# Top **URL:** https://discuss.elastic.co/top.md?page=572&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 573 --- ## [Mapping input and output in configuration](https://discuss.elastic.co/t/mapping-input-and-output-in-configuration/79448)
**Author:** [@waubau](https://discuss.elastic.co/u/waubau)\ **Replies:** 7\ **Last updated:** [March 24, 2017, 7:21am UTC](https://discuss.elastic.co/t/mapping-input-and-output-in-configuration/79448 "2017-03-24T07:21:05Z")
I have bumped into very weird thing. "internet" says that I can't just map input and output of logstash config because of single pipeline or whatever. So I have multiple RabbitMQ queues that I want to read and created di… --- ## [Filebeat 5.5.1 is not work with symlink file when symlinks option has been set true](https://discuss.elastic.co/t/filebeat-5-5-1-is-not-work-with-symlink-file-when-symlinks-option-has-been-set-true/96990)
**Author:** [@CharlieQiu](https://discuss.elastic.co/u/CharlieQiu)\ **Replies:** 2\ **Last updated:** [August 14, 2017, 3:49pm UTC](https://discuss.elastic.co/t/filebeat-5-5-1-is-not-work-with-symlink-file-when-symlinks-option-has-been-set-true/96990 "2017-08-14T15:49:02Z")
Version: 5.5.1 Operating System: Linux Steps to Reproduce: I use it in kubernetes. I try to use it as a sidecar in order to forward logs from the containers in same pod. apiVersion: v1 kind: ConfigMap metadata: nam… --- ## [How to get Windows Server DHCP logs](https://discuss.elastic.co/t/how-to-get-windows-server-dhcp-logs/51425)
**Author:** [@logger](https://discuss.elastic.co/u/logger)\ **Replies:** 2\ **Last updated:** [June 2, 2016, 7:08am UTC](https://discuss.elastic.co/t/how-to-get-windows-server-dhcp-logs/51425 "2016-06-02T07:08:42Z")
Hi. I have a problem with Windows Server 2008 r2 DHCP Logs. I used Filebeat to watch over the files in C:\\Windows\\System32\\dhcp\* folder. When a new IP got leased the file does not change its time. That means filebea… --- ## [(Website) Migration of logstash.net to elastic.co](https://discuss.elastic.co/t/website-migration-of-logstash-net-to-elastic-co/32418)
**Author:** [@jordansissel](https://discuss.elastic.co/u/jordansissel)\ **Replies:** 6\ **Last updated:** [October 22, 2015, 6:33pm UTC](https://discuss.elastic.co/t/website-migration-of-logstash-net-to-elastic-co/32418 "2015-10-22T18:33:37Z")
Hello folks! It's been a wonderful many years that logstash.net has served us documentation, hasn't it? In our efforts to improve our documentation, we also migrated most of our newer Logstash docs to elastic.co. That … --- ## [Change index field type](https://discuss.elastic.co/t/change-index-field-type/90653)
**Author:** [@Vito\_Lipari](https://discuss.elastic.co/u/Vito_Lipari)\ **Replies:** 1\ **Last updated:** [June 23, 2017, 3:23pm UTC](https://discuss.elastic.co/t/change-index-field-type/90653 "2017-06-23T15:23:57Z")
Hi to every body, I create an index and i would change a field type ( from string to date ). How can i solve this problem? Sorry for my english --- ## [Elasticsearch aggregation order by top hit score with partitions](https://discuss.elastic.co/t/elasticsearch-aggregation-order-by-top-hit-score-with-partitions/102228)
**Author:** [@Wu\_Chun\_Wa](https://discuss.elastic.co/u/Wu_Chun_Wa)\ **Replies:** 3\ **Last updated:** [October 20, 2017, 8:07pm UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-order-by-top-hit-score-with-partitions/102228 "2017-10-20T20:07:44Z")
I read (Elasticsearch aggregation order by top hit score) and follow it with partitions. The output is very strange. The last partition has the large score. Also, each partition sort the score individually. Current resu… --- ## [Firewall with Beats](https://discuss.elastic.co/t/firewall-with-beats/102132)
**Author:** [@Threepwood](https://discuss.elastic.co/u/Threepwood)\ **Replies:** 3\ **Last updated:** [September 29, 2017, 4:38pm UTC](https://discuss.elastic.co/t/firewall-with-beats/102132 "2017-09-29T16:38:50Z")
Hello, I just set up the elk suite I installed filebeat on a client machine, but this one to iptables rules. I have to fight with, I can not let pass filebeat. if I disable the iptables, filebeat communicates perfect… --- ## [Help with Grok pattern](https://discuss.elastic.co/t/help-with-grok-pattern/41117)
**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\ **Replies:** 3\ **Last updated:** [February 6, 2016, 1:11pm UTC](https://discuss.elastic.co/t/help-with-grok-pattern/41117 "2016-02-06T13:11:35Z")
I am using grok. I am stuck with an issue as mentioned below. I am facing issue when there is multiple colon ":" present in the logs . It is looking for GREEDYDATA and is not returning the first matching ":" I am usin… --- ## [Creating a rule exception](https://discuss.elastic.co/t/creating-a-rule-exception/310292)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 1\ **Last updated:** [July 21, 2022, 10:44pm UTC](https://discuss.elastic.co/t/creating-a-rule-exception/310292 "2022-07-21T22:44:18Z")
Hello there, I would like to know if is possible creating a rule exception like: source.ip:192.168.0.1/24 destionation.ip:200.1.0.0.0/24 This kind of rule is to apply to the "SMB (Windows File Sharing) Activity to th… --- ## [Script field - decimal multiplication is not working](https://discuss.elastic.co/t/script-field-decimal-multiplication-is-not-working/39117)
**Author:** [@britto1981](https://discuss.elastic.co/u/britto1981)\ **Replies:** 6\ **Last updated:** [January 14, 2016, 8:58am UTC](https://discuss.elastic.co/t/script-field-decimal-multiplication-is-not-working/39117 "2016-01-14T08:58:48Z")
Hi, Using Kibana UI, I created a new script field named "cpu\_util\_percnt". Value of this field will be calculated based on the following expression: doc\['metric\_value\_number'\].value\*100.00 Here, "metric value number" … --- ## [OutOfMemoryError\[Java heap space\]](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space/14088)
**Author:** [@Laurent\_Laborde](https://discuss.elastic.co/u/Laurent_Laborde)\ **Replies:** 6\ **Last updated:** [October 24, 2013, 1:26pm UTC](https://discuss.elastic.co/t/outofmemoryerror-java-heap-space/14088 "2013-10-24T13:26:48Z")
Friendly greetings ! I have a 2 nodes cluster on EC2. (i had a 5 nodes cluster too with the same kind problem). Each weeks (sometimes once in 2 week and sometime twice per week) i have a node crashing with this … --- ## [Set index depending on hostname/custom field](https://discuss.elastic.co/t/set-index-depending-on-hostname-custom-field/110591)
**Author:** [@abd.wsu](https://discuss.elastic.co/u/abd.wsu)\ **Replies:** 2\ **Last updated:** [December 13, 2017, 9:16am UTC](https://discuss.elastic.co/t/set-index-depending-on-hostname-custom-field/110591 "2017-12-13T09:16:35Z")
Hello, I am setting a custom field in filebeat for environment depending upon the server. I am then trying to use that field to create a seperate index depending on the field value. But am getting an error every time. … --- ## [Filebeat Auditd module: Failed to Parse field \[error\] of type \[keyword\]](https://discuss.elastic.co/t/filebeat-auditd-module-failed-to-parse-field-error-of-type-keyword/263579)
**Author:** [@ven67](https://discuss.elastic.co/u/ven67)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 2:25pm UTC](https://discuss.elastic.co/t/filebeat-auditd-module-failed-to-parse-field-error-of-type-keyword/263579 "2021-02-11T14:25:33Z")
Hello! I have filebeat running in kubernetes with audtid module as such: Loading and configuring auditd module filebeat.modules: - module: auditd log: enabled: true var.paths: \["/var/lo… --- ## [LogStash throwing error 503](https://discuss.elastic.co/t/logstash-throwing-error-503/142163)
**Author:** [@rmanju2020](https://discuss.elastic.co/u/rmanju2020)\ **Replies:** 8\ **Last updated:** [July 30, 2018, 12:57pm UTC](https://discuss.elastic.co/t/logstash-throwing-error-503/142163 "2018-07-30T12:57:15Z")
The Logastash loggers are throwing below errors continuously. "retrying failed action with response code: 503", :level=\>:warn} {:timestamp=\>"2018-07-30T16:58:20.262000+0530", :message=\>"too many attempts at sending eve… --- ## [Snapshot exception](https://discuss.elastic.co/t/snapshot-exception/1797)
**Author:** [@Rams](https://discuss.elastic.co/u/Rams)\ **Replies:** 3\ **Last updated:** [June 3, 2015, 2:23pm UTC](https://discuss.elastic.co/t/snapshot-exception/1797 "2015-06-03T14:23:09Z")
i am trying to take snapshot for every 5 min (ex: 5th min, 10th min, 15th min, 20th min ...), it works fine but some times it giving error ConcurrentSnapshotExecutionException\[\[MyBackup:my\_snapshot\_2015-06-03-05-21\]… --- ## [Logstash overfilling Persistent Queue?](https://discuss.elastic.co/t/logstash-overfilling-persistent-queue/310197)
**Author:** [@timcorwin](https://discuss.elastic.co/u/timcorwin)\ **Replies:** 3\ **Last updated:** [August 3, 2022, 2:44pm UTC](https://discuss.elastic.co/t/logstash-overfilling-persistent-queue/310197 "2022-08-03T14:44:03Z")
I am running the logstash:7.17.4 docker image, and I've set queue.type: persisted in my logstash.yml, leaving all other queue settings at the default. Most of the time, I see the normal, expected behavior, where my even… --- ## [SYSLOG-NG, Filebeat-Logstash-elasticsearch-Kibana - Suggestion!](https://discuss.elastic.co/t/syslog-ng-filebeat-logstash-elasticsearch-kibana-suggestion/82451)
**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\ **Replies:** 2\ **Last updated:** [April 15, 2017, 7:13pm UTC](https://discuss.elastic.co/t/syslog-ng-filebeat-logstash-elasticsearch-kibana-suggestion/82451 "2017-04-15T19:13:31Z")
Hi All We have centralize logging server setup across network. All the devices of Cisco or other devices send logs to SYSLOG-NG Server. they store in based on the IP and date and time as in folder. Now i would like… --- ## [Is SIEM still free as Elastic Security? I cant seem to find the download for it. Anyone?](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112)
**Author:** [@gabe-elastic](https://discuss.elastic.co/u/gabe-elastic)\ **Replies:** 6\ **Last updated:** [June 30, 2023, 1:39pm UTC](https://discuss.elastic.co/t/is-siem-still-free-as-elastic-security-i-cant-seem-to-find-the-download-for-it-anyone/337112 "2023-06-30T13:39:52Z")
Is SIEM still free as Elastic Security? I cant seem to find the download for it. Anyone? --- ## [Indexディレクトリ名について](https://discuss.elastic.co/t/index/86820)
**Author:** [@kudo](https://discuss.elastic.co/u/kudo)\ **Replies:** 6\ **Last updated:** [May 29, 2017, 1:55pm UTC](https://discuss.elastic.co/t/index/86820 "2017-05-29T13:55:22Z")
ElasticSearch2.3 を使用していたのですが、新たにElasticSearchの環境を作成すること となりましたので、ElasticSearch5.4をインストールしました。 dstatのデータを作成し、投入して問題なく登録されたのですが、下記の形式でディレクトリ が作成されてしまいます。 /var/lib/elasticsearch/nodes/0/indices/LJqXRwV5TLCdDk\_6rSw1iw E… --- ## [Change TTL value](https://discuss.elastic.co/t/change-ttl-value/6337)
**Author:** [@vannya](https://discuss.elastic.co/u/vannya)\ **Replies:** 6\ **Last updated:** [January 12, 2012, 10:33pm UTC](https://discuss.elastic.co/t/change-ttl-value/6337 "2012-01-12T22:33:49Z")
Hi all, I'm analyzing how can I use ttl in my system to implement document aging. I've already configured indices.ttl.interval and indices.ttl.bulk\_size properties, and created the specific mapping for my index in:… --- ## [Logstash stops without opening file to read](https://discuss.elastic.co/t/logstash-stops-without-opening-file-to-read/35336)
**Author:** [@fares](https://discuss.elastic.co/u/fares)\ **Replies:** 7\ **Last updated:** [November 24, 2015, 1:22pm UTC](https://discuss.elastic.co/t/logstash-stops-without-opening-file-to-read/35336 "2015-11-24T13:22:40Z")
Hi, Here's my config file : input{file { path =\> "/data/ttr.csv" sincedb\_path =\> "/dev/null" start\_position =\> "beginning" }} output{ stdout{ } } When i start logstash with debug mode: Reading config file… --- ## [\[ANNOUNCEMENT\] - elasticsearch-beyonder 2.2.0 released](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-2-2-0-released/41851)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [February 16, 2016, 8:03am UTC](https://discuss.elastic.co/t/announcement-elasticsearch-beyonder-2-2-0-released/41851 "2016-02-16T08:03:03Z")
The elasticsearch-beyonder team is pleased to announce the elasticsearch-beyonder-2.2.0 release! Elasticsearch beyonder provides automatic index, mapping, alias or template creation when an elasticsearch client… --- ## [Apache HTTPD logs with (comma-delimited) X-Forwarded-For IPs](https://discuss.elastic.co/t/apache-httpd-logs-with-comma-delimited-x-forwarded-for-ips/181917)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 4\ **Last updated:** [May 22, 2019, 5:17pm UTC](https://discuss.elastic.co/t/apache-httpd-logs-with-comma-delimited-x-forwarded-for-ips/181917 "2019-05-22T17:17:33Z")
Hi Folks, I thought I'd be able to use the filebeat apache module out of the box, but then I noticed the handling of X-Forwarded-For. It only seems to get the inner-most IP from it (which is a proxy, and not the end-use… --- ## [Pagination for Search Results in Discover Tab](https://discuss.elastic.co/t/pagination-for-search-results-in-discover-tab/28356)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 4\ **Last updated:** [September 13, 2015, 6:40pm UTC](https://discuss.elastic.co/t/pagination-for-search-results-in-discover-tab/28356 "2015-09-13T18:40:20Z")
By default Kibana shows 500 search results in Discover UI. Is there a way I can view the next 500 results in discover tab (for example - result 501 to 1000 & so on)? --- ## [Pipeline main has been shutdown, how to troubleshoot this?](https://discuss.elastic.co/t/pipeline-main-has-been-shutdown-how-to-troubleshoot-this/59599)
**Author:** [@ahegazi](https://discuss.elastic.co/u/ahegazi)\ **Replies:** 2\ **Last updated:** [September 2, 2016, 7:37am UTC](https://discuss.elastic.co/t/pipeline-main-has-been-shutdown-how-to-troubleshoot-this/59599 "2016-09-02T07:37:56Z")
Hola Folks, Thats actually my first week as ELK stack work so I am testing some stuff to end up with a live analysis for all our servers with help of collectd (that's the plan) Anyways, here is my first logstash con… --- ## [Caused by: java.net.UnknownHostException: fx-elasticsearch: Name does not resolve](https://discuss.elastic.co/t/caused-by-java-net-unknownhostexception-fx-elasticsearch-name-does-not-resolve/279596)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 5\ **Last updated:** [July 26, 2021, 7:33am UTC](https://discuss.elastic.co/t/caused-by-java-net-unknownhostexception-fx-elasticsearch-name-does-not-resolve/279596 "2021-07-26T07:33:58Z")
Hi All, I have issue of fx-elasticsearch not found and i have deploy as docker compose file one more error i got in same container Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bea… --- ## [Packetbeat doesn't start on windonws](https://discuss.elastic.co/t/packetbeat-doesnt-start-on-windonws/50581)
**Author:** [@Maher\_Ben\_Taleb\_Ali](https://discuss.elastic.co/u/Maher_Ben_Taleb_Ali)\ **Replies:** 6\ **Last updated:** [May 23, 2016, 2:36pm UTC](https://discuss.elastic.co/t/packetbeat-doesnt-start-on-windonws/50581 "2016-05-23T14:36:50Z")
Hi, I just installed packetbeat on windows. and I tested it on ubutnu with the same configs and it worked fine. I am using the standard config. I when I use Start-Service packetbeat. it doesn't work, and there is no… --- ## [Search multiple fields with “and” operator (but use fields' own analyzers)](https://discuss.elastic.co/t/search-multiple-fields-with-and-operator-but-use-fields-own-analyzers/13113)
**Author:** [@Max\_Ivanov](https://discuss.elastic.co/u/Max_Ivanov)\ **Replies:** 6\ **Last updated:** [August 8, 2013, 8:39pm UTC](https://discuss.elastic.co/t/search-multiple-fields-with-and-operator-but-use-fields-own-analyzers/13113 "2013-08-08T20:39:56Z")
ElasticSearch Version: 0.90.2 Here's the problem: I want to find documents in the index so that they: 1. match \*all\* query tokens across multiple fields 2. fields \*own\* analyzers are used So if there are 4 doc… --- ## [Restrict user to specific Kibana index](https://discuss.elastic.co/t/restrict-user-to-specific-kibana-index/238431)
**Author:** [@Anushka\_Thachil](https://discuss.elastic.co/u/Anushka_Thachil)\ **Replies:** 3\ **Last updated:** [June 25, 2020, 2:14pm UTC](https://discuss.elastic.co/t/restrict-user-to-specific-kibana-index/238431 "2020-06-25T14:14:40Z")
I have created a user and assigned it a role to view logs of a single index. But the user is able to see all the index patterns created in Kibana (logs visible only for the allowed index). But I would like the user to se… --- ## [How to search with only raw query JSON with Elastic Java API 6.5.1?](https://discuss.elastic.co/t/how-to-search-with-only-raw-query-json-with-elastic-java-api-6-5-1/174310)
**Author:** [@neerajjain92](https://discuss.elastic.co/u/neerajjain92)\ **Replies:** 3\ **Last updated:** [March 29, 2019, 9:36am UTC](https://discuss.elastic.co/t/how-to-search-with-only-raw-query-json-with-elastic-java-api-6-5-1/174310 "2019-03-29T09:36:18Z")
How can I take the raw JSON String and query via the Java API? It should work for any complex query that Curl accepts in Elastic. For example: { "query": { "bool": { "must": \[ { "match\_ph… --- ## [Convert Number (elapsed\_time) into Time (HH:MM:SS)](https://discuss.elastic.co/t/convert-number-elapsed-time-into-time-hhss/218551)
**Author:** [@Thibaut\_M](https://discuss.elastic.co/u/Thibaut_M)\ **Replies:** 4\ **Last updated:** [March 18, 2020, 12:58pm UTC](https://discuss.elastic.co/t/convert-number-elapsed-time-into-time-hhss/218551 "2020-03-18T12:58:34Z")
Hello, Let me expose what i'm trying to achieve here. I calculate an elapsed\_time (with the elapsed plugin) between two documents. elapsed\_time is in second and i want it like this : HH:MM:SS so as an example : 80 sec =… --- ## [.keyword empty](https://discuss.elastic.co/t/keyword-empty/100363)
**Author:** [@surj08](https://discuss.elastic.co/u/surj08)\ **Replies:** 4\ **Last updated:** [October 4, 2017, 3:03pm UTC](https://discuss.elastic.co/t/keyword-empty/100363 "2017-10-04T15:03:59Z")
I'm having an issue with something related to this but, they get off that topic. I'm using the logstash default template and have the .keyword field but, it's empty and I'd like to visualize on the data. The documentatio… --- ## [Memory issue(possibly non-heap memory)](https://discuss.elastic.co/t/memory-issue-possibly-non-heap-memory/4678)
**Author:** [@abhii\_2](https://discuss.elastic.co/u/abhii_2)\ **Replies:** 7\ **Last updated:** [March 24, 2016, 6:28pm UTC](https://discuss.elastic.co/t/memory-issue-possibly-non-heap-memory/4678 "2016-03-24T18:28:22Z")
I have been trying to diagnose a memory issue we are having on our production servers for the past couple of days. One of the current suspects is an elastic related issue and I need a little help to confirm or reject… --- ## [Pipeline aggregation in Composite Aggregation](https://discuss.elastic.co/t/pipeline-aggregation-in-composite-aggregation/243125)
**Author:** [@shreedhan](https://discuss.elastic.co/u/shreedhan)\ **Replies:** 4\ **Last updated:** [August 6, 2020, 9:12am UTC](https://discuss.elastic.co/t/pipeline-aggregation-in-composite-aggregation/243125 "2020-08-06T09:12:42Z")
I'm trying to get Pipeline Aggregation for Composite Aggregation similar to this post. I'm getting similar error in version 6.8. Looks like it was a bug in version 6.2. I'm wondering if this has been fixed in version 6.8… --- ## [Alternatives to JSON output, XML?](https://discuss.elastic.co/t/alternatives-to-json-output-xml/10470)
**Author:** [@Dominic\_Watson\_2](https://discuss.elastic.co/u/Dominic_Watson_2)\ **Replies:** 5\ **Last updated:** [January 24, 2013, 1:51pm UTC](https://discuss.elastic.co/t/alternatives-to-json-output-xml/10470 "2013-01-24T13:51:24Z")
Hi there, we have some legacy applications that are running on a platform with appalling JSON deserialization performance. Does anyone know of any plugins / options for returning alternative outputs, i.e. XML? Thi… --- ## [Jdbc-streaming and jdbc-input gets different numeric results](https://discuss.elastic.co/t/jdbc-streaming-and-jdbc-input-gets-different-numeric-results/85778)
**Author:** [@endersonmaia](https://discuss.elastic.co/u/endersonmaia)\ **Replies:** 8\ **Last updated:** [May 30, 2017, 2:44pm UTC](https://discuss.elastic.co/t/jdbc-streaming-and-jdbc-input-gets-different-numeric-results/85778 "2017-05-30T14:44:04Z")
I'm using jdbc-input to get some sales data at a SQL Server satabase, and then I run a jdbc-streaming to complement the data. One thing I noticed is that for NUMERIC(18,4) data type, at the jdbc-input I get comma for d… --- ## [What is the difference between CONTAINS and INTERSECTS?](https://discuss.elastic.co/t/what-is-the-difference-between-contains-and-intersects/226791)
**Author:** [@hariseldon3141](https://discuss.elastic.co/u/hariseldon3141)\ **Replies:** 2\ **Last updated:** [April 7, 2020, 5:21am UTC](https://discuss.elastic.co/t/what-is-the-difference-between-contains-and-intersects/226791 "2020-04-07T05:21:34Z")
Sorry for the newbie question, but these geo\_shape spatial relations seem to be very similar in the results that they produce. I believe that CONTAINS is relatively new in being supported, but what's even the point of it… --- ## [Curl query from json](https://discuss.elastic.co/t/curl-query-from-json/293650)
**Author:** [@rusty\_cole](https://discuss.elastic.co/u/rusty_cole)\ **Replies:** 4\ **Last updated:** [January 6, 2022, 2:48pm UTC](https://discuss.elastic.co/t/curl-query-from-json/293650 "2022-01-06T14:48:57Z")
Hi guys, I have some query(witch works fine in kibana debugger), my goal is to make this query work from curl command line(windows). i have other queries with no issues. I think the problem is with the """ in the "r… --- ## [Duplicate entries in Kibana in the logs generated in the last minute](https://discuss.elastic.co/t/duplicate-entries-in-kibana-in-the-logs-generated-in-the-last-minute/154225)
**Author:** [@Chamani\_Shiranthika](https://discuss.elastic.co/u/Chamani_Shiranthika)\ **Replies:** 4\ **Last updated:** [October 27, 2018, 2:02pm UTC](https://discuss.elastic.co/t/duplicate-entries-in-kibana-in-the-logs-generated-in-the-last-minute/154225 "2018-10-27T14:02:39Z")
Hi there, I am trying to visualize logs on Kibana from a log file which is updating in real time. The log file is splitting in each minuite generating a new log file with the name of the particular minute. I have writ… --- ## [Endpoint Introductions](https://discuss.elastic.co/t/endpoint-introductions/205093)
**Author:** [@Wadson](https://discuss.elastic.co/u/Wadson)\ **Replies:** 0\ **Last updated:** [October 24, 2019, 2:36pm UTC](https://discuss.elastic.co/t/endpoint-introductions/205093 "2019-10-24T14:36:53Z")
Welcome to Elastic Endpoint! I'm Wadson and I am on the Endpoint Implementation team here at Elastic on the East Coast. If you're new to Elastic Endpoint or have already purchased Endpoint please introduce yourself her… --- ## [ES FileSystemException (out of disk space)](https://discuss.elastic.co/t/es-filesystemexception-out-of-disk-space/104935)
**Author:** [@shines2](https://discuss.elastic.co/u/shines2)\ **Replies:** 2\ **Last updated:** [October 23, 2017, 5:05pm UTC](https://discuss.elastic.co/t/es-filesystemexception-out-of-disk-space/104935 "2017-10-23T17:05:20Z")
My entire cluster that back-ends my graylog deployment stop working over the weekend. It complaining that /proj/graylog (The directory where I store ES data) is full. A df shows that it's only 50% full: Type Size Use… --- ## [How to access third party rest api using http\_poller,http filter and ruby filter using basic authentication,header and body](https://discuss.elastic.co/t/how-to-access-third-party-rest-api-using-http-poller-http-filter-and-ruby-filter-using-basic-authentication-header-and-body/202013)
**Author:** [@saroja](https://discuss.elastic.co/u/saroja)\ **Replies:** 3\ **Last updated:** [October 8, 2019, 3:45pm UTC](https://discuss.elastic.co/t/how-to-access-third-party-rest-api-using-http-poller-http-filter-and-ruby-filter-using-basic-authentication-header-and-body/202013 "2019-10-08T15:45:22Z")
logstash version : 6.3.1 curl -k -v -i -u 'API Key for V3':'API Secret for V3' 'https://api.com/v3/token' -d 'grant\_type=password&username=&password=\< Password\>&scope=\< Area UUID\>' Using above curl command I am able to… --- ## [Dictionary in Kibana for translation](https://discuss.elastic.co/t/dictionary-in-kibana-for-translation/112029)
**Author:** [@scch](https://discuss.elastic.co/u/scch)\ **Replies:** 3\ **Last updated:** [December 29, 2017, 5:58pm UTC](https://discuss.elastic.co/t/dictionary-in-kibana-for-translation/112029 "2017-12-29T17:58:11Z")
How to create a dictionary or refer an external csv file to translate and generate scripted fields using painless. i am aware of similar function in Logstash, grok filter, but need to create scripted field using painle… --- ## [Filebeat to send application logs to elastic search](https://discuss.elastic.co/t/filebeat-to-send-application-logs-to-elastic-search/176894)
**Author:** [@Neeraj\_Jain](https://discuss.elastic.co/u/Neeraj_Jain)\ **Replies:** 5\ **Last updated:** [April 22, 2019, 6:58am UTC](https://discuss.elastic.co/t/filebeat-to-send-application-logs-to-elastic-search/176894 "2019-04-22T06:58:56Z")
Hi, I want to use filebeat to ship my application logs to elastic search running in a log server. My application generates a log file in a particular folder. whenever the log file reaches a configured size, then a new l… --- ## [Can't merge a non object mapping with an object mapping](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-with-an-object-mapping/37374)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 5\ **Last updated:** [January 15, 2016, 8:23pm UTC](https://discuss.elastic.co/t/cant-merge-a-non-object-mapping-with-an-object-mapping/37374 "2016-01-15T20:23:26Z")
I'm ingesting an XML document and getting the following error: Merging dynamic updates triggered a conflict: Can't merge a non object mapping \[doc.a.b\] with an object mapping \[doc.a.b\] XML: \ \ \c\ … --- ## [Failed to execute pipeline for a bulk](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk/75306)
**Author:** [@Suin\_You](https://discuss.elastic.co/u/Suin_You)\ **Replies:** 1\ **Last updated:** [March 14, 2017, 8:38pm UTC](https://discuss.elastic.co/t/failed-to-execute-pipeline-for-a-bulk/75306 "2017-03-14T20:38:54Z")
I got the message, 'failed to execute pipeline for a bulk' . The detail is \[2017-02-16T18:34:44,121\]\[ERROR\]\[o.e.a.b.TransportBulkAction\] \[cr-node-1\] failed to execute pipeline for a bulk request org.elasticsearch.co… --- ## [Changing the filter header in Kibana?](https://discuss.elastic.co/t/changing-the-filter-header-in-kibana/63730)
**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\ **Replies:** 4\ **Last updated:** [October 26, 2016, 5:22am UTC](https://discuss.elastic.co/t/changing-the-filter-header-in-kibana/63730 "2016-10-26T05:22:49Z")
Is it possible to change the header name of the filters which displays after creating a data table or show a customized content rather than showing the whole query in the table? Snapshot of how the data table looks like… --- ## [Logstash persistent queue settings](https://discuss.elastic.co/t/logstash-persistent-queue-settings/284144)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 6\ **Last updated:** [September 14, 2021, 6:35am UTC](https://discuss.elastic.co/t/logstash-persistent-queue-settings/284144 "2021-09-14T06:35:32Z")
Using logstash 7.13 We are running logstash on linux server which has 4 cpu(s) 15gb of ram of 100gb of ssd. We are using persistent queue settings in logstash but we actually can't sure is this right configuration or c… --- ## [Kibana - Hyperlink in Data Table](https://discuss.elastic.co/t/kibana-hyperlink-in-data-table/248209)
**Author:** [@subash](https://discuss.elastic.co/u/subash)\ **Replies:** 3\ **Last updated:** [September 15, 2020, 8:05pm UTC](https://discuss.elastic.co/t/kibana-hyperlink-in-data-table/248209 "2020-09-15T20:05:22Z")
Hi, Below is the data table which I have created in Kibana. In this, I want the values of the column 'User' (User 1, User 2,...) to be hyperlinks and when it is clicked the detailed graph of that particular user shoul… --- ## [Missing security options after enabling security in 7.3 ELK Stack](https://discuss.elastic.co/t/missing-security-options-after-enabling-security-in-7-3-elk-stack/198655)
**Author:** [@KervyN](https://discuss.elastic.co/u/KervyN)\ **Replies:** 4\ **Last updated:** [September 11, 2019, 7:12am UTC](https://discuss.elastic.co/t/missing-security-options-after-enabling-security-in-7-3-elk-stack/198655 "2019-09-11T07:12:25Z")
So, after reading that the security features came to ES for free I tried to set it up. I went through the how to here: https://www.elastic.co/guide/en/elastic-stack-overview/current/security-getting-started.html But it… [Previous page](https://discuss.elastic.co/top.md?page=571&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=573&per_page=50&period=all)