# Top **URL:** https://discuss.elastic.co/top.md?page=541&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 542 --- ## [Include files inside filebeat config file](https://discuss.elastic.co/t/include-files-inside-filebeat-config-file/66518)
**Author:** [@Aditya\_Srivastava](https://discuss.elastic.co/u/Aditya_Srivastava)\ **Replies:** 5\ **Last updated:** [November 18, 2016, 3:38pm UTC](https://discuss.elastic.co/t/include-files-inside-filebeat-config-file/66518 "2016-11-18T15:38:07Z")
I have 100 log files and I want to read those files, put some fields to it and send it to logstash. If I create say 100 different prospectors all in one config file, it becomes very difficult to manage. Therefore, i want… --- ## [Not able to set index.mapping.single\_type: true on an index](https://discuss.elastic.co/t/not-able-to-set-index-mapping-single-type-true-on-an-index/225967)
**Author:** [@nages](https://discuss.elastic.co/u/nages)\ **Replies:** 7\ **Last updated:** [April 1, 2020, 9:27am UTC](https://discuss.elastic.co/t/not-able-to-set-index-mapping-single-type-true-on-an-index/225967 "2020-04-01T09:27:18Z")
I had an index that had single type. Now, I am planning to enable "index.mapping.single\_type" and I triggered the following API to make it happen, got the following error. BTW, I closed the index before applying the ab… --- ## [System.cpu.total.norm.pct different of the sum system.process.cpu.total.norm.pct](https://discuss.elastic.co/t/system-cpu-total-norm-pct-different-of-the-sum-system-process-cpu-total-norm-pct/261130)
**Author:** [@Altamir\_Dias](https://discuss.elastic.co/u/Altamir_Dias)\ **Replies:** 3\ **Last updated:** [January 18, 2021, 1:44pm UTC](https://discuss.elastic.co/t/system-cpu-total-norm-pct-different-of-the-sum-system-process-cpu-total-norm-pct/261130 "2021-01-18T13:44:23Z")
Hello Guys, I using a ELK STACK with version 7.7.1 and I'm testing metricbeat to enviroment observability, but when I need view data about CPU process the calcule not close. Why system.cpu.total.norm.pct its not the … --- ## [Cat API for Java](https://discuss.elastic.co/t/cat-api-for-java/23954)
**Author:** [@Gunho\_Shin](https://discuss.elastic.co/u/Gunho_Shin)\ **Replies:** 3\ **Last updated:** [March 29, 2017, 12:28am UTC](https://discuss.elastic.co/t/cat-api-for-java/23954 "2017-03-29T00:28:10Z")
Hi, I trying to development for my service using ES. Java API doesn't support cat API? I tried to find cat API for java, but can't found it. I could try to REST cat API using Java's URLConnection or other REST template l… --- ## [Configuring the default columns to appear in the log stream view](https://discuss.elastic.co/t/configuring-the-default-columns-to-appear-in-the-log-stream-view/225497)
**Author:** [@Yomain](https://discuss.elastic.co/u/Yomain)\ **Replies:** 4\ **Last updated:** [March 30, 2020, 10:40am UTC](https://discuss.elastic.co/t/configuring-the-default-columns-to-appear-in-the-log-stream-view/225497 "2020-03-30T10:40:39Z")
Hi, I'm using the elk stack in docker and I am looking for a way to configure the default columns displayed in the log stream. Right now those default columns are timestamp, event.dataset and message. I can change them… --- ## [Failed to parse mapping for index](https://discuss.elastic.co/t/failed-to-parse-mapping-for-index/110102)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 4\ **Last updated:** [December 4, 2017, 10:08am UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-for-index/110102 "2017-12-04T10:08:23Z")
I have just updated my stack to 6.0.0 and I am getting the following error: 017-12-01 10:47:45.653 INFO 3211 --- \[/O dispatcher 2\] p.c.ElasticSearchRestClientConfiguration : Error for compass/null for INDEX operation: … --- ## [Filebeat send data to kafka](https://discuss.elastic.co/t/filebeat-send-data-to-kafka/46620)
**Author:** [@zhanght1](https://discuss.elastic.co/u/zhanght1)\ **Replies:** 2\ **Last updated:** [August 12, 2016, 1:56pm UTC](https://discuss.elastic.co/t/filebeat-send-data-to-kafka/46620 "2016-08-12T13:56:02Z")
After installed the filebeat filebeat-5.0.0-alpha1 with filebeat.yml. filebeat: prospectors: - paths: - /var/log/test.log input\_type: log output: kafka: hosts: \["10.120.31.78:9092"\] … --- ## [Drop "event\_data." from data field](https://discuss.elastic.co/t/drop-event-data-from-data-field/78608)
**Author:** [@peanut](https://discuss.elastic.co/u/peanut)\ **Replies:** 6\ **Last updated:** [March 20, 2017, 11:43pm UTC](https://discuss.elastic.co/t/drop-event-data-from-data-field/78608 "2017-03-20T23:43:15Z")
Good afternoon Elastic team, I am sending Sysmon logs to my ELK stack with Winlogbeat 5.2.1 and all of them have the "event\_data" string in the field names. For example: event\_data.CommandLine should be only CommandL… --- ## [Do we require licence to enable xpack.security feature](https://discuss.elastic.co/t/do-we-require-licence-to-enable-xpack-security-feature/287427)
**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\ **Replies:** 4\ **Last updated:** [October 23, 2021, 2:17pm UTC](https://discuss.elastic.co/t/do-we-require-licence-to-enable-xpack-security-feature/287427 "2021-10-23T14:17:24Z")
Hello Team, I just wanted to know, If I wanted to use the alerting, monitoring and user administration RBAC feature in ELK stack. Do I require a license for the same? I also wanted to know, if I would like to do integr… --- ## [Is there a faster way to test logstash configs with stdin?](https://discuss.elastic.co/t/is-there-a-faster-way-to-test-logstash-configs-with-stdin/201113)
**Author:** [@joaociocca](https://discuss.elastic.co/u/joaociocca)\ **Replies:** 8\ **Last updated:** [September 27, 2019, 4:34pm UTC](https://discuss.elastic.co/t/is-there-a-faster-way-to-test-logstash-configs-with-stdin/201113 "2019-09-27T16:34:16Z")
I found this post from Dec 2018, but the automatic reload doesn't work with stdin (at least up to 6.8, which is my limit at the moment)... Any tips on how to test a developing configuration faster? Or we really have to s… --- ## [Copy visualisation and dashboards](https://discuss.elastic.co/t/copy-visualisation-and-dashboards/225958)
**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\ **Replies:** 5\ **Last updated:** [April 2, 2020, 7:13am UTC](https://discuss.elastic.co/t/copy-visualisation-and-dashboards/225958 "2020-04-02T07:13:35Z")
Can I copy visualisations and dashboards and later upload it to another insance which use same index/fields names? --- ## [Startswith analyzer not working](https://discuss.elastic.co/t/startswith-analyzer-not-working/172394)
**Author:** [@Mohsin\_Farooq](https://discuss.elastic.co/u/Mohsin_Farooq)\ **Replies:** 6\ **Last updated:** [March 21, 2019, 2:14pm UTC](https://discuss.elastic.co/t/startswith-analyzer-not-working/172394 "2019-03-21T14:14:55Z")
So i just created a new index to search for a string which starts with some specific characters like 'Kibana\*' (just like 'Kibana%' in SQL) which means it should return results with text "Starting with" Kibana and not "… --- ## [Visualization comparing data terms in the same row](https://discuss.elastic.co/t/visualization-comparing-data-terms-in-the-same-row/31699)
**Author:** [@wksmall](https://discuss.elastic.co/u/wksmall)\ **Replies:** 6\ **Last updated:** [October 10, 2015, 2:24pm UTC](https://discuss.elastic.co/t/visualization-comparing-data-terms-in-the-same-row/31699 "2015-10-10T14:24:16Z")
I would like to create a bar graph visualization that compares 2 data elements. One is an estimate of how long a process should run in seconds and the other is the actual run time in milliseconds. It should group and cou… --- ## [How can I make the Logstash TCP input to separate messages that it listens on a TCP port?](https://discuss.elastic.co/t/how-can-i-make-the-logstash-tcp-input-to-separate-messages-that-it-listens-on-a-tcp-port/87500)
**Author:** [@Ramuyko](https://discuss.elastic.co/u/Ramuyko)\ **Replies:** 4\ **Last updated:** [May 30, 2017, 4:47pm UTC](https://discuss.elastic.co/t/how-can-i-make-the-logstash-tcp-input-to-separate-messages-that-it-listens-on-a-tcp-port/87500 "2017-05-30T16:47:27Z")
I want to send data to Logstash using the TCP protocol. And to send the data I'm using the Node-RED. A simple configuration for doing that looks like this: In the Logstash folder, I created a file called nodered.conf … --- ## [Bulk indexing data file without providing id using by CURL](https://discuss.elastic.co/t/bulk-indexing-data-file-without-providing-id-using-by-curl/48540)
**Author:** [@saba\_soltani](https://discuss.elastic.co/u/saba_soltani)\ **Replies:** 4\ **Last updated:** [April 27, 2016, 3:47pm UTC](https://discuss.elastic.co/t/bulk-indexing-data-file-without-providing-id-using-by-curl/48540 "2016-04-27T15:47:21Z")
Bulk indexing data file without providing id using by CURL? --- ## [Terms aggregation fails on type "ip" fields](https://discuss.elastic.co/t/terms-aggregation-fails-on-type-ip-fields/25320)
**Author:** [@danygor](https://discuss.elastic.co/u/danygor)\ **Replies:** 4\ **Last updated:** [July 22, 2015, 2:08pm UTC](https://discuss.elastic.co/t/terms-aggregation-fails-on-type-ip-fields/25320 "2015-07-22T14:08:22Z")
Hello, I just converted some fields, which contained IP addresses, from type "string" to type "ip", using a template. Now I want to create a split rows visualization including a terms aggregation on the dst\_ip field: e… --- ## [Logstash-6.2.4 Error while running conf](https://discuss.elastic.co/t/logstash-6-2-4-error-while-running-conf/132982)
**Author:** [@Vadim\_Klimenko](https://discuss.elastic.co/u/Vadim_Klimenko)\ **Replies:** 7\ **Last updated:** [May 24, 2018, 8:52am UTC](https://discuss.elastic.co/t/logstash-6-2-4-error-while-running-conf/132982 "2018-05-24T08:52:30Z")
Plugin:LogStash::Inputs::Jdbc jdbc\_connection\_string=\>"jdbc:mysql://localhost:3306/pall\_new", jdbc\_user=\>"root", jdbc\_password=\>, jdbc\_validate\_connection=\>true, jdbc\_driver\_library=\>"home/vadim/www/Full/Search/logstash… --- ## [Unable to start kibana : cannot execute binary file](https://discuss.elastic.co/t/unable-to-start-kibana-cannot-execute-binary-file/84659)
**Author:** [@manopmk](https://discuss.elastic.co/u/manopmk)\ **Replies:** 1\ **Last updated:** [May 5, 2017, 1:20pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-cannot-execute-binary-file/84659 "2017-05-05T13:20:15Z")
when i tried to start ELK Logstash and elastic search started but unable to start kibana 4 in machine. showing error : ./kibana: line 20: /home/oracle/audit\_logger/elkpack/kibana/bin/../node/bin/node … --- ## [Changing column name for search and visualization](https://discuss.elastic.co/t/changing-column-name-for-search-and-visualization/27921)
**Author:** [@rnigam](https://discuss.elastic.co/u/rnigam)\ **Replies:** 1\ **Last updated:** [August 25, 2015, 4:06am UTC](https://discuss.elastic.co/t/changing-column-name-for-search-and-visualization/27921 "2015-08-25T04:06:46Z")
I have a nested JSON in my EMR that I am trying to visualize using kibana. Because of the nesting the field names are long (format word1.word2.word3.word4 .. upto word 8). I am trying to create a simple search query to s… --- ## [Setting the whitespace analyzer for query\_string search](https://discuss.elastic.co/t/setting-the-whitespace-analyzer-for-query-string-search/240517)
**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\ **Replies:** 8\ **Last updated:** [July 14, 2020, 8:06am UTC](https://discuss.elastic.co/t/setting-the-whitespace-analyzer-for-query-string-search/240517 "2020-07-14T08:06:05Z")
Hi all, I have a problem regarding how the query string is tokenized when performing a query\_string search. Could it be possible to opt for the whitespace tokenizer instead of standard because I'm searching for an exact… --- ## [Logstash vs NFS (null characters)](https://discuss.elastic.co/t/logstash-vs-nfs-null-characters/25918)
**Author:** [@prius](https://discuss.elastic.co/u/prius)\ **Replies:** 3\ **Last updated:** [November 7, 2015, 4:52pm UTC](https://discuss.elastic.co/t/logstash-vs-nfs-null-characters/25918 "2015-11-07T16:52:26Z")
Hi, there is an issue with logstash getting log files from remote server over NFS. Issue described here Redirecting to Google Groups And here is explanation why it is happening Java InputStream read methods returning A… --- ## [Why aggregation result return max results only 10](https://discuss.elastic.co/t/why-aggregation-result-return-max-results-only-10/163892)
**Author:** [@examin](https://discuss.elastic.co/u/examin)\ **Replies:** 4\ **Last updated:** [January 11, 2019, 2:59pm UTC](https://discuss.elastic.co/t/why-aggregation-result-return-max-results-only-10/163892 "2019-01-11T14:59:08Z")
i have a query on which i am bucketing year wise. Result return only 10 results --- ## [Difference between filebeat parsing & stdin parsing of the same log format](https://discuss.elastic.co/t/difference-between-filebeat-parsing-stdin-parsing-of-the-same-log-format/52493)
**Author:** [@MatthewDaniels](https://discuss.elastic.co/u/MatthewDaniels)\ **Replies:** 6\ **Last updated:** [June 13, 2016, 11:59am UTC](https://discuss.elastic.co/t/difference-between-filebeat-parsing-stdin-parsing-of-the-same-log-format/52493 "2016-06-13T11:59:30Z")
Hi there, I am having some difficultiy with a custom log format, when sending it into logstash via the beats input. If I send the same log line into logstash (with the same filters as the beats input) via stdin, the ev… --- ## [How to recover saved kibana dashboard](https://discuss.elastic.co/t/how-to-recover-saved-kibana-dashboard/14731)
**Author:** [@Alexander\_Gray\_II](https://discuss.elastic.co/u/Alexander_Gray_II)\ **Replies:** 5\ **Last updated:** [February 11, 2015, 11:36am UTC](https://discuss.elastic.co/t/how-to-recover-saved-kibana-dashboard/14731 "2015-02-11T11:36:13Z")
Quick Question: I saved a few Kibana3 dashboards via the kibana url, but I don't know where they are saved. I don't think they are saved on disk, so they must be saved in Elasticsearch, right? So my root problem… --- ## [Metricbeat - PostgreSQL modlue](https://discuss.elastic.co/t/metricbeat-postgresql-modlue/174599)
**Author:** [@stevemw](https://discuss.elastic.co/u/stevemw)\ **Replies:** 4\ **Last updated:** [April 10, 2019, 8:29am UTC](https://discuss.elastic.co/t/metricbeat-postgresql-modlue/174599 "2019-04-10T08:29:58Z")
We are trying to use the PostgreSQL module for metricbeat (v6.6.2), and we are having a problem with authentication. My Postgres module is configured as below: module: postgresql enabled: true metricsets: database b… --- ## [Elasticsearch 5.0 on Docker does not run](https://discuss.elastic.co/t/elasticsearch-5-0-on-docker-does-not-run/66753)
**Author:** [@iliasse](https://discuss.elastic.co/u/iliasse)\ **Replies:** 3\ **Last updated:** [November 22, 2016, 10:57am UTC](https://discuss.elastic.co/t/elasticsearch-5-0-on-docker-does-not-run/66753 "2016-11-22T10:57:39Z")
Hi, I'm trying to upgrade elasticsearch from 2.3 to 5.0. I've elasticsearch In Docker container. I'm building my Dockerfile from the Docker Official Image , and when I run it I get this error : ERROR: bootstrap check… --- ## [Advance logic alter rules (if "A" happens look for "B"](https://discuss.elastic.co/t/advance-logic-alter-rules-if-a-happens-look-for-b/346529)
**Author:** [@B-Rad](https://discuss.elastic.co/u/B-Rad)\ **Replies:** 0\ **Last updated:** [November 6, 2023, 1:50pm UTC](https://discuss.elastic.co/t/advance-logic-alter-rules-if-a-happens-look-for-b/346529 "2023-11-06T13:50:31Z")
When creating an alert rule is it possible to add some more advanced logic or additional criteria if the first query is triggered? For example, I have authentication logs from our Idp I have an alert rule set for pot… --- ## [Nested aggregation kills elasticsearch cluster](https://discuss.elastic.co/t/nested-aggregation-kills-elasticsearch-cluster/58712)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 3\ **Last updated:** [August 24, 2016, 9:03am UTC](https://discuss.elastic.co/t/nested-aggregation-kills-elasticsearch-cluster/58712 "2016-08-24T09:03:02Z")
I have a 2-node elasticsearch cluster (v2.3.1, and also tested against v2.3.4 - same behaviour, and on a single node es instance - again, same behaviour). Each node is on it's own AWS instance (m3.2xlarge). The ES\_HEAP\_… --- ## [Logstash not working until I re-save the file](https://discuss.elastic.co/t/logstash-not-working-until-i-re-save-the-file/42559)
**Author:** [@Natarajan\_venkataram](https://discuss.elastic.co/u/Natarajan_venkataram)\ **Replies:** 3\ **Last updated:** [February 25, 2016, 10:27am UTC](https://discuss.elastic.co/t/logstash-not-working-until-i-re-save-the-file/42559 "2016-02-25T10:27:01Z")
The logstash is not parsing the csv logs files automatically. It works only after I reopen the file and save it again. Sometimes, if the log files are more than 1GB, opening the files with Excel ( or any other editor) is… --- ## [Help with ESIntegTestCase](https://discuss.elastic.co/t/help-with-esintegtestcase/105245)
**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\ **Replies:** 6\ **Last updated:** [November 7, 2017, 9:58am UTC](https://discuss.elastic.co/t/help-with-esintegtestcase/105245 "2017-11-07T09:58:06Z")
So I have Developed a Security plugin and wish to test it using a cluster started via ESIntegTestCase. But whenever I call "getRestClient()" from within my class, I get :- Throwable #1: java.lang.IllegalArgumentExcepti… --- ## [Get only the last record](https://discuss.elastic.co/t/get-only-the-last-record/75320)
**Author:** [@mano\_even](https://discuss.elastic.co/u/mano_even)\ **Replies:** 6\ **Last updated:** [February 16, 2017, 8:00pm UTC](https://discuss.elastic.co/t/get-only-the-last-record/75320 "2017-02-16T20:00:45Z")
Hello , Im using logstash and jdbc driver to import my data to ES. but when i look for data using ,i only find the last record? my conf: input { jdbc { jdbc\_connection\_string =\> "jdbc:sqlserver:myconnexion;da… --- ## [Elasticsearch + Spark read performance issues](https://discuss.elastic.co/t/elasticsearch-spark-read-performance-issues/48573)
**Author:** [@cyrilb](https://discuss.elastic.co/u/cyrilb)\ **Replies:** 2\ **Last updated:** [May 2, 2016, 4:38pm UTC](https://discuss.elastic.co/t/elasticsearch-spark-read-performance-issues/48573 "2016-05-02T16:38:16Z")
Hi I have a simple application that reads IDs from ES and returns the number of distinct IDs using Spark. My configuration is: ES 2.2 (cluster) 2 clients, 3 master, 4 data (16G RAM, 8G heap) elasticsearch-hadoop-2.2.… --- ## [Map is not visible in Kibana 7.1](https://discuss.elastic.co/t/map-is-not-visible-in-kibana-7-1/186430)
**Author:** [@kmohd](https://discuss.elastic.co/u/kmohd)\ **Replies:** 7\ **Last updated:** [June 26, 2019, 3:45pm UTC](https://discuss.elastic.co/t/map-is-not-visible-in-kibana-7-1/186430 "2019-06-26T15:45:50Z")
Map is not showing in my Kibana 7.1, can anyone advise what could fix this. --- ## [Illegal\_argument\_exception when extract a random subset of an index](https://discuss.elastic.co/t/illegal-argument-exception-when-extract-a-random-subset-of-an-index/115995)
**Author:** [@Mike\_Hung](https://discuss.elastic.co/u/Mike_Hung)\ **Replies:** 1\ **Last updated:** [January 18, 2018, 9:39am UTC](https://discuss.elastic.co/t/illegal-argument-exception-when-extract-a-random-subset-of-an-index/115995 "2018-01-18T09:39:12Z")
Hello, According to the Elasticsearch 5.6 Reindex API document. I have encountered the problem when running \_reindex API as following command: curl -XPOST 'localhost:9200/\_reindex?pretty' -H 'Content-Type: application… --- ## [Using Regex in Kibana Query DSL](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl/303991)
**Author:** [@CaMaNi](https://discuss.elastic.co/u/CaMaNi)\ **Replies:** 4\ **Last updated:** [May 5, 2022, 3:18pm UTC](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl/303991 "2022-05-05T15:18:09Z")
Good day everyone, I am relatively new to the use of Kibana. And I have the following problem: I want to filter out all numbers and special characters like "\_" or "-" in a field in Discover mode, so that I only have Le… --- ## [Logstash not indexing data into elasticsearch](https://discuss.elastic.co/t/logstash-not-indexing-data-into-elasticsearch/105290)
**Author:** [@cm47](https://discuss.elastic.co/u/cm47)\ **Replies:** 4\ **Last updated:** [October 27, 2017, 2:39pm UTC](https://discuss.elastic.co/t/logstash-not-indexing-data-into-elasticsearch/105290 "2017-10-27T14:39:52Z")
Hi there, I am trying to get custom log information indexed into elasticsearch using a grok filter. Logstash configuration file: input { file { path =\> "/etc/logstash/customlog/testfile.log" codec =\> line start\_pos… --- ## [Logging classpath issues with ES 5.x](https://discuss.elastic.co/t/logging-classpath-issues-with-es-5-x/77963)
**Author:** [@Jean\_Baptiste\_Lievre](https://discuss.elastic.co/u/Jean_Baptiste_Lievre)\ **Replies:** 3\ **Last updated:** [March 9, 2017, 11:43am UTC](https://discuss.elastic.co/t/logging-classpath-issues-with-es-5-x/77963 "2017-03-09T11:43:18Z")
Hi all, I am trying to use ES 5.1.1 in a dead simple application and hitting several walls along the way, especially regarding the logging dependencies. I am using SLF4J with Logback for my own code, but ES expects t… --- ## [PerFieldSimilarity for synonym expansion at query time](https://discuss.elastic.co/t/perfieldsimilarity-for-synonym-expansion-at-query-time/94037)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 5\ **Last updated:** [July 21, 2017, 8:08pm UTC](https://discuss.elastic.co/t/perfieldsimilarity-for-synonym-expansion-at-query-time/94037 "2017-07-21T20:08:16Z")
Hi everybody, It's said here (https://www.elastic.co/guide/en/elasticsearch/guide/current/synonyms-expand-or-contract.html) that using simple synonym expansion at query time is an advantage for relevance. Please, consi… --- ## [Adding multiple elasticsearch URL in kibana](https://discuss.elastic.co/t/adding-multiple-elasticsearch-url-in-kibana/25304)
**Author:** [@Manjunath](https://discuss.elastic.co/u/Manjunath)\ **Replies:** 4\ **Last updated:** [July 14, 2015, 10:57am UTC](https://discuss.elastic.co/t/adding-multiple-elasticsearch-url-in-kibana/25304 "2015-07-14T10:57:35Z")
I am trying to add two URL's in Kibana, using elasticsearch\_url: "http://localhost:9200" to elasticsearch\_url: "http://:9200" I am unable to view both the elasticsearch data. Can anyone help please ? --- ## [Filter messages based on tags](https://discuss.elastic.co/t/filter-messages-based-on-tags/162146)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 1\ **Last updated:** [January 3, 2019, 3:26pm UTC](https://discuss.elastic.co/t/filter-messages-based-on-tags/162146 "2019-01-03T15:26:54Z")
Hi I have 2 types of log inputs, nginx and iptabes. In filter section of logstash config file, I filter these messages and put a tag on them. my issue is that all of logstash messages ( input from filebeats ) forwards… --- ## [Apache error log with referer](https://discuss.elastic.co/t/apache-error-log-with-referer/105770)
**Author:** [@jbelien](https://discuss.elastic.co/u/jbelien)\ **Replies:** 7\ **Last updated:** [October 31, 2017, 10:37am UTC](https://discuss.elastic.co/t/apache-error-log-with-referer/105770 "2017-10-31T10:37:17Z")
Hello everyone, I have this line in my Apache error log : \[Fri Oct 20 16:39:12.472720 2017\] \[proxy\_fcgi:error\] \[pid 5727:tid 124259626391296\] \[client 12.34.56.78:12345\] AH01071: Got error 'PHP message: PHP Notice: Unde… --- ## [ElasticSearch 6.0 beta1 - BulkRequestBuilder error](https://discuss.elastic.co/t/elasticsearch-6-0-beta1-bulkrequestbuilder-error/99178)
**Author:** [@questar](https://discuss.elastic.co/u/questar)\ **Replies:** 0\ **Last updated:** [September 2, 2017, 12:38am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-beta1-bulkrequestbuilder-error/99178 "2017-09-02T00:38:33Z")
BulkRequestBuilder throws this exception: java.lang.IllegalArgumentException: The number of object passed must be even but was \[1\] when invoking it via: bulkRequest.add(new IndexRequest(:“indexName”, “typeName”, null)… --- ## [Percentages in visualizations without a range](https://discuss.elastic.co/t/percentages-in-visualizations-without-a-range/145177)
**Author:** [@TheSmartMonkey](https://discuss.elastic.co/u/TheSmartMonkey)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 10:02am UTC](https://discuss.elastic.co/t/percentages-in-visualizations-without-a-range/145177 "2018-09-10T10:02:28Z")
What I am trying to do is to have a visualization of my warn, info, error and missing level fields of my logs as a percentage it's why I added this fields with a grok filter and put it all in a goal vizu but when I use t… --- ## [How can I to install beats on as/400?](https://discuss.elastic.co/t/how-can-i-to-install-beats-on-as-400/188411)
**Author:** [@luisjoelqs](https://discuss.elastic.co/u/luisjoelqs)\ **Replies:** 6\ **Last updated:** [July 5, 2019, 1:58pm UTC](https://discuss.elastic.co/t/how-can-i-to-install-beats-on-as-400/188411 "2019-07-05T13:58:48Z")
We are planing install a production cluster of elastic and I don't see any documentation about install beats on AS/400, can anyone helpme about this? Thanks --- ## [Filebeat is not creating index in ES?](https://discuss.elastic.co/t/filebeat-is-not-creating-index-in-es/99343)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 3\ **Last updated:** [September 4, 2017, 10:45pm UTC](https://discuss.elastic.co/t/filebeat-is-not-creating-index-in-es/99343 "2017-09-04T22:45:54Z")
Hi Experts, For Demo I am ingesting Apache data using filebeat into ES. My filebeat.yml is filebeat.modules: - module: apache2 access: var.paths: \["E:/ELK/Module1/apache1.log"\] output.elasticsearch: # Array of h… --- ## [Best way to configure multiple output block](https://discuss.elastic.co/t/best-way-to-configure-multiple-output-block/231269)
**Author:** [@yj\_h](https://discuss.elastic.co/u/yj_h)\ **Replies:** 4\ **Last updated:** [May 6, 2020, 2:37pm UTC](https://discuss.elastic.co/t/best-way-to-configure-multiple-output-block/231269 "2020-05-06T14:37:05Z")
My question is best way to configure multiple output block . in my case. input { beat =\> {}} filter { if \[type\] {} else if \[type\] {} else if \[type\] {} else \[type\] {} } output { if \[type\] {} else if \[type\] {} else if \[t… --- ## [Filter if condition is met](https://discuss.elastic.co/t/filter-if-condition-is-met/9071)
**Author:** [@wombat](https://discuss.elastic.co/u/wombat)\ **Replies:** 1\ **Last updated:** [September 20, 2012, 8:42am UTC](https://discuss.elastic.co/t/filter-if-condition-is-met/9071 "2012-09-20T08:42:37Z")
Hello fellow ES users, I've just started looking into elasticsearch, so please point me to an existing example if this has already been asked... What i would like to be able to do is apply a query or filter - but… --- ## [Change JVM Heap Size with Logstash Helm Chart](https://discuss.elastic.co/t/change-jvm-heap-size-with-logstash-helm-chart/149736)
**Author:** [@chenchik](https://discuss.elastic.co/u/chenchik)\ **Replies:** 2\ **Last updated:** [September 24, 2018, 10:02pm UTC](https://discuss.elastic.co/t/change-jvm-heap-size-with-logstash-helm-chart/149736 "2018-09-24T22:02:43Z")
I'm currently using the Logstash Kubernetes Helm chart, linked below: There doesn't seem to be a way to increase the JVM heap size using the values.yaml file. I have also tried setting the environment variable LS\_JAV… --- ## [Relationship between Spark tasks and batch size](https://discuss.elastic.co/t/relationship-between-spark-tasks-and-batch-size/55572)
**Author:** [@eugene\_miretsky](https://discuss.elastic.co/u/eugene_miretsky)\ **Replies:** 2\ **Last updated:** [July 24, 2016, 3:20pm UTC](https://discuss.elastic.co/t/relationship-between-spark-tasks-and-batch-size/55572 "2016-07-24T15:20:45Z")
@costin The Performance guide suggests that the final batch size = batch\_size \* #of tasks ("Thus for a job with 5 tasks, using the defaults (1mb or 1000 docs) means up to 5mb/5000 docs bulk size"). Could you please expl… --- ## [Issue with Logstash & JDBC input (postgreSQL)](https://discuss.elastic.co/t/issue-with-logstash-jdbc-input-postgresql/171582)
**Author:** [@chaire](https://discuss.elastic.co/u/chaire)\ **Replies:** 5\ **Last updated:** [March 14, 2019, 4:00am UTC](https://discuss.elastic.co/t/issue-with-logstash-jdbc-input-postgresql/171582 "2019-03-14T04:00:10Z")
Hi, I use Logstash to get data from PostgreSQL and then send it to Elasticsearch. I use JDBC Driver. The issue is no index created in ES after I run Logstash. Here is my Logstash config. input { jdbc { jdbc\_dr… [Previous page](https://discuss.elastic.co/top.md?page=540&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=542&per_page=50&period=all)