# Top **URL:** https://discuss.elastic.co/top.md?page=510&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 511 --- ## [How to use elastic-agent docker image?](https://discuss.elastic.co/t/how-to-use-elastic-agent-docker-image/269183)
**Author:** [@klausagnoletti](https://discuss.elastic.co/u/klausagnoletti)\ **Replies:** 3\ **Last updated:** [April 5, 2021, 6:29pm UTC](https://discuss.elastic.co/t/how-to-use-elastic-agent-docker-image/269183 "2021-04-05T18:29:53Z")
Hi I've been wanting to run elastic-agent as a docker container for quite some time. So I was quite ecstatic when I found out it was available for download at beats/elastic-agent | Docker @ Elastic. However there's no d… --- ## [Alerting on log data](https://discuss.elastic.co/t/alerting-on-log-data/242932)
**Author:** [@DanRoscigno](https://discuss.elastic.co/u/DanRoscigno)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 10:10am UTC](https://discuss.elastic.co/t/alerting-on-log-data/242932 "2020-08-03T10:10:59Z")
Here is some information that is in my logs: I would like to be able to create alerts any time a log entry includes the word ERROR, and the kubernetes.pod.name includes the string redis-leader. I have removed the ma… --- ## [How to Index a resume in elasticsearch and write a search query to find particular word](https://discuss.elastic.co/t/how-to-index-a-resume-in-elasticsearch-and-write-a-search-query-to-find-particular-word/75149)
**Author:** [@Akshay\_Parab](https://discuss.elastic.co/u/Akshay_Parab)\ **Replies:** 6\ **Last updated:** [February 15, 2017, 1:22pm UTC](https://discuss.elastic.co/t/how-to-index-a-resume-in-elasticsearch-and-write-a-search-query-to-find-particular-word/75149 "2017-02-15T13:22:35Z")
Upload resume in elasticsearch then Visualize that in kibana using logstash It is giving unreadable file --- ## [Logstash: A plugin had an unrecoverable error. Will restart this plugin](https://discuss.elastic.co/t/logstash-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/225318)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 2\ **Last updated:** [March 27, 2020, 11:30am UTC](https://discuss.elastic.co/t/logstash-a-plugin-had-an-unrecoverable-error-will-restart-this-plugin/225318 "2020-03-27T11:30:17Z")
When I start my logstash config file it show like this \[2020-03-26T21:24:52,293\]\[INFO \]\[logstash.javapipeline \]\[main\] Starting pipeline {:pipeline\_id=\>"main", "pipeline.workers"=\>4, "pipeline.batch.size"=\>125, "pipel… --- ## [Java REST client: gzip/compress request](https://discuss.elastic.co/t/java-rest-client-gzip-compress-request/231031)
**Author:** [@karussell](https://discuss.elastic.co/u/karussell)\ **Replies:** 0\ **Last updated:** [May 4, 2020, 8:17pm UTC](https://discuss.elastic.co/t/java-rest-client-gzip-compress-request/231031 "2020-05-04T20:17:11Z")
There is not much documentation about how to compress a request - only this unanswered topic: https://discuss.elastic.co/t/java-rest-client-gzip-compressed-request/98350 On the issue tracker there are several recent iss… --- ## [How can I configure my mappings if \_analyzer field has been removed in ES2.0?](https://discuss.elastic.co/t/how-can-i-configure-my-mappings-if--analyzer-field-has-been-removed-in-es2-0/34666)
**Author:** [@durgeshiitj](https://discuss.elastic.co/u/durgeshiitj)\ **Replies:** 0\ **Last updated:** [November 16, 2015, 10:52am UTC](https://discuss.elastic.co/t/how-can-i-configure-my-mappings-if--analyzer-field-has-been-removed-in-es2-0/34666 "2015-11-16T10:52:10Z")
Hi, I have been using ES 1.4 for past 2-3 months and now wanted to move to ES 2.0. So while creating index I got to know that \_analyzer field has been removed and I am getting error. "error": { "root\_cause": \[ {… --- ## [Created user role for privileges on Index but user despite login to Kibana unable to access Index](https://discuss.elastic.co/t/created-user-role-for-privileges-on-index-but-user-despite-login-to-kibana-unable-to-access-index/142117)
**Author:** [@UserSam](https://discuss.elastic.co/u/UserSam)\ **Replies:** 6\ **Last updated:** [July 30, 2018, 12:22pm UTC](https://discuss.elastic.co/t/created-user-role-for-privileges-on-index-but-user-despite-login-to-kibana-unable-to-access-index/142117 "2018-07-30T12:22:10Z")
I want to create a user who has admin rights (search, read, write) access on testIndex index. For this, I created a role testIndex\_admin (ref. kibana screenshot attached here) and assigned the new user this role. Howe… --- ## [Elasticsearch cluster shards allocation not even](https://discuss.elastic.co/t/elasticsearch-cluster-shards-allocation-not-even/170861)
**Author:** [@shtcb](https://discuss.elastic.co/u/shtcb)\ **Replies:** 7\ **Last updated:** [March 6, 2019, 12:40pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-shards-allocation-not-even/170861 "2019-03-06T12:40:47Z")
Hi, I have an Elasticsearch cluster setup with 3 nodes. 2 of them are Master and Data nodes with one of them being a Data only node. I had a situation where the Data only node had twice the amount of shards allocated t… --- ## [Enabling TLS - NotSslRecordException](https://discuss.elastic.co/t/enabling-tls-notsslrecordexception/187026)
**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\ **Replies:** 2\ **Last updated:** [June 25, 2019, 3:18am UTC](https://discuss.elastic.co/t/enabling-tls-notsslrecordexception/187026 "2019-06-25T03:18:10Z")
Hi, I keep receiving an error when enabling xpack.security.http.ssl My elasticsearch.yml settings are as per below - running elasticsearch-7.1.1 node.name: hiu-test discovery.type: single-node xpack.security.enabled:… --- ## [Difference between type and \_type fields](https://discuss.elastic.co/t/difference-between-type-and--type-fields/47073)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 4\ **Last updated:** [April 12, 2016, 6:55am UTC](https://discuss.elastic.co/t/difference-between-type-and--type-fields/47073 "2016-04-12T06:55:31Z")
Hi, I can see 2 fields type and \_type. type, I created from LSF configuration and \_type is something I can see fomr kibana json object. Even if their value is same, what is difference between the two? br, Sunil --- ## [Details of how transaction log is managed during indexing](https://discuss.elastic.co/t/details-of-how-transaction-log-is-managed-during-indexing/14805)
**Author:** [@Amit\_Soni](https://discuss.elastic.co/u/Amit_Soni)\ **Replies:** 6\ **Last updated:** [December 30, 2013, 11:29am UTC](https://discuss.elastic.co/t/details-of-how-transaction-log-is-managed-during-indexing/14805 "2013-12-30T11:29:13Z")
Hi - I am curious to know the specific detail (sequence of steps involved) when an indexing request is sent to elastic search and how transaction logs are managed? It would be great if anyone can point me to a right ar… --- ## [There are no living connections in the connection pool](https://discuss.elastic.co/t/there-are-no-living-connections-in-the-connection-pool/181021)
**Author:** [@Ludek](https://discuss.elastic.co/u/Ludek)\ **Replies:** 1\ **Last updated:** [May 15, 2019, 8:29am UTC](https://discuss.elastic.co/t/there-are-no-living-connections-in-the-connection-pool/181021 "2019-05-15T08:29:08Z")
Hello, because of network problems, I build a separate internal network only for ELK nodes. Network nodeXY-elk-local. This network is used for Elastic communication. On another network card is network intranet used for … --- ## [Logstash management with self signed sertificate](https://discuss.elastic.co/t/logstash-management-with-self-signed-sertificate/216981)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 3\ **Last updated:** [February 12, 2020, 9:27am UTC](https://discuss.elastic.co/t/logstash-management-with-self-signed-sertificate/216981 "2020-02-12T09:27:08Z")
Hi All, I have secured my Elasticsearch cluster's (3 nodes) http communication as below: xpack.security.enabled: true xpack.security.transport.ssl.enabled: true xpack.security.transport.ssl.verification\_mode: certifi… --- ## [Update single field in document in elastic from within logstash](https://discuss.elastic.co/t/update-single-field-in-document-in-elastic-from-within-logstash/93798)
**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\ **Replies:** 3\ **Last updated:** [July 21, 2017, 10:31am UTC](https://discuss.elastic.co/t/update-single-field-in-document-in-elastic-from-within-logstash/93798 "2017-07-21T10:31:15Z")
Hi, How can I update a single field on an existing document in elastic from logstash? This is the docment in elastic where I want to upate field: "FEEDBACK\_RECIEVED" from "NO" to "YES" { "\_index": "portal-201… --- ## [Logstash and ECK](https://discuss.elastic.co/t/logstash-and-eck/206997)
**Author:** [@dbwest](https://discuss.elastic.co/u/dbwest)\ **Replies:** 2\ **Last updated:** [November 7, 2019, 10:26pm UTC](https://discuss.elastic.co/t/logstash-and-eck/206997 "2019-11-07T22:26:21Z")
Is Logstash part of ECK? How do I add it in? Is it currently on any dev branches or are there any ways to get edge releases that include it? I do not see it in stable. Are there any plans to add it in? --- ## [GUI for reading logs](https://discuss.elastic.co/t/gui-for-reading-logs/26157)
**Author:** [@Mark\_van\_Rossum](https://discuss.elastic.co/u/Mark_van_Rossum)\ **Replies:** 5\ **Last updated:** [December 17, 2015, 3:27pm UTC](https://discuss.elastic.co/t/gui-for-reading-logs/26157 "2015-12-17T15:27:08Z")
I have a typical ELK stack, and am a huge fan of Kibana for analysing structured logs like e.g. Apache access logs. I can draw graphs to my hearts content showing real time performace of our webservers which is awesome. … --- ## [Elastic spark connector not able map longitude ,latitude values to geo\_type](https://discuss.elastic.co/t/elastic-spark-connector-not-able-map-longitude-latitude-values-to-geo-type/60865)
**Author:** [@Pavan\_Penhandra](https://discuss.elastic.co/u/Pavan_Penhandra)\ **Replies:** 8\ **Last updated:** [September 23, 2016, 6:32pm UTC](https://discuss.elastic.co/t/elastic-spark-connector-not-able-map-longitude-latitude-values-to-geo-type/60865 "2016-09-23T18:32:30Z")
Hi, When im writing longitude latitude values in string format with spark sql the data type of "location" field mapping to string not to geo\_type I followed the format https://www.elastic.co/guide/en/elasticsearch/… --- ## [Hardware requirement for my server ELK](https://discuss.elastic.co/t/hardware-requirement-for-my-server-elk/306229)
**Author:** [@Big\_Mara](https://discuss.elastic.co/u/Big_Mara)\ **Replies:** 4\ **Last updated:** [June 3, 2022, 12:05pm UTC](https://discuss.elastic.co/t/hardware-requirement-for-my-server-elk/306229 "2022-06-03T12:05:26Z")
Hi I am new in ELK and I wonder with what can I start if I have many firewalls and I get 200gb of logs per day. The deal is ELK is already installed but the server capacity is not enough so we need to resize it and upgr… --- ## [Timeout on search](https://discuss.elastic.co/t/timeout-on-search/8327)
**Author:** [@Vik](https://discuss.elastic.co/u/Vik)\ **Replies:** 3\ **Last updated:** [September 20, 2016, 10:09pm UTC](https://discuss.elastic.co/t/timeout-on-search/8327 "2016-09-20T22:09:31Z")
I am looking to specify a timeout on the search as per the api spec at http://www.elasticsearch.org/guide/reference/api/search/request-body.html timeout "A search timeout, bounding the search request to be execute… --- ## [SharePoint Server connector package](https://discuss.elastic.co/t/sharepoint-server-connector-package/302586)
**Author:** [@Serena\_Chou](https://discuss.elastic.co/u/Serena_Chou)\ **Replies:** 8\ **Last updated:** [September 27, 2022, 3:06pm UTC](https://discuss.elastic.co/t/sharepoint-server-connector-package/302586 "2022-09-27T15:06:59Z")
Starting in the 8.1 Enterprise Search release, we have a new Elastic SharePoint Server connector package available for beta. This connector package extends the existing Workplace Search content source catalog, with a ful… --- ## [Painless script. Illegal list shortcut value \[value\]. For try to stup field variable](https://discuss.elastic.co/t/painless-script-illegal-list-shortcut-value-value-for-try-to-stup-field-variable/194864)
**Author:** [@nopma](https://discuss.elastic.co/u/nopma)\ **Replies:** 1\ **Last updated:** [August 13, 2019, 11:08pm UTC](https://discuss.elastic.co/t/painless-script-illegal-list-shortcut-value-value-for-try-to-stup-field-variable/194864 "2019-08-13T23:08:47Z")
Hello all, I tried with Painless script to create a new field from another field. I have this code if(doc\['name.keyword'\].size()!=0){ def p =/\[^\\/\]+\\/(\[^\\/\]+)/; def m = p.matcher(doc\['name.keyword'\].value)… --- ## [Scripting in cardinality aggregation](https://discuss.elastic.co/t/scripting-in-cardinality-aggregation/59722)
**Author:** [@BalaKumaran](https://discuss.elastic.co/u/BalaKumaran)\ **Replies:** 6\ **Last updated:** [September 6, 2016, 9:10am UTC](https://discuss.elastic.co/t/scripting-in-cardinality-aggregation/59722 "2016-09-06T09:10:21Z")
How does scripting in cardinality aggregation works. Is all values for the given field iterated and hashes for those are computed on the fly or is my assumption wrong? Can anyone explain exactly how scripting in cardinal… --- ## [Not able to start filebeat instance in windows](https://discuss.elastic.co/t/not-able-to-start-filebeat-instance-in-windows/42599)
**Author:** [@jayaram](https://discuss.elastic.co/u/jayaram)\ **Replies:** 6\ **Last updated:** [February 25, 2016, 6:05am UTC](https://discuss.elastic.co/t/not-able-to-start-filebeat-instance-in-windows/42599 "2016-02-25T06:05:38Z")
Hello, I am working in Windows with Filebeat --\> Logstash --\> Elasticsearch --\> kibana I am seeing below error while start Filebeat : filebeat.exe -c filebeat.yml -d \* panic: runtime error: invalid memory address or… --- ## [Example conversion from SQL to Query DSL](https://discuss.elastic.co/t/example-conversion-from-sql-to-query-dsl/2821)
**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\ **Replies:** 1\ **Last updated:** [August 1, 2016, 12:30pm UTC](https://discuss.elastic.co/t/example-conversion-from-sql-to-query-dsl/2821 "2016-08-01T12:30:42Z")
Hiya Structuring queries using the Query DSL is new to me. I've given a simple MySQL example, which I've tried to translate into the Query DSL. Please can you tell me if I'm correct, and how I could make it simp… --- ## [What is @timestamp field exactly?](https://discuss.elastic.co/t/what-is-timestamp-field-exactly/277189)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 4\ **Last updated:** [July 5, 2021, 8:06am UTC](https://discuss.elastic.co/t/what-is-timestamp-field-exactly/277189 "2021-07-05T08:06:24Z")
Kibana version: 7.13.2 Elasticsearch version: 7.13.2 APM Server version: 7.13.2 APM Agent language and version: nodeJS / RUM We run a very busy web site, with continuous traffic, but as you can see from the image bel… --- ## [Pulling day of week from a date field then writing a query to return records for a specific day of the week](https://discuss.elastic.co/t/pulling-day-of-week-from-a-date-field-then-writing-a-query-to-return-records-for-a-specific-day-of-the-week/217042)
**Author:** [@dleota](https://discuss.elastic.co/u/dleota)\ **Replies:** 4\ **Last updated:** [February 6, 2020, 9:02pm UTC](https://discuss.elastic.co/t/pulling-day-of-week-from-a-date-field-then-writing-a-query-to-return-records-for-a-specific-day-of-the-week/217042 "2020-02-06T21:02:10Z")
Hi New to Kibana. How would I use Lucene or Custom DSL Query in the Kibana environment to a) change a date type to day of the week , then b) return only certain days of the week say Saturday for example. In the query… --- ## [I am not able to extract more than 1000 records in canvas Elasticsearch SQL query](https://discuss.elastic.co/t/i-am-not-able-to-extract-more-than-1000-records-in-canvas-elasticsearch-sql-query/210186)
**Author:** [@anish\_jha](https://discuss.elastic.co/u/anish_jha)\ **Replies:** 6\ **Last updated:** [December 5, 2019, 8:58am UTC](https://discuss.elastic.co/t/i-am-not-able-to-extract-more-than-1000-records-in-canvas-elasticsearch-sql-query/210186 "2019-12-05T08:58:02Z")
I am using this query . SELECT transaction\_id FROM "dev\_\_event\*" limit 10000 Still i am getting only 1000 records , can anyone please help me on this. --- ## [How to stack Bucket level column in Data Table Visualization of Kibana](https://discuss.elastic.co/t/how-to-stack-bucket-level-column-in-data-table-visualization-of-kibana/145318)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 6\ **Last updated:** [August 30, 2018, 6:38am UTC](https://discuss.elastic.co/t/how-to-stack-bucket-level-column-in-data-table-visualization-of-kibana/145318 "2018-08-30T06:38:20Z")
Hi i have created this table wtih dummy data i had. I want the Column1 and Column2 stacked in the left most end like in the Normal Excel table and then the countries and their values in rest of the fields. The re-p… --- ## [How to copy SQL Server data to Elasticsearch using LogStash](https://discuss.elastic.co/t/how-to-copy-sql-server-data-to-elasticsearch-using-logstash/235064)
**Author:** [@Naushad\_Ansari1](https://discuss.elastic.co/u/Naushad_Ansari1)\ **Replies:** 2\ **Last updated:** [June 1, 2020, 3:32pm UTC](https://discuss.elastic.co/t/how-to-copy-sql-server-data-to-elasticsearch-using-logstash/235064 "2020-06-01T15:32:31Z")
As a developer working with SQL Server there is a need to import data from the database to Elasticsearch and analyze data in Kibana --- ## [Elasticsearch 7.0.1 - Trying to create too many scroll contexts. Must be less than or equal to: \[500\]](https://discuss.elastic.co/t/elasticsearch-7-0-1-trying-to-create-too-many-scroll-contexts-must-be-less-than-or-equal-to-500/181687)
**Author:** [@cyb3rward0g](https://discuss.elastic.co/u/cyb3rward0g)\ **Replies:** 2\ **Last updated:** [May 18, 2019, 5:36pm UTC](https://discuss.elastic.co/t/elasticsearch-7-0-1-trying-to-create-too-many-scroll-contexts-must-be-less-than-or-equal-to-500/181687 "2019-05-18T17:36:13Z")
Good afternoon, I upgraded my stack to 7.0.1 and I am using Elastalert master 05172019. When I run Elasticsearch and elastalert, it alls seems to be working fine. However, the moment I ingest data, and the rules start h… --- ## [CSV: autodetect\_column\_names vs. autogenerate\_column\_names](https://discuss.elastic.co/t/csv-autodetect-column-names-vs-autogenerate-column-names/164182)
**Author:** [@Aralex](https://discuss.elastic.co/u/Aralex)\ **Replies:** 2\ **Last updated:** [January 15, 2019, 9:13am UTC](https://discuss.elastic.co/t/csv-autodetect-column-names-vs-autogenerate-column-names/164182 "2019-01-15T09:13:03Z")
Hi, What are the exact functional differences between autodetect\_column\_names and autogenerate\_column\_names in the csv filter? Is it bad/good using both (set to true)? IS there a recommended order for using both… --- ## [Is there support for selecting containers other than by container id?](https://discuss.elastic.co/t/is-there-support-for-selecting-containers-other-than-by-container-id/168125)
**Author:** [@username1234](https://discuss.elastic.co/u/username1234)\ **Replies:** 3\ **Last updated:** [March 8, 2019, 2:51pm UTC](https://discuss.elastic.co/t/is-there-support-for-selecting-containers-other-than-by-container-id/168125 "2019-03-08T14:51:18Z")
I want to apply a prospector to only some of the docker containers I am running. However, it appears that the only way to select the containers in the prospector yml config is to specify container.ids which only matches … --- ## [ELasticsearch returns unmatched results](https://discuss.elastic.co/t/elasticsearch-returns-unmatched-results/58608)
**Author:** [@telebh](https://discuss.elastic.co/u/telebh)\ **Replies:** 7\ **Last updated:** [August 24, 2016, 5:57pm UTC](https://discuss.elastic.co/t/elasticsearch-returns-unmatched-results/58608 "2016-08-24T17:57:03Z")
I am newbie to ELasticsearch and would need your help regarding ES returning unmatched results for analyzed field. i have a custom analyzer as follows: "testing\_analyzer": { "type": "custom", "char\_filter": "html\_strip… --- ## [Http://serverIP:9200/\_plugin/marvel/ is showing blank page instead of dashboard](https://discuss.elastic.co/t/http-serverip-9200--plugin-marvel-is-showing-blank-page-instead-of-dashboard/33442)
**Author:** [@asad](https://discuss.elastic.co/u/asad)\ **Replies:** 8\ **Last updated:** [November 1, 2015, 9:57pm UTC](https://discuss.elastic.co/t/http-serverip-9200--plugin-marvel-is-showing-blank-page-instead-of-dashboard/33442 "2015-11-01T21:57:49Z")
I have installed marvel 2.0 plugin for elasticsearch 2.0 on my windows 7 machine. My Java version is "1.8.0\_51". However cluster is running fine. Please help --- ## [Change queue capacity in an elastic node](https://discuss.elastic.co/t/change-queue-capacity-in-an-elastic-node/204780)
**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\ **Replies:** 6\ **Last updated:** [October 23, 2019, 8:46am UTC](https://discuss.elastic.co/t/change-queue-capacity-in-an-elastic-node/204780 "2019-10-23T08:46:27Z")
I am running a local node with queue capacity of :200 , but due to large number of requests coming in, the node rejects the request when it goes beyond 200 (which is the queue capacity) i tried setting in thread\_pool.se… --- ## [Protection against cross scripting attacks (xss) in Elastic Search server?](https://discuss.elastic.co/t/protection-against-cross-scripting-attacks-xss-in-elastic-search-server/14882)
**Author:** [@Chethan\_B\_D](https://discuss.elastic.co/u/Chethan_B_D)\ **Replies:** 5\ **Last updated:** [January 24, 2014, 6:02am UTC](https://discuss.elastic.co/t/protection-against-cross-scripting-attacks-xss-in-elastic-search-server/14882 "2014-01-24T06:02:47Z")
Hi All, \*Issue:\* elastic search server (port:\*9200\*) is prone to the XSS vulnerability. \*version: \*0.19.8 \*Environment:\* RHEL 5.10 \*Vulnerability Description:\* The elastic search server fails to adequately… --- ## [Parse 1st Line of Multiple CSV files and set as Columns](https://discuss.elastic.co/t/parse-1st-line-of-multiple-csv-files-and-set-as-columns/2246)
**Author:** [@Wyatt\_Frelot](https://discuss.elastic.co/u/Wyatt_Frelot)\ **Replies:** 4\ **Last updated:** [June 9, 2015, 9:01pm UTC](https://discuss.elastic.co/t/parse-1st-line-of-multiple-csv-files-and-set-as-columns/2246 "2015-06-09T21:01:36Z")
Good afternoon all, I am new to using ELK. As I process CSVs using Logstash, I am unable to set "Columns" (in filter) dynamically based upon the first line in each CSV file (every CSV has different headers). I have t… --- ## [Watcher on Elastic Cloud - failed to run triggered watch due to thread pool capacity](https://discuss.elastic.co/t/watcher-on-elastic-cloud-failed-to-run-triggered-watch-due-to-thread-pool-capacity/74721)
**Author:** [@jakehschwartz](https://discuss.elastic.co/u/jakehschwartz)\ **Replies:** 7\ **Last updated:** [February 15, 2017, 10:39am UTC](https://discuss.elastic.co/t/watcher-on-elastic-cloud-failed-to-run-triggered-watch-due-to-thread-pool-capacity/74721 "2017-02-15T10:39:59Z")
After adding watches to our cluster, we noticed that they were mostly failing with the message: "failed to run triggered watch \[ID\] due to thread pool capacity" I don't think we can increase the thread pool capacity, … --- ## [Syslog source ip](https://discuss.elastic.co/t/syslog-source-ip/247363)
**Author:** [@mutt13y](https://discuss.elastic.co/u/mutt13y)\ **Replies:** 3\ **Last updated:** [September 3, 2020, 1:26pm UTC](https://discuss.elastic.co/t/syslog-source-ip/247363 "2020-09-03T13:26:40Z")
Hi, The syslog input plugin is creating a field based on the source IP of the syslog message. However for some hosts this is put into \[host\] and for other hosts it is going into \[host\]\[ip\] I cant figure out why this is… --- ## [Logstash Huge data import + Fast import](https://discuss.elastic.co/t/logstash-huge-data-import-fast-import/54909)
**Author:** [@Pierro](https://discuss.elastic.co/u/Pierro)\ **Replies:** 6\ **Last updated:** [July 7, 2016, 8:44am UTC](https://discuss.elastic.co/t/logstash-huge-data-import-fast-import/54909 "2016-07-07T08:44:23Z")
Hi, I'm a newbie with ELK and I've got some questions, of course. Let's try this one : My config: 3 servers: 1 master with Elasticsearch and logstash, 2 nodes with Elasticsearch. All are data store. The Logstash outpu… --- ## [Load test log stash through file beat](https://discuss.elastic.co/t/load-test-log-stash-through-file-beat/50483)
**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\ **Replies:** 4\ **Last updated:** [November 29, 2016, 2:22pm UTC](https://discuss.elastic.co/t/load-test-log-stash-through-file-beat/50483 "2016-11-29T14:22:39Z")
I would like to stress test our logstash environment, through filebeat, the idea is to generate log files with different sizes intervals and call filebeat programmatically to send logs to log stash, any ideas? How peop… --- ## [Storing documents with some arbitrary data](https://discuss.elastic.co/t/storing-documents-with-some-arbitrary-data/52075)
**Author:** [@jameso](https://discuss.elastic.co/u/jameso)\ **Replies:** 1\ **Last updated:** [June 7, 2016, 3:09pm UTC](https://discuss.elastic.co/t/storing-documents-with-some-arbitrary-data/52075 "2016-06-07T15:09:16Z")
We need to store documents for our users. Each user will have a number of documents that all have the same core fields, we then allow users to add their own arbitrary fields to their documents. Reading this article: h… --- ## [Multiple "elasticsearch" output plugins for single logstash instance](https://discuss.elastic.co/t/multiple-elasticsearch-output-plugins-for-single-logstash-instance/27275)
**Author:** [@iamrudra](https://discuss.elastic.co/u/iamrudra)\ **Replies:** 3\ **Last updated:** [August 12, 2015, 8:35pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-output-plugins-for-single-logstash-instance/27275 "2015-08-12T20:35:18Z")
I am trying to use one logstash instance to send data to multiple elasticsearch clusters. My lumberjack output config looks like output { elasticsearch { host =\> "localhost" cluster =\> "my-es-cluster" } el… --- ## [Is this paid like shield and watcher?](https://discuss.elastic.co/t/is-this-paid-like-shield-and-watcher/51208)
**Author:** [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\ **Replies:** 5\ **Last updated:** [June 12, 2016, 8:56am UTC](https://discuss.elastic.co/t/is-this-paid-like-shield-and-watcher/51208 "2016-06-12T08:56:41Z")
The topic says it all..... And one thing i really don't understand is why elastic doesn't post pricing on their website rather than contacting sales. --- ## [Tshark json into elasticsearch](https://discuss.elastic.co/t/tshark-json-into-elasticsearch/128004)
**Author:** [@nkaenzig](https://discuss.elastic.co/u/nkaenzig)\ **Replies:** 2\ **Last updated:** [April 15, 2018, 12:40pm UTC](https://discuss.elastic.co/t/tshark-json-into-elasticsearch/128004 "2018-04-15T12:40:14Z")
Dear community, I have some .pcap files that I want to index using elastic search. After reading the following article, I wanted to follow the same strategy, namely convert the .pcap to .json using tshark -T ek test.pc… --- ## [How to split a field value into separated fields in elasticsearch](https://discuss.elastic.co/t/how-to-split-a-field-value-into-separated-fields-in-elasticsearch/240938)
**Author:** [@Hung\_M\_Le](https://discuss.elastic.co/u/Hung_M_Le)\ **Replies:** 6\ **Last updated:** [August 6, 2020, 8:51am UTC](https://discuss.elastic.co/t/how-to-split-a-field-value-into-separated-fields-in-elasticsearch/240938 "2020-08-06T08:51:22Z")
Hi I have the following issue that I hope to get some help to resolve background: . I ingest a log file using filebeat . I defined inside elasticsearch grok and kv statements to split incoming data into separated fi… --- ## [Watcher: Error 500 Internal Server Error](https://discuss.elastic.co/t/watcher-error-500-internal-server-error/115336)
**Author:** [@Frank\_Matera](https://discuss.elastic.co/u/Frank_Matera)\ **Replies:** 8\ **Last updated:** [January 16, 2018, 2:58pm UTC](https://discuss.elastic.co/t/watcher-error-500-internal-server-error/115336 "2018-01-16T14:58:02Z")
Upgraded 5.6 to 6.1.0 with x-pack trial. When I click on watcher, I am receiving a 500 error. I see a mismatch in the logstashwatcher section, but I am not sure how to resolve it or what is mismatched. Checked versions: … --- ## [Split json array and apply filter](https://discuss.elastic.co/t/split-json-array-and-apply-filter/1064)
**Author:** [@michaelT](https://discuss.elastic.co/u/michaelT)\ **Replies:** 2\ **Last updated:** [May 30, 2015, 6:12am UTC](https://discuss.elastic.co/t/split-json-array-and-apply-filter/1064 "2015-05-30T06:12:16Z")
Hi, I'm retrieving a Json Array as Input and would like to know how it would be possible to split it using the split filter in order to send each new item as a single output ? In addition, the other filters should be … --- ## [Login failing for Kibana in iFrame due to missing sameSite cookie-setting](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999)
**Author:** [@bojanK](https://discuss.elastic.co/u/bojanK)\ **Replies:** 1\ **Last updated:** [March 18, 2020, 3:24pm UTC](https://discuss.elastic.co/t/login-failing-for-kibana-in-iframe-due-to-missing-samesite-cookie-setting/223999 "2020-03-18T15:24:35Z")
Hello I'm using iFrames to integrate Kibana pages into my website. This worked well with Chrome and Firefox. But since Chrome changed the default cookie setting of sameSite to Lax (see https://www.chromestatus.com/feat… --- ## [How to use 'POST url' to share visualisation in my website?](https://discuss.elastic.co/t/how-to-use-post-url-to-share-visualisation-in-my-website/179671)
**Author:** [@landy](https://discuss.elastic.co/u/landy)\ **Replies:** 5\ **Last updated:** [May 10, 2019, 9:06am UTC](https://discuss.elastic.co/t/how-to-use-post-url-to-share-visualisation-in-my-website/179671 "2019-05-10T09:06:26Z")
I want to share a visualisation in my website. By using Xpack-\>Share-\>Generate PDF/PNG, it is nice to find 'Share PDF/PNG' function is available. However, how to use 'copy POST url' ? I can get the following JSON from … [Previous page](https://discuss.elastic.co/top.md?page=509&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=511&per_page=50&period=all)