# Top **URL:** https://discuss.elastic.co/top.md?page=545&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 546 --- ## [Could I get DISKIO per PROCESS from metricbeat dashboard for kibana?](https://discuss.elastic.co/t/could-i-get-diskio-per-process-from-metricbeat-dashboard-for-kibana/134000)
**Author:** [@alantany](https://discuss.elastic.co/u/alantany)\ **Replies:** 4\ **Last updated:** [June 1, 2018, 6:04pm UTC](https://discuss.elastic.co/t/could-i-get-diskio-per-process-from-metricbeat-dashboard-for-kibana/134000 "2018-06-01T18:04:41Z")
Hello, Recently I tried the metricbeat,found it very nice,it provides a sample dashboards for kibada,so we can easily build up a dashboard for SYSTEM,but there is a pity that i can't find a table about DISKIO for per P… --- ## [Error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"analyzer \[analyzer\_keyword\] not found for field](https://discuss.elastic.co/t/error-root-cause-type-mapper-parsing-exception-reason-analyzer-analyzer-keyword-not-found-for-field/306416)
**Author:** [@sameer\_khamkar](https://discuss.elastic.co/u/sameer_khamkar)\ **Replies:** 5\ **Last updated:** [June 6, 2022, 5:38pm UTC](https://discuss.elastic.co/t/error-root-cause-type-mapper-parsing-exception-reason-analyzer-analyzer-keyword-not-found-for-field/306416 "2022-06-06T17:38:26Z")
Hello Team, When I am creating new index I am getting below error "curl -X PUT \[localhost:9200/holly\_good\](http://localhost:9200/holly\_good) -H 'Content-Type: application/json' -d @new.json " but it gave below error … --- ## [Kibana - APM UI - selected trace cannot be found](https://discuss.elastic.co/t/kibana-apm-ui-selected-trace-cannot-be-found/268030)
**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 2:31am UTC](https://discuss.elastic.co/t/kibana-apm-ui-selected-trace-cannot-be-found/268030 "2021-04-13T02:31:22Z")
Hi, Elasticsearch - v7.10.1 Kibana - V7.10.1 APM Server - V7.10.1 For some of the transactions in APM UI - Kibana is not showing the trace information, but instead it is showing the following message The selected tr… --- ## [Kibana Pie chart with multiple segments and different aggregations](https://discuss.elastic.co/t/kibana-pie-chart-with-multiple-segments-and-different-aggregations/42848)
**Author:** [@gunay](https://discuss.elastic.co/u/gunay)\ **Replies:** 1\ **Last updated:** [February 26, 2016, 7:40pm UTC](https://discuss.elastic.co/t/kibana-pie-chart-with-multiple-segments-and-different-aggregations/42848 "2016-02-26T19:40:18Z")
Hi, I have a Kibana pie chart with two segments as show in the image. As aggregation each segment has "sum" of a field called "duration.time". I would like have a different aggregation for each segment. For example, "su… --- ## [Java.lang.IllegalStateException: Message not fully read (request) for requestId](https://discuss.elastic.co/t/java-lang-illegalstateexception-message-not-fully-read-request-for-requestid/37990)
**Author:** [@tinle](https://discuss.elastic.co/u/tinle)\ **Replies:** 4\ **Last updated:** [December 27, 2015, 4:17am UTC](https://discuss.elastic.co/t/java-lang-illegalstateexception-message-not-fully-read-request-for-requestid/37990 "2015-12-27T04:17:34Z")
I am testing a new ELK cluster. ES 2.1.1 LS 2.1.1 Kibana 4.3.1 Reading from kafka in LS --\> ES. And my ES logs is full of these errors \[2015-12-26 22:33:35,993\]\[WARN \]\[transport.netty \] \[ltx1-app1234\] ex… --- ## [What type of nosql elasticsearch database does it belong to?](https://discuss.elastic.co/t/what-type-of-nosql-elasticsearch-database-does-it-belong-to/224093)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 3\ **Last updated:** [March 18, 2020, 3:14pm UTC](https://discuss.elastic.co/t/what-type-of-nosql-elasticsearch-database-does-it-belong-to/224093 "2020-03-18T15:14:40Z")
Hi, ElasticSearch is a document-oriented or column-oriented NoSQL engine. Any help please ! --- ## [Want to plot the actual values of Response Time into Y-Axis on Line chart](https://discuss.elastic.co/t/want-to-plot-the-actual-values-of-response-time-into-y-axis-on-line-chart/101801)
**Author:** [@aditya\_soni](https://discuss.elastic.co/u/aditya_soni)\ **Replies:** 2\ **Last updated:** [September 28, 2017, 6:43am UTC](https://discuss.elastic.co/t/want-to-plot-the-actual-values-of-response-time-into-y-axis-on-line-chart/101801 "2017-09-28T06:43:40Z")
I have a field named as Response Time coming from my logs and its data type is "number" in mapping. My problem is when i create a Line Chart of this Response Time with respect to timestamp. ResponseTime:-Y-Axis with wh… --- ## [Log Rotation](https://discuss.elastic.co/t/log-rotation/66174)
**Author:** [@phil.ireland](https://discuss.elastic.co/u/phil.ireland)\ **Replies:** 2\ **Last updated:** [November 22, 2016, 3:07pm UTC](https://discuss.elastic.co/t/log-rotation/66174 "2016-11-22T15:07:26Z")
Is there a way in the beats config to rotate the log files. Running out of storage daily. --- ## [Adding field for string length](https://discuss.elastic.co/t/adding-field-for-string-length/58958)
**Author:** [@megamax](https://discuss.elastic.co/u/megamax)\ **Replies:** 2\ **Last updated:** [August 25, 2016, 6:26pm UTC](https://discuss.elastic.co/t/adding-field-for-string-length/58958 "2016-08-25T18:26:38Z")
Hello, Newbie here. I'm trying to add a field to hold the string length of another field in my input. I want to visualize the string lengths (to show average email message sizes by user for example). I have tried the… --- ## [Convert values in kv-pairs](https://discuss.elastic.co/t/convert-values-in-kv-pairs/39904)
**Author:** [@intellion](https://discuss.elastic.co/u/intellion)\ **Replies:** 2\ **Last updated:** [January 27, 2016, 9:41am UTC](https://discuss.elastic.co/t/convert-values-in-kv-pairs/39904 "2016-01-27T09:41:08Z")
Hii there, I am trying to make some of our logs available in kibana using logstash-elasticsearch. the logs are not all structured. they do have some common patterns though. So far I could successfully extract date, lo… --- ## [Understanding Index Shard Snapshot Failed Exception](https://discuss.elastic.co/t/understanding-index-shard-snapshot-failed-exception/159572)
**Author:** [@rohail\_kidwai1](https://discuss.elastic.co/u/rohail_kidwai1)\ **Replies:** 3\ **Last updated:** [December 5, 2018, 5:45pm UTC](https://discuss.elastic.co/t/understanding-index-shard-snapshot-failed-exception/159572 "2018-12-05T17:45:47Z")
I create snapshots of my indices daily and today I got this error: "failures": \[ { "index": "name-2018.09.05", "index\_uuid": "name-2018.09.05", "shard\_id": 0, "reason": """IndexShardSnapshotFailedException\[Failed … --- ## [Permissions issues after upgrading heartbeat to 8.0](https://discuss.elastic.co/t/permissions-issues-after-upgrading-heartbeat-to-8-0/297383)
**Author:** [@Marc-Antoine\_J](https://discuss.elastic.co/u/Marc-Antoine_J)\ **Replies:** 7\ **Last updated:** [March 29, 2022, 1:48pm UTC](https://discuss.elastic.co/t/permissions-issues-after-upgrading-heartbeat-to-8-0/297383 "2022-03-29T13:48:46Z")
Good Day, I recently upgrade my test installation of the Elastic Stack to 8.0. The Elasticsearch and kibana installations went fine. On the heartbeat side I'm getting the following errors: Cannot index event publisher.… --- ## [Remove commas from number field](https://discuss.elastic.co/t/remove-commas-from-number-field/204380)
**Author:** [@sud0](https://discuss.elastic.co/u/sud0)\ **Replies:** 1\ **Last updated:** [October 20, 2019, 11:17pm UTC](https://discuss.elastic.co/t/remove-commas-from-number-field/204380 "2019-10-20T23:17:11Z")
Hi guys. I am filtering customer id using the below: (%{NUMBER:customer-id:int} On my Kibana dashboard, I see it with , and I would like to take the commas out. Example: \*\*#\*\* customer-id 389,542,059 Expected: \*\*#… --- ## [I can not run elasticsearch command](https://discuss.elastic.co/t/i-can-not-run-elasticsearch-command/258652)
**Author:** [@Vlad\_Dumitru](https://discuss.elastic.co/u/Vlad_Dumitru)\ **Replies:** 3\ **Last updated:** [December 15, 2020, 10:36am UTC](https://discuss.elastic.co/t/i-can-not-run-elasticsearch-command/258652 "2020-12-15T10:36:08Z")
OS: Manjaro STEPS: I was following this tutorial in order to install elasticsearch If I'm trying to run elasticsearch I will get this error: /usr/bin/elasticsearch-env: line 128: cd: /usr/share/elasticsearch/conf… --- ## [Kibana Plugin helpers command not found in plugin development](https://discuss.elastic.co/t/kibana-plugin-helpers-command-not-found-in-plugin-development/161733)
**Author:** [@aaronoah](https://discuss.elastic.co/u/aaronoah)\ **Replies:** 3\ **Last updated:** [December 21, 2018, 2:25am UTC](https://discuss.elastic.co/t/kibana-plugin-helpers-command-not-found-in-plugin-development/161733 "2018-12-21T02:25:52Z")
Hi, Kibana community, I ran into an issue when porting a new version of my calendar visualization plugin for Kibana master branch. I followed the doc here: It seems that yarn add --dev link:../../kibana/packages/k… --- ## [Fatal error with ingest-attachment plugin](https://discuss.elastic.co/t/fatal-error-with-ingest-attachment-plugin/68565)
**Author:** [@cdufour](https://discuss.elastic.co/u/cdufour)\ **Replies:** 3\ **Last updated:** [December 9, 2016, 5:17pm UTC](https://discuss.elastic.co/t/fatal-error-with-ingest-attachment-plugin/68565 "2016-12-09T17:17:13Z")
I am getting a fatal error when trying to index the attached stripped down document using the ingest-attachment plugin. This causes my cluster to reboot and does not give me an email notification. It looks to be having a… --- ## [How to change background of login page in kibana 7.6.0?](https://discuss.elastic.co/t/how-to-change-background-of-login-page-in-kibana-7-6-0/234494)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 4\ **Last updated:** [June 25, 2020, 12:35pm UTC](https://discuss.elastic.co/t/how-to-change-background-of-login-page-in-kibana-7-6-0/234494 "2020-06-25T12:35:06Z")
Hi, Please i want to remove imgs in login page of kibana 7.6.0 and i want to add my own img in backgroud , how can i do that please? --- ## [Filebeat doesn't send logs to Elasticsearch](https://discuss.elastic.co/t/filebeat-doesnt-send-logs-to-elasticsearch/259228)
**Author:** [@Pawel\_Skadorwa](https://discuss.elastic.co/u/Pawel_Skadorwa)\ **Replies:** 7\ **Last updated:** [January 19, 2021, 10:21am UTC](https://discuss.elastic.co/t/filebeat-doesnt-send-logs-to-elasticsearch/259228 "2021-01-19T10:21:15Z")
Hi, I decided to talk to you because I have no idea how to resolve the problem with the logging stack. On kubernetes 1.19 I installed elasticsearch 7.10.1, kibana, metricbeat and filebeat in the same version. Connection… --- ## [Control Number of Decimal Places in Kibana Metric Visualization?](https://discuss.elastic.co/t/control-number-of-decimal-places-in-kibana-metric-visualization/67902)
**Author:** [@Maxwell\_Flanders](https://discuss.elastic.co/u/Maxwell_Flanders)\ **Replies:** 1\ **Last updated:** [December 2, 2016, 11:27pm UTC](https://discuss.elastic.co/t/control-number-of-decimal-places-in-kibana-metric-visualization/67902 "2016-12-02T23:27:12Z")
Is there a way to do this?? Some of our metrics are displaying numbers of unwieldy lengths and it would be really nice to trim that down. --- ## [Can we integrate Kibana dashboard with Graylog](https://discuss.elastic.co/t/can-we-integrate-kibana-dashboard-with-graylog/1715)
**Author:** [@ankit](https://discuss.elastic.co/u/ankit)\ **Replies:** 1\ **Last updated:** [June 3, 2015, 12:22pm UTC](https://discuss.elastic.co/t/can-we-integrate-kibana-dashboard-with-graylog/1715 "2015-06-03T12:22:44Z")
Hi All, We are using Graylog for log management. We want to use kibana dashboard using a same elasticsearch node and can access through graylog. Suppose i have 10 application and have one user for each application to… --- ## [Can't able to access kibana dashboard](https://discuss.elastic.co/t/cant-able-to-access-kibana-dashboard/235451)
**Author:** [@sbrisi](https://discuss.elastic.co/u/sbrisi)\ **Replies:** 2\ **Last updated:** [June 4, 2020, 1:11am UTC](https://discuss.elastic.co/t/cant-able-to-access-kibana-dashboard/235451 "2020-06-04T01:11:01Z")
I am able to connect elasticsearch. However, I am unable to access kibana on 5601. Can anyone please help out this to work? Thanks in advance. In the kibana.yml file, I have modified the server.host parameter to point t… --- ## [WARN: o.e.t.ThreadPool - absolute clock went backwards…](https://discuss.elastic.co/t/warn-o-e-t-threadpool-absolute-clock-went-backwards/296320)
**Author:** [@MSN](https://discuss.elastic.co/u/MSN)\ **Replies:** 3\ **Last updated:** [February 7, 2022, 12:46pm UTC](https://discuss.elastic.co/t/warn-o-e-t-threadpool-absolute-clock-went-backwards/296320 "2022-02-07T12:46:16Z")
Hi, after a fresh installation this log entry shows up on every node once a minute. absolute clock went backwards by \[300ms/300ms\] while timer thread was sleeping I already searched the forum and the Elasticsearch doc… --- ## [Index fail due to java.io.IOException: No space left on device, but we do have free space in disk](https://discuss.elastic.co/t/index-fail-due-to-java-io-ioexception-no-space-left-on-device-but-we-do-have-free-space-in-disk/51770)
**Author:** [@cary.gao](https://discuss.elastic.co/u/cary.gao)\ **Replies:** 3\ **Last updated:** [June 13, 2016, 2:10am UTC](https://discuss.elastic.co/t/index-fail-due-to-java-io-ioexception-no-space-left-on-device-but-we-do-have-free-space-in-disk/51770 "2016-06-13T02:10:50Z")
I use hadoop to ingest data to ES and i met "java.io.IOException: No space left on device" later. But i do check the space of my disk and i still have more than 70% free space left. So anyone know what happened? BTW th… --- ## [Font setting in x-pack reporting?](https://discuss.elastic.co/t/font-setting-in-x-pack-reporting/72147)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 4\ **Last updated:** [February 21, 2017, 1:31am UTC](https://discuss.elastic.co/t/font-setting-in-x-pack-reporting/72147 "2017-02-21T01:31:46Z")
Hi I am searching a way to generate pdf report including Japanese language. When I try to download dashboard including Japanese character like below, Japanese character is gone in the report. Is there a way in x… --- ## [Gsub remplace double double ("") quotes by space](https://discuss.elastic.co/t/gsub-remplace-double-double-quotes-by-space/129070)
**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\ **Replies:** 5\ **Last updated:** [April 23, 2018, 11:54am UTC](https://discuss.elastic.co/t/gsub-remplace-double-double-quotes-by-space/129070 "2018-04-23T11:54:29Z")
I use the csv filter but some field are like that : ""toto toto" sip:+4999999999@10.58.12.00;user=phone;tag=8b1adde9f755210b19546545b056e2c555504" The csv filter can't parse fields if there is more that 2 double quotes… --- ## [Unable to connect to ElasticSearch remotely](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-remotely/52411)
**Author:** [@arunkumar987](https://discuss.elastic.co/u/arunkumar987)\ **Replies:** 5\ **Last updated:** [June 10, 2016, 10:23am UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-remotely/52411 "2016-06-10T10:23:23Z")
After googling I tried making some changes in the elasticsearch.yml file like changing network.host: 0.0.0.0 / 127.0.0.1, http.port: 9200, network.bind\_host: 0, making the min and max heap size to be the same and also tr… --- ## [Cluster health wrong yellow spikes (because new index ?)](https://discuss.elastic.co/t/cluster-health-wrong-yellow-spikes-because-new-index/330124)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 7\ **Last updated:** [April 18, 2023, 10:53pm UTC](https://discuss.elastic.co/t/cluster-health-wrong-yellow-spikes-because-new-index/330124 "2023-04-18T22:53:25Z")
We are running elasticsearch on kubernetes, via the ECK operator. Every day we receive at least 4 alerts about elasticsearch cluster health go to yellow. Also, we use argocd to deploy it, the health check script here a… --- ## [How do I get a list of closed indexes?](https://discuss.elastic.co/t/how-do-i-get-a-list-of-closed-indexes/15951)
**Author:** [@Alexander\_Gray\_II](https://discuss.elastic.co/u/Alexander_Gray_II)\ **Replies:** 2\ **Last updated:** [February 22, 2014, 1:19am UTC](https://discuss.elastic.co/t/how-do-i-get-a-list-of-closed-indexes/15951 "2014-02-22T01:19:43Z")
I posted this question at StackOverFlow without realizing this is probably the better forum to post ES questions in: http://stackoverflow.com/questions/21917474/how-do-i-get-a-list-of-closed-indexes-in-elasticsearch … --- ## [Expandable tree view in Data table](https://discuss.elastic.co/t/expandable-tree-view-in-data-table/56343)
**Author:** [@sbonami](https://discuss.elastic.co/u/sbonami)\ **Replies:** 3\ **Last updated:** [July 26, 2016, 8:31pm UTC](https://discuss.elastic.co/t/expandable-tree-view-in-data-table/56343 "2016-07-26T20:31:28Z")
Hi, I have a field called ID with levels in it. Example of an ID value: AcBo5w.VxMGCA.Z1PANA ( 3 levels) How can I see the data in an tree view starting with the first level (AcBo5w) and then drilling down to the sec… --- ## [Shards balance and homogeneity of their sizes](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661)
**Author:** [@sebastienf](https://discuss.elastic.co/u/sebastienf)\ **Replies:** 7\ **Last updated:** [August 20, 2021, 10:29am UTC](https://discuss.elastic.co/t/shards-balance-and-homogeneity-of-their-sizes/281661 "2021-08-20T10:29:42Z")
I understood the need of a well balanced ES cluster, with indices made of enough shards (not too much but not too few), but I was wondering if the constancy of the size of shards was important ? Indeed, according the pu… --- ## [Drop multiple fields with regex on field names using filebeat](https://discuss.elastic.co/t/drop-multiple-fields-with-regex-on-field-names-using-filebeat/110496)
**Author:** [@Haughtton](https://discuss.elastic.co/u/Haughtton)\ **Replies:** 4\ **Last updated:** [December 7, 2017, 2:14pm UTC](https://discuss.elastic.co/t/drop-multiple-fields-with-regex-on-field-names-using-filebeat/110496 "2017-12-07T14:14:13Z")
Hello, I'm trying to send a big json file through filebeat to elasticsearch but I have too many fields so I want to drop a lot a them. I saw on the doc that I can do this using the filebeat processor and I did smthing … --- ## ["java.io.EOFException: read past EOF: NIOFSIndexInput" error](https://discuss.elastic.co/t/java-io-eofexception-read-past-eof-niofsindexinput-error/12436)
**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\ **Replies:** 4\ **Last updated:** [June 16, 2013, 5:27pm UTC](https://discuss.elastic.co/t/java-io-eofexception-read-past-eof-niofsindexinput-error/12436 "2013-06-16T17:27:45Z")
Hi , I am seeing this error while executing constant score query - https://gist.github.com/Vineeth-Mohan/5791347 Kindly check. VERSION - 0.90.1 Thanks Vineeth -- You received this message bec… --- ## [Connection Reset By Peer](https://discuss.elastic.co/t/connection-reset-by-peer/82477)
**Author:** [@RAY2017](https://discuss.elastic.co/u/RAY2017)\ **Replies:** 2\ **Last updated:** [April 19, 2017, 6:01am UTC](https://discuss.elastic.co/t/connection-reset-by-peer/82477 "2017-04-19T06:01:00Z")
Getting connection reset by Peer when filebeat process is restarted. 2017-04-14T15:08:34-05:00 INFO Non-zero metrics in the last 30s: libbeat.logstash.published\_and\_acked\_events=30563 filebeat.harvester.running=9 fileb… --- ## [KIBANA - Elastic search PLUGIN IS RED, UI SETTINGS PLUGN IS RED](https://discuss.elastic.co/t/kibana-elastic-search-plugin-is-red-ui-settings-plugn-is-red/199438)
**Author:** [@nirish](https://discuss.elastic.co/u/nirish)\ **Replies:** 7\ **Last updated:** [September 14, 2019, 9:28am UTC](https://discuss.elastic.co/t/kibana-elastic-search-plugin-is-red-ui-settings-plugn-is-red/199438 "2019-09-14T09:28:21Z")
LOGS FROM data ingestion server failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.ingest.PipelineExecu tionS… --- ## [Расчет значений в Kibana](https://discuss.elastic.co/t/kibana/43932)
**Author:** [@Hf\_Pro](https://discuss.elastic.co/u/Hf_Pro)\ **Replies:** 7\ **Last updated:** [March 10, 2016, 7:13pm UTC](https://discuss.elastic.co/t/kibana/43932 "2016-03-10T19:13:12Z")
Добрый день. Возможен ли расчет значений в Kibana, например, вывод значений за единицу, при этом переменные рассчитывались на основе данных индекса? --- ## [Convert Field Data to UTF8](https://discuss.elastic.co/t/convert-field-data-to-utf8/92493)
**Author:** [@MaikLinnemann](https://discuss.elastic.co/u/MaikLinnemann)\ **Replies:** 3\ **Last updated:** [July 13, 2017, 10:26am UTC](https://discuss.elastic.co/t/convert-field-data-to-utf8/92493 "2017-07-13T10:26:44Z")
Dear Forum, i am new to the ELK and i would like to convert data in a field called "subject" to UTF8. The data comes pushed from logstash to elasticsearch and visualized with kibana. My problem is that the data comes … --- ## [Elasticsearch nodes join cluster using discovery](https://discuss.elastic.co/t/elasticsearch-nodes-join-cluster-using-discovery/74674)
**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\ **Replies:** 3\ **Last updated:** [February 12, 2017, 10:16am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-join-cluster-using-discovery/74674 "2017-02-12T10:16:50Z")
I installed 2 Elasticsearch 5.2 nodes on EC2, inside the same VPC. I set these two nodes with the security group to allow inbund port 9200, 9300 and ICMP within the same VPC. I installed ec2 discovery plugin for nodes t… --- ## [Group by RegExp](https://discuss.elastic.co/t/group-by-regexp/64023)
**Author:** [@emanuelef](https://discuss.elastic.co/u/emanuelef)\ **Replies:** 3\ **Last updated:** [October 26, 2016, 4:26pm UTC](https://discuss.elastic.co/t/group-by-regexp/64023 "2016-10-26T16:26:36Z")
Hi, I'd need to make query and group the results according to a reg Exp. For example I have a filed with those possible values: /sdc/user?id=4039&dc=4 /sdc/user?id=4039&dc=2 /sdc/user?id=2222&dc=7 should give me: /sdc… --- ## [Fortigate Firewall Logs to Elasticsearch](https://discuss.elastic.co/t/fortigate-firewall-logs-to-elasticsearch/294041)
**Author:** [@yogicd](https://discuss.elastic.co/u/yogicd)\ **Replies:** 2\ **Last updated:** [January 11, 2022, 2:42pm UTC](https://discuss.elastic.co/t/fortigate-firewall-logs-to-elasticsearch/294041 "2022-01-11T14:42:53Z")
Hi Team, I am trying to get the Fortigate firewall logs to elasticsearch via logstash but not able to get the data to elasticsearch, But i can see the data coming via tcpdump udp port 514. and my logstash config as… --- ## [Kibana 7.7.0 Custom Label not present](https://discuss.elastic.co/t/kibana-7-7-0-custom-label-not-present/233754)
**Author:** [@EsequiasNeto](https://discuss.elastic.co/u/EsequiasNeto)\ **Replies:** 6\ **Last updated:** [June 30, 2020, 2:58pm UTC](https://discuss.elastic.co/t/kibana-7-7-0-custom-label-not-present/233754 "2020-06-30T14:58:39Z")
When I use bucket metric I can't find the "Custom Label". It happens in all visualizations! --- ## [Bandwidth with netflow Data](https://discuss.elastic.co/t/bandwidth-with-netflow-data/115212)
**Author:** [@Sylvain-69](https://discuss.elastic.co/u/Sylvain-69)\ **Replies:** 6\ **Last updated:** [January 17, 2018, 10:24pm UTC](https://discuss.elastic.co/t/bandwidth-with-netflow-data/115212 "2018-01-17T22:24:51Z")
Hello, I'm trying to use Timelion to get the bandwidth from my Netflow Data with this : .es(index="netflow\*", metric="sum:netflow.in\_bytes", kibana=true).divide(1048576).mvavg(1m).scale\_interval(1s).if(operator="lt", i… --- ## [Elastic causes very high disk usage with minimal data](https://discuss.elastic.co/t/elastic-causes-very-high-disk-usage-with-minimal-data/310384)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 5\ **Last updated:** [July 26, 2022, 7:18am UTC](https://discuss.elastic.co/t/elastic-causes-very-high-disk-usage-with-minimal-data/310384 "2022-07-26T07:18:50Z")
Hello, as my other post explained our 3 Node cluster fried 2 SSDs in 4 hours. We are currently investigating what really happened. Our System: 3 Nodes, Elastic 7.17.3, Kibana 7.17.3, Every node has a 2TB SSD and 32GB … --- ## [Unable to connect to database. Tried 1 times {:error\_message=\>"Java::JavaLang::NoClassDefFoundError: javax/xml/bind/DatatypeConverter"](https://discuss.elastic.co/t/unable-to-connect-to-database-tried-1-times-error-message-java-javax-xml-bind-datatypeconverter/200901)
**Author:** [@raquelg](https://discuss.elastic.co/u/raquelg)\ **Replies:** 2\ **Last updated:** [October 23, 2019, 1:21pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-database-tried-1-times-error-message-java-javax-xml-bind-datatypeconverter/200901 "2019-10-23T13:21:47Z")
Hi, I am trying to move a table form SQL Server to ElasticSearch with Logstash I have installed elasticsearch and logstash 7.3.1 with docker-compose. pipeline/logstash has the following configuration: input { tcp { … --- ## [Error status : 400](https://discuss.elastic.co/t/error-status-400/110446)
**Author:** [@VidyaKumar](https://discuss.elastic.co/u/VidyaKumar)\ **Replies:** 1\ **Last updated:** [December 6, 2017, 2:38am UTC](https://discuss.elastic.co/t/error-status-400/110446 "2017-12-06T02:38:02Z")
When trying to import sample data into elasticsearch, getting the following error: "type" : "action\_request\_validation\_exception", "reason" : "Validation Failed: 1: type is missing;2: type is missing;3: type is missing… --- ## [Logstash docker image keeps resetting elasticsearch URL](https://discuss.elastic.co/t/logstash-docker-image-keeps-resetting-elasticsearch-url/99229)
**Author:** [@sfchrisgleason](https://discuss.elastic.co/u/sfchrisgleason)\ **Replies:** 6\ **Last updated:** [September 4, 2017, 7:49pm UTC](https://discuss.elastic.co/t/logstash-docker-image-keeps-resetting-elasticsearch-url/99229 "2017-09-04T19:49:42Z")
Hello all, I am experimenting with bringing up an ELK stack across multiple physical machines using the docker images (Docker running independently on each machine). I'm using the official images from elastic using: do… --- ## [How to add locale timezone in metricbeat](https://discuss.elastic.co/t/how-to-add-locale-timezone-in-metricbeat/137845)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 4\ **Last updated:** [July 3, 2018, 12:29pm UTC](https://discuss.elastic.co/t/how-to-add-locale-timezone-in-metricbeat/137845 "2018-07-03T12:29:44Z")
Hi All, I have installed metricbeat 6.3.0 in my windows 8 and I configured few metricsets in system module and I am sending data to logstash output and also I have the enable the add\_locale in the metricbeat.yml as like… --- ## [Is it possible to record the transaction with sample rate as well, but not all of them?](https://discuss.elastic.co/t/is-it-possible-to-record-the-transaction-with-sample-rate-as-well-but-not-all-of-them/183800)
**Author:** [@kenshin](https://discuss.elastic.co/u/kenshin)\ **Replies:** 3\ **Last updated:** [July 2, 2019, 2:46am UTC](https://discuss.elastic.co/t/is-it-possible-to-record-the-transaction-with-sample-rate-as-well-but-not-all-of-them/183800 "2019-07-02T02:46:17Z")
Hi there, We are trying to use Elastic APM for performance monitoring and tracing. The official document said, By default, the agent will sample every transaction (e.g. request to your service). To reduce overhead and… --- ## [Can the filebeat syslog listener forward syslog output?](https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 1\ **Last updated:** [September 20, 2018, 11:08am UTC](https://discuss.elastic.co/t/can-the-filebeat-syslog-listener-forward-syslog-output/149192 "2018-09-20T11:08:38Z")
It's not too clear in the filebeat syslog input documentation, but can filebeat output in RFC3164 or RFC5424 format (to file or to other remote syslog destination) or can it only write to JSON (Logstash/Elastic/local fil… --- ## [Logstash beats input - a lot of 'input: unhandled exception' errors](https://discuss.elastic.co/t/logstash-beats-input-a-lot-of-input-unhandled-exception-errors/49166)
**Author:** [@daniilyar-confyrm](https://discuss.elastic.co/u/daniilyar-confyrm)\ **Replies:** 7\ **Last updated:** [May 12, 2016, 12:19pm UTC](https://discuss.elastic.co/t/logstash-beats-input-a-lot-of-input-unhandled-exception-errors/49166 "2016-05-12T12:19:34Z")
Hello, Logstash guru's, I am using Logstash 2.3.2, filebeat 1.2.2 and logstash-beats-input 2.2.8. I am sending logs with filebeat from 50 servers to a single Logstash server (using beats input). At half servers I … --- ## [\[ANN\] Hebrew analysis plugin now available](https://discuss.elastic.co/t/ann-hebrew-analysis-plugin-now-available/15928)
**Author:** [@Itamar\_Syn\_Hershko](https://discuss.elastic.co/u/Itamar_Syn_Hershko)\ **Replies:** 0\ **Last updated:** [February 20, 2014, 2:58pm UTC](https://discuss.elastic.co/t/ann-hebrew-analysis-plugin-now-available/15928 "2014-02-20T14:58:38Z")
Hi all, Just to let you all know I released the first-ever Elasticsearch plugin for Hebrew analysis. The plugin and the dictionary it relies on (hspell) are both released under the AGPL3 license - it is an open-sour… [Previous page](https://discuss.elastic.co/top.md?page=544&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=546&per_page=50&period=all)