# Top **URL:** https://discuss.elastic.co/top.md?page=538&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 539 --- ## [Calculating count per term filter within one metric](https://discuss.elastic.co/t/calculating-count-per-term-filter-within-one-metric/189088)
**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\ **Replies:** 4\ **Last updated:** [July 15, 2019, 6:35am UTC](https://discuss.elastic.co/t/calculating-count-per-term-filter-within-one-metric/189088 "2019-07-15T06:35:11Z")
Hello All, I am currently working with a simple data set where each row represents an entry with one of three possible states. Let's say i have 5 documents in my index: { "@timestamp": "2019-07-01T11:39:00.132Z", … --- ## [Reindex in a cluster does not get all documents](https://discuss.elastic.co/t/reindex-in-a-cluster-does-not-get-all-documents/186492)
**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\ **Replies:** 5\ **Last updated:** [July 2, 2019, 9:48am UTC](https://discuss.elastic.co/t/reindex-in-a-cluster-does-not-get-all-documents/186492 "2019-07-02T09:48:52Z")
Elastic Stack Version: 6.5 I am trying to reindex my index "old\_index" to another index "new\_index" on the same cluster. POST \_reindex { "source": { "index": "old\_index", "\_source": { "include": \[… --- ## [How to query Elastic Search from my web app?](https://discuss.elastic.co/t/how-to-query-elastic-search-from-my-web-app/15262)
**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\ **Replies:** 2\ **Last updated:** [January 16, 2014, 6:14am UTC](https://discuss.elastic.co/t/how-to-query-elastic-search-from-my-web-app/15262 "2014-01-16T06:14:49Z")
I am not very clear on how to do this, I have the following scenario: My data/docs are indexed using scala native Java API. - I would like to use the REST http API to access ES, What I would like to understand is how… --- ## [Grok tests pass, logstash still borks with "\_grokparsefailure"](https://discuss.elastic.co/t/grok-tests-pass-logstash-still-borks-with--grokparsefailure/25155)
**Author:** [@nseery](https://discuss.elastic.co/u/nseery)\ **Replies:** 6\ **Last updated:** [July 10, 2015, 2:15am UTC](https://discuss.elastic.co/t/grok-tests-pass-logstash-still-borks-with--grokparsefailure/25155 "2015-07-10T02:15:51Z")
Hello all, working on parsing firewall logs and I have it working at http://grokconstructor.appspot.com/ When I put the same pattern in Logstash, it comes back with a lovely "\_grokparsefailure" log line: 2015-07-08T… --- ## [Make batch size configurable in elastic search output plugin](https://discuss.elastic.co/t/make-batch-size-configurable-in-elastic-search-output-plugin/125724)
**Author:** [@Patrik\_Iselind](https://discuss.elastic.co/u/Patrik_Iselind)\ **Replies:** 8\ **Last updated:** [March 27, 2018, 10:00am UTC](https://discuss.elastic.co/t/make-batch-size-configurable-in-elastic-search-output-plugin/125724 "2018-03-27T10:00:42Z")
Is there a way to configure the batch size in the elastic search output plugin? I have an Elastic Search server at AWS on nodes with a request max size set to 10MB. If the output plugin sends more than 10MB in a request… --- ## [How to use Metricbeat to monitor Docker Swarm containers, hosts and external services](https://discuss.elastic.co/t/how-to-use-metricbeat-to-monitor-docker-swarm-containers-hosts-and-external-services/160037)
**Author:** [@hamid.haghshenas](https://discuss.elastic.co/u/hamid.haghshenas)\ **Replies:** 3\ **Last updated:** [December 13, 2018, 8:20am UTC](https://discuss.elastic.co/t/how-to-use-metricbeat-to-monitor-docker-swarm-containers-hosts-and-external-services/160037 "2018-12-13T08:20:02Z")
We need to monitor: a number of Docker Swarm services, each may have multiple containers on multiple hosts (A host may run several containers of the same service), hosts running Docker Swarm, and Some external services… --- ## [Unregistered Authentication Agent for unix-process](https://discuss.elastic.co/t/unregistered-authentication-agent-for-unix-process/262716)
**Author:** [@Taufik\_Maulana](https://discuss.elastic.co/u/Taufik_Maulana)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 12:45am UTC](https://discuss.elastic.co/t/unregistered-authentication-agent-for-unix-process/262716 "2021-02-01T00:45:39Z")
Hello everyone, I'm having trouble starting my elasticsearch . This is what journal -xe command's output. -- Subject: Unit elasticsearch.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freed… --- ## [Cant check icu\_tokenizer](https://discuss.elastic.co/t/cant-check-icu-tokenizer/20540)
**Author:** [@Alexander\_Dorogikh](https://discuss.elastic.co/u/Alexander_Dorogikh)\ **Replies:** 5\ **Last updated:** [April 10, 2015, 11:24am UTC](https://discuss.elastic.co/t/cant-check-icu-tokenizer/20540 "2015-04-10T11:24:31Z")
Salutations here is examples http://www.elasticsearch.org/guide/en/elasticsearch/guide/current/icu-tokenizer.html $ curl -XGET http://127.0.0.1:9200 { "status" : 200, "name" : "Victor Creed", "version" … --- ## [Kibana auto login (with security enabled)](https://discuss.elastic.co/t/kibana-auto-login-with-security-enabled/292934)
**Author:** [@borisr84](https://discuss.elastic.co/u/borisr84)\ **Replies:** 4\ **Last updated:** [January 4, 2022, 10:57am UTC](https://discuss.elastic.co/t/kibana-auto-login-with-security-enabled/292934 "2022-01-04T10:57:16Z")
Hi, I've enabled Kibana security with x-pack security and now when I access Kibana UI I need to provide credentials. My preferred behavior is to authenticate users automatically (as my system already has a login screen… --- ## [Python log Logstash grok filter](https://discuss.elastic.co/t/python-log-logstash-grok-filter/120753)
**Author:** [@Data-drone](https://discuss.elastic.co/u/Data-drone)\ **Replies:** 3\ **Last updated:** [February 22, 2018, 6:50am UTC](https://discuss.elastic.co/t/python-log-logstash-grok-filter/120753 "2018-02-22T06:50:04Z")
I have a filter setup: filter { grok { match =\> \[ "message", "%{TIMESTAMP\_ISO8601:timestamp} - %{DATA:module} - %{LOGLEVEL:Level} - %{GREEDYDATA:logmessage}" \] } date { timezone =\> "Australia… --- ## [Performance - Querying against \_id versus \_source content](https://discuss.elastic.co/t/performance-querying-against-id-versus-source-content/167862)
**Author:** [@freaka](https://discuss.elastic.co/u/freaka)\ **Replies:** 1\ **Last updated:** [February 15, 2019, 7:57pm UTC](https://discuss.elastic.co/t/performance-querying-against-id-versus-source-content/167862 "2019-02-15T19:57:01Z")
Hi, I have read that indexing is faster when no id is specified (elasticsearch does not have to check for duplicate). However, is it relevant to index with a chosen \_id if this document has to be retrieved multiple tim… --- ## [Date format strings are no longer interchangeable between snake\_case and camelCase](https://discuss.elastic.co/t/date-format-strings-are-no-longer-interchangeable-between-snake-case-and-camelcase/235621)
**Author:** [@kstevens715](https://discuss.elastic.co/u/kstevens715)\ **Replies:** 0\ **Last updated:** [June 3, 2020, 7:22pm UTC](https://discuss.elastic.co/t/date-format-strings-are-no-longer-interchangeable-between-snake-case-and-camelcase/235621 "2020-06-03T19:22:45Z")
After upgrading from ES 7.5.2 to 7.6.1, I found that a date format string of dateOptionalTime is no longer interchangeable with date\_optional\_time. In 7.5.2 this works fine. In 7.6.2 (and subsequently confirmed the same … --- ## [Can't remove key in keystone](https://discuss.elastic.co/t/cant-remove-key-in-keystone/300943)
**Author:** [@chaishiqi](https://discuss.elastic.co/u/chaishiqi)\ **Replies:** 1\ **Last updated:** [March 29, 2022, 12:53pm UTC](https://discuss.elastic.co/t/cant-remove-key-in-keystone/300943 "2022-03-29T12:53:52Z")
/usr/share/Elasticsearch/bin/Elasticsearch-keystore remove xpack.security.authc.realms.oidc.oidc1.rp.client\_secret ERROR: will not overwrite keystore at \[/etc/Elasticsearch/Elasticsearch.keystore\], because this incurs c… --- ## [Using Elastic Search as a Queue?](https://discuss.elastic.co/t/using-elastic-search-as-a-queue/14743)
**Author:** [@Tim\_Uckun](https://discuss.elastic.co/u/Tim_Uckun)\ **Replies:** 2\ **Last updated:** [December 6, 2013, 4:19am UTC](https://discuss.elastic.co/t/using-elastic-search-as-a-queue/14743 "2013-12-06T04:19:48Z")
Is it possible to use ElasticSearch as a message queue? Is there a pubsub plugin for redis like behavior? If not is there a strategy for any kind of a FIFO index even if it involves polling? Thanks -- You re… --- ## [Http HEAD request to ES in java](https://discuss.elastic.co/t/http-head-request-to-es-in-java/9869)
**Author:** [@chris\_harrington](https://discuss.elastic.co/u/chris_harrington)\ **Replies:** 4\ **Last updated:** [December 4, 2012, 11:39am UTC](https://discuss.elastic.co/t/http-head-request-to-es-in-java/9869 "2012-12-04T11:39:26Z")
I've been searching the docs for the last few hours trying to find out how to do make a HEAD request to ES in java and I can't find anything about it. Basically I'm trying to find out if a document exists in the mos… --- ## [Out of Memory Error on ElasticSearch running master only with 8 GB with version 5.2.2](https://discuss.elastic.co/t/out-of-memory-error-on-elasticsearch-running-master-only-with-8-gb-with-version-5-2-2/127441)
**Author:** [@Jayakrishnan\_Nair](https://discuss.elastic.co/u/Jayakrishnan_Nair)\ **Replies:** 7\ **Last updated:** [April 10, 2018, 10:00am UTC](https://discuss.elastic.co/t/out-of-memory-error-on-elasticsearch-running-master-only-with-8-gb-with-version-5-2-2/127441 "2018-04-10T10:00:32Z")
\[2018-04-10T07:38:28,846\]\[ERROR\]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[\_ras\_master\_9200\] fatal error in thread \[Thread-22\], exiting java.lang.OutOfMemoryError: Java heap space at org.elasticsearch.common.… --- ## [No data from filebeat cisco module](https://discuss.elastic.co/t/no-data-from-filebeat-cisco-module/239402)
**Author:** [@bqy314495](https://discuss.elastic.co/u/bqy314495)\ **Replies:** 8\ **Last updated:** [July 8, 2020, 4:17am UTC](https://discuss.elastic.co/t/no-data-from-filebeat-cisco-module/239402 "2020-07-08T04:17:09Z")
hi, guys i'm new to this platform and want to do some cisco device monitoring , in my lab i've setted netflow and syslog on asa firewall , and now i can see data from netflow and make dashboards on kibana. which now p… --- ## [Logstash not indexing in Solr](https://discuss.elastic.co/t/logstash-not-indexing-in-solr/73243)
**Author:** [@Samuel\_Lima](https://discuss.elastic.co/u/Samuel_Lima)\ **Replies:** 8\ **Last updated:** [February 3, 2017, 9:48pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-in-solr/73243 "2017-02-03T21:48:00Z")
I'm trying to implement the following architecture: Apache Log --\> Filebeat --\> Logstash --\> Solr Apache and Filebeat run in the same VM. Logstash and Solr run each one on its own VM. I know by the logs that Filebeat… --- ## [Secure Kibana with Nginx and ldap authentication](https://discuss.elastic.co/t/secure-kibana-with-nginx-and-ldap-authentication/54997)
**Author:** [@sipazzo](https://discuss.elastic.co/u/sipazzo)\ **Replies:** 1\ **Last updated:** [July 8, 2016, 11:37pm UTC](https://discuss.elastic.co/t/secure-kibana-with-nginx-and-ldap-authentication/54997 "2016-07-08T23:37:21Z")
I have a 5 node elasticsearch cluster (2.3.1-1) with Kibana app (4.5.0-1), and marvel and Sense plugins installed running on OEL 7. I have used iptables and nginx to secure elasticsearch and the Kibana ui utilizing ldap… --- ## [Use index pattern with and without timebased events](https://discuss.elastic.co/t/use-index-pattern-with-and-without-timebased-events/63296)
**Author:** [@aros](https://discuss.elastic.co/u/aros)\ **Replies:** 3\ **Last updated:** [October 19, 2016, 10:59am UTC](https://discuss.elastic.co/t/use-index-pattern-with-and-without-timebased-events/63296 "2016-10-19T10:59:54Z")
Hi, I have the problem that i would like to use an index pattern as well as timebased events index and without timestamps. E.g. I want to know the total number of documents in an index and draw a datehistogram of when … --- ## [Filebeat custom log files / how to disable default module field mappings](https://discuss.elastic.co/t/filebeat-custom-log-files-how-to-disable-default-module-field-mappings/196195)
**Author:** [@tishma](https://discuss.elastic.co/u/tishma)\ **Replies:** 4\ **Last updated:** [August 23, 2019, 4:18pm UTC](https://discuss.elastic.co/t/filebeat-custom-log-files-how-to-disable-default-module-field-mappings/196195 "2019-08-23T16:18:55Z")
I'm using filebeat to read log files that are not supported out of the box, for elasticsearch indexing. The thing is that I get 1000+ field mappings that appear to be coming from default filebeat modules (apache, nginx,… --- ## [Exiting: error loading config file: yaml: line 95: did not find expected '-' indicator](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-95-did-not-find-expected-indicator/261430)
**Author:** [@Ana\_11](https://discuss.elastic.co/u/Ana_11)\ **Replies:** 2\ **Last updated:** [January 19, 2021, 5:27am UTC](https://discuss.elastic.co/t/exiting-error-loading-config-file-yaml-line-95-did-not-find-expected-indicator/261430 "2021-01-19T05:27:51Z")
Hi I have installed filebeat on rsyslog server and have enabled system module. while running filebeat setup -e im getting the below error i have reffered other posts also but unable to find my mistake please help. "Exi… --- ## [Search in HTTP request field](https://discuss.elastic.co/t/search-in-http-request-field/103594)
**Author:** [@Mohsen\_Ibrahim](https://discuss.elastic.co/u/Mohsen_Ibrahim)\ **Replies:** 2\ **Last updated:** [October 13, 2017, 6:07am UTC](https://discuss.elastic.co/t/search-in-http-request-field/103594 "2017-10-13T06:07:28Z")
Hi, I am using ELK stack to index my apache access logs and everything is just fine but I have small problem here it is I need to find all documents which their request field starts with '/page1' so I can graph the res… --- ## [Elasticsearch.yml chanages 2.x to 5.x on AWS EC2 - Amazon linux](https://discuss.elastic.co/t/elasticsearch-yml-chanages-2-x-to-5-x-on-aws-ec2-amazon-linux/88041)
**Author:** [@murlockvoices](https://discuss.elastic.co/u/murlockvoices)\ **Replies:** 7\ **Last updated:** [June 30, 2017, 3:06pm UTC](https://discuss.elastic.co/t/elasticsearch-yml-chanages-2-x-to-5-x-on-aws-ec2-amazon-linux/88041 "2017-06-30T15:06:49Z")
Dear Elastic, I've decided to try out the Elasticsearch 5.x version, since I use the 2.x versions of this awesome product. I started to install and setup on AWS EC2 Amazon linux instance, but I encountered a couple of … --- ## [Replace multiple patterns with gsub mutate filter](https://discuss.elastic.co/t/replace-multiple-patterns-with-gsub-mutate-filter/51070)
**Author:** [@auerbecktj](https://discuss.elastic.co/u/auerbecktj)\ **Replies:** 1\ **Last updated:** [May 26, 2016, 9:07pm UTC](https://discuss.elastic.co/t/replace-multiple-patterns-with-gsub-mutate-filter/51070 "2016-05-26T21:07:44Z")
I'm trying to write a mutate filter that will replace a certain set of symbols as well as a string in a certain field that we've defined. Currently we're trying to do something like :slight\_smile :slight\_smile : mutat… --- ## [Pipelines running {:count=\>1, :pipelines=\>\["main"\]}](https://discuss.elastic.co/t/pipelines-running-count-1-pipelines-main/134605)
**Author:** [@vemula.pranavi](https://discuss.elastic.co/u/vemula.pranavi)\ **Replies:** 3\ **Last updated:** [June 5, 2018, 1:40pm UTC](https://discuss.elastic.co/t/pipelines-running-count-1-pipelines-main/134605 "2018-06-05T13:40:38Z")
when I execute the command, I get this. I created my test.conf file in bin folder itself. C:\\Users\\vemula.pranavi\\Desktop\\ELK\\logstash-6.2.4\\bin\>logstash -f test.conf Sending Logstash's logs to C:/Users/vemula.pranavi/… --- ## [Java.io.StreamCorruptedException after running bulk indexing for some time](https://discuss.elastic.co/t/java-io-streamcorruptedexception-after-running-bulk-indexing-for-some-time/26330)
**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\ **Replies:** 8\ **Last updated:** [July 30, 2015, 1:39am UTC](https://discuss.elastic.co/t/java-io-streamcorruptedexception-after-running-bulk-indexing-for-some-time/26330 "2015-07-30T01:39:22Z")
Found this exception after running bulk indexing for some time. Any ideas on when this happens? \[2015-07-26 20:44:20,458\]\[WARN \]\[monitor.jvm \] \[metrics-datastore-3-es-tune-2\] \[gc\]\[young\]\[58116\]\[4701\] d… --- ## [Cannot disable certificate verification for logstash monitoring](https://discuss.elastic.co/t/cannot-disable-certificate-verification-for-logstash-monitoring/97294)
**Author:** [@bt\_scotth](https://discuss.elastic.co/u/bt_scotth)\ **Replies:** 0\ **Last updated:** [August 16, 2017, 4:00pm UTC](https://discuss.elastic.co/t/cannot-disable-certificate-verification-for-logstash-monitoring/97294 "2017-08-16T16:00:04Z")
I am setting up my cluster with encryption and need to disable certificate verification. All settings work correctly except for xpack monitoring of logstash. There is no setting to disable certification verification for … --- ## [\[ANN\] New IMAP and POP3 email river for Elasticsearch - elasticsearch-river-imap](https://discuss.elastic.co/t/ann-new-imap-and-pop3-email-river-for-elasticsearch-elasticsearch-river-imap/17128)
**Author:** [@Hendrik](https://discuss.elastic.co/u/Hendrik)\ **Replies:** 1\ **Last updated:** [September 15, 2014, 5:14pm UTC](https://discuss.elastic.co/t/ann-new-imap-and-pop3-email-river-for-elasticsearch-elasticsearch-river-imap/17128 "2014-09-15T17:14:13Z")
Hi, i'd like to announce a IMAP and POP river for Elasticsearch. It can be found here: https://github.com/salyh/elasticsearch-river-imap This river connects to IMAP4 or POP3 servers polls your mail and index it. … --- ## [Determining when an index operation is complete](https://discuss.elastic.co/t/determining-when-an-index-operation-is-complete/4465)
**Author:** [@Lucas\_Ward](https://discuss.elastic.co/u/Lucas_Ward)\ **Replies:** 5\ **Last updated:** [May 26, 2011, 8:37pm UTC](https://discuss.elastic.co/t/determining-when-an-index-operation-is-complete/4465 "2011-05-26T20:37:37Z")
I apologize in advance if this is an already answered question. I couldn't find a reference to it, but you can never tell. I am testing ElasticSearch from a grails application. Its just a simple way to test my ind… --- ## [How to tell if tags is empty or does not exists?](https://discuss.elastic.co/t/how-to-tell-if-tags-is-empty-or-does-not-exists/207168)
**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\ **Replies:** 2\ **Last updated:** [November 8, 2019, 9:18pm UTC](https://discuss.elastic.co/t/how-to-tell-if-tags-is-empty-or-does-not-exists/207168 "2019-11-08T21:18:32Z")
Hi, I want to be able to check if tags field is empty or if it does not exists in order to send the logstash output to different indexes. I'm using logstash 7.3 output { stdout { codec =\> rubydebug } if \[tags\] == \[… --- ## [KibanaでIPごとの通信量を集計しランキングにしたい](https://discuss.elastic.co/t/kibana-ip/168225)
**Author:** [@koni](https://discuss.elastic.co/u/koni)\ **Replies:** 2\ **Last updated:** [February 14, 2019, 10:22am UTC](https://discuss.elastic.co/t/kibana-ip/168225 "2019-02-14T10:22:00Z")
それぞれ現行最新の6.6を使い、 Filebeat -\> Logstash -\> ElasticSearchとデータ取り込みはできています。 Proxyのログから ・DATA型のIPアドレス（IPV4型ではなく） ・INT型の通信量 がElasticSearchへ取り込まれており、IPアドレスの件数などはKibanaのVisualizeで出せているのですが、「ログ全体」から「IPアドレスごと」に「各行にある通信量を足した合計」… --- ## [MetricBeat v7.3.1 memory leak](https://discuss.elastic.co/t/metricbeat-v7-3-1-memory-leak/205650)
**Author:** [@Milan\_Todorovic](https://discuss.elastic.co/u/Milan_Todorovic)\ **Replies:** 8\ **Last updated:** [November 12, 2019, 11:42am UTC](https://discuss.elastic.co/t/metricbeat-v7-3-1-memory-leak/205650 "2019-11-12T11:42:44Z")
Hi, We are using ELK 7.3.1 installed on Kubernetes cluster. We are using official Docker image for Metricbeat in this case that is: docker.elastic.co/beats/metricbeat-oss:7.3.1 Ever since migration to this new version… --- ## [Filebeats: Fortinet Module not processing data as it should](https://discuss.elastic.co/t/filebeats-fortinet-module-not-processing-data-as-it-should/241890)
**Author:** [@Khaled3500](https://discuss.elastic.co/u/Khaled3500)\ **Replies:** 4\ **Last updated:** [September 11, 2020, 11:26am UTC](https://discuss.elastic.co/t/filebeats-fortinet-module-not-processing-data-as-it-should/241890 "2020-09-11T11:26:15Z")
Hello, I'm trying to use fortinet module to parse and make logs presentable before it ships to logstash here is my filebeats configuration file: # ============================== Filebeat inputs ======================… --- ## [I got errors after installing x-pack on elasticsearch 5.0.1 node: "exception when exporting documents"](https://discuss.elastic.co/t/i-got-errors-after-installing-x-pack-on-elasticsearch-5-0-1-node-exception-when-exporting-documents/67120)
**Author:** [@marminthibaut](https://discuss.elastic.co/u/marminthibaut)\ **Replies:** 4\ **Last updated:** [December 9, 2016, 6:52pm UTC](https://discuss.elastic.co/t/i-got-errors-after-installing-x-pack-on-elasticsearch-5-0-1-node-exception-when-exporting-documents/67120 "2016-12-09T18:52:37Z")
Hi ! I run an elasticsearch node in a Docker container (from the official docker image). All bootstrap checks are passing, everything works great without x-pack. I followed the installation procedure (from here), but… --- ## [Elasticsearch 1.0.0 Service Unavailable](https://discuss.elastic.co/t/elasticsearch-1-0-0-service-unavailable/87361)
**Author:** [@rsthakur83](https://discuss.elastic.co/u/rsthakur83)\ **Replies:** 4\ **Last updated:** [May 29, 2017, 12:50pm UTC](https://discuss.elastic.co/t/elasticsearch-1-0-0-service-unavailable/87361 "2017-05-29T12:50:23Z")
Hi , I am running elastic search kibana on kubernetes platform and able to access the kibana dashboard but only error is appearing saying "elasticsearch 1.0.0 Service Unavailable" so can you please suggest the cause… --- ## [Apache2 module | Filebeat - No results found](https://discuss.elastic.co/t/apache2-module-filebeat-no-results-found/120897)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 6\ **Last updated:** [March 11, 2018, 1:55am UTC](https://discuss.elastic.co/t/apache2-module-filebeat-no-results-found/120897 "2018-03-11T01:55:56Z")
I'm trying to Configure the module and even though I see events inside of my %{\[@metadata\]\[beat\]}-%{\[@metadata\]\[version\]}-%{+YYYY.MM.dd} whenever I open Filebeat Apache2 Dashboard via Kibana all I see is: No results fo… --- ## [Java apis to create visualization in kibana](https://discuss.elastic.co/t/java-apis-to-create-visualization-in-kibana/52243)
**Author:** [@abhi.kedari](https://discuss.elastic.co/u/abhi.kedari)\ **Replies:** 5\ **Last updated:** [June 8, 2016, 11:54pm UTC](https://discuss.elastic.co/t/java-apis-to-create-visualization-in-kibana/52243 "2016-06-08T23:54:10Z")
Is there any way I can create visualization in kibana from java api? To be more specific my requirement is - 1. I have a portal page where user can define different parameters 2. When user submit requests, in backgr… --- ## [Ingest question - attachment processor plugin and dynamic fields](https://discuss.elastic.co/t/ingest-question-attachment-processor-plugin-and-dynamic-fields/92389)
**Author:** [@pnowy](https://discuss.elastic.co/u/pnowy)\ **Replies:** 0\ **Last updated:** [July 9, 2017, 11:13am UTC](https://discuss.elastic.co/t/ingest-question-attachment-processor-plugin-and-dynamic-fields/92389 "2017-07-09T11:13:39Z")
I have a question regarding the ingest attachment plugin (I would say it is question in general about ingest processor at all). Let's assume that I have some kind of index: PUT /myindex { "mappings": { "mytype"… --- ## [How to search in full folder path?](https://discuss.elastic.co/t/how-to-search-in-full-folder-path/241811)
**Author:** [@jimw](https://discuss.elastic.co/u/jimw)\ **Replies:** 8\ **Last updated:** [July 20, 2020, 10:10am UTC](https://discuss.elastic.co/t/how-to-search-in-full-folder-path/241811 "2020-07-20T10:10:01Z")
I used ElasticSeaarch index filename with full path. for example, c:\\dir11\\dir12\\dir13\\dir14\\fn11.txt c:\\dir21\\dir22\\dir23\\dir24\\fn21.pdf c:\\dir31\\dir32\\dir33\\dir34\\fn31.doc c:\\dir41\\dir42\\dir43\\dir44\\fn41.ppt What … --- ## [Zoom out in time dimension](https://discuss.elastic.co/t/zoom-out-in-time-dimension/116998)
**Author:** [@andrask](https://discuss.elastic.co/u/andrask)\ **Replies:** 2\ **Last updated:** [January 25, 2018, 3:53pm UTC](https://discuss.elastic.co/t/zoom-out-in-time-dimension/116998 "2018-01-25T15:53:30Z")
In Discovery and any other visualizations it is fairly easy to zoom in on time segments. Using "Go Back" works for some cases but it would be so much easier if there was a way to "Zoom Out in time". Is there an easy meth… --- ## [Kibana canvas](https://discuss.elastic.co/t/kibana-canvas/164311)
**Author:** [@balamelangi](https://discuss.elastic.co/u/balamelangi)\ **Replies:** 4\ **Last updated:** [January 22, 2019, 8:48am UTC](https://discuss.elastic.co/t/kibana-canvas/164311 "2019-01-22T08:48:47Z")
I'm getting below error. \[BABEL\] Note: The code generator has deoptimised the styling of "/usr/share/kibana/node\_modules/x-pack/plugins/canvas/canvas\_plugin/types/all.js" as it exceeds the max of "500KB". Unhandled rej… --- ## [Not able to process large lines of log data into elasticsearch](https://discuss.elastic.co/t/not-able-to-process-large-lines-of-log-data-into-elasticsearch/66928)
**Author:** [@ggajanan](https://discuss.elastic.co/u/ggajanan)\ **Replies:** 4\ **Last updated:** [November 23, 2016, 5:09pm UTC](https://discuss.elastic.co/t/not-able-to-process-large-lines-of-log-data-into-elasticsearch/66928 "2016-11-23T17:09:09Z")
Hello, I have filebeat harvesting the log files and feeding it to logstash and then to the elasticsearch. There is one event which has 2185 lines into it. Configured, multiline.max\_lines: 3000 , in filebeat.yml file. … --- ## [Spell check suggestion](https://discuss.elastic.co/t/spell-check-suggestion/84397)
**Author:** [@abhishek5678](https://discuss.elastic.co/u/abhishek5678)\ **Replies:** 1\ **Last updated:** [May 4, 2017, 10:50am UTC](https://discuss.elastic.co/t/spell-check-suggestion/84397 "2017-05-04T10:50:56Z")
Hi Everyone, i want to perform spell check suggestion with my data.I tried hard but i'm not able to get spell check suggestion.if anybody knows about that then please help me to resolve this problem.so tell me what is pu… --- ## [Logstash with Kafka compression and decompression](https://discuss.elastic.co/t/logstash-with-kafka-compression-and-decompression/127412)
**Author:** [@hat\_trick](https://discuss.elastic.co/u/hat_trick)\ **Replies:** 5\ **Last updated:** [April 10, 2018, 8:05pm UTC](https://discuss.elastic.co/t/logstash-with-kafka-compression-and-decompression/127412 "2018-04-10T20:05:47Z")
Hi, I'm new to Elastic and very interested in this pipeline: Data Sources --\>LogStash --\> Kafka --\>LogStash --\> ElasticSearch, where the first LS specifies gzip data compression with Kafka output plugin and the second L… --- ## [Ability to search ES based on a result of previous search in a watcher](https://discuss.elastic.co/t/ability-to-search-es-based-on-a-result-of-previous-search-in-a-watcher/224693)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 6\ **Last updated:** [March 30, 2020, 3:59pm UTC](https://discuss.elastic.co/t/ability-to-search-es-based-on-a-result-of-previous-search-in-a-watcher/224693 "2020-03-30T15:59:57Z")
Hi I was wondering if it was possible (in a watcher) to do the following: Search an index for a keyword e.g document must contain "tag": "laptop" In that document it contains another field called "identifier": "09… --- ## [Read Excel File and Push All Data To Elasticsearch](https://discuss.elastic.co/t/read-excel-file-and-push-all-data-to-elasticsearch/101131)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 2\ **Last updated:** [October 3, 2017, 11:16am UTC](https://discuss.elastic.co/t/read-excel-file-and-push-all-data-to-elasticsearch/101131 "2017-10-03T11:16:30Z")
I have created program to read excel file using java and aspose. I am creating column as key and row as value in json object but if when I read all file row wise and then my json values gets overwrite by last row values.… --- ## [Beats compile issue](https://discuss.elastic.co/t/beats-compile-issue/75037)
**Author:** [@jerome\_tan](https://discuss.elastic.co/u/jerome_tan)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 1:39pm UTC](https://discuss.elastic.co/t/beats-compile-issue/75037 "2017-02-14T13:39:27Z")
When I compiled the code of beats, it reported an error like this: ok github.com/elastic/beats/libbeat/outputs/mode/lb 1.190s coverage: 84.1% of statements ? github.com/elastic/beats/libbeat/outputs/mode/modetest \[n… --- ## [Feature Request - Transform devtools console output](https://discuss.elastic.co/t/feature-request-transform-devtools-console-output/114096)
**Author:** [@Chris\_Blackwell](https://discuss.elastic.co/u/Chris_Blackwell)\ **Replies:** 2\ **Last updated:** [January 4, 2018, 5:46pm UTC](https://discuss.elastic.co/t/feature-request-transform-devtools-console-output/114096 "2018-01-04T17:46:10Z")
I'm often asked for ad-hoc queries that ES answers really quickly, but I end up needing to do some kind of transform on the documents or aggs. I do this with jq, and if its a one time deal often just by pasting the outp… --- ## [Relationship between refresh & flush](https://discuss.elastic.co/t/relationship-between-refresh-flush/51260)
**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\ **Replies:** 6\ **Last updated:** [June 2, 2016, 3:48am UTC](https://discuss.elastic.co/t/relationship-between-refresh-flush/51260 "2016-06-02T03:48:56Z")
Hi, I observed a situation but I don't know is this normal or not. I use Elasticsearch 1.7.2 and my observation as below. I set a index with refresh 6s and when I start to add a document to this index, every 6s I see f… [Previous page](https://discuss.elastic.co/top.md?page=537&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=539&per_page=50&period=all)