# Top **URL:** https://discuss.elastic.co/top.md?page=524&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 525 --- ## [Date format issue MMM D, YYYY h:mm:ss A](https://discuss.elastic.co/t/date-format-issue-mmm-d-yyyy-hss-a/162851)
**Author:** [@Rajashree\_Gr](https://discuss.elastic.co/u/Rajashree_Gr)\ **Replies:** 3\ **Last updated:** [January 5, 2019, 3:09am UTC](https://discuss.elastic.co/t/date-format-issue-mmm-d-yyyy-hss-a/162851 "2019-01-05T03:09:36Z")
I'm facing the org.elasticsearch.index.mapper.MapperParsingException: failed to parse \[date\] - exception while loading the data to elastic search. The date format used is a date: MMM D, YYYY h:mm:ss A. The date value w… --- ## [Monitoring user](https://discuss.elastic.co/t/monitoring-user/73878)
**Author:** [@sredne](https://discuss.elastic.co/u/sredne)\ **Replies:** 3\ **Last updated:** [February 3, 2017, 6:35pm UTC](https://discuss.elastic.co/t/monitoring-user/73878 "2017-02-03T18:35:15Z")
Hi all, I'm still setting up my cluster with x-pack monitoring and Kibana. I setup the "update-monitor" user to have the kibana\_user, monitoring\_user and reporting\_user role and set that as the login account for Kiban… --- ## [Trigram-accelerated regex searches](https://discuss.elastic.co/t/trigram-accelerated-regex-searches/17658)
**Author:** [@Erik\_Rose\_2](https://discuss.elastic.co/u/Erik_Rose_2)\ **Replies:** 8\ **Last updated:** [September 29, 2014, 6:09pm UTC](https://discuss.elastic.co/t/trigram-accelerated-regex-searches/17658 "2014-09-29T18:09:51Z")
I'm trying to move Mozilla's source code search engine (dxr.mozilla.org) from a custom-written SQLite trigram index to ES. In the current production incarnation, we support fast regex (and, by extension, wildcard) se… --- ## [Syslog collection via Elastic Agent](https://discuss.elastic.co/t/syslog-collection-via-elastic-agent/307626)
**Author:** [@Josh\_G](https://discuss.elastic.co/u/Josh_G)\ **Replies:** 1\ **Last updated:** [June 28, 2022, 9:07am UTC](https://discuss.elastic.co/t/syslog-collection-via-elastic-agent/307626 "2022-06-28T09:07:05Z")
Hello, We have an application for which installing a local agent is not possible and there is no specific Agent Integration so we are looking to collect the syslog over TCP or UDP. I assumed within the System integrati… --- ## [Parsing problem for iis server log using filebeat 6.3.2](https://discuss.elastic.co/t/parsing-problem-for-iis-server-log-using-filebeat-6-3-2/146227)
**Author:** [@varun1992](https://discuss.elastic.co/u/varun1992)\ **Replies:** 7\ **Last updated:** [September 6, 2018, 1:36pm UTC](https://discuss.elastic.co/t/parsing-problem-for-iis-server-log-using-filebeat-6-3-2/146227 "2018-09-06T13:36:24Z")
i have a log like below #Software: Microsoft Internet Information Services 7.5 #Version: 1.0 #Date: 2018-08-28 18:24:25 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) s… --- ## [Kubernetes & Docker max-size](https://discuss.elastic.co/t/kubernetes-docker-max-size/139813)
**Author:** [@bitva77](https://discuss.elastic.co/u/bitva77)\ **Replies:** 7\ **Last updated:** [July 20, 2018, 3:52pm UTC](https://discuss.elastic.co/t/kubernetes-docker-max-size/139813 "2018-07-20T15:52:33Z")
Hi! We're trying to better manage our Kubernetes logs. I have Filebeat running in the cluster using autodiscover and shipping off to Logstash. Say in the K8s cluster, I have the Docker logging driver set to max-size o… --- ## [Ansible Role for Elasticsearch now available!](https://discuss.elastic.co/t/ansible-role-for-elasticsearch-now-available/39848)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [January 22, 2016, 7:27am UTC](https://discuss.elastic.co/t/ansible-role-for-elasticsearch-now-available/39848 "2016-01-22T07:27:21Z")
We're pleased to announce that we now have an Ansible role for Elasticsearch! Currently this works on Debian and RedHat based linux systems. Tested platforms are: \* Ubuntu 1404 \* Debian 7 \* Debian 8 \* Centos 6 … --- ## [\[RESOLVED\] "No handler found" while trying to export/import a dashboard in Kibana's Dev Tools](https://discuss.elastic.co/t/resolved-no-handler-found-while-trying-to-export-import-a-dashboard-in-kibanas-dev-tools/167303)
**Author:** [@vicpav](https://discuss.elastic.co/u/vicpav)\ **Replies:** 3\ **Last updated:** [February 7, 2019, 7:50am UTC](https://discuss.elastic.co/t/resolved-no-handler-found-while-trying-to-export-import-a-dashboard-in-kibanas-dev-tools/167303 "2019-02-07T07:50:42Z")
In order to formalize the process of Kibana dashboard updates, we want to keep them under version control and integrate into CI flow. Importing/exporting of a dashboard via API and keeping the JSON in git sounds like a r… --- ## [How to index text files (pdf, doc, txt...) in Java?](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678)
**Author:** [@gagidza](https://discuss.elastic.co/u/gagidza)\ **Replies:** 5\ **Last updated:** [December 21, 2022, 9:48am UTC](https://discuss.elastic.co/t/how-to-index-text-files-pdf-doc-txt-in-java/321678 "2022-12-21T09:48:53Z")
Hello everyone, some time ago I started to deal with Elasticsearch. Now I am faced with the task of indexing various text files from a certain directory for subsequent search by their contents. Since Elasticsearch uses … --- ## [How to rename a field within an array in ingest pipeline?](https://discuss.elastic.co/t/how-to-rename-a-field-within-an-array-in-ingest-pipeline/142424)
**Author:** [@pushanbhattacharya](https://discuss.elastic.co/u/pushanbhattacharya)\ **Replies:** 5\ **Last updated:** [August 1, 2018, 2:06am UTC](https://discuss.elastic.co/t/how-to-rename-a-field-within-an-array-in-ingest-pipeline/142424 "2018-08-01T02:06:33Z")
I have created an ingest pipeline that is being used from my logstash output plugin for elasticsearch. This pipeline only does some renaming of fields. Now, this 'rename' processor is working fine for leaf or nested fie… --- ## [Adding modules to Fleet agent](https://discuss.elastic.co/t/adding-modules-to-fleet-agent/280721)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 4\ **Last updated:** [August 10, 2021, 11:30pm UTC](https://discuss.elastic.co/t/adding-modules-to-fleet-agent/280721 "2021-08-10T23:30:43Z")
Hi, I have Elastic Cloud 7.14.0, using Fleet and an Agent on a Centos 7 server. Works great. I want to enable modules that aren't necessarily a click-and-configure in the Fleet UI. Can i modify some file locally on th… --- ## [Parsing F5 LTM logs with Logstash](https://discuss.elastic.co/t/parsing-f5-ltm-logs-with-logstash/197392)
**Author:** [@sarahvo](https://discuss.elastic.co/u/sarahvo)\ **Replies:** 7\ **Last updated:** [August 29, 2019, 7:09pm UTC](https://discuss.elastic.co/t/parsing-f5-ltm-logs-with-logstash/197392 "2019-08-29T19:09:34Z")
Hi, I'm trying to parse LTM logs using this example (found in the official documentation) below: filter { if \[type\] == "syslog" { grok { match =\> { "message" =\> "%{SYSLOGTIMESTAMP:syslog\_timestamp} %{SYSLOGHOST:sysl… --- ## [How to configure jolokia with tomcat using metricbeat?](https://discuss.elastic.co/t/how-to-configure-jolokia-with-tomcat-using-metricbeat/149541)
**Author:** [@Aftab\_Ali](https://discuss.elastic.co/u/Aftab_Ali)\ **Replies:** 6\ **Last updated:** [October 1, 2018, 7:11am UTC](https://discuss.elastic.co/t/how-to-configure-jolokia-with-tomcat-using-metricbeat/149541 "2018-10-01T07:11:31Z")
Dear Team, I want to see Tomcat internal metric like JVM memory and Threads count and more, i followed the steps:- Step 1:- download the JAVA agent from https://jolokia.org/download.html package name is jolokia-jvm-1… --- ## [Adding custom headers to the client](https://discuss.elastic.co/t/adding-custom-headers-to-the-client/118077)
**Author:** [@robrotheram](https://discuss.elastic.co/u/robrotheram)\ **Replies:** 3\ **Last updated:** [February 2, 2018, 11:02am UTC](https://discuss.elastic.co/t/adding-custom-headers-to-the-client/118077 "2018-02-02T11:02:13Z")
Hi there I am trying to do something that I except is kinda odd. I want to set a dynamic header that gets passed to our custom elasticsearch proxy that the user sets depending on certain criteria. In Kibana 4 we had acc… --- ## [Copy template from elastic to elastic](https://discuss.elastic.co/t/copy-template-from-elastic-to-elastic/104895)
**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 12:57pm UTC](https://discuss.elastic.co/t/copy-template-from-elastic-to-elastic/104895 "2017-10-23T12:57:51Z")
Hi, I have a template on one machine and want the same exact template copied into my other ES. Help will be amazing! Here is the template (sorry it's in a pic. and not text I can't ctl+c/ctl+p from this machine) : \[i… --- ## [Install filebeat on centos 6.4](https://discuss.elastic.co/t/install-filebeat-on-centos-6-4/47602)
**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\ **Replies:** 4\ **Last updated:** [April 18, 2016, 5:42am UTC](https://discuss.elastic.co/t/install-filebeat-on-centos-6-4/47602 "2016-04-18T05:42:52Z")
Any one please tell me, how to install filebeat on centos 6.4... --- ## [Use Silk instead of ELK](https://discuss.elastic.co/t/use-silk-instead-of-elk/89957)
**Author:** [@Leela\_Kodali](https://discuss.elastic.co/u/Leela_Kodali)\ **Replies:** 5\ **Last updated:** [June 19, 2017, 5:05pm UTC](https://discuss.elastic.co/t/use-silk-instead-of-elk/89957 "2017-06-19T17:05:46Z")
Hi, I already configured the process, Filebeat --\>Logstash--\> Elastic Search --\>Kibana, it is working good, but we have the requirement to use Solr instead of Elastic Search, while researching on internet i found about S… --- ## [Index mapping changed from object to nested and reindex](https://discuss.elastic.co/t/index-mapping-changed-from-object-to-nested-and-reindex/266373)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 1\ **Last updated:** [March 19, 2021, 5:26pm UTC](https://discuss.elastic.co/t/index-mapping-changed-from-object-to-nested-and-reindex/266373 "2021-03-19T17:26:04Z")
Hello I want to change an index property which is object (default) to nested type and keep the data. The process I'm following is creating a new index with the new mappings then use the reindex API. The problem comes wh… --- ## [Disable on click for filtering iframe graphs](https://discuss.elastic.co/t/disable-on-click-for-filtering-iframe-graphs/56417)
**Author:** [@sen](https://discuss.elastic.co/u/sen)\ **Replies:** 7\ **Last updated:** [October 28, 2016, 8:28pm UTC](https://discuss.elastic.co/t/disable-on-click-for-filtering-iframe-graphs/56417 "2016-10-28T20:28:19Z")
Hello folks, I am using Kibana 4.5.1 where I use the iframes to import my graph in my web page. However, i can still filter by clicking in my graphs. This is something i want to remove. Here is the situation in pictur… --- ## [Elasticsearch nodes doing young generation gc very frequently](https://discuss.elastic.co/t/elasticsearch-nodes-doing-young-generation-gc-very-frequently/163661)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 6\ **Last updated:** [January 14, 2019, 4:37am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-doing-young-generation-gc-very-frequently/163661 "2019-01-14T04:37:43Z")
Cluster details : Elasticsearch version : 6.3.0 Java version : 1.8.0\_191 54 data nodes Each BM is split into 2 VMs. Each VM has configuration : 128 GB RAM, 31 GB Heap, 18 cores 3 master nodes Jvm options -Xms31744… --- ## [My first corrupted index](https://discuss.elastic.co/t/my-first-corrupted-index/22936)
**Author:** [@Michael\_Dillon](https://discuss.elastic.co/u/Michael_Dillon)\ **Replies:** 0\ **Last updated:** [March 27, 2015, 3:10am UTC](https://discuss.elastic.co/t/my-first-corrupted-index/22936 "2015-03-27T03:10:59Z")
I had a disk problem on my development laptop and my ES index is only barely working. Before restoring a \[old\] snapshot and just moving forward, I'd like to learn if this can be recovered. My first sign of troub… --- ## [What charts library does Kibana use?](https://discuss.elastic.co/t/what-charts-library-does-kibana-use/21587)
**Author:** [@Mauro\_Julian\_Fernand](https://discuss.elastic.co/u/Mauro_Julian_Fernand)\ **Replies:** 2\ **Last updated:** [January 12, 2015, 5:45pm UTC](https://discuss.elastic.co/t/what-charts-library-does-kibana-use/21587 "2015-01-12T17:45:20Z")
I used Kibana for a couple of tasks in works and I like the charts it generates, what library does it use? Thanks. -- You received this message because you are subscribed to the Google Groups "elasticsearch" gr… --- ## [ElasticCloud - alert on disk usage using metricbeats](https://discuss.elastic.co/t/elasticcloud-alert-on-disk-usage-using-metricbeats/304663)
**Author:** [@Thomas\_Masquelier](https://discuss.elastic.co/u/Thomas_Masquelier)\ **Replies:** 4\ **Last updated:** [May 19, 2022, 1:12pm UTC](https://discuss.elastic.co/t/elasticcloud-alert-on-disk-usage-using-metricbeats/304663 "2022-05-19T13:12:51Z")
I'm struggling to understand how to define an alert for my hosts disk usage in elastic cloud. The agent is installed on my different hosts with the "system" integration. Pretty sure this use metricbeats. I can see this… --- ## [How to use Multiline](https://discuss.elastic.co/t/how-to-use-multiline/39583)
**Author:** [@Aron\_Pedersen](https://discuss.elastic.co/u/Aron_Pedersen)\ **Replies:** 4\ **Last updated:** [January 28, 2016, 11:29am UTC](https://discuss.elastic.co/t/how-to-use-multiline/39583 "2016-01-28T11:29:13Z")
I am trying to use the new Multiline option in filebeat 1.2 but is having no success. I would like to take the logs that Ola Hallengren's (https://ola.hallengren.com) scripts makes. I have an example of one below. What I… --- ## [Filebeat to read logs from Remote server location](https://discuss.elastic.co/t/filebeat-to-read-logs-from-remote-server-location/73700)
**Author:** [@Honda\_fred\_elk](https://discuss.elastic.co/u/Honda_fred_elk)\ **Replies:** 3\ **Last updated:** [February 2, 2017, 3:16pm UTC](https://discuss.elastic.co/t/filebeat-to-read-logs-from-remote-server-location/73700 "2017-02-02T15:16:14Z")
Hello All, I have a question on Filebeat. Is it possible filebeat to read the log file data from remote server location? Anybody have configured for this situation? Can I get advice on this? Thanks --- ## [UDP listener problem](https://discuss.elastic.co/t/udp-listener-problem/98677)
**Author:** [@pierre1](https://discuss.elastic.co/u/pierre1)\ **Replies:** 8\ **Last updated:** [August 30, 2017, 6:55pm UTC](https://discuss.elastic.co/t/udp-listener-problem/98677 "2017-08-30T18:55:17Z")
Hey i have a probleme with UDP: my conf : firewalld and selinux disable logtstash 5.5-2 my conf : input { udp { port =\> 9556 host =\> "1.1.1.55" workers =\> 2 codec =\> netflow { versions =\> \[5, 9\] target =\> "nf… --- ## [Tutorial Documentation on Filebeat for Windows](https://discuss.elastic.co/t/tutorial-documentation-on-filebeat-for-windows/70504)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 8\ **Last updated:** [January 5, 2017, 2:08pm UTC](https://discuss.elastic.co/t/tutorial-documentation-on-filebeat-for-windows/70504 "2017-01-05T14:08:08Z")
Is there other web pages that have tutorial on how to operate Filebeat on Windows with Kafka output? The official document is very confusing and useless --- ## [Why All shards failed](https://discuss.elastic.co/t/why-all-shards-failed/211288)
**Author:** [@david3721](https://discuss.elastic.co/u/david3721)\ **Replies:** 1\ **Last updated:** [December 10, 2019, 12:01pm UTC](https://discuss.elastic.co/t/why-all-shards-failed/211288 "2019-12-10T12:01:00Z")
why my Kibana like this... help please! version is 7.1.1 { \*\* "message": "all shards failed: \[search\_phase\_execution\_exception\] all shards failed",\*\* \*\* "statusCode": 503,\*\* \*\* "error": "Service Unavailable"\*\* }… --- ## [Getting errors in the ES Java Clinet when upserting the index](https://discuss.elastic.co/t/getting-errors-in-the-es-java-clinet-when-upserting-the-index/48200)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 4\ **Last updated:** [April 24, 2016, 11:24am UTC](https://discuss.elastic.co/t/getting-errors-in-the-es-java-clinet-when-upserting-the-index/48200 "2016-04-24T11:24:17Z")
Hello, We have something like 53K upsert (row update) requests going into an index. Seeing this exception. java.util.concurrent.ExecutionException: RemoteTransportException\[\[prod525\]\[xx.xx.xx.xx:9300\]\[indices:data/w… --- ## [Bulk api queue becomes full](https://discuss.elastic.co/t/bulk-api-queue-becomes-full/63364)
**Author:** [@lars.steinbrueck](https://discuss.elastic.co/u/lars.steinbrueck)\ **Replies:** 3\ **Last updated:** [October 20, 2016, 7:05am UTC](https://discuss.elastic.co/t/bulk-api-queue-becomes-full/63364 "2016-10-20T07:05:52Z")
Hi everyone, we are facing some strange behavior regarding bulk indexing at the moment. We try to index 300 million documents (0.6kb each). This is done using bulks of size 10,000 using 6 clients. This works fine. Howe… --- ## [Grok field extract: One pattern, multiple matches](https://discuss.elastic.co/t/grok-field-extract-one-pattern-multiple-matches/130497)
**Author:** [@jonrust](https://discuss.elastic.co/u/jonrust)\ **Replies:** 6\ **Last updated:** [May 3, 2018, 6:11pm UTC](https://discuss.elastic.co/t/grok-field-extract-one-pattern-multiple-matches/130497 "2018-05-03T18:11:46Z")
Oracle alert logs contain multiple ORA- codes. I can't figure how to tell grok to match all and return an array of the matches. if \[msg\] =~ /ORA-/ { grok { match =\> \[ "msg","(?\ORA-\[0-9\]+)" \] } … --- ## [How many tcp connections should ES/logstash generate?](https://discuss.elastic.co/t/how-many-tcp-connections-should-es-logstash-generate/18679)
**Author:** [@Bastien\_Chong](https://discuss.elastic.co/u/Bastien_Chong)\ **Replies:** 7\ **Last updated:** [July 17, 2014, 12:38pm UTC](https://discuss.elastic.co/t/how-many-tcp-connections-should-es-logstash-generate/18679 "2014-07-17T12:38:51Z")
I have a basic setup with a logstash shipper, an indexer and an elasticsearch cluster. Elasticsearch listen on the standart 9200/9300 and logstash indexer 9301/9302. When I do a netstat | wc -l for the ES process: 18… --- ## [Announcing the official Elastic Homebrew tap](https://discuss.elastic.co/t/announcing-the-official-elastic-homebrew-tap/186741)
**Author:** [@elyssaemrich](https://discuss.elastic.co/u/elyssaemrich)\ **Replies:** 0\ **Last updated:** [June 20, 2019, 5:52pm UTC](https://discuss.elastic.co/t/announcing-the-official-elastic-homebrew-tap/186741 "2019-06-20T17:52:33Z")
Elastic Homebrew tap released We’re excited to announce the release of the official Elastic Homebrew tap. We brewed up a batch of the Elastic Stack using a recipe we think you'll love. Learn more and start brewing. … --- ## [Elasticsearch vb.net example](https://discuss.elastic.co/t/elasticsearch-vb-net-example/60861)
**Author:** [@tinu71](https://discuss.elastic.co/u/tinu71)\ **Replies:** 0\ **Last updated:** [September 19, 2016, 9:51am UTC](https://discuss.elastic.co/t/elasticsearch-vb-net-example/60861 "2016-09-19T09:51:27Z")
Good morning everybody I have setup an elasticsearch cluster on version 2.3.4 on windows. Now I will implement a search with NEST in our VB.NET project. On the web, I have found a lot of C# examples but no one in VB.NE… --- ## [Input tcp error](https://discuss.elastic.co/t/input-tcp-error/100336)
**Author:** [@xiaopeng\_zhang](https://discuss.elastic.co/u/xiaopeng_zhang)\ **Replies:** 4\ **Last updated:** [September 14, 2017, 2:15pm UTC](https://discuss.elastic.co/t/input-tcp-error/100336 "2017-09-14T14:15:37Z")
i use the logback to send the log by tcp port 80, and i use the logstash-logback-encoder plugin. pom.xml: \4.0.0\ \edu.zxp\ \log4jlearn\ \ **Author:** [@kiwi0217](https://discuss.elastic.co/u/kiwi0217)\ **Replies:** 5\ **Last updated:** [February 6, 2018, 7:00am UTC](https://discuss.elastic.co/t/elasticsearch-dead-recently-without-modify-anything/116839 "2018-02-06T07:00:07Z") i use kibana in Ubuntu16.04 and it shows： Elasticsearch plugin is red Unable to connect to Elasticsearch at http://127.0.0.1:9200 and i check about service and elasticsearch already dead. If I use command "service el… --- ## [An established connection was aborted by the software in your host machine](https://discuss.elastic.co/t/an-established-connection-was-aborted-by-the-software-in-your-host-machine/105981)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 1\ **Last updated:** [November 1, 2017, 4:18pm UTC](https://discuss.elastic.co/t/an-established-connection-was-aborted-by-the-software-in-your-host-machine/105981 "2017-11-01T16:18:54Z")
I am pushing data to elasticsearch using bulk api RestClient. When I am pushing 1Lac records I am not getting any exception. But above 1Lac records I am getting below exception. An established connection was aborted by … --- ## [Loop through and translate nested object](https://discuss.elastic.co/t/loop-through-and-translate-nested-object/170742)
**Author:** [@Ant](https://discuss.elastic.co/u/Ant)\ **Replies:** 6\ **Last updated:** [March 5, 2019, 5:33pm UTC](https://discuss.elastic.co/t/loop-through-and-translate-nested-object/170742 "2019-03-05T17:33:09Z")
Hi, I'm pretty sure I need to use ruby to achive this but I don't really know anything about it. I've done a translation with logstash already where I enrich an ID field that occurs once per document. What I need to do… --- ## [Queries on "ip\_range" type (missing documentation)](https://discuss.elastic.co/t/queries-on-ip-range-type-missing-documentation/246445)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 7\ **Last updated:** [September 16, 2020, 10:47am UTC](https://discuss.elastic.co/t/queries-on-ip-range-type-missing-documentation/246445 "2020-09-16T10:47:23Z")
Hi, Unfortunately, I couldn't find any pointers in the documentation. I'd like to have some IP ranges saved and be able to: Perform a query for an IP address. Perform a query for a CIDR range. I got #1 working with q… --- ## [Error while initializing input: No paths were defined for input accessing](https://discuss.elastic.co/t/error-while-initializing-input-no-paths-were-defined-for-input-accessing/210166)
**Author:** [@Dutchess\_Nicole](https://discuss.elastic.co/u/Dutchess_Nicole)\ **Replies:** 1\ **Last updated:** [December 2, 2019, 2:11pm UTC](https://discuss.elastic.co/t/error-while-initializing-input-no-paths-were-defined-for-input-accessing/210166 "2019-12-02T14:11:30Z")
strange error with getting filebeat to work with the mysql module Hi, I've been trying to get a filebeat running in order to parse a mysql slow log. According to the tutorials online one simply has to configure the file… --- ## [Histogram Aggregation Filter Nested Dates Array Per Interval](https://discuss.elastic.co/t/histogram-aggregation-filter-nested-dates-array-per-interval/145457)
**Author:** [@kigonya](https://discuss.elastic.co/u/kigonya)\ **Replies:** 7\ **Last updated:** [September 5, 2018, 3:59am UTC](https://discuss.elastic.co/t/histogram-aggregation-filter-nested-dates-array-per-interval/145457 "2018-09-05T03:59:21Z")
I have met a challenge that has made me review these forums and sign up :). My work is related to cancer trials. We are currently on ES 5.5. We are trying to track numbers of trials that enter into different status over… --- ## [Disable logrotation](https://discuss.elastic.co/t/disable-logrotation/83444)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 4\ **Last updated:** [April 26, 2017, 2:10pm UTC](https://discuss.elastic.co/t/disable-logrotation/83444 "2017-04-26T14:10:12Z")
We have our internal infrastructure that takes care of log rotation and because ES has inbuilt log rotation by default, the glob pattern does not match ultimately canceling out any log rotation. Is there a way to disa… --- ## [.security shard unassigned](https://discuss.elastic.co/t/security-shard-unassigned/80273)
**Author:** [@Joe](https://discuss.elastic.co/u/Joe)\ **Replies:** 5\ **Last updated:** [March 31, 2017, 1:21pm UTC](https://discuss.elastic.co/t/security-shard-unassigned/80273 "2017-03-31T13:21:33Z")
Just starting to implement security in our proof of concept ES 5.1.1 cluster. .security index is yellow with 2 unassigned shards. 25 data-ingest only nodes, 3 master only, 1 client only, (1 kibana only). The security… --- ## [How to set Log4J level on individual Logstash plugin?](https://discuss.elastic.co/t/how-to-set-log4j-level-on-individual-logstash-plugin/74306)
**Author:** [@Defaux](https://discuss.elastic.co/u/Defaux)\ **Replies:** 1\ **Last updated:** [February 8, 2017, 11:42pm UTC](https://discuss.elastic.co/t/how-to-set-log4j-level-on-individual-logstash-plugin/74306 "2017-02-08T23:42:26Z")
Background: I've been working extensively with the Logstash Netflow codec the past few days. Although it's been working fairly well, it's been filling my logs with a ton of messages like: ... \[2017-02-08T00:52:58,724\]… --- ## [Migración completa desde un VPS a otro](https://discuss.elastic.co/t/migracion-completa-desde-un-vps-a-otro/96766)
**Author:** [@kriter](https://discuss.elastic.co/u/kriter)\ **Replies:** 6\ **Last updated:** [August 11, 2017, 4:46pm UTC](https://discuss.elastic.co/t/migracion-completa-desde-un-vps-a-otro/96766 "2017-08-11T16:46:18Z")
Hola a tod@s. Tengo una duda en la que a pesar que hay documentación y aparenta ser sencilla, no está muy claro y prefiero evitar catástrofes. Tengo elasticsearch en un VPS con una instalacion sencilla (un solo nodo… --- ## [Logstash/Kibana breaks my log line into multiple events/documets](https://discuss.elastic.co/t/logstash-kibana-breaks-my-log-line-into-multiple-events-documets/96517)
**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\ **Replies:** 6\ **Last updated:** [August 10, 2017, 5:35pm UTC](https://discuss.elastic.co/t/logstash-kibana-breaks-my-log-line-into-multiple-events-documets/96517 "2017-08-10T17:35:10Z")
Its strange though, Logstash/kibana is breaking my single log line into multiple events/documents. Whereas it should be a single event , otherwise it doesnt solve my purpose to even put these logs into ELK. Any idea? ho… --- ## [Time Filter for the current month](https://discuss.elastic.co/t/time-filter-for-the-current-month/215361)
**Author:** [@mattiacareddu](https://discuss.elastic.co/u/mattiacareddu)\ **Replies:** 3\ **Last updated:** [January 28, 2020, 12:13pm UTC](https://discuss.elastic.co/t/time-filter-for-the-current-month/215361 "2020-01-28T12:13:42Z")
I'm wondering if there is a way to filter the current visualization for the current month. What I need is a time range from the start of the current month month to now. I tried creating a new quick filter but I dind't f… --- ## [Alerting Conditions and Email Body](https://discuss.elastic.co/t/alerting-conditions-and-email-body/114300)
**Author:** [@MultiplierMultiplier](https://discuss.elastic.co/u/MultiplierMultiplier)\ **Replies:** 8\ **Last updated:** [January 15, 2018, 12:47pm UTC](https://discuss.elastic.co/t/alerting-conditions-and-email-body/114300 "2018-01-15T12:47:50Z")
I am having some troubles with the alerting functions in Watcher, below is part of my JSON query which allows you to understand what I'm trying to do and which fields I am using. "aggs": { "2": { "significant… --- ## [Authorization for clients to only view a single dashboard](https://discuss.elastic.co/t/authorization-for-clients-to-only-view-a-single-dashboard/114335)
**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\ **Replies:** 3\ **Last updated:** [January 5, 2018, 11:55pm UTC](https://discuss.elastic.co/t/authorization-for-clients-to-only-view-a-single-dashboard/114335 "2018-01-05T23:55:59Z")
I have the following: A ES 6.0 index for each of my domains Clients who subscribe to a domain a login app with its own authentication & authorization for clients. After being authenticated by the login app, the user's … --- ## [SQL Dividing 2 values from 2 queries in CANVAS](https://discuss.elastic.co/t/sql-dividing-2-values-from-2-queries-in-canvas/222381)
**Author:** [@AlfredoC](https://discuss.elastic.co/u/AlfredoC)\ **Replies:** 4\ **Last updated:** [April 2, 2020, 6:53pm UTC](https://discuss.elastic.co/t/sql-dividing-2-values-from-2-queries-in-canvas/222381 "2020-04-02T18:53:36Z")
Hi, I want to make a division form 2 queries (SELECT COUNT(id) FROM "production" WHERE state='created') / (SELECT COUNT(id) AS number FROM "production") How would you divide the counts between these two? [Previous page](https://discuss.elastic.co/top.md?page=523&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=525&per_page=50&period=all)