# Top **URL:** https://discuss.elastic.co/top.md?page=493&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 494 --- ## [Ctx.payload.hits.total returns zero](https://discuss.elastic.co/t/ctx-payload-hits-total-returns-zero/114275)
**Author:** [@ravirjn](https://discuss.elastic.co/u/ravirjn)\ **Replies:** 6\ **Last updated:** [January 9, 2018, 12:08pm UTC](https://discuss.elastic.co/t/ctx-payload-hits-total-returns-zero/114275 "2018-01-09T12:08:37Z")
Hi, I created a watcher in Kibana for sending an email alert on every failed login for root, but it's not working properly. Condition part returns zero hits even after giving wrong password for the root login. Below is… --- ## [Read log files from remote location in Linux](https://discuss.elastic.co/t/read-log-files-from-remote-location-in-linux/79935)
**Author:** [@netaibiswas](https://discuss.elastic.co/u/netaibiswas)\ **Replies:** 2\ **Last updated:** [March 24, 2017, 6:49pm UTC](https://discuss.elastic.co/t/read-log-files-from-remote-location-in-linux/79935 "2017-03-24T18:49:05Z")
Hi, I was trying to read log file using Logstash I couldn’t make it working. I have set up Logstash and application server in different Linux box. I have configured something like this, can you please help me out f… --- ## [Failed to parse \[timestamp\]](https://discuss.elastic.co/t/failed-to-parse-timestamp/81966)
**Author:** [@mirnuj\_atom](https://discuss.elastic.co/u/mirnuj_atom)\ **Replies:** 8\ **Last updated:** [April 19, 2017, 8:18am UTC](https://discuss.elastic.co/t/failed-to-parse-timestamp/81966 "2017-04-19T08:18:02Z")
Hey Guys Hope you all are doing great! I am having an issue parsing date in tomcat logs. Elasticsearch throws errors in debug and stops accepting new messages. Here is an example of log lines: 2017-02-27 13:53:14 IN… --- ## [Can a child document have multiple parents?](https://discuss.elastic.co/t/can-a-child-document-have-multiple-parents/6407)
**Author:** [@Nick\_Hoffman](https://discuss.elastic.co/u/Nick_Hoffman)\ **Replies:** 5\ **Last updated:** [December 14, 2015, 1:32am UTC](https://discuss.elastic.co/t/can-a-child-document-have-multiple-parents/6407 "2015-12-14T01:32:36Z")
Hey guys. In a parent-child relationship, can a child have multiple parents? If not, is the only workaround to create multiple copies of the child, once for each of its parents? Thanks, Nick --- ## [Time (y-axis) vs Date (x-axis ) Visualize](https://discuss.elastic.co/t/time-y-axis-vs-date-x-axis-visualize/231413)
**Author:** [@srajus](https://discuss.elastic.co/u/srajus)\ **Replies:** 4\ **Last updated:** [May 7, 2020, 5:23pm UTC](https://discuss.elastic.co/t/time-y-axis-vs-date-x-axis-visualize/231413 "2020-05-07T17:23:09Z")
Hi All , I am planning to create a Dashboard for report monitoring . i need to compare the completion date vs completion time for certain period. i have tried using all the options there is no option gives Time (for E… --- ## [Tracking\_column not found in dataset](https://discuss.elastic.co/t/tracking-column-not-found-in-dataset/99044)
**Author:** [@aliyesami](https://discuss.elastic.co/u/aliyesami)\ **Replies:** 2\ **Last updated:** [November 9, 2017, 4:26pm UTC](https://discuss.elastic.co/t/tracking-column-not-found-in-dataset/99044 "2017-11-09T16:26:51Z")
what does this error means? my lostash load is continuing but keep getting this intermittent messages . I checked the tracking column "TXN\_PROCESS\_DATE" for nulls but it doesn't have any null values and its of date typ… --- ## [Grokparsefailure and don't understand why](https://discuss.elastic.co/t/grokparsefailure-and-dont-understand-why/20751)
**Author:** [@Billy\_F](https://discuss.elastic.co/u/Billy_F)\ **Replies:** 2\ **Last updated:** [November 14, 2014, 5:26pm UTC](https://discuss.elastic.co/t/grokparsefailure-and-dont-understand-why/20751 "2014-11-14T17:26:59Z")
I have a message that is driving me nuts and I don't know how to fix it. For some reason I'm getting a \_grokparsefailure for every one the entries I have for one of our blade enclosures. Everything that I can see sho… --- ## [Algorithm complexity](https://discuss.elastic.co/t/algorithm-complexity/12323)
**Author:** [@irfan\_mir](https://discuss.elastic.co/u/irfan_mir)\ **Replies:** 2\ **Last updated:** [June 8, 2013, 4:51am UTC](https://discuss.elastic.co/t/algorithm-complexity/12323 "2013-06-08T04:51:10Z")
What is the Algorithm (time) complexity of the search function / algorithm in Elastic Search? I was just wondering for my information. Is there a place where I can find this and other facts about Elastic Search ? … --- ## [Configuring the control panel with vega visualization](https://discuss.elastic.co/t/configuring-the-control-panel-with-vega-visualization/156348)
**Author:** [@nyssa](https://discuss.elastic.co/u/nyssa)\ **Replies:** 7\ **Last updated:** [November 13, 2018, 10:47pm UTC](https://discuss.elastic.co/t/configuring-the-control-panel-with-vega-visualization/156348 "2018-11-13T22:47:34Z")
Hello! I am currently working on a dashboard that contains kibana visualizations AND vega visualizations. I would like to configure this dashboard to use the "controls" panel feature https://www.elastic.co/guide/en/kib… --- ## [Syslog additional fields](https://discuss.elastic.co/t/syslog-additional-fields/36389)
**Author:** [@theo.bot](https://discuss.elastic.co/u/theo.bot)\ **Replies:** 7\ **Last updated:** [March 29, 2017, 7:06am UTC](https://discuss.elastic.co/t/syslog-additional-fields/36389 "2017-03-29T07:06:35Z")
Hi We use a default filter for syslog messages, so they get parsed properly. However I wondered if it would be possible to match the message against a secondary pattern and extract new fields from the message: Dec 4 14… --- ## [FSCrawler Question](https://discuss.elastic.co/t/fscrawler-question/75341)
**Author:** [@Vikas\_Mestry](https://discuss.elastic.co/u/Vikas_Mestry)\ **Replies:** 6\ **Last updated:** [February 17, 2017, 6:51pm UTC](https://discuss.elastic.co/t/fscrawler-question/75341 "2017-02-17T18:51:47Z")
Hello, I am trying to use fscrawler, would like to know if the following use case can be achieved using fscrawler. I already have an index / type created with my custom mappings set i am using the ingest-attachment … --- ## [Master node's Elasticsearch sometimes dead while ingested data from filebeat](https://discuss.elastic.co/t/master-nodes-elasticsearch-sometimes-dead-while-ingested-data-from-filebeat/242035)
**Author:** [@Charles\_Yuliansen](https://discuss.elastic.co/u/Charles_Yuliansen)\ **Replies:** 8\ **Last updated:** [July 22, 2020, 6:26am UTC](https://discuss.elastic.co/t/master-nodes-elasticsearch-sometimes-dead-while-ingested-data-from-filebeat/242035 "2020-07-22T06:26:28Z")
I have a cluster with 2 nodes. Master node and data node. Both was fine back then. But it becoming a mess lately, like it is really slow ingesting csv data from filebeat, really slow kibana ui open. These is what it sho… --- ## [How to get Today's log in kibana dev Tools](https://discuss.elastic.co/t/how-to-get-todays-log-in-kibana-dev-tools/195218)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 3\ **Last updated:** [August 14, 2019, 2:54pm UTC](https://discuss.elastic.co/t/how-to-get-todays-log-in-kibana-dev-tools/195218 "2019-08-14T14:54:51Z")
I am using Kibana dev tools to return all lines by using bellow Query in DEV tools, but instead of giving all matches, its gives only dates from when in installed this kibana. GET filebeat-\*/\_search { "query": { "… --- ## [Deleting a field from the index pattern page](https://discuss.elastic.co/t/deleting-a-field-from-the-index-pattern-page/105204)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 1\ **Last updated:** [October 25, 2017, 1:35pm UTC](https://discuss.elastic.co/t/deleting-a-field-from-the-index-pattern-page/105204 "2017-10-25T13:35:56Z")
How to delete a field from Kibana--\>Management--\> Index Patterns page? I see that a field is not indexed and is present in the Fields listing. Also is not part of the index mapping template. --- ## [How can I group similar message in visualization](https://discuss.elastic.co/t/how-can-i-group-similar-message-in-visualization/240668)
**Author:** [@Fedir\_Yatseta](https://discuss.elastic.co/u/Fedir_Yatseta)\ **Replies:** 2\ **Last updated:** [July 29, 2020, 8:54am UTC](https://discuss.elastic.co/t/how-can-i-group-similar-message-in-visualization/240668 "2020-07-29T08:54:02Z")
I can not understand how to group similar message in visualisation, i have field "message" in and why in field don't have message . I want to do group message, I get message with time, it time different, me need divi… --- ## [Kibana does not recognize the @timestamp field as a time filter](https://discuss.elastic.co/t/kibana-does-not-recognize-the-timestamp-field-as-a-time-filter/325404)
**Author:** [@Alvik173](https://discuss.elastic.co/u/Alvik173)\ **Replies:** 4\ **Last updated:** [February 15, 2023, 9:27pm UTC](https://discuss.elastic.co/t/kibana-does-not-recognize-the-timestamp-field-as-a-time-filter/325404 "2023-02-15T21:27:07Z")
Kibana (7.17.8) does not seem to recognize the @timestamp field in my index as a time field. The symptoms are as follows. In Discover, the "Show dates" box on the top right is missing The time series chart above the D… --- ## [How can i configure other langages in Kibana](https://discuss.elastic.co/t/how-can-i-configure-other-langages-in-kibana/185135)
**Author:** [@abka](https://discuss.elastic.co/u/abka)\ **Replies:** 3\ **Last updated:** [June 11, 2019, 2:01pm UTC](https://discuss.elastic.co/t/how-can-i-configure-other-langages-in-kibana/185135 "2019-06-11T14:01:37Z")
Hello, I would like to know what langages are currently supported by Kibana ( in Kibana UI ), and how to configure Kibana to display its menus in a specific langage. Is elastic working on integration of more and more l… --- ## [Login is currently disabled because the license could not be determined](https://discuss.elastic.co/t/login-is-currently-disabled-because-the-license-could-not-be-determined/56935)
**Author:** [@dude04](https://discuss.elastic.co/u/dude04)\ **Replies:** 1\ **Last updated:** [August 3, 2016, 2:03am UTC](https://discuss.elastic.co/t/login-is-currently-disabled-because-the-license-could-not-be-determined/56935 "2016-08-03T02:03:10Z")
hi all, i followed these instructions: https://www.elastic.co/guide/en/x-pack/v5.0.0-alpha4-docs/installing-xpack.html#xpack-enabling to install x-pack receive the error: Login is currently disabled because the lice… --- ## [Audit log study](https://discuss.elastic.co/t/audit-log-study/167613)
**Author:** [@Elango-mas](https://discuss.elastic.co/u/Elango-mas)\ **Replies:** 8\ **Last updated:** [February 11, 2019, 10:52am UTC](https://discuss.elastic.co/t/audit-log-study/167613 "2019-02-11T10:52:40Z")
Hi All, Elasticsearch 6.2.3 , I am doing a study on the audit log (\\_access.log) what details are registered when an action is done. I don't see any any different in the access or syslog logs when I chang… --- ## [Saving filters with visualizations and dashboards?](https://discuss.elastic.co/t/saving-filters-with-visualizations-and-dashboards/173361)
**Author:** [@dpr](https://discuss.elastic.co/u/dpr)\ **Replies:** 2\ **Last updated:** [March 22, 2019, 3:11pm UTC](https://discuss.elastic.co/t/saving-filters-with-visualizations-and-dashboards/173361 "2019-03-22T15:11:28Z")
Hi there! Sorry for the newbie question.... I've got a visualization that shows computer memory usage over the past 24 hours. I'd like to build a dashboard with 10 of these visualizations on it, each filtered for a di… --- ## [Apparent scroll timeout error](https://discuss.elastic.co/t/apparent-scroll-timeout-error/4440)
**Author:** [@Grant\_Rodgers](https://discuss.elastic.co/u/Grant_Rodgers)\ **Replies:** 6\ **Last updated:** [May 19, 2011, 9:38pm UTC](https://discuss.elastic.co/t/apparent-scroll-timeout-error/4440 "2011-05-19T21:38:32Z")
I'm getting this error when scrolling: {"error":"ReduceSearchPhaseException\[Failed to execute phase \[fetch\], \[reduce\] ; shardFailures {SearchContextMissingException\[No search context found for id \[353389\]\]}{RemoteTr… --- ## [Elasticsearch failed immediately](https://discuss.elastic.co/t/elasticsearch-failed-immediately/196777)
**Author:** [@rvb\_n](https://discuss.elastic.co/u/rvb_n)\ **Replies:** 1\ **Last updated:** [August 26, 2019, 2:02pm UTC](https://discuss.elastic.co/t/elasticsearch-failed-immediately/196777 "2019-08-26T14:02:19Z")
\[6:49 PM\] Keerthi B R org.elasticsearch.bootstrap.StartupException: java.lang.IllegalStateException: cannot downgrade a node from version \[7.3.1\] to version \[7.3.0\] at org.elasticsearch.bootstrap.Elasticsearch.init(Ela… --- ## [Change field mapping?](https://discuss.elastic.co/t/change-field-mapping/33723)
**Author:** [@Mathias\_Adler\_2](https://discuss.elastic.co/u/Mathias_Adler_2)\ **Replies:** 5\ **Last updated:** [November 5, 2015, 7:21am UTC](https://discuss.elastic.co/t/change-field-mapping/33723 "2015-11-05T07:21:34Z")
Hi, I have a field "fieldA" that was correctly mapped as a string but the source data then changed format from string to a JSON format. Now "fieldA" displays the JSON data as a string which is no good. As I understand yo… --- ## [Filebeat error while setting up dashboard](https://discuss.elastic.co/t/filebeat-error-while-setting-up-dashboard/113263)
**Author:** [@syed](https://discuss.elastic.co/u/syed)\ **Replies:** 6\ **Last updated:** [January 3, 2018, 9:56am UTC](https://discuss.elastic.co/t/filebeat-error-while-setting-up-dashboard/113263 "2018-01-03T09:56:36Z")
Dear Team, we are facing an issue while setting up the dasboard on the beat server below is the error \[elastic@wapinprjb102 filebeat-6.0.0-linux-x86\_64\]$ ./filebeat setup --dashboards Exiting: Error importing Kibana … --- ## [Sql access query not working via curl](https://discuss.elastic.co/t/sql-access-query-not-working-via-curl/216195)
**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\ **Replies:** 8\ **Last updated:** [January 31, 2020, 10:55am UTC](https://discuss.elastic.co/t/sql-access-query-not-working-via-curl/216195 "2020-01-31T10:55:24Z")
we have 6.5 elk . and in dev tools following query works fine POST /\_xpack/sql?format=txt { "query": "select "@timestamp" from "mbeat-2020.01.23" where "@timestamp" \>CAST('2020-01-23T05:00:00Z' AS TIMESTAMP)" } but… --- ## [Exact Sub-String Match | ElasticSearch](https://discuss.elastic.co/t/exact-sub-string-match-elasticsearch/207279)
**Author:** [@Soberwolf](https://discuss.elastic.co/u/Soberwolf)\ **Replies:** 3\ **Last updated:** [November 11, 2019, 9:05am UTC](https://discuss.elastic.co/t/exact-sub-string-match-elasticsearch/207279 "2019-11-11T09:05:26Z")
We are migrating our search strategy, from database to ElasticSearch. During this we are in need to preserve the existing functionality of partially searching a field similar the SQL query below (including whitespaces): … --- ## [900000ms timeout during shard recovery](https://discuss.elastic.co/t/900000ms-timeout-during-shard-recovery/36916)
**Author:** [@zombie101](https://discuss.elastic.co/u/zombie101)\ **Replies:** 5\ **Last updated:** [December 15, 2015, 5:50pm UTC](https://discuss.elastic.co/t/900000ms-timeout-during-shard-recovery/36916 "2015-12-15T17:50:53Z")
Hi -- I am having significant problems with my small ES cluster. I'll accept that the problems are likely with my set up and not ES \[:smile:\] but I am on the verge of giving up.... \[:frowning:\] One problem I am seeing… --- ## [\[Solved\] How to query in kibana for a column name having space in it](https://discuss.elastic.co/t/solved-how-to-query-in-kibana-for-a-column-name-having-space-in-it/36618)
**Author:** [@ppatnaik](https://discuss.elastic.co/u/ppatnaik)\ **Replies:** 1\ **Last updated:** [December 8, 2015, 10:53am UTC](https://discuss.elastic.co/t/solved-how-to-query-in-kibana-for-a-column-name-having-space-in-it/36618 "2015-12-08T10:53:52Z")
Hello all, In my documents I have a column with space in it. e.g. current city. How can I create a query in kibana discover tab which will access this field in my data. I tried the following and nothing seems to be w… --- ## [How can I put together a case-insensitive analyzer for tokens?](https://discuss.elastic.co/t/how-can-i-put-together-a-case-insensitive-analyzer-for-tokens/14471)
**Author:** [@pulkitsinghal](https://discuss.elastic.co/u/pulkitsinghal)\ **Replies:** 3\ **Last updated:** [November 19, 2013, 11:48pm UTC](https://discuss.elastic.co/t/how-can-i-put-together-a-case-insensitive-analyzer-for-tokens/14471 "2013-11-19T23:48:58Z")
My input tokens are like: abcd-123 ABCD-123 abCD-123 Right now I don't analyze them at all but that comes back to bite me if someone searches for them with the wrong case-sensitivity. So I want to use or put t… --- ## [Will there eventually be alpine-based docker images for Logstash 6.x?](https://discuss.elastic.co/t/will-there-eventually-be-alpine-based-docker-images-for-logstash-6-x/163623)
**Author:** [@Jim\_Hurne](https://discuss.elastic.co/u/Jim_Hurne)\ **Replies:** 4\ **Last updated:** [January 11, 2019, 1:27am UTC](https://discuss.elastic.co/t/will-there-eventually-be-alpine-based-docker-images-for-logstash-6-x/163623 "2019-01-11T01:27:26Z")
I was looking at the available Logstash docker images and it looks like there are alpine-based versions available for the 5.x version tree, but not for the 6.x version tree. Are there plans to make Alpine versions availa… --- ## [My Logstash is not receiving any data from Filebeat, its just listening to the port](https://discuss.elastic.co/t/my-logstash-is-not-receiving-any-data-from-filebeat-its-just-listening-to-the-port/191370)
**Author:** [@irobot678](https://discuss.elastic.co/u/irobot678)\ **Replies:** 5\ **Last updated:** [July 22, 2019, 9:26am UTC](https://discuss.elastic.co/t/my-logstash-is-not-receiving-any-data-from-filebeat-its-just-listening-to-the-port/191370 "2019-07-22T09:26:28Z")
HI, I am using elk stack (elastic , logstash , kibana) version : 6.8.0 in ubuntu 14.04. when i am trying to send logs from filebeat to logstash there is no error but my logstash is just listening to the port and its n… --- ## [Parse Exchange Message tracking logs via Dissect filebeat processor](https://discuss.elastic.co/t/parse-exchange-message-tracking-logs-via-dissect-filebeat-processor/293445)
**Author:** [@a.gavric](https://discuss.elastic.co/u/a.gavric)\ **Replies:** 8\ **Last updated:** [January 4, 2022, 2:06pm UTC](https://discuss.elastic.co/t/parse-exchange-message-tracking-logs-via-dissect-filebeat-processor/293445 "2022-01-04T14:06:47Z")
Hello everyone i have been trying to ingest and parse Exchange message tracking logs via filebeat dissect processor to generate fields i need from the log rather than the beat dumping the entire log into the message fiel… --- ## [AWS ELK : Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::ConfigurationError"](https://discuss.elastic.co/t/aws-elk-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/213691)
**Author:** [@gyana\_nayak](https://discuss.elastic.co/u/gyana_nayak)\ **Replies:** 2\ **Last updated:** [January 3, 2020, 12:52pm UTC](https://discuss.elastic.co/t/aws-elk-failed-to-execute-action-action-logstash-create-pipeline-id-main-exception-logstash-configurationerror/213691 "2020-01-03T12:52:20Z")
Hi All, Getting LogStash::ConfigurationError in AWS ELK environment. below is my logstash file input { file { type =\> "audit" path =\> \["/var/log/tomcat8/\*\*/\*-audit.log"\] start… --- ## [Dec 23th, 2019 \[FR\] \[Certification\] 5 choses que j'aurais aimé apprendre du Père Noël avant de passer la certification Elastic Engineer](https://discuss.elastic.co/t/dec-23th-2019-fr-certification-5-choses-que-jaurais-aime-apprendre-du-pere-noel-avant-de-passer-la-certification-elastic-engineer/212079)
**Author:** [@Melvyn](https://discuss.elastic.co/u/Melvyn)\ **Replies:** 0\ **Last updated:** [December 23, 2019, 8:00am UTC](https://discuss.elastic.co/t/dec-23th-2019-fr-certification-5-choses-que-jaurais-aime-apprendre-du-pere-noel-avant-de-passer-la-certification-elastic-engineer/212079 "2019-12-23T08:00:00Z")
Bien que j’adore écrire des articles techniques, aujourd’hui je vais plutôt essayer de démystifier un sujet : la certification "Elastic Engineer Certified". Comment réussir la certification ? C’est probablement la qu… --- ## [New pfSense integration added to Github, is there's any planned support for Elastic Agent FreeBSD OS?](https://discuss.elastic.co/t/new-pfsense-integration-added-to-github-is-theres-any-planned-support-for-elastic-agent-freebsd-os/286970)
**Author:** [@eldadpuzach](https://discuss.elastic.co/u/eldadpuzach)\ **Replies:** 6\ **Last updated:** [October 23, 2021, 2:08pm UTC](https://discuss.elastic.co/t/new-pfsense-integration-added-to-github-is-theres-any-planned-support-for-elastic-agent-freebsd-os/286970 "2021-10-23T14:08:09Z")
Hello Elastic team:) is it possible to utilize the new pfSense integration to ship logs from PfSense to Elastic Cloud? AFAIK there's no Elastic Agent available for FreeBSD OS.. tnx🙏 --- ## [Simple Math Functions with Ruby in Logstash 5.3](https://discuss.elastic.co/t/simple-math-functions-with-ruby-in-logstash-5-3/85162)
**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\ **Replies:** 2\ **Last updated:** [May 11, 2017, 5:43pm UTC](https://discuss.elastic.co/t/simple-math-functions-with-ruby-in-logstash-5-3/85162 "2017-05-11T17:43:05Z")
I'm trying to do simple math calculations, e.g. convert a number to a decimal such as 93 =\> 0.93. I've looked around and can't find the proper syntax to do this. Furthermore, I don't get any warnings in the logs, just … --- ## [How much data in GB is being ingested daily in our Elastic Cloud?](https://discuss.elastic.co/t/how-much-data-in-gb-is-being-ingested-daily-in-our-elastic-cloud/316905)
**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\ **Replies:** 2\ **Last updated:** [October 19, 2022, 5:24am UTC](https://discuss.elastic.co/t/how-much-data-in-gb-is-being-ingested-daily-in-our-elastic-cloud/316905 "2022-10-19T05:24:58Z")
Hello, Where to see how much data in GB is being ingested daily to our Hot nodes in our Elastic Cloud solution? Kind regards, Dane --- ## [Simple example for using curl to log a message to Logstash using the HTTP input plugin?](https://discuss.elastic.co/t/simple-example-for-using-curl-to-log-a-message-to-logstash-using-the-http-input-plugin/327964)
**Author:** [@jba](https://discuss.elastic.co/u/jba)\ **Replies:** 1\ **Last updated:** [March 17, 2023, 11:03pm UTC](https://discuss.elastic.co/t/simple-example-for-using-curl-to-log-a-message-to-logstash-using-the-http-input-plugin/327964 "2023-03-17T23:03:39Z")
I am trying to use curl to to log something, just something, to an index, any index, on a ELK 8.4.1 cluster. On my Logstash node I have the following as part of the configuration in the conf.d directory: input { beat… --- ## [ElasticsearchStatusException\[Unable to parse response body\] \[HTTP/1.1 301 Moved Permanently\]](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-http-1-1-301-moved-permanently/314888)
**Author:** [@Jai\_Tripathi](https://discuss.elastic.co/u/Jai_Tripathi)\ **Replies:** 3\ **Last updated:** [September 21, 2022, 8:13pm UTC](https://discuss.elastic.co/t/elasticsearchstatusexception-unable-to-parse-response-body-http-1-1-301-moved-permanently/314888 "2022-09-21T20:13:59Z")
Hello Everyone, Key Points: I am able to get response from Elastic search (deployed on AWS) using postman at my machine. However when I am trying to use elasticsearch API to get the response, I am getting Elasticsearc… --- ## [Logstash multiple json field](https://discuss.elastic.co/t/logstash-multiple-json-field/232138)
**Author:** [@ohoroyoi](https://discuss.elastic.co/u/ohoroyoi)\ **Replies:** 5\ **Last updated:** [May 13, 2020, 2:30pm UTC](https://discuss.elastic.co/t/logstash-multiple-json-field/232138 "2020-05-13T14:30:28Z")
I want to send postgres data to elasticsearch using logstash. I have json column more than one in postgres table. for example, continent and country column are both json type. then, How can I configure filter option? … --- ## [How to add Alphabetical Sorting](https://discuss.elastic.co/t/how-to-add-alphabetical-sorting/45427)
**Author:** [@Shivendra.Singh](https://discuss.elastic.co/u/Shivendra.Singh)\ **Replies:** 5\ **Last updated:** [March 28, 2016, 5:58am UTC](https://discuss.elastic.co/t/how-to-add-alphabetical-sorting/45427 "2016-03-28T05:58:51Z")
Hi Team, I am quite new in elastic search and trying to query a data where i need to add filters based on fields where sorting will also be there which will be in A-Z / Z-A sorting. here is the request { "query… --- ## [Using a Terms Query via Elastic.Clients.Elasticsearch 8.1.1 .NET](https://discuss.elastic.co/t/using-a-terms-query-via-elastic-clients-elasticsearch-8-1-1-net/332817)
**Author:** [@felix-stnr](https://discuss.elastic.co/u/felix-stnr)\ **Replies:** 2\ **Last updated:** [May 11, 2023, 2:20pm UTC](https://discuss.elastic.co/t/using-a-terms-query-via-elastic-clients-elasticsearch-8-1-1-net/332817 "2023-05-11T14:20:16Z")
I am currently trying to write a Terms Query via the Elastic.Clients.Elasticsearch 8.1.1 .NET client. To be more precise, I want to write following query in C#: GET persons/\_search { "query": { "bool": { "mu… --- ## [SearchParseException\[failed to parse search source \[\_na\_\]\];](https://discuss.elastic.co/t/searchparseexception-failed-to-parse-search-source--na-/56596)
**Author:** [@usego](https://discuss.elastic.co/u/usego)\ **Replies:** 2\ **Last updated:** [July 29, 2016, 9:14am UTC](https://discuss.elastic.co/t/searchparseexception-failed-to-parse-search-source--na-/56596 "2016-07-29T09:14:40Z")
Could you point please me in the right direction. I have a small cluster with 2 nodes \[MX203\]\[10.40.0.203:9300\] and \[MX105\]\[10.40.0.105:9300\] . Periodically logs are overwhelmed with tons of messages like \[2016-07-28 1… --- ## [How to hold a state in Logstash?](https://discuss.elastic.co/t/how-to-hold-a-state-in-logstash/120887)
**Author:** [@daved](https://discuss.elastic.co/u/daved)\ **Replies:** 6\ **Last updated:** [February 23, 2018, 3:29pm UTC](https://discuss.elastic.co/t/how-to-hold-a-state-in-logstash/120887 "2018-02-23T15:29:22Z")
Hi, I'm trying to apply a state (with a field in ES) to subsequent log lines after seeing \[message\] =~ "foo" but have not had luck using class variables with the ruby filter (@@classVariable) as described in Keeping glo… --- ## [【Elasticsearch】エラー failed to parse field \[host\] of type \[text\]](https://discuss.elastic.co/t/elasticsearch-failed-to-parse-field-host-of-type-text/201714)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [October 1, 2019, 7:52am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-parse-field-host-of-type-text/201714 "2019-10-01T07:52:09Z")
お世話になります。 現在Filebeat→Logstash→Elasticsearch(ingest node)の連携を行っています。 バージョン Filebeat：7.3 Logstash：7.3 Elasticsearch：7.3 Filebeatのinputログ 1286536308.779 180 192.168.0.224 TCP\_MISS/200 411 GET http://liveupdate.sym… --- ## [Best URL for load balancer HTTP health check](https://discuss.elastic.co/t/best-url-for-load-balancer-http-health-check/19272)
**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\ **Replies:** 1\ **Last updated:** [August 13, 2014, 10:13pm UTC](https://discuss.elastic.co/t/best-url-for-load-balancer-http-health-check/19272 "2014-08-13T22:13:56Z")
With a standard LB in front of an N-node cluster, what's the best URL in the ES API to check the health of a particular node (so as to know to remove it at least temporarily). There is the node info API: curl -… --- ## [Bulk Ingester flush timing issues with wait\_for Refresh Policy](https://discuss.elastic.co/t/bulk-ingester-flush-timing-issues-with-wait-for-refresh-policy/376122)
**Author:** [@mattar](https://discuss.elastic.co/u/mattar)\ **Replies:** 5\ **Last updated:** [March 21, 2025, 9:47am UTC](https://discuss.elastic.co/t/bulk-ingester-flush-timing-issues-with-wait-for-refresh-policy/376122 "2025-03-21T09:47:24Z")
Hello everyone, I’m working with the bulk ingester in Elastic 8.15.3 and encountering some timing issues with flush. I configured the bulk ingester with a refresh policy set to wait\_for in the global settings, expecting… --- ## [Courier Fetch: 70 of 80 shards failed](https://discuss.elastic.co/t/courier-fetch-70-of-80-shards-failed/80115)
**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Replies:** 2\ **Last updated:** [March 27, 2017, 10:48am UTC](https://discuss.elastic.co/t/courier-fetch-70-of-80-shards-failed/80115 "2017-03-27T10:48:27Z")
i have added multiple log in logstash conf if i refresh kibana4 showing this Courier Fetch: 70 of 80 shards failed. for this i searched in google they told to add this line in elasticsearch.yml threadpool.search.type:… --- ## [Elasticsearch query performance using filter query](https://discuss.elastic.co/t/elasticsearch-query-performance-using-filter-query/109889)
**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\ **Replies:** 3\ **Last updated:** [December 1, 2017, 8:59am UTC](https://discuss.elastic.co/t/elasticsearch-query-performance-using-filter-query/109889 "2017-12-01T08:59:05Z")
I have an index upon which I run these two types of queries and gives me same result. I want to know which one can perform better as on production there would be millions of searches performed per day. EDIT - Elasticsea… --- ## [Fixing Debian Repository?](https://discuss.elastic.co/t/fixing-debian-repository/51097)
**Author:** [@i5513](https://discuss.elastic.co/u/i5513)\ **Replies:** 5\ **Last updated:** [July 10, 2016, 3:26pm UTC](https://discuss.elastic.co/t/fixing-debian-repository/51097 "2016-07-10T15:26:16Z")
Hello, When on Debian sid , apt update: W: http://packages.elastic.co/elasticsearch/2.x/debian/dists/stable/Release.gpg: Signature by key 46095ACC8548582C1A2699A9D27D666CD88E42B4 uses weak digest algorithm (SHA1) Y… [Previous page](https://discuss.elastic.co/top.md?page=492&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=494&per_page=50&period=all)