# Top **URL:** https://discuss.elastic.co/top.md?page=554&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 555 --- ## [Run multi-vectors kNN search](https://discuss.elastic.co/t/run-multi-vectors-knn-search/299958)
**Author:** [@rporcu](https://discuss.elastic.co/u/rporcu)\ **Replies:** 2\ **Last updated:** [January 23, 2023, 7:48am UTC](https://discuss.elastic.co/t/run-multi-vectors-knn-search/299958 "2023-01-23T07:48:05Z")
Hello everyone! I’m really interested by the new kNN search functionality of Elasticsearch v8. Is there any way to run an approximate kNN search on multiple dense\_vectors? I checked the docs but, as of version 8.1.0, … --- ## [Dynamic template](https://discuss.elastic.co/t/dynamic-template/116000)
**Author:** [@piingluo](https://discuss.elastic.co/u/piingluo)\ **Replies:** 5\ **Last updated:** [January 18, 2018, 8:19pm UTC](https://discuss.elastic.co/t/dynamic-template/116000 "2018-01-18T20:19:32Z")
my dynamic template , as follow: "dynamic\_templates": \[ { "strings\_as\_keyword": { "match\_mapping\_type": "string", "match": "\*", "unmatch": \["message","\*id"\], "mapping": { "type": "keyword" } } }, { "messag… --- ## [Configure Kibana With out Enrollment Token](https://discuss.elastic.co/t/configure-kibana-with-out-enrollment-token/342587)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 6\ **Last updated:** [September 11, 2023, 11:52am UTC](https://discuss.elastic.co/t/configure-kibana-with-out-enrollment-token/342587 "2023-09-11T11:52:46Z")
Hi Team, Could you please help me to configure Kibana with elastic cluster without an enrollment token? Due to some constraint, I had removed the security settings from elasticsearch.yml file due to which I am not able… --- ## [Date formatting yyyy.MM.dd](https://discuss.elastic.co/t/date-formatting-yyyy-mm-dd/251588)
**Author:** [@VeeT](https://discuss.elastic.co/u/VeeT)\ **Replies:** 6\ **Last updated:** [October 16, 2020, 3:26pm UTC](https://discuss.elastic.co/t/date-formatting-yyyy-mm-dd/251588 "2020-10-16T15:26:27Z")
I have a Date input in yyyy.MM.dd format but is getting converted to yyyy.MM.dd HH:mm:ss.ZZZ with the time getting set to "20:00:00.000". For example, the Date in put is "2020.10.09" but it's getting displayed in Kiban… --- ## [Timezone offset parse issue](https://discuss.elastic.co/t/timezone-offset-parse-issue/128310)
**Author:** [@Ragi](https://discuss.elastic.co/u/Ragi)\ **Replies:** 4\ **Last updated:** [April 17, 2018, 2:02pm UTC](https://discuss.elastic.co/t/timezone-offset-parse-issue/128310 "2018-04-17T14:02:36Z")
When i try to parse the following line 2018-04-17T10:04:15.693+0200 INFO \[dmt\_scheduler\_Worker-4\] \[SampleClass:60\] testMethod executed I found the following error in the log file {:timestamp=\>"2018-04-17T10:04:15.6930… --- ## [Extract UNIX\_MS using 'grok' regex - use it as date using 'date'](https://discuss.elastic.co/t/extract-unix-ms-using-grok-regex-use-it-as-date-using-date/83536)
**Author:** [@uda\_kay](https://discuss.elastic.co/u/uda_kay)\ **Replies:** 4\ **Last updated:** [April 26, 2017, 7:19am UTC](https://discuss.elastic.co/t/extract-unix-ms-using-grok-regex-use-it-as-date-using-date/83536 "2017-04-26T07:19:27Z")
Hello i have a field named "message", it contains the string: "GET1: +992545989898 GET2: 365981022808151-821eaec1d4b27cc974c97e11a2343f705c0c4612-1492310893103" The field contains Phone-number, ID, HEX-data, and epoch (… --- ## [Too many clauses exceptions](https://discuss.elastic.co/t/too-many-clauses-exceptions/156691)
**Author:** [@dsanchez91](https://discuss.elastic.co/u/dsanchez91)\ **Replies:** 3\ **Last updated:** [November 14, 2018, 2:46pm UTC](https://discuss.elastic.co/t/too-many-clauses-exceptions/156691 "2018-11-14T14:46:18Z")
Hello, I'm getting an "Too many clauses" error in one query where I don't think I'm exceeding the 1024 limit. Here's the query: query As you can see, in each of the queries for each analyzer I have 190 terms... so 190… --- ## [Grok & firewall logs](https://discuss.elastic.co/t/grok-firewall-logs/200749)
**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\ **Replies:** 6\ **Last updated:** [September 24, 2019, 8:42pm UTC](https://discuss.elastic.co/t/grok-firewall-logs/200749 "2019-09-24T20:42:12Z")
Hi, I have some firewall logs sent to "syslog" and i have filebeat read the syslog, send it to Logstash then to Elasticsearch. with this filter(1): grok { match =\> { "message" =\> "%{TIMESTAMP\_ISO8601:timestamp}" } } … --- ## [HSL F5 Sample Grok](https://discuss.elastic.co/t/hsl-f5-sample-grok/41759)
**Author:** [@Ze\_Brodie](https://discuss.elastic.co/u/Ze_Brodie)\ **Replies:** 6\ **Last updated:** [February 16, 2016, 1:27pm UTC](https://discuss.elastic.co/t/hsl-f5-sample-grok/41759 "2016-02-16T13:27:55Z")
Hi there, can anyone help me with this logstash Grok from the sample configuration on the elastic site? so im using the F5 template from the example here https://www.elastic.co/blog/f5-high-speed-logging-with-elastic-s… --- ## [Logstash Elasticsearch Fail to Respond](https://discuss.elastic.co/t/logstash-elasticsearch-fail-to-respond/307040)
**Author:** [@tepus](https://discuss.elastic.co/u/tepus)\ **Replies:** 8\ **Last updated:** [June 13, 2022, 5:39pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-fail-to-respond/307040 "2022-06-13T17:39:29Z")
Hello Everyone, I'm trying to connect Logstash to Elasticsearch. However, it fails with the message Failed to perform request {:message=\>"10.10.145.124:9200 failed to respond", :exception=\>Manticore::ClientProtocolExcep… --- ## [Dynamic Template convert JSON object to Text](https://discuss.elastic.co/t/dynamic-template-convert-json-object-to-text/234450)
**Author:** [@psteh](https://discuss.elastic.co/u/psteh)\ **Replies:** 1\ **Last updated:** [May 27, 2020, 6:31am UTC](https://discuss.elastic.co/t/dynamic-template-convert-json-object-to-text/234450 "2020-05-27T06:31:28Z")
Is it possible to convert JSON object to Text using Dynamic Template? My aim is to have all fields in this object property to be Text I am not using Logstash, this is from AWS Cloudwatch log to AWS Elasticsearch Servic… --- ## [Logstash Exceptionhandling / Catching exceptions from output plugin](https://discuss.elastic.co/t/logstash-exceptionhandling-catching-exceptions-from-output-plugin/28664)
**Author:** [@pueffl](https://discuss.elastic.co/u/pueffl)\ **Replies:** 4\ **Last updated:** [September 8, 2015, 7:46am UTC](https://discuss.elastic.co/t/logstash-exceptionhandling-catching-exceptions-from-output-plugin/28664 "2015-09-08T07:46:12Z")
Hi there! We are currently evaluating ELK and so far it looks very promising, but we found one big issu we couldn't find satisfying information so far: We want to log all our events in Elasticsearch, so when somethin… --- ## [Filebeat not sending empty lines](https://discuss.elastic.co/t/filebeat-not-sending-empty-lines/118060)
**Author:** [@dmontemayors](https://discuss.elastic.co/u/dmontemayors)\ **Replies:** 7\ **Last updated:** [February 26, 2018, 6:04pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-empty-lines/118060 "2018-02-26T18:04:20Z")
Hi all, I looked around and it seems like filebeat should be sending empty lines in the log files. Running version 6.1.3 with a pretty basic configuration but it looks like the harvester is ignoring them. Am I missing… --- ## [Is there a way to generate an Increment and Unique ID in logstash?](https://discuss.elastic.co/t/is-there-a-way-to-generate-an-increment-and-unique-id-in-logstash/83008)
**Author:** [@elastic\_johnson\_yi](https://discuss.elastic.co/u/elastic_johnson_yi)\ **Replies:** 2\ **Last updated:** [April 20, 2017, 8:58am UTC](https://discuss.elastic.co/t/is-there-a-way-to-generate-an-increment-and-unique-id-in-logstash/83008 "2017-04-20T08:58:36Z")
What I really want is a unique ID, but not UUID. Because UUID is too long, and I don't need the ID to be universally unique. Just being unique in my own server will be fine enough. The UUID plugin is quite close to wha… --- ## [Increasing max\_file\_descriptors OSX](https://discuss.elastic.co/t/increasing-max-file-descriptors-osx/70482)
**Author:** [@JonathanAaron](https://discuss.elastic.co/u/JonathanAaron)\ **Replies:** 5\ **Last updated:** [January 4, 2017, 4:10pm UTC](https://discuss.elastic.co/t/increasing-max-file-descriptors-osx/70482 "2017-01-04T16:10:01Z")
\[Solved\] \[2.4.3\] I've set ulimit to 65000, but it keeps on showing up as 10240 when elasticsearch starts up. Is elasticsearch showing the valid max\_file\_descriptors? Thanks edit: I took @jasontedor advise from below.… --- ## [Logstash error 403 with a remote elasticsearch instance](https://discuss.elastic.co/t/logstash-error-403-with-a-remote-elasticsearch-instance/286161)
**Author:** [@Indigo\_Star](https://discuss.elastic.co/u/Indigo_Star)\ **Replies:** 3\ **Last updated:** [October 7, 2021, 10:42pm UTC](https://discuss.elastic.co/t/logstash-error-403-with-a-remote-elasticsearch-instance/286161 "2021-10-07T22:42:13Z")
Hi, I have a logstash config which works fine with my local Elasticsearch instance but when i try to push to a remote instance config gives error at startup as follows: Using default mapping template \[2021-10-07T13:17… --- ## [Pipeline.ecs\_compatibility WARN logs](https://discuss.elastic.co/t/pipeline-ecs-compatibility-warn-logs/292164)
**Author:** [@adizalmanovich](https://discuss.elastic.co/u/adizalmanovich)\ **Replies:** 1\ **Last updated:** [December 16, 2021, 3:27pm UTC](https://discuss.elastic.co/t/pipeline-ecs-compatibility-warn-logs/292164 "2021-12-16T15:27:34Z")
I have some question. I upgraded my ELK to 7.16.1 due to a Log4j2 security issue. In my logstash configuration, we are using to get input from Azure EventHub and Kubernetes cluster. after upgraded my ELK I am getting h… --- ## [Sending Rsyslog data to logstash](https://discuss.elastic.co/t/sending-rsyslog-data-to-logstash/249066)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [October 27, 2020, 7:25am UTC](https://discuss.elastic.co/t/sending-rsyslog-data-to-logstash/249066 "2020-10-27T07:25:26Z")
I've configured two linux server for sending client rsyslog data to server.The server is receiving messages from client and i've installed elk service on server side now i want to send the rsyslog data (which the server … --- ## [Shared views in Inventory Observability \[7.15.2\]](https://discuss.elastic.co/t/shared-views-in-inventory-observability-7-15-2/291991)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [January 5, 2022, 10:08am UTC](https://discuss.elastic.co/t/shared-views-in-inventory-observability-7-15-2/291991 "2022-01-05T10:08:17Z")
Hi, everyone I have created a view in Inventory called Infraestructure in Default space. Does this view only can used by my user? I would like to create a global view, is it possible? is there any way to share it? … --- ## [Sort Order when relevance is equal](https://discuss.elastic.co/t/sort-order-when-relevance-is-equal/17496)
**Author:** [@Erich\_Lin](https://discuss.elastic.co/u/Erich_Lin)\ **Replies:** 3\ **Last updated:** [July 22, 2014, 6:02am UTC](https://discuss.elastic.co/t/sort-order-when-relevance-is-equal/17496 "2014-07-22T06:02:45Z")
Ignoring the bouncing results problem with multiple shards , is the order of results deterministic when sorting by relevance score or any other field. What I mean by this is if two documents have the same score,… --- ## [Configuring number of shards and replica using Java API](https://discuss.elastic.co/t/configuring-number-of-shards-and-replica-using-java-api/9133)
**Author:** [@Percival\_Xavier](https://discuss.elastic.co/u/Percival_Xavier)\ **Replies:** 3\ **Last updated:** [September 25, 2012, 7:45pm UTC](https://discuss.elastic.co/t/configuring-number-of-shards-and-replica-using-java-api/9133 "2012-09-25T19:45:13Z")
Hello, How do I configure the above using Java API just before the below statement is called ? IndexResponse response = \_client.prepareIndex(obj.get\_srch\_index(), obj.get\_srch\_name(),obj.get\_srch\_Id()) … --- ## ["unable to create new native thread" with default config](https://discuss.elastic.co/t/unable-to-create-new-native-thread-with-default-config/55058)
**Author:** [@hyperbaton](https://discuss.elastic.co/u/hyperbaton)\ **Replies:** 5\ **Last updated:** [July 13, 2016, 3:11pm UTC](https://discuss.elastic.co/t/unable-to-create-new-native-thread-with-default-config/55058 "2016-07-13T15:11:30Z")
I'm using an older version of Elasticsearch (1.4.1) to run AtoM (https://www.accesstomemory.org) hosted with Webfaction (1GB ram plan). I'm not running out of memory on my plan (otherwise they just terminate the process)… --- ## [Filter applied to specific data view (index pattern)](https://discuss.elastic.co/t/filter-applied-to-specific-data-view-index-pattern/304669)
**Author:** [@andersg](https://discuss.elastic.co/u/andersg)\ **Replies:** 4\ **Last updated:** [June 16, 2022, 7:58am UTC](https://discuss.elastic.co/t/filter-applied-to-specific-data-view-index-pattern/304669 "2022-06-16T07:58:22Z")
Hi, I find it powerful to mix content from different types of indexes in Kibana dashboards, but have a difficult time setting up useful dashboards because of global filtering. I do however want to use filters and add co… --- ## [Could not create connection to db](https://discuss.elastic.co/t/could-not-create-connection-to-db/219444)
**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\ **Replies:** 8\ **Last updated:** [March 6, 2020, 2:16pm UTC](https://discuss.elastic.co/t/could-not-create-connection-to-db/219444 "2020-03-06T14:16:14Z")
Hi there I was triying to connect to a DB MSSQL from metricbeat, but I have 2 errors. Can you help me? Greetings --- ## [Create arrays in Logstash](https://discuss.elastic.co/t/create-arrays-in-logstash/262260)
**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\ **Replies:** 4\ **Last updated:** [February 1, 2021, 12:43pm UTC](https://discuss.elastic.co/t/create-arrays-in-logstash/262260 "2021-02-01T12:43:27Z")
Hello guys. Dont know if it is possible, but i would like to create an array in my logstash to use in an if statement. ill give an example for you to understand me. Giving a random "log to be processed" as example: ra… --- ## [Logstash can't process all JSON logs](https://discuss.elastic.co/t/logstash-cant-process-all-json-logs/140003)
**Author:** [@Ferdous\_Shibly](https://discuss.elastic.co/u/Ferdous_Shibly)\ **Replies:** 4\ **Last updated:** [July 16, 2018, 3:18am UTC](https://discuss.elastic.co/t/logstash-cant-process-all-json-logs/140003 "2018-07-16T03:18:55Z")
Hi, We are sending logs directly from django based python application to logstash over TCP/9111 port. We found that some logs are missing like {"@timestamp": "2018-07-13T14:38:23.741Z", "remote\_addr": "10.0.2.2", "hos… --- ## [\[Solved\] ElasticSearch - ec2 : Discovery doesn't work with cloud-aws plugin](https://discuss.elastic.co/t/solved-elasticsearch-ec2-discovery-doesnt-work-with-cloud-aws-plugin/64419)
**Author:** [@TFerdinand](https://discuss.elastic.co/u/TFerdinand)\ **Replies:** 6\ **Last updated:** [October 31, 2016, 4:15pm UTC](https://discuss.elastic.co/t/solved-elasticsearch-ec2-discovery-doesnt-work-with-cloud-aws-plugin/64419 "2016-10-31T16:15:03Z")
Hello, I have some problems with elasticsearch cloud-aws plugin which doesn't see any other instances. Here is the configuration i put : cluster.name: test\_tferdinand node.name: ip-10-203-13-175 network.host: 0.0.0.0 … --- ## [X-Pack Authentication Plugin](https://discuss.elastic.co/t/x-pack-authentication-plugin/106355)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 3\ **Last updated:** [November 7, 2017, 7:18pm UTC](https://discuss.elastic.co/t/x-pack-authentication-plugin/106355 "2017-11-07T19:18:07Z")
I installed x-pack - followed everything here, changing passwords, etc - https://www.elastic.co/guide/en/x-pack/current/security-getting-started.html Changed all the passwords to new elastic password. Made sure corre… --- ## [NoClassDefFoundError: Lorg/apache/spark/sql/catalyst/types/StructType with spark\_2.10-2.2.0-rc1](https://discuss.elastic.co/t/noclassdeffounderror-lorg-apache-spark-sql-catalyst-types-structtype-with-spark-2-10-2-2-0-rc1/39267)
**Author:** [@andrewwwooster](https://discuss.elastic.co/u/andrewwwooster)\ **Replies:** 3\ **Last updated:** [January 15, 2016, 10:08pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-lorg-apache-spark-sql-catalyst-types-structtype-with-spark-2-10-2-2-0-rc1/39267 "2016-01-15T22:08:26Z")
I am running a simple Java Spark SQL driver using elasticsearch-spark\_2.10-2.2.0-rc1 against an Elasticsearch 2.1 server and spark-1.6.0-bin-hadoop2.6. I get the following exception when I try to access my spark SQL q… --- ## [Could not index event to Elasticsearch - no write index is defined for alias](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-no-write-index-is-defined-for-alias/308783)
**Author:** [@teesr5](https://discuss.elastic.co/u/teesr5)\ **Replies:** 1\ **Last updated:** [July 4, 2022, 1:15pm UTC](https://discuss.elastic.co/t/could-not-index-event-to-elasticsearch-no-write-index-is-defined-for-alias/308783 "2022-07-04T13:15:31Z")
Hi guys, we are facing an issue on our ELK infrastructure: \[WARN \]\[logstash.outputs.elasticsearch\]\[main\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"logstash-rollover… --- ## [Kibana for various data sources](https://discuss.elastic.co/t/kibana-for-various-data-sources/61888)
**Author:** [@no\_jihun](https://discuss.elastic.co/u/no_jihun)\ **Replies:** 1\ **Last updated:** [September 30, 2016, 2:49am UTC](https://discuss.elastic.co/t/kibana-for-various-data-sources/61888 "2016-09-30T02:49:08Z")
Hi. I know currently kibana supports only elasticsearch. BWT, Caravel (https://github.com/airbnb/caravel) was started only for druid, but now extended to various datasources(jdbc, elasticsearch, etc..) . Zeppelin (ht… --- ## [Merge Several json parsed fields to 1 field](https://discuss.elastic.co/t/merge-several-json-parsed-fields-to-1-field/52065)
**Author:** [@Wesley\_Smekens](https://discuss.elastic.co/u/Wesley_Smekens)\ **Replies:** 4\ **Last updated:** [June 13, 2016, 8:18am UTC](https://discuss.elastic.co/t/merge-several-json-parsed-fields-to-1-field/52065 "2016-06-13T08:18:41Z")
Hey All, Part of our logs we recieve are in json format. I filter out these messages with following filter: json { source =\> "Request" target =\> "Request\_parsed" } This works perfectly and we are getting a… --- ## [Timestampにログ日付を設定するが時刻がずれる](https://discuss.elastic.co/t/timestamp/210452)
**Author:** [@keikei12](https://discuss.elastic.co/u/keikei12)\ **Replies:** 2\ **Last updated:** [December 12, 2019, 2:21am UTC](https://discuss.elastic.co/t/timestamp/210452 "2019-12-12T02:21:14Z")
logstashのフィルターで下記の設定をしております。 grokで「TIMESTAMP\_ISO8601:timestamp」でログ内の日付を取得 下記で@timestampにログ内の日付を設定 date { match =\> \[ "timestamp", "ISO8601" \] } 上記のように設定したところ、以下の日付ファイルが取り込まれた時に 時刻がずれていました。 ログの日付 201… --- ## [Logstash fail to start](https://discuss.elastic.co/t/logstash-fail-to-start/96102)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [August 7, 2017, 1:52pm UTC](https://discuss.elastic.co/t/logstash-fail-to-start/96102 "2017-08-07T13:52:46Z")
Hello, I have a brand new logstash installation which is failing to start with the following error: \[2017-08-07T12:18:11,073\]\[ERROR\]\[logstash.pipeline \] Logstash failed to create queue {"exception"=\>"integer 2147… --- ## [Spring Boot - Global Custom Exception Handling Mechanism using RestControllerAdvice](https://discuss.elastic.co/t/spring-boot-global-custom-exception-handling-mechanism-using-restcontrolleradvice/94938)
**Author:** [@halogeek](https://discuss.elastic.co/u/halogeek)\ **Replies:** 0\ **Last updated:** [July 28, 2017, 10:48am UTC](https://discuss.elastic.co/t/spring-boot-global-custom-exception-handling-mechanism-using-restcontrolleradvice/94938 "2017-07-28T10:48:48Z")
Am using Spring Boot for Restful Web Services. Trying to setup a global custom exception handling mechanism which relies on @RestControllerAdvice which can handle exceptions that are known but also not known. pom.xml \<… --- ## [Logstash pipeline tester UI tool - Feedback appreciated](https://discuss.elastic.co/t/logstash-pipeline-tester-ui-tool-feedback-appreciated/223219)
**Author:** [@epacke](https://discuss.elastic.co/u/epacke)\ **Replies:** 0\ **Last updated:** [March 11, 2020, 8:47pm UTC](https://discuss.elastic.co/t/logstash-pipeline-tester-ui-tool-feedback-appreciated/223219 "2020-03-11T20:47:27Z")
Hi there! I've made a pipeline testing tool using NodeJs, Logstash and docker-compose for my colleagues that is not so well versed in Linux but ended up using it myself out of convenience. Basically it launches a Web-U… --- ## [How to multiply 2 with count result](https://discuss.elastic.co/t/how-to-multiply-2-with-count-result/139509)
**Author:** [@ramanna\_hk](https://discuss.elastic.co/u/ramanna_hk)\ **Replies:** 2\ **Last updated:** [July 12, 2018, 8:28am UTC](https://discuss.elastic.co/t/how-to-multiply-2-with-count-result/139509 "2018-07-12T08:28:02Z")
Hi, I would like to know, How to apply a simple math operation on count result like multiplication or division. Please check the example attached. Note: count result on text field, here i filtered the value "critical" … --- ## [Increment datetime using update by query](https://discuss.elastic.co/t/increment-datetime-using-update-by-query/181419)
**Author:** [@phager](https://discuss.elastic.co/u/phager)\ **Replies:** 3\ **Last updated:** [May 16, 2019, 5:13pm UTC](https://discuss.elastic.co/t/increment-datetime-using-update-by-query/181419 "2019-05-16T17:13:41Z")
I am tasked with updating the datetime field to keep log records within a week of the current date. The data set contains records from a 1 month period and I need to increment each record by a set number of days so simpl… --- ## [ElasticSerach Cluster behind loadbalancer](https://discuss.elastic.co/t/elasticserach-cluster-behind-loadbalancer/18286)
**Author:** [@Tarun\_Jangra](https://discuss.elastic.co/u/Tarun_Jangra)\ **Replies:** 6\ **Last updated:** [June 24, 2014, 11:02am UTC](https://discuss.elastic.co/t/elasticserach-cluster-behind-loadbalancer/18286 "2014-06-24T11:02:52Z")
hi guys, Scenario1. 1. I have 3 es nodes. 2. I have not installed nginx,tomcat on elasticsearch nodes. 3. These are behind amazon elb. 4. cluster is detecting nodes automatically. My need. 1. elb s… --- ## [Hits.hits array empty even thought total =1](https://discuss.elastic.co/t/hits-hits-array-empty-even-thought-total-1/19930)
**Author:** [@Stephen\_Ward](https://discuss.elastic.co/u/Stephen_Ward)\ **Replies:** 2\ **Last updated:** [May 21, 2016, 8:42pm UTC](https://discuss.elastic.co/t/hits-hits-array-empty-even-thought-total-1/19930 "2016-05-21T20:42:50Z")
I have a node app using the javascript api. even the the query returns a hit. I get the following response "hits": { "total": 1, "max\_score": 14.627042, "hits": \[\] } how can… --- ## [Cannot verify signature: insecure algorithm MD5-RSA"](https://discuss.elastic.co/t/cannot-verify-signature-insecure-algorithm-md5-rsa/63214)
**Author:** [@Sai\_Birada](https://discuss.elastic.co/u/Sai_Birada)\ **Replies:** 4\ **Last updated:** [October 17, 2016, 7:14pm UTC](https://discuss.elastic.co/t/cannot-verify-signature-insecure-algorithm-md5-rsa/63214 "2016-10-17T19:14:29Z")
openssl genrsa -out cakey.pem 2048 openssl req -x509 -new -nodes -key cakey.pem -sha256 -days 3650 -out cacert.pem openssl req -newkey rsa:2048 -keyout server.key -nodes -config openssl.cnf -out server.csr openssl ca -co… --- ## [Searching all fields](https://discuss.elastic.co/t/searching-all-fields/47992)
**Author:** [@soorajhere](https://discuss.elastic.co/u/soorajhere)\ **Replies:** 4\ **Last updated:** [April 29, 2016, 5:32am UTC](https://discuss.elastic.co/t/searching-all-fields/47992 "2016-04-29T05:32:20Z")
Hi All, I am new to elastic search and need some help from you. Below i a trying to explain the problem i face. Please help if you have any solution. Below is my index sample Index name - 'Location' - 4 fields - c… --- ## [Logstash 起動script のconfigファイル読み込みについて](https://discuss.elastic.co/t/logstash-script-config/36113)
**Author:** [@ishizaki](https://discuss.elastic.co/u/ishizaki)\ **Replies:** 3\ **Last updated:** [December 2, 2015, 4:25am UTC](https://discuss.elastic.co/t/logstash-script-config/36113 "2015-12-02T04:25:19Z")
こんにちは logstash の configファイルの読み込み方について教えてください。 以下の環境で yumから rpmで logstash をインストールして利用させて頂いています。 CentOS release 6.7 (Final) logstash-2.0.0-1.noarch logstash の起動は -f オプションでconfファイルを指定して起動しますが、 該当のrpmによりインストールされる /etc/… --- ## [Why is regex filter not working?](https://discuss.elastic.co/t/why-is-regex-filter-not-working/32900)
**Author:** [@jchen2000](https://discuss.elastic.co/u/jchen2000)\ **Replies:** 3\ **Last updated:** [October 24, 2015, 7:03pm UTC](https://discuss.elastic.co/t/why-is-regex-filter-not-working/32900 "2015-10-24T19:03:23Z")
Hi All, I have the following case with multifields, but regex keeps failing on the raw field, but succeeds on the analyzed one. Any pointer when this is the case? Thanks, Fang ================== POST /test-whois-d… --- ## [Problem with docker-compose and logstash](https://discuss.elastic.co/t/problem-with-docker-compose-and-logstash/222419)
**Author:** [@alxfernando](https://discuss.elastic.co/u/alxfernando)\ **Replies:** 8\ **Last updated:** [March 12, 2020, 7:07am UTC](https://discuss.elastic.co/t/problem-with-docker-compose-and-logstash/222419 "2020-03-12T07:07:10Z")
This error appears when I run a docker-compose with elasticsearch, kibana and logstash... I don't understand how to solve it logstash | \[2020-03-06T07:57:58,574\]\[ERROR\]\[logstash.agent \] Failed to execu… --- ## [APM Custom Counters?](https://discuss.elastic.co/t/apm-custom-counters/127399)
**Author:** [@Edward99](https://discuss.elastic.co/u/Edward99)\ **Replies:** 6\ **Last updated:** [April 12, 2018, 11:40am UTC](https://discuss.elastic.co/t/apm-custom-counters/127399 "2018-04-12T11:40:17Z")
Hi, If I would like to have some custom counters (let's say numbers), how would that be represented in the context of Elastic APM? Unless I overlooked the REST API, seems like there is no way to add custom fields. The … --- ## [LDAP hostname verification](https://discuss.elastic.co/t/ldap-hostname-verification/93614)
**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\ **Replies:** 2\ **Last updated:** [July 24, 2017, 10:24am UTC](https://discuss.elastic.co/t/ldap-hostname-verification/93614 "2017-07-24T10:24:12Z")
Hi, I'm trying to configure authentication through Active Directory. Here is my configuration: xpack: security: authc: realms: active\_directory: type: active\_directory order: 0 domain\_name… --- ## [Configure module Auditd with Kubectl \[Auditbeat 7.9.2\]](https://discuss.elastic.co/t/configure-module-auditd-with-kubectl-auditbeat-7-9-2/267048)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 1\ **Last updated:** [March 15, 2021, 2:19pm UTC](https://discuss.elastic.co/t/configure-module-auditd-with-kubectl-auditbeat-7-9-2/267048 "2021-03-15T14:19:27Z")
Hi, everyone I have been working with module Audit Module in order to log any execution of kubectl. Here you are my config: auditbeat.modules: - module: auditd audit\_rules: | -a always,exit -F exe=/usr/bin/kubec… --- ## [How to pass date from messages to output filename in logstash](https://discuss.elastic.co/t/how-to-pass-date-from-messages-to-output-filename-in-logstash/108653)
**Author:** [@adi\_info](https://discuss.elastic.co/u/adi_info)\ **Replies:** 1\ **Last updated:** [November 22, 2017, 7:57am UTC](https://discuss.elastic.co/t/how-to-pass-date-from-messages-to-output-filename-in-logstash/108653 "2017-11-22T07:57:11Z")
I have a requirement to name the output file based on the date present in input messages. I want to assign the incoming date to metadata and then use it in the output like path =\> /path/location/filename\_%{\[@metadata\]\[… --- ## [Does Endpoint Security replace Winlogbeat?](https://discuss.elastic.co/t/does-endpoint-security-replace-winlogbeat/247574)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 8\ **Last updated:** [September 17, 2020, 8:10am UTC](https://discuss.elastic.co/t/does-endpoint-security-replace-winlogbeat/247574 "2020-09-17T08:10:37Z")
Hi, At the risk of asking something completely stupid, does the Endpoint Security Agent replace Winlogbeats? I've been shipping workstation / server MS event logs including Sysmon via Winlogbeats for a while now, and I… [Previous page](https://discuss.elastic.co/top.md?page=553&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=555&per_page=50&period=all)