# Top **URL:** https://discuss.elastic.co/top.md?page=523&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 524 --- ## [Tokenizer: whitespace not working with edge\_ngram](https://discuss.elastic.co/t/tokenizer-whitespace-not-working-with-edge-ngram/118397)
**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\ **Replies:** 8\ **Last updated:** [February 5, 2018, 9:20am UTC](https://discuss.elastic.co/t/tokenizer-whitespace-not-working-with-edge-ngram/118397 "2018-02-05T09:20:56Z")
Trying to include special characters in ngram tokeniser DELETE test PUT test { "settings": { "analysis": { "analyzer": { "my\_analyzer": { "type": "custom", … --- ## [Installation and first start](https://discuss.elastic.co/t/installation-and-first-start/152018)
**Author:** [@paolom](https://discuss.elastic.co/u/paolom)\ **Replies:** 5\ **Last updated:** [November 2, 2018, 4:26pm UTC](https://discuss.elastic.co/t/installation-and-first-start/152018 "2018-11-02T16:26:31Z")
Hi all, I try to install and configure ELK Stack for the first time. The installation was made with the official site instruction on OpenSuse OS, but probably somethig goes wrong. When I try to start my Kibana istance … --- ## [ECK with NFS shared persistent volume](https://discuss.elastic.co/t/eck-with-nfs-shared-persistent-volume/221073)
**Author:** [@SergeyK](https://discuss.elastic.co/u/SergeyK)\ **Replies:** 3\ **Last updated:** [March 2, 2020, 9:29am UTC](https://discuss.elastic.co/t/eck-with-nfs-shared-persistent-volume/221073 "2020-03-02T09:29:45Z")
Hi, Did somebody manage to deploy Elasticserach with shared NFS volume (one volume for all pods)? All my nodes are in VMs (above private lab bare metal servers). There is dedicated NFS server created and all k8s nodes h… --- ## [Retrieve more than 10000 records for search request in Watcher](https://discuss.elastic.co/t/retrieve-more-than-10000-records-for-search-request-in-watcher/227091)
**Author:** [@shubhamshd99](https://discuss.elastic.co/u/shubhamshd99)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 8:14am UTC](https://discuss.elastic.co/t/retrieve-more-than-10000-records-for-search-request-in-watcher/227091 "2020-04-09T08:14:34Z")
Hi Guys, I am trying to retrieve records more than 10k through search request in Watcher, but due to its max-limit, it is rejecting all the records over and above 10k number. There is already a discussion here on how… --- ## [Filebeat ca cert problem](https://discuss.elastic.co/t/filebeat-ca-cert-problem/37252)
**Author:** [@AlRad](https://discuss.elastic.co/u/AlRad)\ **Replies:** 4\ **Last updated:** [December 15, 2015, 9:00pm UTC](https://discuss.elastic.co/t/filebeat-ca-cert-problem/37252 "2015-12-15T21:00:16Z")
I'm attempting to basically get encrypted comms going between Filebeat hosts and the Logstash server (encryption only, no client authentication). Filebeat, however, is not accepting the CA certificate. Here is my fileb… --- ## [Got error to send bulk of actions: Connection refused](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809)
**Author:** [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Replies:** 7\ **Last updated:** [February 17, 2016, 12:52pm UTC](https://discuss.elastic.co/t/got-error-to-send-bulk-of-actions-connection-refused/41809 "2016-02-17T12:52:12Z")
I am using logstash 1.5.4 . getting error like below since today. Got error to send bulk of actions: Connection refused {:level=\>:error} Failed to flush outgoing items {:outgoing\_count=\>193, :exception=\>"Manticore::So… --- ## [Logstash not binding to 5504](https://discuss.elastic.co/t/logstash-not-binding-to-5504/37166)
**Author:** [@jacoblw](https://discuss.elastic.co/u/jacoblw)\ **Replies:** 1\ **Last updated:** [December 14, 2015, 9:23pm UTC](https://discuss.elastic.co/t/logstash-not-binding-to-5504/37166 "2015-12-14T21:23:08Z")
Hi, I'm new to the ELK stack. Following the guide for CentOS 7 created by DigitalOcean I got as far as creating an index pattern in Kibana before I noticed I was running into an issue. I get the following error in … --- ## [Using Kibana to detect DDOS attacks for Analysis - Home Lab](https://discuss.elastic.co/t/using-kibana-to-detect-ddos-attacks-for-analysis-home-lab/274363)
**Author:** [@momo1104](https://discuss.elastic.co/u/momo1104)\ **Replies:** 3\ **Last updated:** [June 1, 2021, 10:17pm UTC](https://discuss.elastic.co/t/using-kibana-to-detect-ddos-attacks-for-analysis-home-lab/274363 "2021-06-01T22:17:24Z")
Hello everyone, i'm new to Infosec and very new to ELK stack. I am running a home lab inside a VM. I've downloaded a sample DDos dataset from kaggle.com and ingested that data into elk stack, but not really sure what to… --- ## [Indexing data into ElasticSearch 6.2 using java API](https://discuss.elastic.co/t/indexing-data-into-elasticsearch-6-2-using-java-api/118988)
**Author:** [@wandermonk](https://discuss.elastic.co/u/wandermonk)\ **Replies:** 8\ **Last updated:** [February 9, 2018, 1:29pm UTC](https://discuss.elastic.co/t/indexing-data-into-elasticsearch-6-2-using-java-api/118988 "2018-02-09T13:29:06Z")
As we know that the elasticsearch has deprecated types in 6.2.0 release how do we index data to an elastic search index. public class ElasticSearchWriter { private static final Logger LOGGER = LoggerFactory.getLogger(… --- ## [Index naming restrictions](https://discuss.elastic.co/t/index-naming-restrictions/47307)
**Author:** [@Bobby\_Pilot](https://discuss.elastic.co/u/Bobby_Pilot)\ **Replies:** 3\ **Last updated:** [April 13, 2016, 10:37pm UTC](https://discuss.elastic.co/t/index-naming-restrictions/47307 "2016-04-13T22:37:57Z")
Is there a way to restrict the use of certain words or patterns for an index name? foo\* = good bar\* = bad --- ## [Why not use bloom filter in es for search?](https://discuss.elastic.co/t/why-not-use-bloom-filter-in-es-for-search/173686)
**Author:** [@zcx](https://discuss.elastic.co/u/zcx)\ **Replies:** 5\ **Last updated:** [March 25, 2019, 8:58am UTC](https://discuss.elastic.co/t/why-not-use-bloom-filter-in-es-for-search/173686 "2019-03-25T08:58:39Z")
as above. thanks --- ## [Sorting events with identical timestamps by order events were recorded](https://discuss.elastic.co/t/sorting-events-with-identical-timestamps-by-order-events-were-recorded/91318)
**Author:** [@ld\_pvl](https://discuss.elastic.co/u/ld_pvl)\ **Replies:** 4\ **Last updated:** [July 5, 2017, 3:24pm UTC](https://discuss.elastic.co/t/sorting-events-with-identical-timestamps-by-order-events-were-recorded/91318 "2017-07-05T15:24:55Z")
Hi Elastic Team, My question is similar to this topic. For documents with identical timestamps, can we sort them on kibana by the order the events/docs were recorded? Basically I want the log lines shown on Kibana to… --- ## [BulkIndexError: ('2 document(s) failed to index.') Elasticsearch](https://discuss.elastic.co/t/bulkindexerror-2-document-s-failed-to-index-elasticsearch/297682)
**Author:** [@anarchy1923](https://discuss.elastic.co/u/anarchy1923)\ **Replies:** 1\ **Last updated:** [February 22, 2022, 12:22am UTC](https://discuss.elastic.co/t/bulkindexerror-2-document-s-failed-to-index-elasticsearch/297682 "2022-02-22T00:22:08Z")
At first I found some null values in my preprocessed data, so removed those. (Here's my Data Cleaning Code - and the respective outputs enclosed in '''Comments''') Cleaning and Preprocessing df\_merged\[df\_merged.abstrac… --- ## [Multiple pipelines with docker not working](https://discuss.elastic.co/t/multiple-pipelines-with-docker-not-working/145181)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 5\ **Last updated:** [August 22, 2018, 7:46am UTC](https://discuss.elastic.co/t/multiple-pipelines-with-docker-not-working/145181 "2018-08-22T07:46:22Z")
Using the following compose service to spin up an ELK stack logstash: build: context: logstash/ volumes: - ./logstash/pipelines.yml:/etc/logstash/pipelines.yml:ro # - ./logstash/config/logsta… --- ## [Logstash shutting down](https://discuss.elastic.co/t/logstash-shutting-down/184797)
**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\ **Replies:** 2\ **Last updated:** [June 12, 2019, 1:21pm UTC](https://discuss.elastic.co/t/logstash-shutting-down/184797 "2019-06-12T13:21:20Z")
Hello, When I use a config file to create metrics on Logstash, after all calculations, it shuts down. But I need it keep running. This is my script, can someone say what I'm doing wrong? I 'm new to Logstash and first t… --- ## [Error parsing csv](https://discuss.elastic.co/t/error-parsing-csv/87893)
**Author:** [@mitabrev](https://discuss.elastic.co/u/mitabrev)\ **Replies:** 3\ **Last updated:** [June 5, 2017, 7:03am UTC](https://discuss.elastic.co/t/error-parsing-csv/87893 "2017-06-05T07:03:14Z")
Hi, I'm checking my logstash logs and see many entries with WARN "Error parsing csv". Example: \[2017-06-01T13:09:16,380\]\[WARN \]\[logstash.filters.csv \] Error parsing csv {:field=\>"message", :source=\>"8:0.0/0.0\\",\\… --- ## [Nodes not joining cluster](https://discuss.elastic.co/t/nodes-not-joining-cluster/8237)
**Author:** [@ajan](https://discuss.elastic.co/u/ajan)\ **Replies:** 4\ **Last updated:** [October 3, 2012, 1:58pm UTC](https://discuss.elastic.co/t/nodes-not-joining-cluster/8237 "2012-10-03T13:58:20Z")
I have an ES cluster with 5 nodes on different SLES VM's. I keep getting this error when I start the ES nodes and they don't form a cluster \[2012-06-27 01:38:54,052\]\[WARN \]\[discovery.zen.ping.multicast\] \[Nikki\] rec… --- ## [Please help Importing csv with logstash and create an index in elasticsearch](https://discuss.elastic.co/t/please-help-importing-csv-with-logstash-and-create-an-index-in-elasticsearch/83689)
**Author:** [@Alvaro\_Sanz\_Garrigue](https://discuss.elastic.co/u/Alvaro_Sanz_Garrigue)\ **Replies:** 5\ **Last updated:** [April 28, 2017, 8:49am UTC](https://discuss.elastic.co/t/please-help-importing-csv-with-logstash-and-create-an-index-in-elasticsearch/83689 "2017-04-28T08:49:33Z")
Hello, I'm new with elasticsearch and I'm trying to import csv data with logstash in Windows 10. The configuration file i'm using for logstash is "csv-config.conf": input { file { path =\> "/Users/asanzgarrigues/Des… --- ## [Logstash-6.2.4 Pipeline has terminated](https://discuss.elastic.co/t/logstash-6-2-4-pipeline-has-terminated/133010)
**Author:** [@Vadim\_Klimenko](https://discuss.elastic.co/u/Vadim_Klimenko)\ **Replies:** 3\ **Last updated:** [May 24, 2018, 9:15am UTC](https://discuss.elastic.co/t/logstash-6-2-4-pipeline-has-terminated/133010 "2018-05-24T09:15:41Z")
vadim@vadim-HP:~/www/FULL/Search/logstash-6.2.4$ bin/logstash -f logstash-simple.conf Sending Logstash's logs to /home/vadim/www/FULL/Search/logstash-6.2.4/logs which is now configured via log4j2.properties \[2018-05-2… --- ## [Elastic-operator-0 goes into CrashLoopbackOff possibly after underlying node restarted](https://discuss.elastic.co/t/elastic-operator-0-goes-into-crashloopbackoff-possibly-after-underlying-node-restarted/228181)
**Author:** [@dineshabbi](https://discuss.elastic.co/u/dineshabbi)\ **Replies:** 6\ **Last updated:** [April 22, 2020, 5:50am UTC](https://discuss.elastic.co/t/elastic-operator-0-goes-into-crashloopbackoff-possibly-after-underlying-node-restarted/228181 "2020-04-22T05:50:15Z")
I am running elastic-operator 1.0.0-beta1 and hitting following issue. image: docker.elastic.co/eck/eck-operator:1.0.0-beta1 ❯ kubectl get pods -n elasticsearch … --- ## [Custom Fields Value From Path Element](https://discuss.elastic.co/t/custom-fields-value-from-path-element/73153)
**Author:** [@gariels](https://discuss.elastic.co/u/gariels)\ **Replies:** 3\ **Last updated:** [February 1, 2017, 12:44pm UTC](https://discuss.elastic.co/t/custom-fields-value-from-path-element/73153 "2017-02-01T12:44:12Z")
Let's say I have this prospector definitions: filebeat.prospectors: # log for \`app-a\` - input\_type: log paths: - /progs/app-a/\*/tomcat/\*/logs/app-a.log - /progs/app-a/\*/tomcat/\*/logs/catalina.out tags: \["t… --- ## [Users password policy](https://discuss.elastic.co/t/users-password-policy/190944)
**Author:** [@hbreiten](https://discuss.elastic.co/u/hbreiten)\ **Replies:** 4\ **Last updated:** [July 23, 2019, 12:53am UTC](https://discuss.elastic.co/t/users-password-policy/190944 "2019-07-23T00:53:15Z")
Hi, Not found the possibility to manage password policy in the basic subscription security module (password expiration, complexity, ...). Is there a way to do that with basic licence ?. --- ## [Issue with \_delete\_by\_query](https://discuss.elastic.co/t/issue-with-delete-by-query/175605)
**Author:** [@afassl](https://discuss.elastic.co/u/afassl)\ **Replies:** 4\ **Last updated:** [April 8, 2019, 2:47pm UTC](https://discuss.elastic.co/t/issue-with-delete-by-query/175605 "2019-04-08T14:47:05Z")
Hi, we've encountered a kind of strange issue and solved it by a workaround, but not sure, if the issue is caused by a bug or the request string. We've had to delete certain entries from an index, according to the docu… --- ## [Accessing environment variables in filebeat](https://discuss.elastic.co/t/accessing-environment-variables-in-filebeat/55714)
**Author:** [@snandam](https://discuss.elastic.co/u/snandam)\ **Replies:** 4\ **Last updated:** [July 20, 2016, 1:54pm UTC](https://discuss.elastic.co/t/accessing-environment-variables-in-filebeat/55714 "2016-07-20T13:54:31Z")
I'm trying to access an environment variable in filebeat.yml to use as value for a field that I would like to include in the output but don;t seem to work as expected. filebeat: prospectors: - paths: … --- ## [No response after "Pipeline main started"](https://discuss.elastic.co/t/no-response-after-pipeline-main-started/57167)
**Author:** [@nikdgl](https://discuss.elastic.co/u/nikdgl)\ **Replies:** 2\ **Last updated:** [August 9, 2016, 6:26pm UTC](https://discuss.elastic.co/t/no-response-after-pipeline-main-started/57167 "2016-08-09T18:26:57Z")
Hi All, We are unable to get Logstash to respond after feeding an analysis file to it. This file and the syntax used by us seems alright since we are getting a "Configuration OK!" message in the configuration tester. Y… --- ## [Context switches and high load](https://discuss.elastic.co/t/context-switches-and-high-load/8837)
**Author:** [@Dan\_Fairs](https://discuss.elastic.co/u/Dan_Fairs)\ **Replies:** 7\ **Last updated:** [December 20, 2012, 8:49pm UTC](https://discuss.elastic.co/t/context-switches-and-high-load/8837 "2012-12-20T20:49:11Z")
Hi, I've noticed that my servers - both physical machines and Xen-based VMs, all running a pair of ES nodes (0.19.8) and Ubuntu 12.04 LTS server, in 64-bit and 32-bit flavours - all seem to cause extremely high number… --- ## [Logstash, flume vs elasticsearch](https://discuss.elastic.co/t/logstash-flume-vs-elasticsearch/9880)
**Author:** [@SimonMo](https://discuss.elastic.co/u/SimonMo)\ **Replies:** 4\ **Last updated:** [November 29, 2012, 3:55pm UTC](https://discuss.elastic.co/t/logstash-flume-vs-elasticsearch/9880 "2012-11-29T15:55:34Z")
hi, i need a centralized logging-solution. My first approach is this: log4j-\>flume-Agent-\> | log4j-\>flume-Agent-\> |-\>flume-collector-\>elasticsearch-data-node log4j-\>flume-Agent-\> |-\>flume-collector-\>elasticsearc… --- ## [Mutate - replace field string using another pattern](https://discuss.elastic.co/t/mutate-replace-field-string-using-another-pattern/67081)
**Author:** [@Arthur\_Francis](https://discuss.elastic.co/u/Arthur_Francis)\ **Replies:** 2\ **Last updated:** [November 28, 2016, 8:41am UTC](https://discuss.elastic.co/t/mutate-replace-field-string-using-another-pattern/67081 "2016-11-28T08:41:25Z")
I have been reading through the logstash documentation for a way to chnage the value of a field by running it through a different pattern. Ref: replace Value type is hash There is no default value for this… --- ## [Dealing with unknown field types](https://discuss.elastic.co/t/dealing-with-unknown-field-types/51614)
**Author:** [@545945](https://discuss.elastic.co/u/545945)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 8:29pm UTC](https://discuss.elastic.co/t/dealing-with-unknown-field-types/51614 "2017-04-20T20:29:54Z")
What is the best way to define mappings / settings where there are about two dozen known fixed fields with a set type but also a large set of unknown fields and types. I have tried disable auto mapping but that does not… --- ## [How to improve Logstash performance imrpovement](https://discuss.elastic.co/t/how-to-improve-logstash-performance-imrpovement/80289)
**Author:** [@udaykirankona](https://discuss.elastic.co/u/udaykirankona)\ **Replies:** 8\ **Last updated:** [April 13, 2017, 9:08am UTC](https://discuss.elastic.co/t/how-to-improve-logstash-performance-imrpovement/80289 "2017-04-13T09:08:12Z")
I have 5 node cluster as follows 4 nodes with each 16 GB RAM 4 Cores - ES 1 node with 32 GB RAM 8 cores - Logstash I am able to process 550000 records per one minute, I want improve it to more. So what changes I ca… --- ## [Rollup - Date Histogram aggregation](https://discuss.elastic.co/t/rollup-date-histogram-aggregation/146308)
**Author:** [@Steven\_Liu](https://discuss.elastic.co/u/Steven_Liu)\ **Replies:** 7\ **Last updated:** [September 3, 2018, 6:46am UTC](https://discuss.elastic.co/t/rollup-date-histogram-aggregation/146308 "2018-09-03T06:46:08Z")
Hi Guys I have a rollup index (interval: 1d) created. But when do \_rollup\_search, I cannot use date histogram aggregation for larger interval (e.g. 1M, 1y). Only let me use 1d as defined in the rollup job config. Any id… --- ## [How to get rid of dangling indices](https://discuss.elastic.co/t/how-to-get-rid-of-dangling-indices/113805)
**Author:** [@Diverking](https://discuss.elastic.co/u/Diverking)\ **Replies:** 1\ **Last updated:** [January 3, 2018, 5:22pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-dangling-indices/113805 "2018-01-03T17:22:40Z")
We are running a cluster of 3 nodes and I find in the logfiles continious repeating messages: \[2018-01-02T16:24:58,539\]\[WARN \]\[o.e.g.DanglingIndicesState\] \[lrv171d1\] \[\[.watches/dT22WrbgTM24J0ZuROKQ2A\]\] can not be import… --- ## [Starting a new thread via email](https://discuss.elastic.co/t/starting-a-new-thread-via-email/58645)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 3\ **Last updated:** [August 29, 2016, 6:55pm UTC](https://discuss.elastic.co/t/starting-a-new-thread-via-email/58645 "2016-08-29T18:55:37Z")
I can no longer create a new thread using the email address defined here: https://discuss.elastic.co/t/email-only-interaction-with-the-forums/106 In addition, will any of the email issues discussed over a year ago ever… --- ## [Crash after upgrading to es 8.0.0](https://discuss.elastic.co/t/crash-after-upgrading-to-es-8-0-0/297728)
**Author:** [@ilkkao](https://discuss.elastic.co/u/ilkkao)\ **Replies:** 6\ **Last updated:** [February 21, 2022, 7:47pm UTC](https://discuss.elastic.co/t/crash-after-upgrading-to-es-8-0-0/297728 "2022-02-21T19:47:41Z")
I was about to add a github issue but as I'm not sure what counts as a confirmed bug I report my issue here: I was running es & kibana 7.17.0 and used kibana migration assistant to re-index my main index called "message… --- ## [Is there a plugin watch a directory? ( I don't want the file contents, just the filename)](https://discuss.elastic.co/t/is-there-a-plugin-watch-a-directory-i-dont-want-the-file-contents-just-the-filename/49587)
**Author:** [@iamthealex](https://discuss.elastic.co/u/iamthealex)\ **Replies:** 6\ **Last updated:** [May 13, 2016, 9:18pm UTC](https://discuss.elastic.co/t/is-there-a-plugin-watch-a-directory-i-dont-want-the-file-contents-just-the-filename/49587 "2016-05-13T21:18:08Z")
The subject says it all. --- ## [Auto Field Detection in Logs](https://discuss.elastic.co/t/auto-field-detection-in-logs/42543)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 6\ **Last updated:** [March 1, 2016, 3:08am UTC](https://discuss.elastic.co/t/auto-field-detection-in-logs/42543 "2016-03-01T03:08:29Z")
Is there a way to write grok pattern such that it will automatically detect fields and parse it into elasticsearch. I am hoping to eliminate the need to constantly create grok patterns to recognize new log patterns For… --- ## [NoMethodError: undefined method \`\[\]' for nil:NilClass](https://discuss.elastic.co/t/nomethoderror-undefined-method-for-nil-nilclass/180696)
**Author:** [@pirimoglu](https://discuss.elastic.co/u/pirimoglu)\ **Replies:** 5\ **Last updated:** [May 13, 2019, 4:13pm UTC](https://discuss.elastic.co/t/nomethoderror-undefined-method-for-nil-nilclass/180696 "2019-05-13T16:13:40Z")
Hi, I try to use logstash.filters.aggregate plugin. I get an aggregate exception. Aggregate exception occurred {:error=\>#\, :code=\>"\\n\\t\\t\\tmap\['user'\]\['scopes'\] \<\<… --- ## [I want to change the Kibana logo and customized the page](https://discuss.elastic.co/t/i-want-to-change-the-kibana-logo-and-customized-the-page/248322)
**Author:** [@AKumar123](https://discuss.elastic.co/u/AKumar123)\ **Replies:** 4\ **Last updated:** [September 28, 2020, 2:35pm UTC](https://discuss.elastic.co/t/i-want-to-change-the-kibana-logo-and-customized-the-page/248322 "2020-09-28T14:35:35Z")
Login logo (welcome screen) Change login in Select Space Change login in Header Change loading screen Change favicon --- ## [CPU High load](https://discuss.elastic.co/t/cpu-high-load/111916)
**Author:** [@sivakaran](https://discuss.elastic.co/u/sivakaran)\ **Replies:** 7\ **Last updated:** [December 21, 2017, 12:44pm UTC](https://discuss.elastic.co/t/cpu-high-load/111916 "2017-12-21T12:44:09Z")
Hi Team, I am using ES-1.3.7(version) In sometimes it causes very high load on particular node what can we do for this type of issue. I Checked with logs too there is no abnormal logs at all. Please help on this.Thank… --- ## [Problem with date filter to replace timestamp](https://discuss.elastic.co/t/problem-with-date-filter-to-replace-timestamp/169362)
**Author:** [@hackman61](https://discuss.elastic.co/u/hackman61)\ **Replies:** 6\ **Last updated:** [February 21, 2019, 3:10pm UTC](https://discuss.elastic.co/t/problem-with-date-filter-to-replace-timestamp/169362 "2019-02-21T15:10:42Z")
Hello, I have latest ELK docker image, and I send application logs from windows with filebeat, everything is almost fine :wink: I have this kinf of message : 2019-02-21 10:35:00,085 \[3140\] INFO - Début du batch EDNot… --- ## [Splitting message field](https://discuss.elastic.co/t/splitting-message-field/218768)
**Author:** [@liammcc](https://discuss.elastic.co/u/liammcc)\ **Replies:** 5\ **Last updated:** [February 14, 2020, 9:10am UTC](https://discuss.elastic.co/t/splitting-message-field/218768 "2020-02-14T09:10:05Z")
Good morning we have recently just set up kibana and don't have much knowledge on it. It is splitting everything well apart from our message which can be seen below. 2020-02-11T11:59:25.700Z das43423-fsdads434-sfafd4 IN… --- ## [Indices are getting locked](https://discuss.elastic.co/t/indices-are-getting-locked/208498)
**Author:** [@Seetharaman\_K](https://discuss.elastic.co/u/Seetharaman_K)\ **Replies:** 5\ **Last updated:** [November 20, 2019, 7:49am UTC](https://discuss.elastic.co/t/indices-are-getting-locked/208498 "2019-11-20T07:49:36Z")
Not sure what is the reason why indices are getting locked , every time one of the index is getting locked , i have to go and remove the lock . the obvious answer is as many may say "its due to do disk space issue" bu… --- ## [Get count unique values from field](https://discuss.elastic.co/t/get-count-unique-values-from-field/13550)
**Author:** [@11127](https://discuss.elastic.co/u/11127)\ **Replies:** 5\ **Last updated:** [September 11, 2013, 11:08am UTC](https://discuss.elastic.co/t/get-count-unique-values-from-field/13550 "2013-09-11T11:08:24Z")
Hi, I need to get just two numbers: the number of documents in the index, and the number of unique values in the field "relation". I wanted to use the facet, but I transfer the sets of terms (over 100,000) to calc… --- ## [Logstash - adding new fields](https://discuss.elastic.co/t/logstash-adding-new-fields/71276)
**Author:** [@przecie](https://discuss.elastic.co/u/przecie)\ **Replies:** 2\ **Last updated:** [January 14, 2017, 6:05pm UTC](https://discuss.elastic.co/t/logstash-adding-new-fields/71276 "2017-01-14T18:05:10Z")
Hi, I'm new in Elastic, so my question can be one of the 'stupid' one, but i hope it will help me to understand the connection between Logstash and Elastic search. So... I followed the tutorial on this site: https:… --- ## [Reindex ES with aliases](https://discuss.elastic.co/t/reindex-es-with-aliases/109245)
**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 6:34am UTC](https://discuss.elastic.co/t/reindex-es-with-aliases/109245 "2017-11-28T06:34:35Z")
Question about alises: I have ES index with 10 min documents. I need to add new fields and values for each document. I am going to use Scroll Search API to get documents and Bulk API to copy documents into new index \[ad… --- ## [Configure Elasticsearch on Django App](https://discuss.elastic.co/t/configure-elasticsearch-on-django-app/326320)
**Author:** [@ekane3](https://discuss.elastic.co/u/ekane3)\ **Replies:** 8\ **Last updated:** [February 24, 2023, 1:31pm UTC](https://discuss.elastic.co/t/configure-elasticsearch-on-django-app/326320 "2023-02-24T13:31:52Z")
:wave: Hello everyone, I have been trying for weeks now to configure Elasticsearch/logstash on my Django app. But, all the tutorials i found are dealing with local elasticsearch meanwhile the one i’m dealing with is a… --- ## [Kibana Data Table division between two column](https://discuss.elastic.co/t/kibana-data-table-division-between-two-column/193882)
**Author:** [@simple\_commentateur](https://discuss.elastic.co/u/simple_commentateur)\ **Replies:** 3\ **Last updated:** [August 6, 2019, 11:54am UTC](https://discuss.elastic.co/t/kibana-data-table-division-between-two-column/193882 "2019-08-06T11:54:04Z")
Hi, My data table look like this : and i want to add a column with the ratio sum(delivered)/sum(volume). Is it possible? I see in others topics that it could be done with canvas or Visual Builder math aggregation. … --- ## [Giving Fields Different Weights in a Multi-Match Query Using Cross-Fields Technique](https://discuss.elastic.co/t/giving-fields-different-weights-in-a-multi-match-query-using-cross-fields-technique/164268)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 5\ **Last updated:** [January 15, 2019, 12:22pm UTC](https://discuss.elastic.co/t/giving-fields-different-weights-in-a-multi-match-query-using-cross-fields-technique/164268 "2019-01-15T12:22:58Z")
Hello, I hope someone can help me. I was wondering if it's possible to use the cross-fields technique and still give different weights to the fields, cause based on what I've read, it's not possible. What do you think… --- ## [Slow deletes](https://discuss.elastic.co/t/slow-deletes/45597)
**Author:** [@erikstephens](https://discuss.elastic.co/u/erikstephens)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 1:45pm UTC](https://discuss.elastic.co/t/slow-deletes/45597 "2016-03-31T13:45:50Z")
Using version 2.1.2, using the delete-by-query api to delete records based on their type, it's been slowly deleting documents for past couple of days at roughly 1-2 million documents per day. Not seeing anything in the … --- ## [How to increase shard size and limit](https://discuss.elastic.co/t/how-to-increase-shard-size-and-limit/118635)
**Author:** [@gudipudiswaroop](https://discuss.elastic.co/u/gudipudiswaroop)\ **Replies:** 1\ **Last updated:** [February 6, 2018, 11:57am UTC](https://discuss.elastic.co/t/how-to-increase-shard-size-and-limit/118635 "2018-02-06T11:57:54Z")
Hi, I have setup elastic search on my server with default settings (single node and no clusters). I have enabled logstash to read my application logs and then I am trying to run aggregation query on top of indexed logs.… [Previous page](https://discuss.elastic.co/top.md?page=522&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=524&per_page=50&period=all)