# Top

**URL:** https://discuss.elastic.co/top.md?page=500&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 501

---

## [Timelion filter](https://discuss.elastic.co/t/timelion-filter/75787)

<div class="topic-metadata">

**Author:** [@Tomaz\_Bratanic](https://discuss.elastic.co/u/Tomaz_Bratanic)\
**Replies:** 1\
**Last updated:** [February 20, 2017, 7:57pm UTC](https://discuss.elastic.co/t/timelion-filter/75787 "2017-02-20T19:57:18Z")

</div>

I have created my timelion visualization using for month over month % of new users .es(index=index,timefield=time,metric=cardinality:company) .divide(.es(index=index,timefield=time,metric=cardinality:company,offset=-1…

---

## [Fleet Server status stuck at updating, but seems to be working normally?!](https://discuss.elastic.co/t/fleet-server-status-stuck-at-updating-but-seems-to-be-working-normally/318193)

<div class="topic-metadata">

**Author:** [@martinm76](https://discuss.elastic.co/u/martinm76)\
**Replies:** 4\
**Last updated:** [November 17, 2022, 10:20am UTC](https://discuss.elastic.co/t/fleet-server-status-stuck-at-updating-but-seems-to-be-working-normally/318193 "2022-11-17T10:20:23Z")

</div>

Hello there. I recently updated a client system from 8.4.3 to 8.5.0. Everything was looking good, after the typical reindexing of shards until they were green or at least yellow. I then went to upgrade the Fleet Server…

---

## [How to find or query duplicate offsets?](https://discuss.elastic.co/t/how-to-find-or-query-duplicate-offsets/314456)

<div class="topic-metadata">

**Author:** [@connectgeeks](https://discuss.elastic.co/u/connectgeeks)\
**Replies:** 6\
**Last updated:** [September 19, 2022, 1:04pm UTC](https://discuss.elastic.co/t/how-to-find-or-query-duplicate-offsets/314456 "2022-09-19T13:04:33Z")

</div>

I’m having duplicate records in my indexes. How can I find list of duplicate records ? Duplicate records have same offset, can you suggest the query to find list of offset with more than one count ? Or any other way to…

---

## [Adding a node to a cluster](https://discuss.elastic.co/t/adding-a-node-to-a-cluster/173958)

<div class="topic-metadata">

**Author:** [@sph18](https://discuss.elastic.co/u/sph18)\
**Replies:** 6\
**Last updated:** [March 27, 2019, 8:58am UTC](https://discuss.elastic.co/t/adding-a-node-to-a-cluster/173958 "2019-03-27T08:58:11Z")

</div>

Hi all, I have a graylog server setup as a single host. Version are: Host - Ubuntu 18.04 Graylog - 3.0.0-12 Java - 1.8.0\_191 Elasticsearch - 6.6.2" MongoDB - 4.0.6 Apache - 2.4.29 So I'm I want to add a node the …

---

## [Will increasing the no. shards in a large cluster affect the query performance?](https://discuss.elastic.co/t/will-increasing-the-no-shards-in-a-large-cluster-affect-the-query-performance/44808)

<div class="topic-metadata">

**Author:** [@dany](https://discuss.elastic.co/u/dany)\
**Replies:** 6\
**Last updated:** [March 19, 2016, 6:19am UTC](https://discuss.elastic.co/t/will-increasing-the-no-shards-in-a-large-cluster-affect-the-query-performance/44808 "2016-03-19T06:19:59Z")

</div>

I have around 21 nodes cluster\[18 data nodes\]. I have 9 shards and 1 replica for each index. Whenever there is a network issue\[For example 3 data node goes down\] I get a huge performance drop because of shards relocatio…

---

## [SSL-enabled Beat ssl\_verify\_mode =\> "none" not working as expected](https://discuss.elastic.co/t/ssl-enabled-beat-ssl-verify-mode-none-not-working-as-expected/220023)

<div class="topic-metadata">

**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\
**Replies:** 2\
**Last updated:** [February 19, 2020, 8:05pm UTC](https://discuss.elastic.co/t/ssl-enabled-beat-ssl-verify-mode-none-not-working-as-expected/220023 "2020-02-19T20:05:17Z")

</div>

TL;DR Using ssl\_verify\_mode =\> "none" in input.beats not functioning as expected; should allow unverified SSL connections, but doesn't. The rest of the story... I'm using SSL-enabled input.beat in my logstash.conf, whic…

---

## [Performance Benefits to using Stored Scripts?](https://discuss.elastic.co/t/performance-benefits-to-using-stored-scripts/242556)

<div class="topic-metadata">

**Author:** [@micah.williamson](https://discuss.elastic.co/u/micah.williamson)\
**Replies:** 1\
**Last updated:** [July 24, 2020, 7:29pm UTC](https://discuss.elastic.co/t/performance-benefits-to-using-stored-scripts/242556 "2020-07-24T19:29:40Z")

</div>

I haven't seen anything in the documentation that would suggest using stored scripts are better for performance, but intuitively I'd think running a stored script many times would perform better than running an inline sc…

---

## [Scroll Questions](https://discuss.elastic.co/t/scroll-questions/18163)

<div class="topic-metadata">

**Author:** [@mooky](https://discuss.elastic.co/u/mooky)\
**Replies:** 6\
**Last updated:** [June 23, 2016, 4:27pm UTC](https://discuss.elastic.co/t/scroll-questions/18163 "2016-06-23T16:27:52Z")

</div>

Having hit a bunch of issues using scroll, I thought I better improve my understanding of how scroll is supposed to be used (and how its not supposed to be used). 1. Does it make sense to execute a search req…

---

## [Java Client ingesting Object Fields](https://discuss.elastic.co/t/java-client-ingesting-object-fields/45461)

<div class="topic-metadata">

**Author:** [@Tom\_Mahy](https://discuss.elastic.co/u/Tom_Mahy)\
**Replies:** 6\
**Last updated:** [March 30, 2016, 3:04pm UTC](https://discuss.elastic.co/t/java-client-ingesting-object-fields/45461 "2016-03-30T15:04:36Z")

</div>

Hello, I am unable to ingest content in an object field with the java client 2.2.0. Please note that i have the same problem for nested objects but for String/long/arrays etc, it all works Field creation mappingSour…

---

## [APM Agent remote configuration error](https://discuss.elastic.co/t/apm-agent-remote-configuration-error/231545)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 7\
**Last updated:** [May 12, 2020, 9:57am UTC](https://discuss.elastic.co/t/apm-agent-remote-configuration-error/231545 "2020-05-12T09:57:27Z")

</div>

Hello, I have APM version 7.6.2 APM succesfully brings me the log info in kibana as the image show below; Nevertheless, I receive the following error when navigating in APM settings in kibana The critical parts o…

---

## [Timelion error \[illegal\_argument\_exception\] field name is null or empty](https://discuss.elastic.co/t/timelion-error-illegal-argument-exception-field-name-is-null-or-empty/150483)

<div class="topic-metadata">

**Author:** [@cobra](https://discuss.elastic.co/u/cobra)\
**Replies:** 7\
**Last updated:** [October 13, 2018, 7:14am UTC](https://discuss.elastic.co/t/timelion-error-illegal-argument-exception-field-name-is-null-or-empty/150483 "2018-10-13T07:14:40Z")

</div>

Version: 6.3.1 I get this error on clicking the timelion tab: I have a second es cluster (v 6.3.1 again) where timelion works fine. Please help

---

## [Unexpected character ('\<' (code 60))](https://discuss.elastic.co/t/unexpected-character-code-60/138279)

<div class="topic-metadata">

**Author:** [@Pixarjunkie](https://discuss.elastic.co/u/Pixarjunkie)\
**Replies:** 3\
**Last updated:** [July 3, 2018, 3:27pm UTC](https://discuss.elastic.co/t/unexpected-character-code-60/138279 "2018-07-03T15:27:39Z")

</div>

Hi, I'm new to using elasticsearch/logstash and I am trying to trouble shoot an error (this is also my first post here so apologies if I miss something. I have created a logstash\_test.config file: \> input { \> …

---

## [Send Windows Log to Logstash Server](https://discuss.elastic.co/t/send-windows-log-to-logstash-server/560)

<div class="topic-metadata">

**Author:** [@SJ04](https://discuss.elastic.co/u/SJ04)\
**Replies:** 3\
**Last updated:** [May 12, 2015, 6:01pm UTC](https://discuss.elastic.co/t/send-windows-log-to-logstash-server/560 "2015-05-12T18:01:29Z")

</div>

Hi there! I know, this topic have been discussed many time before on this Platform, But i still have some issue with Receving Log from the Windows Platform to Logstash Server. Logstash Server: Ubuntu. i have tried …

---

## [How to return results with ctx.payload](https://discuss.elastic.co/t/how-to-return-results-with-ctx-payload/253768)

<div class="topic-metadata">

**Author:** [@johno79](https://discuss.elastic.co/u/johno79)\
**Replies:** 5\
**Last updated:** [November 4, 2020, 1:38am UTC](https://discuss.elastic.co/t/how-to-return-results-with-ctx-payload/253768 "2020-11-04T01:38:55Z")

</div>

While creating a Kibana Alert and Trigger I have the following results from an extraction query response...and wondering how to properly use ctx.payload in the message(sending via webhook in slack) to return the Hospital…

---

## [Kibana 5.5.0 Can't get region map to work](https://discuss.elastic.co/t/kibana-5-5-0-cant-get-region-map-to-work/93560)

<div class="topic-metadata">

**Author:** [@Rikkemannen](https://discuss.elastic.co/u/Rikkemannen)\
**Replies:** 6\
**Last updated:** [August 2, 2017, 12:16am UTC](https://discuss.elastic.co/t/kibana-5-5-0-cant-get-region-map-to-work/93560 "2017-08-02T00:16:45Z")

</div>

Hi, I'm trying to visualize my own geojson layer in the new region map visualization, I've tried for quite a while now but no luck. I am hosting my geojson file from my own local nginx webserver. I can reach and d…

---

## [Enable 2 different filebeat modules & send to different index name](https://discuss.elastic.co/t/enable-2-different-filebeat-modules-send-to-different-index-name/187733)

<div class="topic-metadata">

**Author:** [@TsuWeiQuan](https://discuss.elastic.co/u/TsuWeiQuan)\
**Replies:** 4\
**Last updated:** [June 28, 2019, 11:04am UTC](https://discuss.elastic.co/t/enable-2-different-filebeat-modules-send-to-different-index-name/187733 "2019-06-28T11:04:49Z")

</div>

Hello, I am trying to use a single filebeat, enabled with system & apache module to send to elasticsearch. I would want to have a system index and a apache index. How can i do this? ILM is enabled for me and for a sin…

---

## [Synonyms result scoring](https://discuss.elastic.co/t/synonyms-result-scoring/152523)

<div class="topic-metadata">

**Author:** [@Bilal](https://discuss.elastic.co/u/Bilal)\
**Replies:** 4\
**Last updated:** [November 10, 2018, 2:02pm UTC](https://discuss.elastic.co/t/synonyms-result-scoring/152523 "2018-11-10T14:02:53Z")

</div>

I'm reading this article about Patterns for Synonyms in Elasticsearch and I have some questions about the results that I got, here is the mappings and settings I used: PUT wheat\_syn { "mappings": { "wheat": { …

---

## [Better to use 3 master+data nodes or 3 master + 2 data nodes?](https://discuss.elastic.co/t/better-to-use-3-master-data-nodes-or-3-master-2-data-nodes/109515)

<div class="topic-metadata">

**Author:** [@vaughnd](https://discuss.elastic.co/u/vaughnd)\
**Replies:** 4\
**Last updated:** [November 30, 2017, 11:44am UTC](https://discuss.elastic.co/t/better-to-use-3-master-data-nodes-or-3-master-2-data-nodes/109515 "2017-11-30T11:44:51Z")

</div>

Hi, We're running a search engine with two ES clusters. The first "content store" is for the crawled data, logs, stats, and metrics; so it has a heavy write/read and aggregate load. The second "public search" cluster is…

---

## [Connecting Hbase to Elasticsearch](https://discuss.elastic.co/t/connecting-hbase-to-elasticsearch/19719)

<div class="topic-metadata">

**Author:** [@Alex\_Kamil](https://discuss.elastic.co/u/Alex_Kamil)\
**Replies:** 2\
**Last updated:** [February 23, 2017, 6:09am UTC](https://discuss.elastic.co/t/connecting-hbase-to-elasticsearch/19719 "2017-02-23T06:09:14Z")

</div>

I posted step-by-step instructions here on using Apache Hbase/Phoenix with Elasticsearch JDBC River. This might be useful to Elasticsearch users who want to use Hbase as a primary data store, and to Hbase users wh…

---

## [Send FileBeat Logs to Specific Type and Index in Elastic Search](https://discuss.elastic.co/t/send-filebeat-logs-to-specific-type-and-index-in-elastic-search/127838)

<div class="topic-metadata">

**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\
**Replies:** 5\
**Last updated:** [April 12, 2018, 2:49pm UTC](https://discuss.elastic.co/t/send-filebeat-logs-to-specific-type-and-index-in-elastic-search/127838 "2018-04-12T14:49:59Z")

</div>

How can we configure FileBeat to send logs to specific Index and Type defined in Elastic Search, We have created a Mapping Inside an Index and have defined analyzers on the Mapping. But we cannot seem to configure FileB…

---

## [Filebeat doesn't start any harvesters](https://discuss.elastic.co/t/filebeat-doesnt-start-any-harvesters/269099)

<div class="topic-metadata">

**Author:** [@Misha\_Diordienko](https://discuss.elastic.co/u/Misha_Diordienko)\
**Replies:** 2\
**Last updated:** [April 5, 2021, 7:28am UTC](https://discuss.elastic.co/t/filebeat-doesnt-start-any-harvesters/269099 "2021-04-05T07:28:47Z")

</div>

hi, all Debian 10, Filebeat 7.12, filebeat.yml logging.level: info logging.to\_files: true logging.files: path: /var/log/filebeat name: filebeat keepfiles: 2 permissions: 0644 filebeat.inputs: - type: log …

---

## [日本語全文検索について](https://discuss.elastic.co/t/topic/69140)

<div class="topic-metadata">

**Author:** [@tanimoto](https://discuss.elastic.co/u/tanimoto)\
**Replies:** 4\
**Last updated:** [December 26, 2016, 2:59am UTC](https://discuss.elastic.co/t/topic/69140 "2016-12-26T02:59:54Z")

</div>

elasticseachのプラグインkuromojiを使用して、日本語をバラバラに分割し、検索を行っているのですが、 精度がそれほど良くありません。 例 : 一眼 → 一 と 眼 にわかれる \*kuromojiの検索モードを変えても同じ結果です ユーザー辞書の使用も考えたのですが、対象となるキーワードが無限にあるため、あまり現実的ではないと考えています。 ならば、elasticsearchのクエリでキーワード検索する…

---

## [Can we store audio/video data](https://discuss.elastic.co/t/can-we-store-audio-video-data/36625)

<div class="topic-metadata">

**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\
**Replies:** 4\
**Last updated:** [December 9, 2015, 6:36am UTC](https://discuss.elastic.co/t/can-we-store-audio-video-data/36625 "2015-12-09T06:36:51Z")

</div>

Hi, In Hadoop we can store audio, video as well as images. Can we store these in ES???

---

## [Backup of Elasticsearch using velero](https://discuss.elastic.co/t/backup-of-elasticsearch-using-velero/236408)

<div class="topic-metadata">

**Author:** [@Rajashree\_Sekar](https://discuss.elastic.co/u/Rajashree_Sekar)\
**Replies:** 6\
**Last updated:** [June 10, 2020, 4:46pm UTC](https://discuss.elastic.co/t/backup-of-elasticsearch-using-velero/236408 "2020-06-10T16:46:05Z")

</div>

Hi Team, I'm running Elastic search cluster in k8s environment. And I'm using Velero and restic for the backup and restore. But I'm not able to backup the elastic search cluster, as I could not freeze the volume using …

---

## [Elastic search-No plugin loaded issue while installing elastic search](https://discuss.elastic.co/t/elastic-search-no-plugin-loaded-issue-while-installing-elastic-search/67858)

<div class="topic-metadata">

**Author:** [@yam](https://discuss.elastic.co/u/yam)\
**Replies:** 1\
**Last updated:** [December 2, 2016, 1:46pm UTC](https://discuss.elastic.co/t/elastic-search-no-plugin-loaded-issue-while-installing-elastic-search/67858 "2016-12-02T13:46:14Z")

</div>

Dear Team, I am trying to install Elastic search 5.0.0 in windows 10.During installation it shows, no plugins loaded.Also plugins folder is empty after installation.Also i am not able to install x-pack plugin though I h…

---

## [Kibana v7.6.0 CORS seems not work](https://discuss.elastic.co/t/kibana-v7-6-0-cors-seems-not-work/226461)

<div class="topic-metadata">

**Author:** [@lag82](https://discuss.elastic.co/u/lag82)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 12:25pm UTC](https://discuss.elastic.co/t/kibana-v7-6-0-cors-seems-not-work/226461 "2020-04-21T12:25:20Z")

</div>

Hi, I have tried to enable CORS via kibana.yml and elasticsearch.yml but seems not work because my POST request not start yet because previous OPTIONS started from browser to Kibana endpoint, not receive correct headers …

---

## [Grok filter by file path](https://discuss.elastic.co/t/grok-filter-by-file-path/199097)

<div class="topic-metadata">

**Author:** [@BenP](https://discuss.elastic.co/u/BenP)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 9:43am UTC](https://discuss.elastic.co/t/grok-filter-by-file-path/199097 "2019-09-12T09:43:05Z")

</div>

Hello, I'm currently banging my head against the wall trying to make my filters works. My grok patterns are OK but I can't make my conditions to work. The documents are added but there aren't transformed (I can confir…

---

## [Kibana waiting for elasticsearch](https://discuss.elastic.co/t/kibana-waiting-for-elasticsearch/160539)

<div class="topic-metadata">

**Author:** [@Nyuncampy](https://discuss.elastic.co/u/Nyuncampy)\
**Replies:** 2\
**Last updated:** [December 13, 2018, 3:24am UTC](https://discuss.elastic.co/t/kibana-waiting-for-elasticsearch/160539 "2018-12-13T03:24:18Z")

</div>

Hi! I'm using docker-compose to create an ELK stack. When I start the stack and look at the Kibana logs I can see that it just gets stuck waiting for elasticsearch. Log output: \[root@fdesmonitor02 stack-elk\]# docker-co…

---

## [HP ProCurve switch log files not showing](https://discuss.elastic.co/t/hp-procurve-switch-log-files-not-showing/33976)

<div class="topic-metadata">

**Author:** [@Rhrykhz](https://discuss.elastic.co/u/Rhrykhz)\
**Replies:** 2\
**Last updated:** [November 6, 2015, 1:19pm UTC](https://discuss.elastic.co/t/hp-procurve-switch-log-files-not-showing/33976 "2015-11-06T13:19:45Z")

</div>

Hello everyone, I am completely new to Logstash, Kibana and Elasticsearch. However I had no issues setting up the server and forwarding logfiles from Windows and Linux machines. What is giving me a hard time is getting…

---

## [Machine Learning node Pricing](https://discuss.elastic.co/t/machine-learning-node-pricing/350113)

<div class="topic-metadata">

**Author:** [@haopv](https://discuss.elastic.co/u/haopv)\
**Replies:** 1\
**Last updated:** [December 29, 2023, 11:30am UTC](https://discuss.elastic.co/t/machine-learning-node-pricing/350113 "2023-12-29T11:30:59Z")

</div>

Hi Elastic, I have 20 nodes data Elastic in my Cluster on Premises with Basic License, Can I add 2 nodes machine learning for ML Job (Security Rule ML) and pay license for only 2 nodes ML ? If not! What is the way to o…

---

## [\[ANNOUNCEMENT\] logstashbeat released](https://discuss.elastic.co/t/announcement-logstashbeat-released/52342)

<div class="topic-metadata">

**Author:** [@val](https://discuss.elastic.co/u/val)\
**Replies:** 0\
**Last updated:** [June 9, 2016, 2:28pm UTC](https://discuss.elastic.co/t/announcement-logstashbeat-released/52342 "2016-06-09T14:28:21Z")

</div>

Since Logstash 5 now provides a monitoring API, a new community beat called logstashbeat is now available. Logstashbeat will gather stats (events, jvm and process) from a running Logstash instance and ship them to Elasti…

---

## [No APM Server detected. Please make sure it is running and you have updated to 7.0 or higher](https://discuss.elastic.co/t/no-apm-server-detected-please-make-sure-it-is-running-and-you-have-updated-to-7-0-or-higher/267993)

<div class="topic-metadata">

**Author:** [@DGIRI](https://discuss.elastic.co/u/DGIRI)\
**Replies:** 2\
**Last updated:** [March 30, 2021, 10:48am UTC](https://discuss.elastic.co/t/no-apm-server-detected-please-make-sure-it-is-running-and-you-have-updated-to-7-0-or-higher/267993 "2021-03-30T10:48:27Z")

</div>

Hi, I am trying out ElasticSearch, Kibana and APM for the first time and have been following the following installation documentation: https://www.elastic.co/guide/en/elasticsearch/reference/7.11/deb.html#deb-repo htt…

---

## [Pie chart in vega](https://discuss.elastic.co/t/pie-chart-in-vega/260373)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 8\
**Last updated:** [January 11, 2021, 4:10pm UTC](https://discuss.elastic.co/t/pie-chart-in-vega/260373 "2021-01-11T16:10:09Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "A simple pie chart with labels.", "data": { "values": \[ {"category": "a", "value": 4}, {"category": "a", "value": 4},…

---

## [Elasticsearch 7.13 crash - can not start again](https://discuss.elastic.co/t/elasticsearch-7-13-crash-can-not-start-again/277427)

<div class="topic-metadata">

**Author:** [@Vladimir](https://discuss.elastic.co/u/Vladimir)\
**Replies:** 6\
**Last updated:** [July 16, 2021, 11:26am UTC](https://discuss.elastic.co/t/elasticsearch-7-13-crash-can-not-start-again/277427 "2021-07-16T11:26:33Z")

</div>

Hi there, I have Elastic + Kiabana + Logstash + Filebeat installed on Ubuntu 20.04 server. Yesterday everything worked fine together. I happily wrote requests in Kibana console. Today morning I tried to open Kibana but…

---

## [Elastic Cloud Kibana with Single Sign On from Azure Active Directory](https://discuss.elastic.co/t/elastic-cloud-kibana-with-single-sign-on-from-azure-active-directory/228947)

<div class="topic-metadata">

**Author:** [@jpigott](https://discuss.elastic.co/u/jpigott)\
**Replies:** 6\
**Last updated:** [April 22, 2020, 8:39am UTC](https://discuss.elastic.co/t/elastic-cloud-kibana-with-single-sign-on-from-azure-active-directory/228947 "2020-04-22T08:39:27Z")

</div>

Is it possible to use Azure Active Directory with the Elastic Cloud Kibana? I see this other article, but it looks like this is probably on-premises? and If there is a good article to set this up that would be nice…

---

## [Cosine similarity not working in elastic search](https://discuss.elastic.co/t/cosine-similarity-not-working-in-elastic-search/209702)

<div class="topic-metadata">

**Author:** [@Divyanshu\_Pandey](https://discuss.elastic.co/u/Divyanshu_Pandey)\
**Replies:** 4\
**Last updated:** [December 2, 2019, 8:52pm UTC](https://discuss.elastic.co/t/cosine-similarity-not-working-in-elastic-search/209702 "2019-12-02T20:52:21Z")

</div>

This is my my query : script\_query = { "function\_score": { "query" : { "match\_all": {} }, "script\_score": {"script": { "inline": "cosineSimilarity(params.query\_vector, doc\['title\_vector'\]) + 1.0", "params": { "q…

---

## [I need send different logs to different output destination, but why filebeat don't suport?](https://discuss.elastic.co/t/i-need-send-different-logs-to-different-output-destination-but-why-filebeat-dont-suport/158834)

<div class="topic-metadata">

**Author:** [@argb](https://discuss.elastic.co/u/argb)\
**Replies:** 4\
**Last updated:** [November 30, 2018, 9:21pm UTC](https://discuss.elastic.co/t/i-need-send-different-logs-to-different-output-destination-but-why-filebeat-dont-suport/158834 "2018-11-30T21:21:12Z")

</div>

I have many different kinds of logs, such as php system mysql etc, on same server, and i need to send them to different output destinations, it's very common use cases, and it's very import! But WHY can't filebeat supor…

---

## [Using wildcard character in logstash input](https://discuss.elastic.co/t/using-wildcard-character-in-logstash-input/88585)

<div class="topic-metadata">

**Author:** [@jigarpatel13533](https://discuss.elastic.co/u/jigarpatel13533)\
**Replies:** 4\
**Last updated:** [June 14, 2017, 6:34am UTC](https://discuss.elastic.co/t/using-wildcard-character-in-logstash-input/88585 "2017-06-14T06:34:33Z")

</div>

Hi, I am using logstash 2.1 in Windows Server 2008 R2 OS. (Version Corrected) I have some log files at some another server, and I am taking them as input for my logstash. Shared Path : \\\\MIB030065\\share2\\Statoil-logs…

---

## [How force to move to Warm phase](https://discuss.elastic.co/t/how-force-to-move-to-warm-phase/258685)

<div class="topic-metadata">

**Author:** [@Anabella\_Cristaldi](https://discuss.elastic.co/u/Anabella_Cristaldi)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 9:21am UTC](https://discuss.elastic.co/t/how-force-to-move-to-warm-phase/258685 "2020-12-15T09:21:56Z")

</div>

Hi, I have an index in a hot phase, which was completed After n days from roll over the index will enter the warm phase and it will be relocated to the warm node. Is it possible to force the index to move to the warm …

---

## [Trouble parsing multi-line json logs](https://discuss.elastic.co/t/trouble-parsing-multi-line-json-logs/147628)

<div class="topic-metadata">

**Author:** [@kreg](https://discuss.elastic.co/u/kreg)\
**Replies:** 2\
**Last updated:** [September 11, 2018, 8:53pm UTC](https://discuss.elastic.co/t/trouble-parsing-multi-line-json-logs/147628 "2018-09-11T20:53:38Z")

</div>

Beat version 6.4.0 Operating System Windows Maybe what I'm trying to do is unsupported (the answer in Error decoding JSON: json: cannot unmarshal string into Go value of type map\[string\]interface {} would indicat…

---

## [Discover: An error occurred with your request. Reset your inputs and try again](https://discuss.elastic.co/t/discover-an-error-occurred-with-your-request-reset-your-inputs-and-try-again/26789)

<div class="topic-metadata">

**Author:** [@syakirharis](https://discuss.elastic.co/u/syakirharis)\
**Replies:** 5\
**Last updated:** [October 15, 2015, 6:19am UTC](https://discuss.elastic.co/t/discover-an-error-occurred-with-your-request-reset-your-inputs-and-try-again/26789 "2015-10-15T06:19:51Z")

</div>

What actually is happening..?? \[image\]

---

## [Kibana data table visualization is too slow in response](https://discuss.elastic.co/t/kibana-data-table-visualization-is-too-slow-in-response/100605)

<div class="topic-metadata">

**Author:** [@rajkamalkool6](https://discuss.elastic.co/u/rajkamalkool6)\
**Replies:** 4\
**Last updated:** [September 15, 2017, 1:01pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-is-too-slow-in-response/100605 "2017-09-15T13:01:03Z")

</div>

I have 5 node Elasticsearch cluster 3 master node 1 data node and 1 Tribe node. I have installed ELK 5.2 version. My shards count is 2 and replica is 1. I have 32GB RAM and 1TB of hard disk space. My Index size is around…

---

## [Hide inaccessible indices in Kibana Discover](https://discuss.elastic.co/t/hide-inaccessible-indices-in-kibana-discover/71122)

<div class="topic-metadata">

**Author:** [@maenu](https://discuss.elastic.co/u/maenu)\
**Replies:** 4\
**Last updated:** [January 11, 2017, 11:32am UTC](https://discuss.elastic.co/t/hide-inaccessible-indices-in-kibana-discover/71122 "2017-01-11T11:32:00Z")

</div>

Hi I created an x-pack user with only access to index C (and role kibana\_user). When the user logs in in Kibana and opens Discover, he can see all indices A, B, C and D (but can see only logs from index C). How ca…

---

## [Indexing Special characters as symbols and searching with unicode values](https://discuss.elastic.co/t/indexing-special-characters-as-symbols-and-searching-with-unicode-values/60711)

<div class="topic-metadata">

**Author:** [@premkumar3438](https://discuss.elastic.co/u/premkumar3438)\
**Replies:** 1\
**Last updated:** [September 16, 2016, 1:48pm UTC](https://discuss.elastic.co/t/indexing-special-characters-as-symbols-and-searching-with-unicode-values/60711 "2016-09-16T13:48:50Z")

</div>

I am Trying to index and search for Special characters in elastic search I used White space tokenizer and i am able to index Special characters and search them fine. But i have a situation where i need to index the spe…

---

## [Docker Pull Failing](https://discuss.elastic.co/t/docker-pull-failing/116266)

<div class="topic-metadata">

**Author:** [@jdanielcook](https://discuss.elastic.co/u/jdanielcook)\
**Replies:** 2\
**Last updated:** [January 19, 2018, 4:52pm UTC](https://discuss.elastic.co/t/docker-pull-failing/116266 "2018-01-19T16:52:25Z")

</div>

I am attempting to pull and receiving the error below: docker pull docker.elastic.co/elasticsearch/elasticsearch:6.1.2 Error response from daemon: Get https://docker.elastic.co/v2/: net/http: request canceled while wai…

---

## [Latitude and Longitude Field conversion to Geo Point](https://discuss.elastic.co/t/latitude-and-longitude-field-conversion-to-geo-point/72365)

<div class="topic-metadata">

**Author:** [@Praveen\_Kumar\_Maurya](https://discuss.elastic.co/u/Praveen_Kumar_Maurya)\
**Replies:** 2\
**Last updated:** [January 25, 2017, 6:35pm UTC](https://discuss.elastic.co/t/latitude-and-longitude-field-conversion-to-geo-point/72365 "2017-01-25T18:35:15Z")

</div>

Hi , I have uploaded my data file using logstash. Logstash successfully uploaded the following data like PoS, Cityname, Lattitude and Longitude. Now my problem is how to create index so that I can visualise them on Geo …

---

## [Secured connection from FIlebeat to Logstash (remote error: tls: handshake failure)](https://discuss.elastic.co/t/secured-connection-from-filebeat-to-logstash-remote-error-tls-handshake-failure/245652)

<div class="topic-metadata">

**Author:** [@ofer.h](https://discuss.elastic.co/u/ofer.h)\
**Replies:** 0\
**Last updated:** [August 19, 2020, 4:37pm UTC](https://discuss.elastic.co/t/secured-connection-from-filebeat-to-logstash-remote-error-tls-handshake-failure/245652 "2020-08-19T16:37:33Z")

</div>

Hi, I'm trying to configure tls for logstash and I'm getting the following error: 2020-08-19T11:56:29.340-0400 ERROR \[publisher\_pipeline\_output\] pipeline/output.go:106 Failed to connect to backoff(async(tcp:/…

---

## [Using doc\_count to calculate percentage after aggregation](https://discuss.elastic.co/t/using-doc-count-to-calculate-percentage-after-aggregation/243611)

<div class="topic-metadata">

**Author:** [@surjray](https://discuss.elastic.co/u/surjray)\
**Replies:** 3\
**Last updated:** [August 12, 2020, 8:14am UTC](https://discuss.elastic.co/t/using-doc-count-to-calculate-percentage-after-aggregation/243611 "2020-08-12T08:14:57Z")

</div>

Dear all, I am currently attempting to use the doc\_count field (result of aggregation operation: aggregations.aggregation\_name.buckets -\> doc\_count for each bucket) to calculate some percentages, namely pass and fail fo…

---

## [Kibana 7.9.x redirects to location: /spaces/enter and doesn't work](https://discuss.elastic.co/t/kibana-7-9-x-redirects-to-location-spaces-enter-and-doesnt-work/253241)

<div class="topic-metadata">

**Author:** [@George\_Wainwright](https://discuss.elastic.co/u/George_Wainwright)\
**Replies:** 5\
**Last updated:** [November 2, 2020, 5:56pm UTC](https://discuss.elastic.co/t/kibana-7-9-x-redirects-to-location-spaces-enter-and-doesnt-work/253241 "2020-11-02T17:56:18Z")

</div>

I run my Elasticsearch cluster in docker with the next config: version: '2.4' services: elasticsearch: image: docker.elastic.co/elasticsearch/elasticsearch:7.9.3 container\_name: elasticsearch …

---

## [Matching/Finding certain text using logstash filter](https://discuss.elastic.co/t/matching-finding-certain-text-using-logstash-filter/48411)

<div class="topic-metadata">

**Author:** [@spravn789](https://discuss.elastic.co/u/spravn789)\
**Replies:** 8\
**Last updated:** [September 21, 2016, 10:57am UTC](https://discuss.elastic.co/t/matching-finding-certain-text-using-logstash-filter/48411 "2016-09-21T10:57:01Z")

</div>

I have a text with \[INFO or ERROR or Warn\] concatenated with few other texts, which i am able to get under greedy data, But I want to split those Log Level values under new field. Sample Text: 2016 Apr 26 15:44:40:603 …

[Previous page](https://discuss.elastic.co/top.md?page=499&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=501&per_page=50&period=all)
