "username" password =\> "… --- ## [Switch from scripted fields to runtime fields?](https://discuss.elastic.co/t/switch-from-scripted-fields-to-runtime-fields/298295)
**Author:** [@glushkov](https://discuss.elastic.co/u/glushkov)\ **Replies:** 7\ **Last updated:** [February 28, 2022, 1:22pm UTC](https://discuss.elastic.co/t/switch-from-scripted-fields-to-runtime-fields/298295 "2022-02-28T13:22:40Z")
Hi, Kibana is warning me since ever when I look at Management \> Index patterns \> \ \> Scripted fields that "Scripted fields" are deprecated and one should use "runtime fields" instead. To be prepared, … --- ## [Change a field name for better visualization](https://discuss.elastic.co/t/change-a-field-name-for-better-visualization/218148)
**Author:** [@A\_Mightiev](https://discuss.elastic.co/u/A_Mightiev)\ **Replies:** 2\ **Last updated:** [February 6, 2020, 12:44pm UTC](https://discuss.elastic.co/t/change-a-field-name-for-better-visualization/218148 "2020-02-06T12:44:40Z")
I have an index that shows an number ID, less ideal to visualize in a graph. I would like to change it to an actual name based on a table. I tried to use synonyms, but I don't seem to get it work with Kibana visualizati… --- ## [Cleaning up red Shards](https://discuss.elastic.co/t/cleaning-up-red-shards/19660)
**Author:** [@Johnathan\_Phan\_3](https://discuss.elastic.co/u/Johnathan_Phan_3)\ **Replies:** 2\ **Last updated:** [September 9, 2014, 9:57am UTC](https://discuss.elastic.co/t/cleaning-up-red-shards/19660 "2014-09-09T09:57:54Z")
Hi everyone, say you have 100-200 index's where one of the shards, replica and primary have gotten corrupted. Lets just say they are completely bonked. Someone must have a simply query to identify which index's t… --- ## [Regex Query Not Working](https://discuss.elastic.co/t/regex-query-not-working/68503)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 3\ **Last updated:** [December 12, 2016, 5:18pm UTC](https://discuss.elastic.co/t/regex-query-not-working/68503 "2016-12-12T17:18:37Z")
I'm trying to write a regex query for a log that I know exists, and I was wondering if anyone could help me figure out why it is not functioning ( I am 99.999% sure that the regex is correct.) Normal Query (to prove lo… --- ## [MapperParsingException\[No handler for type \[ınteger\] declared on field \[favoriteIntNumber\]\]](https://discuss.elastic.co/t/mapperparsingexception-no-handler-for-type-integer-declared-on-field-favoriteintnumber/34007)
**Author:** [@zoltan](https://discuss.elastic.co/u/zoltan)\ **Replies:** 2\ **Last updated:** [November 9, 2015, 7:36am UTC](https://discuss.elastic.co/t/mapperparsingexception-no-handler-for-type-integer-declared-on-field-favoriteintnumber/34007 "2015-11-09T07:36:35Z")
Could this be a classpath error? Any ideas? MapperParsingException\[No handler for type \[ınteger\] declared on field \[favoriteIntNumber\]\] at \_\_randomizedtesting.SeedInfo.seed(\[AF0C2FA73F396B56: No handler for type \[ınt… --- ## [Reindex causes mapper\_parsing\_exception](https://discuss.elastic.co/t/reindex-causes-mapper-parsing-exception/217328)
**Author:** [@Gavin\_Hardy](https://discuss.elastic.co/u/Gavin_Hardy)\ **Replies:** 7\ **Last updated:** [January 31, 2020, 9:50am UTC](https://discuss.elastic.co/t/reindex-causes-mapper-parsing-exception/217328 "2020-01-31T09:50:05Z")
Hello, We are currently using Functionbeat to create our templates, and yesterday we started seeing errors. Looking at the index's that were affected, it appears someone had create a custom template, which caused the er… --- ## [Sanitizing Logs Before Shipping](https://discuss.elastic.co/t/sanitizing-logs-before-shipping/109134)
**Author:** [@Ossie](https://discuss.elastic.co/u/Ossie)\ **Replies:** 7\ **Last updated:** [December 6, 2017, 4:55pm UTC](https://discuss.elastic.co/t/sanitizing-logs-before-shipping/109134 "2017-12-06T16:55:06Z")
Hi, I currently have a situation where an application sometimes logs sensitive data to a file. I want to ship these logs using Filebeat but would prefer to sanitize the sensitive fields before they reach Elasticsearch.… --- ## [Elasticsearch mapping fields in python script gives error as "unsupported parameters"](https://discuss.elastic.co/t/elasticsearch-mapping-fields-in-python-script-gives-error-as-unsupported-parameters/130824)
**Author:** [@tushar\_raut](https://discuss.elastic.co/u/tushar_raut)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-mapping-fields-in-python-script-gives-error-as-unsupported-parameters/130824 "2018-05-11T09:31:51Z")
Mapping configuration are as follows: es\_mapping = { 'properties': { 'university': { 'type': 'object', 'properties': { 'name': … --- ## [How to obtain the current ECCN for ELK](https://discuss.elastic.co/t/how-to-obtain-the-current-eccn-for-elk/52807)
**Author:** [@whitesheep](https://discuss.elastic.co/u/whitesheep)\ **Replies:** 6\ **Last updated:** [June 21, 2016, 3:19am UTC](https://discuss.elastic.co/t/how-to-obtain-the-current-eccn-for-elk/52807 "2016-06-21T03:19:55Z")
We are planning to reuse ELK and need to check the if ECCN(Export Control Classification Number) is OK. So how can I obtain the ECCN for logstash, elasticsearch and kibana? Thanks. --- ## [Elasticseach failed shard allocation](https://discuss.elastic.co/t/elasticseach-failed-shard-allocation/271739)
**Author:** [@TheVintik](https://discuss.elastic.co/u/TheVintik)\ **Replies:** 7\ **Last updated:** [April 30, 2021, 7:23am UTC](https://discuss.elastic.co/t/elasticseach-failed-shard-allocation/271739 "2021-04-30T07:23:44Z")
My ES is in yellow state after another one node adding and restarting cluster. I have 4 unassigned shards (from 33), and here is response for one of unassigned shards: { "index" : "MY INDEX NAME", "shard" : 0, "pr… --- ## [Hashing algo. for Routing](https://discuss.elastic.co/t/hashing-algo-for-routing/13428)
**Author:** [@Anand\_Nalya](https://discuss.elastic.co/u/Anand_Nalya)\ **Replies:** 3\ **Last updated:** [September 12, 2013, 4:48am UTC](https://discuss.elastic.co/t/hashing-algo-for-routing/13428 "2013-09-12T04:48:38Z")
Hi, I wanted to know which hashing algorithm is used by ES for sharding. I can find 2 in https://github.com/elasticsearch/elasticsearch/tree/master/src/main/java/org/elasticsearch/cluster/routing/operation/hash. … --- ## [Get the last record for each day](https://discuss.elastic.co/t/get-the-last-record-for-each-day/44665)
**Author:** [@chenbe2204](https://discuss.elastic.co/u/chenbe2204)\ **Replies:** 4\ **Last updated:** [March 23, 2016, 3:35pm UTC](https://discuss.elastic.co/t/get-the-last-record-for-each-day/44665 "2016-03-23T15:35:24Z")
Hi , I want to create a chart that will contain the last record for each day for specific field value. For example: field name = build\_name field value = "linux\_32" I want the aggregation by d… --- ## [Timeout executing grok](https://discuss.elastic.co/t/timeout-executing-grok/269184)
**Author:** [@Andrey\_RF](https://discuss.elastic.co/u/Andrey_RF)\ **Replies:** 8\ **Last updated:** [April 5, 2021, 2:27pm UTC](https://discuss.elastic.co/t/timeout-executing-grok/269184 "2021-04-05T14:27:19Z")
I have a quite long regex to pars my log message. But it drops with Timeout executing grok . Does have any mechanisms to speed up regex work? Also I have a multiple regexs and if one is failed does it other works ? --- ## [NumberFormatException For input string: \\"now-1d/d\\""](https://discuss.elastic.co/t/numberformatexception-for-input-string-now-1d-d/150148)
**Author:** [@dirri](https://discuss.elastic.co/u/dirri)\ **Replies:** 1\ **Last updated:** [September 28, 2018, 8:54am UTC](https://discuss.elastic.co/t/numberformatexception-for-input-string-now-1d-d/150148 "2018-09-28T08:54:40Z")
I´m executing a query using range agg on a date field (includes millis since epoch) but this leads to a NumberFormatException: The mapping is: "mappings": { "\_doc": { "properties": { "~timestamp": { "type": "date" … --- ## [Filebeat CPU usage 400%+](https://discuss.elastic.co/t/filebeat-cpu-usage-400/116095)
**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\ **Replies:** 5\ **Last updated:** [February 1, 2018, 6:18pm UTC](https://discuss.elastic.co/t/filebeat-cpu-usage-400/116095 "2018-02-01T18:18:45Z")
Good Morning, I have installed and started my filebeat(5.5) agent on a set of servers and I am seeing a very high CPU usage by Filebeat. I recently added the stanzas max\_proc: 2 & scan\_frequency: 30s because I read on a… --- ## [Mysql equivalent query for having clause](https://discuss.elastic.co/t/mysql-equivalent-query-for-having-clause/87252)
**Author:** [@Kuldeep1](https://discuss.elastic.co/u/Kuldeep1)\ **Replies:** 5\ **Last updated:** [May 28, 2017, 6:13am UTC](https://discuss.elastic.co/t/mysql-equivalent-query-for-having-clause/87252 "2017-05-28T06:13:15Z")
I am looking for elastic search query equivalent to mysql query as below:- SELECT \*, COUNT(ID) FROM EMP GROUP BY ID HAVING COUNT(ID) \> 3 ORDER BY ID DESC; Below Elastic search Query i am using:- curl -XGET 'localhos… --- ## [Deleted documents force-merge](https://discuss.elastic.co/t/deleted-documents-force-merge/299717)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [March 15, 2022, 11:08am UTC](https://discuss.elastic.co/t/deleted-documents-force-merge/299717 "2022-03-15T11:08:34Z")
Hi all, I have an index showing 1000 deleted documents. It is said that deleted documents occupy some amount of memory and we have to force merge them to empty space. Which steps or command should we use to achieve this… --- ## [Intersection between documents by specific property](https://discuss.elastic.co/t/intersection-between-documents-by-specific-property/207347)
**Author:** [@Stancheva](https://discuss.elastic.co/u/Stancheva)\ **Replies:** 4\ **Last updated:** [November 14, 2019, 8:30am UTC](https://discuss.elastic.co/t/intersection-between-documents-by-specific-property/207347 "2019-11-14T08:30:46Z")
I've got index with the following mapping: "properties": { "group\_id": { "type": "long" }, "user\_id": { "type": "long" } } Document id has the following structure {group\_id}-{user\_id}. … --- ## [Logstash 6.6 - Cannot install logstash-filter-geoip plugin :ERROR](https://discuss.elastic.co/t/logstash-6-6-cannot-install-logstash-filter-geoip-plugin-error/166659)
**Author:** [@taku333](https://discuss.elastic.co/u/taku333)\ **Replies:** 6\ **Last updated:** [February 4, 2019, 2:48am UTC](https://discuss.elastic.co/t/logstash-6-6-cannot-install-logstash-filter-geoip-plugin-error/166659 "2019-02-04T02:48:42Z")
I attempted to install the logstash-filter-geoip plugin via proxy. But installed Faild. I set and run setting http\_proxy and https\_proxy,but still it did not go well.. Is there something wrong with the procedure? ◆L… --- ## [After upgrade elasticsearch version getting error no \[query\] registered for \[filter\]","line":1,"col":20}\],"type":"parsing\_exception","reason":"no \[query\] registered for \[filter\]","line":1,"col":20},"status":400}](https://discuss.elastic.co/t/after-upgrade-elasticsearch-version-getting-error-no-query-registered-for-filter-line-1-col-20-type-parsing-exception-reason-no-query-registered-for-filter-line-1-col-20-status-400/109571)
**Author:** [@ankitbhai](https://discuss.elastic.co/u/ankitbhai)\ **Replies:** 5\ **Last updated:** [November 29, 2017, 10:39pm UTC](https://discuss.elastic.co/t/after-upgrade-elasticsearch-version-getting-error-no-query-registered-for-filter-line-1-col-20-type-parsing-exception-reason-no-query-registered-for-filter-line-1-col-20-status-400/109571 "2017-11-29T22:39:32Z")
Elasticsearch version (bin/elasticsearch --version): 5.0 Plugins installed: \[\] NO JVM version (java -version): OS version (uname -a if on a Unix-like system): Linux Description of the problem including expected versu… --- ## [Filebeat, Logstash и ротация логов](https://discuss.elastic.co/t/filebeat-logstash/115868)
**Author:** [@uliana\_andreeva](https://discuss.elastic.co/u/uliana_andreeva)\ **Replies:** 2\ **Last updated:** [January 17, 2018, 4:26pm UTC](https://discuss.elastic.co/t/filebeat-logstash/115868 "2018-01-17T16:26:38Z")
Всем привет! Я новичок в ELK. Есть сервер с CentOs 7, на нем установлен ELK 6.1, настроен Filebeat: filebeat.prospectors: - type: log paths: - /opt/tomcat/logs/calendar/log.log exclude\_lines: \['^org.springframew… --- ## [How to get the query for a visualization created using Visual Builder](https://discuss.elastic.co/t/how-to-get-the-query-for-a-visualization-created-using-visual-builder/168206)
**Author:** [@arun1](https://discuss.elastic.co/u/arun1)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 8:35pm UTC](https://discuss.elastic.co/t/how-to-get-the-query-for-a-visualization-created-using-visual-builder/168206 "2019-02-18T20:35:04Z")
Hi, I am able to get the query(which is used to fetch the data from Elasticsearch) when I create a normal visualization(not created using visual builder). However, for a visualization created using visual builder, the … --- ## [Indexing JSON files from a local directory to elastic](https://discuss.elastic.co/t/indexing-json-files-from-a-local-directory-to-elastic/133667)
**Author:** [@Yaniv\_Boneh](https://discuss.elastic.co/u/Yaniv_Boneh)\ **Replies:** 4\ **Last updated:** [May 30, 2018, 2:33pm UTC](https://discuss.elastic.co/t/indexing-json-files-from-a-local-directory-to-elastic/133667 "2018-05-30T14:33:10Z")
Hello, I wish to configure my Logstash pipline so it will index JSON files from a local directory. Of course, I already went through relevant topics and found no satisfying solution for my case, for instance, this issu… --- ## [Unable to get issuer certificate](https://discuss.elastic.co/t/unable-to-get-issuer-certificate/119345)
**Author:** [@slaypl](https://discuss.elastic.co/u/slaypl)\ **Replies:** 4\ **Last updated:** [February 14, 2018, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-get-issuer-certificate/119345 "2018-02-14T12:54:29Z")
Hello, I have a weird problem with trying to establish a SSL communication between kibana and an elasticsearch cluster. Kibana and ES are both 6.2.1. Es: p18054.srv.pl.test.net Kibana: p18053.srv.pl.test.net Es clus… --- ## [Is it possible to get Date from filename as field](https://discuss.elastic.co/t/is-it-possible-to-get-date-from-filename-as-field/152805)
**Author:** [@ajb](https://discuss.elastic.co/u/ajb)\ **Replies:** 5\ **Last updated:** [October 17, 2018, 12:38pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-date-from-filename-as-field/152805 "2018-10-17T12:38:07Z")
HI Elastic team, Im trying to process logs from liferay (a CMS application), im trying to achieve @timestamp to be same as log event timestamp but the logevent timestamp has only time and miliseconds no date log file n… --- ## [Kibana Tile Map error](https://discuss.elastic.co/t/kibana-tile-map-error/55273)
**Author:** [@Meenal.Luktuke](https://discuss.elastic.co/u/Meenal.Luktuke)\ **Replies:** 5\ **Last updated:** [November 14, 2016, 9:41pm UTC](https://discuss.elastic.co/t/kibana-tile-map-error/55273 "2016-11-14T21:41:36Z")
While creating visualization in Kibana, the preview panel shows multiple tiles with text + MapQuest Developer As of July 11 2016, direct tile access has been discontinued. What is the action in Kibnana ? \[image\] … --- ## [Display non Aggregated field on Y-axis with date Histogram](https://discuss.elastic.co/t/display-non-aggregated-field-on-y-axis-with-date-histogram/24609)
**Author:** [@panshot](https://discuss.elastic.co/u/panshot)\ **Replies:** 5\ **Last updated:** [January 29, 2016, 1:00pm UTC](https://discuss.elastic.co/t/display-non-aggregated-field-on-y-axis-with-date-histogram/24609 "2016-01-29T13:00:13Z")
I am impressed with the capabilities of ELK stack for meaningful data extraction and visualization. I am able to do lots of interesting stuff with it, but hitting a wall for a very basic kind of usecase. I would like… --- ## [ERROR: for kibana Container "ee1a9f613d4a" is unhealthy](https://discuss.elastic.co/t/error-for-kibana-container-ee1a9f613d4a-is-unhealthy/301081)
**Author:** [@Arraso26](https://discuss.elastic.co/u/Arraso26)\ **Replies:** 1\ **Last updated:** [March 30, 2022, 4:29pm UTC](https://discuss.elastic.co/t/error-for-kibana-container-ee1a9f613d4a-is-unhealthy/301081 "2022-03-30T16:29:03Z")
good, I was using the installation guide for elk 8.0.1 and everything was already configured when I went to start it and I got this error. WARNING: Found orphan containers (docker\_elasticsearch\_1, docker\_logstash\_1) for… --- ## [Winlogbeat - Installation on multiple hosts](https://discuss.elastic.co/t/winlogbeat-installation-on-multiple-hosts/118898)
**Author:** [@codeguru](https://discuss.elastic.co/u/codeguru)\ **Replies:** 2\ **Last updated:** [February 9, 2018, 2:30pm UTC](https://discuss.elastic.co/t/winlogbeat-installation-on-multiple-hosts/118898 "2018-02-09T14:30:43Z")
I am a beginner with the elastic stack and trying to learn and understand all the capabilities/features. I have successfully installed winlog on one machine and I want to installt it on 10 more machines and see how I lik… --- ## [Filebeat syslog input : enable both TCP + UDP on port 514](https://discuss.elastic.co/t/filebeat-syslog-input-enable-both-tcp-udp-on-port-514/228671)
**Author:** [@webfr](https://discuss.elastic.co/u/webfr)\ **Replies:** 2\ **Last updated:** [April 21, 2020, 1:34pm UTC](https://discuss.elastic.co/t/filebeat-syslog-input-enable-both-tcp-udp-on-port-514/228671 "2020-04-21T13:34:32Z")
Hello guys, I can't enable BOTH protocols on port 514 with settings below in filebeat.yml Does this input only support one protocol at a time? Nothing is written if I enable both protocols, I also tried with different … --- ## [Failing shard Recovery](https://discuss.elastic.co/t/failing-shard-recovery/168962)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 4\ **Last updated:** [February 19, 2019, 9:09am UTC](https://discuss.elastic.co/t/failing-shard-recovery/168962 "2019-02-19T09:09:54Z")
Hi, We're running elasticsearch 5.6.3 and have a shard that is failing recovery or rerouted assignment. The error I'm seeing is this: failed recovery, failure RecoveryFailedException\[\[index-2019.02.12\]\[3\]: Recovery fai… --- ## [Multiple date fields, cannot filter time](https://discuss.elastic.co/t/multiple-date-fields-cannot-filter-time/27347)
**Author:** [@inlikefletch](https://discuss.elastic.co/u/inlikefletch)\ **Replies:** 7\ **Last updated:** [July 11, 2016, 4:18pm UTC](https://discuss.elastic.co/t/multiple-date-fields-cannot-filter-time/27347 "2016-07-11T16:18:00Z")
I have a database that has multiple data fields. A date field when published, and date fields for start and stop times tracking total times of the transaction. In kibana, i notice the default discover page does not have … --- ## [Kibana Data Table Pagination](https://discuss.elastic.co/t/kibana-data-table-pagination/270819)
**Author:** [@Noobmaster](https://discuss.elastic.co/u/Noobmaster)\ **Replies:** 6\ **Last updated:** [April 22, 2021, 4:50am UTC](https://discuss.elastic.co/t/kibana-data-table-pagination/270819 "2021-04-22T04:50:23Z")
Hi there, I am new to elk and kibana. I have created this data table using 'kibana sample ecommerce data' by going through these steps 1. Dashboards-\> 2.Create Panel-\>3.Aggregation based-\>4. Data Tables. And I dragged … --- ## [Shard sizing and performance with preference=\_primary\_first](https://discuss.elastic.co/t/shard-sizing-and-performance-with-preference--primary-first/48395)
**Author:** [@rkrombho](https://discuss.elastic.co/u/rkrombho)\ **Replies:** 6\ **Last updated:** [April 29, 2016, 9:27am UTC](https://discuss.elastic.co/t/shard-sizing-and-performance-with-preference--primary-first/48395 "2016-04-29T09:27:31Z")
Hi All, I experience slow search performance on a quite large index (we talk about 5-10 seconds for a simple term query on a long field with returns ~10k docs). First of all some details about my cluster: Elastics… --- ## [Adding PIT id to the Search request body through Java SDK](https://discuss.elastic.co/t/adding-pit-id-to-the-search-request-body-through-java-sdk/270057)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 3\ **Last updated:** [April 13, 2021, 8:24pm UTC](https://discuss.elastic.co/t/adding-pit-id-to-the-search-request-body-through-java-sdk/270057 "2021-04-13T20:24:02Z")
While fetching paginated results back from elastic search we need to construct a query like this { "size": 10000, "query": { "match" : { "user.id" : "elkbee" } }, "pit": { "id": "46ToAwMDaWR5… --- ## [Multi-match query with filter condition differences between ES2.1.1 and ES.2.3.3](https://discuss.elastic.co/t/multi-match-query-with-filter-condition-differences-between-es2-1-1-and-es-2-3-3/80732)
**Author:** [@Ramdev\_Wudali](https://discuss.elastic.co/u/Ramdev_Wudali)\ **Replies:** 5\ **Last updated:** [April 4, 2017, 3:59pm UTC](https://discuss.elastic.co/t/multi-match-query-with-filter-condition-differences-between-es2-1-1-and-es-2-3-3/80732 "2017-04-04T15:59:31Z")
Hi: I am running into a problem with multi-match queries with filter conditions on ES 2.3.3. Its not returning the results I am expecting. on ES 2.1.1 I get the results in the order I want but on ES 2.3.3. I do not. J… --- ## [While I'm using share dashboard using Iframe tag?](https://discuss.elastic.co/t/while-im-using-share-dashboard-using-iframe-tag/65000)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 5\ **Last updated:** [November 23, 2016, 2:48am UTC](https://discuss.elastic.co/t/while-im-using-share-dashboard-using-iframe-tag/65000 "2016-11-23T02:48:20Z")
I'm using share dashboard using Iframe tag and copied that link to my application. My question is how to restrict the user not to edit the content by editing the query .How to disable the edit option. Regards Karth… --- ## [Kafka input painfully slow](https://discuss.elastic.co/t/kafka-input-painfully-slow/77013)
**Author:** [@ArunANayagam](https://discuss.elastic.co/u/ArunANayagam)\ **Replies:** 0\ **Last updated:** [March 1, 2017, 3:39pm UTC](https://discuss.elastic.co/t/kafka-input-painfully-slow/77013 "2017-03-01T15:39:26Z")
Hi, I was using logstash-input-jms, to read messages transform them (xml parsing) and putting them into elasticsearch. It worked quite well although under marginally higher load (42k messages per minute) it would slow… --- ## [Send logs from filebeat to 2 graylog instances](https://discuss.elastic.co/t/send-logs-from-filebeat-to-2-graylog-instances/264701)
**Author:** [@shresthomniit](https://discuss.elastic.co/u/shresthomniit)\ **Replies:** 2\ **Last updated:** [February 19, 2021, 8:45am UTC](https://discuss.elastic.co/t/send-logs-from-filebeat-to-2-graylog-instances/264701 "2021-02-19T08:45:34Z")
Hello Everyone, I want to send logs from server-1 to server-2 and server-3. Server-1 has filebeat configured. Server-2 has 1 graylog instance running. (let say it has IP-1) Server-3 has another graylog instance runni… --- ## [Help with GeoLocation please!](https://discuss.elastic.co/t/help-with-geolocation-please/53119)
**Author:** [@gott](https://discuss.elastic.co/u/gott)\ **Replies:** 7\ **Last updated:** [June 20, 2016, 9:30pm UTC](https://discuss.elastic.co/t/help-with-geolocation-please/53119 "2016-06-20T21:30:58Z")
Looking for some help please. Im new to Elastic and im finding it very enjoyable!! My elk stack is running on a windows server ok so my GEO situation is... Filebeat on a IIS webserver sending iis logs to logstash serv… --- ## [APM is not sending](https://discuss.elastic.co/t/apm-is-not-sending/158518)
**Author:** [@oval](https://discuss.elastic.co/u/oval)\ **Replies:** 6\ **Last updated:** [November 29, 2018, 12:22pm UTC](https://discuss.elastic.co/t/apm-is-not-sending/158518 "2018-11-29T12:22:18Z")
Hey everyone! I have recently installed APM but my agents are not sending data to my APM server. I used the node.js installation, with: npm install elastic-apm-node --save. I have installed a server, and an agent in the… --- ## [Filebeat poor performance when publishing existing file to ES](https://discuss.elastic.co/t/filebeat-poor-performance-when-publishing-existing-file-to-es/74044)
**Author:** [@John16](https://discuss.elastic.co/u/John16)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 1:18pm UTC](https://discuss.elastic.co/t/filebeat-poor-performance-when-publishing-existing-file-to-es/74044 "2017-02-07T13:18:30Z")
Hello, I am using filebeat to load existing log file directly into ES. Sample config: spool\_size : 4049 publish\_async: true filebeat.prospectors: - paths: \[ "/data/test.log" \] harvester\_buffer\_size: 163840 fie… --- ## [Handeling log rotation](https://discuss.elastic.co/t/handeling-log-rotation/109660)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 6\ **Last updated:** [December 18, 2017, 4:18pm UTC](https://discuss.elastic.co/t/handeling-log-rotation/109660 "2017-12-18T16:18:29Z")
Hi, using 5.6.2 filebeat.prospectors: - input\_type: log paths: - /var/lib/mesos/slave/slaves/\*/frameworks/\*/executors/\*/runs/latest/stdout - /var/lib/mesos/slave/slaves/\*/frameworks/\*/executors/\*/runs/latest/s… --- ## [\[LogStash\] Comment ignorer les \_grokparsefailure?](https://discuss.elastic.co/t/logstash-comment-ignorer-les--grokparsefailure/28018)
**Author:** [@Blured\_Derulb](https://discuss.elastic.co/u/Blured_Derulb)\ **Replies:** 2\ **Last updated:** [August 25, 2015, 3:08pm UTC](https://discuss.elastic.co/t/logstash-comment-ignorer-les--grokparsefailure/28018 "2015-08-25T15:08:41Z")
Bonjour, Je ne souhaite que les lignes qui ne matchent pas l'expression de mon grok filter ne soient pas importées. Pour l'instant elles le sont quand même. Mon fichier de pipeline contient : input { file { … --- ## [Snapshot: repository\_verification\_exception](https://discuss.elastic.co/t/snapshot-repository-verification-exception/265059)
**Author:** [@rojin](https://discuss.elastic.co/u/rojin)\ **Replies:** 4\ **Last updated:** [February 22, 2021, 1:52pm UTC](https://discuss.elastic.co/t/snapshot-repository-verification-exception/265059 "2021-02-22T13:52:29Z")
Hi! I am trying to do a snapshot for my cluster including 2 nodes. I have a shared file on both of my nodes. node-1 as an NFS server and node-2 as the client. if I add a file to the specified shared directory which is /v… --- ## [Elasticsearch 2.3.2 There is insufficient memory for the Java Runtime Environment to continue](https://discuss.elastic.co/t/elasticsearch-2-3-2-there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/49031)
**Author:** [@Isra](https://discuss.elastic.co/u/Isra)\ **Replies:** 1\ **Last updated:** [May 4, 2016, 2:00am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-2-there-is-insufficient-memory-for-the-java-runtime-environment-to-continue/49031 "2016-05-04T02:00:57Z")
When I try to start Elasticsearch 2.3.2 using the command ./bin/elasticsearch, I get the following error message: Java HotSpot(TM) 64-Bit Server VM warning: INFO: os::commit\_memory(0x0000000414cc0000, 15757213696, 0) … [Previous page](https://discuss.elastic.co/top.md?page=488&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=490&per_page=50&period=all)