# Top **URL:** https://discuss.elastic.co/top.md?page=573&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 574 --- ## [Scripted field from scripted field](https://discuss.elastic.co/t/scripted-field-from-scripted-field/81774)
**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\ **Replies:** 1\ **Last updated:** [April 10, 2017, 3:49pm UTC](https://discuss.elastic.co/t/scripted-field-from-scripted-field/81774 "2017-04-10T15:49:40Z")
I want to extract the current week of the year via scripted field: "(new Date()).getTime()" - then format as data with WW Now i want to use the newly created field as input for another scripted field. Looks like this… --- ## [Find first occurrence and last occurrence of an id](https://discuss.elastic.co/t/find-first-occurrence-and-last-occurrence-of-an-id/36307)
**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\ **Replies:** 3\ **Last updated:** [December 4, 2015, 6:29pm UTC](https://discuss.elastic.co/t/find-first-occurrence-and-last-occurrence-of-an-id/36307 "2015-12-04T18:29:06Z")
Hi, Is there a way to find the first occurrence of a field and the last occurrence of a field? My requirement is this: Get the timestamp of the first occurance of id field '123' Get the timestamp of the last occur… --- ## [Authentication to realm default\_native failed - Password authentication failed](https://discuss.elastic.co/t/authentication-to-realm-default-native-failed-password-authentication-failed/269272)
**Author:** [@natgrant](https://discuss.elastic.co/u/natgrant)\ **Replies:** 1\ **Last updated:** [April 7, 2021, 1:43am UTC](https://discuss.elastic.co/t/authentication-to-realm-default-native-failed-password-authentication-failed/269272 "2021-04-07T01:43:38Z")
Hi there, I am hoping to see if anyone can help me with the below error occurring on our ingest nodes - \[o.e.x.s.a.AuthenticationService\] \[elastic-ingest-1\] Authentication to realm default\_native failed - Password auth… --- ## [Elasticsearch SSL/TLS verification mode full](https://discuss.elastic.co/t/elasticsearch-ssl-tls-verification-mode-full/182633)
**Author:** [@safderali5](https://discuss.elastic.co/u/safderali5)\ **Replies:** 2\ **Last updated:** [May 27, 2019, 7:45am UTC](https://discuss.elastic.co/t/elasticsearch-ssl-tls-verification-mode-full/182633 "2019-05-27T07:45:42Z")
I enabled TLS on elasticsearch using self signed certificates. The certificate include DNS entries containing host names of all elasticsearch nodes. When I start elasticsearch I get exception: No subject alternative na… --- ## [Painless: Loop all fields inside a document to extract phonenumbers](https://discuss.elastic.co/t/painless-loop-all-fields-inside-a-document-to-extract-phonenumbers/175558)
**Author:** [@ErikvdVen](https://discuss.elastic.co/u/ErikvdVen)\ **Replies:** 1\ **Last updated:** [April 8, 2019, 2:28pm UTC](https://discuss.elastic.co/t/painless-loop-all-fields-inside-a-document-to-extract-phonenumbers/175558 "2019-04-08T14:28:11Z")
I'm indexing my documents using a third-party piece of software, so I am kinda stuck to the mapping made by that piece of software. Now I want to make some small adaptions, so I can search any phonenumbers inside the do… --- ## [Use pipeline (ingest) in Java Index/Update API](https://discuss.elastic.co/t/use-pipeline-ingest-in-java-index-update-api/67064)
**Author:** [@mrvincnezo](https://discuss.elastic.co/u/mrvincnezo)\ **Replies:** 7\ **Last updated:** [December 1, 2016, 6:31am UTC](https://discuss.elastic.co/t/use-pipeline-ingest-in-java-index-update-api/67064 "2016-12-01T06:31:32Z")
Is it possible to use pipeline in Java Index/Update API? I looked at the source and didn't find any mention of pipeline in Index/Update API. Thanks --- ## [Select es-hadoop table from hive failed](https://discuss.elastic.co/t/select-es-hadoop-table-from-hive-failed/45330)
**Author:** [@Joe\_Yang](https://discuss.elastic.co/u/Joe_Yang)\ **Replies:** 7\ **Last updated:** [April 5, 2016, 3:27pm UTC](https://discuss.elastic.co/t/select-es-hadoop-table-from-hive-failed/45330 "2016-04-05T15:27:08Z")
Dear All: We just creatd a external table from hive successfully: CREATE EXTERNAL TABLE user01(id BIGINT, name STRING) STORED BY 'org.elasticsearch.hadoop.hive.EsStorageHandler' TBLPROPERTIES('es.resource' = 'radio/ar… --- ## [Create Login Page on KIBANA](https://discuss.elastic.co/t/create-login-page-on-kibana/297068)
**Author:** [@Xenial](https://discuss.elastic.co/u/Xenial)\ **Replies:** 6\ **Last updated:** [February 13, 2022, 12:54pm UTC](https://discuss.elastic.co/t/create-login-page-on-kibana/297068 "2022-02-13T12:54:51Z")
Hello All, I want to make my dashboard have login page function before other people access to my dashboard. Can the kibana do that? Thankyou --- ## [FIELDDATA Data is too large](https://discuss.elastic.co/t/fielddata-data-is-too-large/54104)
**Author:** [@Radoslaw\_Wojtkiewicz](https://discuss.elastic.co/u/Radoslaw_Wojtkiewicz)\ **Replies:** 6\ **Last updated:** [July 5, 2016, 10:43am UTC](https://discuss.elastic.co/t/fielddata-data-is-too-large/54104 "2016-07-05T10:43:43Z")
I have a problem with sorting namely, sorting work but only for price field. When I try to sort by start\_date, end\_date, uid, cat title get the message about exceeding the limit: Data too large, the date for \[ "name of… --- ## [Difference between canvas and dashboard](https://discuss.elastic.co/t/difference-between-canvas-and-dashboard/296619)
**Author:** [@Ernesto\_Rodolfo\_Cast](https://discuss.elastic.co/u/Ernesto_Rodolfo_Cast)\ **Replies:** 2\ **Last updated:** [February 10, 2022, 7:39am UTC](https://discuss.elastic.co/t/difference-between-canvas-and-dashboard/296619 "2022-02-10T07:39:14Z")
what is the difference between canvas and dashboards in kibana? --- ## [Searching for a custom made header](https://discuss.elastic.co/t/searching-for-a-custom-made-header/200403)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 2\ **Last updated:** [September 24, 2019, 8:38am UTC](https://discuss.elastic.co/t/searching-for-a-custom-made-header/200403 "2019-09-24T08:38:16Z")
Hi, My development team has created a custom header that is sent along with their requests. Is it possible to do a search for the custom header name or it's value from the search field. I'm trying things listed under co… --- ## [Elasticsearch Unreachable](https://discuss.elastic.co/t/elasticsearch-unreachable/82794)
**Author:** [@ItsMeSurajR](https://discuss.elastic.co/u/ItsMeSurajR)\ **Replies:** 1\ **Last updated:** [April 19, 2017, 12:25am UTC](https://discuss.elastic.co/t/elasticsearch-unreachable/82794 "2017-04-19T00:25:19Z")
I'm facing the weird error. Likely, this is the scenario. 1. Start Ubuntu 16.04 on my VM 2. Start elasticsearch, kibana using sudo service 3. Verify in browser if everything is fine. I can see the right output on browser… --- ## [Workaround/alternative for "normalizer" in ES 5.1?](https://discuss.elastic.co/t/workaround-alternative-for-normalizer-in-es-5-1/79470)
**Author:** [@steven-collins-omega](https://discuss.elastic.co/u/steven-collins-omega)\ **Replies:** 8\ **Last updated:** [March 22, 2017, 6:14am UTC](https://discuss.elastic.co/t/workaround-alternative-for-normalizer-in-es-5-1/79470 "2017-03-22T06:14:43Z")
We have first and last name keyword fields which we want to sort without regard to case. This seems to be precisely the use case for the experimental "normalizer" parameter in ES 5.2. Unfortunately because we need to use… --- ## [Kibana unknown index pattern fields](https://discuss.elastic.co/t/kibana-unknown-index-pattern-fields/252803)
**Author:** [@Sh3ldoris](https://discuss.elastic.co/u/Sh3ldoris)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 9:35am UTC](https://discuss.elastic.co/t/kibana-unknown-index-pattern-fields/252803 "2020-11-05T09:35:58Z")
Hello, I'm trying to do aggregations on some fields in my index pattern, but they are unknown. I've tried refresh index pattern but they still don't show in Stack managment. On the other hand, I can see them in my disco… --- ## [How to collect log of NVR Hikvision (all camera's log) to Elastic?](https://discuss.elastic.co/t/how-to-collect-log-of-nvr-hikvision-all-cameras-log-to-elastic/326018)
**Author:** [@Anh\_Nguyen](https://discuss.elastic.co/u/Anh_Nguyen)\ **Replies:** 4\ **Last updated:** [February 21, 2023, 6:28am UTC](https://discuss.elastic.co/t/how-to-collect-log-of-nvr-hikvision-all-cameras-log-to-elastic/326018 "2023-02-21T06:28:18Z")
Hello everyone, I want to collect all logs (all type logs) of the cameras to my SIEM system. I have a NVR and it have function "Logs Server Configuration" but it always failed. ( UDP port use to collect logs on the linux… --- ## [How can i change the background color of data table visualtion in kibana 7.6?](https://discuss.elastic.co/t/how-can-i-change-the-background-color-of-data-table-visualtion-in-kibana-7-6/225503)
**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\ **Replies:** 3\ **Last updated:** [March 31, 2020, 6:36pm UTC](https://discuss.elastic.co/t/how-can-i-change-the-background-color-of-data-table-visualtion-in-kibana-7-6/225503 "2020-03-31T18:36:00Z")
There are any way to change backgroud color of data table visualization or change the style of dashboard how contain these data table visualization? for example,how can i make the rows with alternative color?? or add bo… --- ## [Elasticsearch input plugin is not working](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974)
**Author:** [@sureshsubramaniyan](https://discuss.elastic.co/u/sureshsubramaniyan)\ **Replies:** 3\ **Last updated:** [March 5, 2018, 4:33pm UTC](https://discuss.elastic.co/t/elasticsearch-input-plugin-is-not-working/121974 "2018-03-05T16:33:20Z")
getting below while using elasticsearch input plugin , \[2018--03-01T02:52:00,652\]\[DEBUG\]\[logstash.pipeline \] Pushing flush onto pipeline {:pipeline\_id=\>"main", :thread=\>"#\"} \[2018-03-01T0… --- ## [Logstash - Syslog Output - Custom message](https://discuss.elastic.co/t/logstash-syslog-output-custom-message/240979)
**Author:** [@vasek](https://discuss.elastic.co/u/vasek)\ **Replies:** 7\ **Last updated:** [July 30, 2020, 2:37pm UTC](https://discuss.elastic.co/t/logstash-syslog-output-custom-message/240979 "2020-07-30T14:37:23Z")
Hi, I'm working with Logstash - Syslog Output and I've found problem with custom field message. I'm using Elasticstack 7.8.0. I've installed logstash syslog-output plugin. /usr/share/logstash/bin/logstash-plugin insta… --- ## [Using taxonomy and synonyms in elasticsearch 6](https://discuss.elastic.co/t/using-taxonomy-and-synonyms-in-elasticsearch-6/153037)
**Author:** [@Bilal](https://discuss.elastic.co/u/Bilal)\ **Replies:** 2\ **Last updated:** [October 22, 2018, 2:26pm UTC](https://discuss.elastic.co/t/using-taxonomy-and-synonyms-in-elasticsearch-6/153037 "2018-10-22T14:26:15Z")
I'm trying to implement what's called a managed vocabulary (which is an extension of a taxonomy that also accounts for synonyms) based on the ideas presented in this article : Patterns for Elasticsearch Synonyms: Taxonom… --- ## [Windows Service Memory Limitations version 6.1.1](https://discuss.elastic.co/t/windows-service-memory-limitations-version-6-1-1/113351)
**Author:** [@tiago.ramalho](https://discuss.elastic.co/u/tiago.ramalho)\ **Replies:** 6\ **Last updated:** [January 11, 2018, 4:11pm UTC](https://discuss.elastic.co/t/windows-service-memory-limitations-version-6-1-1/113351 "2018-01-11T16:11:31Z")
Hi there, The question is probably pretty obvious but I just can’t find it… After installing the windows service (both the msi and zip, via sc.exe) I can’t just the jvm.options to anything above -Xmx1G… If I do (-Xmx4G,… --- ## [Error received using WebHDFS Logstash Output](https://discuss.elastic.co/t/error-received-using-webhdfs-logstash-output/38458)
**Author:** [@yachtsman60](https://discuss.elastic.co/u/yachtsman60)\ **Replies:** 6\ **Last updated:** [June 2, 2017, 11:58am UTC](https://discuss.elastic.co/t/error-received-using-webhdfs-logstash-output/38458 "2017-06-02T11:58:35Z")
Constantly receive the following error with no indication on how to resolve the issue and with a result that no events are actually pushed to my hdfs. Can someone please provide some guidance? Failed to flush outgoin… --- ## [Elasticsearch OR query with nested objects returns inner\_hits not matching the criteria](https://discuss.elastic.co/t/elasticsearch-or-query-with-nested-objects-returns-inner-hits-not-matching-the-criteria/142249)
**Author:** [@scarrascoso](https://discuss.elastic.co/u/scarrascoso)\ **Replies:** 1\ **Last updated:** [August 21, 2018, 9:05am UTC](https://discuss.elastic.co/t/elasticsearch-or-query-with-nested-objects-returns-inner-hits-not-matching-the-criteria/142249 "2018-08-21T09:05:23Z")
Hi: I'm getting weird results when querying nested objects. Imagine the following structure: { owner.name = "fred", ..., pets \[ { name = "daisy", ... }, { name = "flopsy", ... } \] } If I only have the do… --- ## [Logstash xml parsing - Fields extraction](https://discuss.elastic.co/t/logstash-xml-parsing-fields-extraction/123201)
**Author:** [@satkumvnr](https://discuss.elastic.co/u/satkumvnr)\ **Replies:** 8\ **Last updated:** [March 13, 2018, 7:04am UTC](https://discuss.elastic.co/t/logstash-xml-parsing-fields-extraction/123201 "2018-03-13T07:04:04Z")
HI, I am new to Elastic Search I am streaming the xml files from Apache Kafka to elastic search, where I need to assign the fields for xml attributes. I am struggling to get pass through it. I need to get the below fie… --- ## [Filter cache eviction cause lots of old gc and long stop](https://discuss.elastic.co/t/filter-cache-eviction-cause-lots-of-old-gc-and-long-stop/25869)
**Author:** [@limac](https://discuss.elastic.co/u/limac)\ **Replies:** 8\ **Last updated:** [September 1, 2016, 6:29am UTC](https://discuss.elastic.co/t/filter-cache-eviction-cause-lots-of-old-gc-and-long-stop/25869 "2016-09-01T06:29:42Z")
Hi, my cluster has 6 nodes with 32G heap and 5G filter cache set to 5G. The filter cache expiration set to -1. as soon as the query request increase to 300req/sec, the eviction of filter cache will cause the old gc occur… --- ## [Wildcard for 2 character in logstash input path](https://discuss.elastic.co/t/wildcard-for-2-character-in-logstash-input-path/96960)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 4\ **Last updated:** [August 14, 2017, 1:11pm UTC](https://discuss.elastic.co/t/wildcard-for-2-character-in-logstash-input-path/96960 "2017-08-14T13:11:51Z")
Hello, My problem is very simple… In my input file i have this : input { file { path =\> "/data/logstash/celisible\_elkf/DCfw\*7\_\*.txt" exclude =\> "DCfw\*6\_\*.txt" type =\> "cra" max\_open\_files =\> 30000 … --- ## [Not able to Add Node to Existing Cluster](https://discuss.elastic.co/t/not-able-to-add-node-to-existing-cluster/348068)
**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\ **Replies:** 7\ **Last updated:** [November 28, 2023, 4:35pm UTC](https://discuss.elastic.co/t/not-able-to-add-node-to-existing-cluster/348068 "2023-11-28T16:35:44Z")
Hi Team, I had requirement to create two node cluster of 8.9.2 version. we did Elasticsearch installation on both nodes through RPM based. I had generated enrollment token (elasticsearch-create-enrollment-token -s node … --- ## [本地测试通过 curl ip:5601提示Connection refused](https://discuss.elastic.co/t/curl-ip-5601-connection-refused/133593)
**Author:** [@jayshi1985](https://discuss.elastic.co/u/jayshi1985)\ **Replies:** 1\ **Last updated:** [May 29, 2018, 2:05am UTC](https://discuss.elastic.co/t/curl-ip-5601-connection-refused/133593 "2018-05-29T02:05:08Z")
如下，为什么出现这样的结果，只能本地localhost访问，ip地址如何绑定 root@elk:~# curl 10.110.0.103:5601/app/kibana#/dashboards curl: (7) Failed to connect to 10.110.0.103 port 5601: Connection refused root@elk:~# curl 127.0.0.1:5601/app/kibana#/da… --- ## [Timelion: Showing a drop in value as a point](https://discuss.elastic.co/t/timelion-showing-a-drop-in-value-as-a-point/120643)
**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\ **Replies:** 7\ **Last updated:** [February 23, 2018, 8:55am UTC](https://discuss.elastic.co/t/timelion-showing-a-drop-in-value-as-a-point/120643 "2018-02-23T08:55:12Z")
Hi, I am plotting device uptime which is shown correctly as seen below. \[image\] Is it possible to show the instance when the line drops as a single point? For e.g. w.r.t to above chart, there should be two points at … --- ## [Filebeat command not found](https://discuss.elastic.co/t/filebeat-command-not-found/97686)
**Author:** [@ibrahimsharaf](https://discuss.elastic.co/u/ibrahimsharaf)\ **Replies:** 1\ **Last updated:** [August 20, 2017, 3:34pm UTC](https://discuss.elastic.co/t/filebeat-command-not-found/97686 "2017-08-20T15:34:15Z")
Hi there, I am using Ubuntu with the latest filebeat version, to start filebeat I run sudo /etc/init.d/filebeat start and I get \[ ok \] Starting filebeat (via systemctl): filebeat.service. Then I want to run filebeat -c … --- ## [Error filebeast from Windows machine to vmware Ubuntu machine](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442)
**Author:** [@carmelom](https://discuss.elastic.co/u/carmelom)\ **Replies:** 7\ **Last updated:** [September 28, 2016, 12:43pm UTC](https://discuss.elastic.co/t/error-filebeast-from-windows-machine-to-vmware-ubuntu-machine/39442 "2016-09-28T12:43:46Z")
Good Morning, I am trying to send logs from filebeats (in a windows machine) to logstash (in a vmware ubuntu machine) but I got this error: Connecting error publishing events (retrying): dial tcp 192.168.220.130:5044: co… --- ## [Logstash-keystore create generates errors and directory "${sys:ls.log.format}"](https://discuss.elastic.co/t/logstash-keystore-create-generates-errors-and-directory-sys-ls-log-format/144366)
**Author:** [@jkfields](https://discuss.elastic.co/u/jkfields)\ **Replies:** 2\ **Last updated:** [August 14, 2018, 11:58pm UTC](https://discuss.elastic.co/t/logstash-keystore-create-generates-errors-and-directory-sys-ls-log-format/144366 "2018-08-14T23:58:41Z")
We have requirements from Security to secure our Elasticstack. On Logstash, I ran into errors creating the keystore. When I execute the following command(s) it results in the errors shown. /usr/share/logstash/bin/logs… --- ## [Rounding in date math](https://discuss.elastic.co/t/rounding-in-date-math/205008)
**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\ **Replies:** 3\ **Last updated:** [October 25, 2019, 1:10pm UTC](https://discuss.elastic.co/t/rounding-in-date-math/205008 "2019-10-25T13:10:43Z")
Hi, I am currently working on an alerting process of kibana watcher and I want to clarify the rounding of the date math in elasticsearch. As the reference said /d of the date math will round the time to the nearest day.… --- ## [How to Re-Enable Shard Allocation](https://discuss.elastic.co/t/how-to-re-enable-shard-allocation/203394)
**Author:** [@Moritz\_Kiesewetter](https://discuss.elastic.co/u/Moritz_Kiesewetter)\ **Replies:** 2\ **Last updated:** [October 14, 2019, 8:20am UTC](https://discuss.elastic.co/t/how-to-re-enable-shard-allocation/203394 "2019-10-14T08:20:12Z")
So we restarted our Elastic-Cluster last week, today i noticed that there are a lot unassigned Shards. I thought my colleagues forgot to turn Shard - Allocation back on, which i can confirm by now. I now i have to chan… --- ## [How can I disable or uninstall x-pack in ELK stack version 6.7](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elk-stack-version-6-7/175339)
**Author:** [@Hazoopr](https://discuss.elastic.co/u/Hazoopr)\ **Replies:** 4\ **Last updated:** [April 5, 2019, 7:16am UTC](https://discuss.elastic.co/t/how-can-i-disable-or-uninstall-x-pack-in-elk-stack-version-6-7/175339 "2019-04-05T07:16:45Z")
How can I completely disable or uninstall x-pack in ELK stack version 6.7. curl -XGET 'ip1:9200/\_nodes/\_all/version' {"\_nodes":{"total":3,"successful":3,"failed":0},"cluster\_name":"XXXXX","nodes":{"Z3IzSLEADjSUcjRigiRW… --- ## [Execute logstash script as batch](https://discuss.elastic.co/t/execute-logstash-script-as-batch/95236)
**Author:** [@amjad.hussain](https://discuss.elastic.co/u/amjad.hussain)\ **Replies:** 5\ **Last updated:** [August 1, 2017, 7:18pm UTC](https://discuss.elastic.co/t/execute-logstash-script-as-batch/95236 "2017-08-01T19:18:35Z")
I am using Logstash 5.4.1. I need to execute one of my logstash script only once. I don’t want logstash thread to run in background. I want to use logstash script like a batch. Once thread reach end of the file in in… --- ## [How to make sure doc\_values of the field is currently works?](https://discuss.elastic.co/t/how-to-make-sure-doc-values-of-the-field-is-currently-works/62548)
**Author:** [@itplayer](https://discuss.elastic.co/u/itplayer)\ **Replies:** 5\ **Last updated:** [October 8, 2016, 11:01am UTC](https://discuss.elastic.co/t/how-to-make-sure-doc-values-of-the-field-is-currently-works/62548 "2016-10-08T11:01:26Z")
Is there anyway to examine that the field is enabled doc\_values. I know that if you want to enable doc\_values of field, just set mapping doc\_values:true. But I'm a little bit not sure if it is actually effective. Accor… --- ## [Custom metrics via APM Java agent Micrometer integration are missing](https://discuss.elastic.co/t/custom-metrics-via-apm-java-agent-micrometer-integration-are-missing/250746)
**Author:** [@muzack](https://discuss.elastic.co/u/muzack)\ **Replies:** 8\ **Last updated:** [October 7, 2020, 7:38am UTC](https://discuss.elastic.co/t/custom-metrics-via-apm-java-agent-micrometer-integration-are-missing/250746 "2020-10-07T07:38:43Z")
Kibana version: 7.9.1 Elasticsearch version: 7.9.1 APM Server version: 7.9.1 APM Agent: Java agent 1.18.0 Java version: 1.8.0\_172 Micrometer version: 1.5.5 Browser version: N/A Original install method: docker… --- ## [Syslog-ng + Logstash + Splunk](https://discuss.elastic.co/t/syslog-ng-logstash-splunk/91406)
**Author:** [@prash](https://discuss.elastic.co/u/prash)\ **Replies:** 8\ **Last updated:** [July 3, 2017, 11:18am UTC](https://discuss.elastic.co/t/syslog-ng-logstash-splunk/91406 "2017-07-03T11:18:12Z")
Hi , I am writing a Log collector for that I used "syslog-ng + Logstash + Splunk ". Along with these I want to use the Message broker or queue . Then my system will be "syslog-ng + Redis or RabitMQ+Logstash + Splunk. I… --- ## [Logstash path.data](https://discuss.elastic.co/t/logstash-path-data/243844)
**Author:** [@a11an](https://discuss.elastic.co/u/a11an)\ **Replies:** 2\ **Last updated:** [August 5, 2020, 10:48am UTC](https://discuss.elastic.co/t/logstash-path-data/243844 "2020-08-05T10:48:37Z")
Hi, I am wondering what the path.data compared to path.settings. I was deploying a couple of .conf files under /etc/logstash/conf.d/ directory via cmd line and it complained that it cannot find the --path.settings and s… --- ## [Logstash is not able connect after creating certificates for elasticsearch](https://discuss.elastic.co/t/logstash-is-not-able-connect-after-creating-certificates-for-elasticsearch/194547)
**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\ **Replies:** 3\ **Last updated:** [August 9, 2019, 11:41am UTC](https://discuss.elastic.co/t/logstash-is-not-able-connect-after-creating-certificates-for-elasticsearch/194547 "2019-08-09T11:41:16Z")
Hello Team, I have configured security for elasticsearch, but after it logstash is not able to connect elasticsearch. Getting below error: \[2019-08-08T23:13:27,353\]\[INFO \]\[org.apache.kafka.clients.consumer.internals.A… --- ## [Not able connect with Rest High Level Client in ESIntegTestCase of ElasticSearch 7.0.0](https://discuss.elastic.co/t/not-able-connect-with-rest-high-level-client-in-esintegtestcase-of-elasticsearch-7-0-0/179307)
**Author:** [@rohitpatil](https://discuss.elastic.co/u/rohitpatil)\ **Replies:** 4\ **Last updated:** [April 9, 2020, 3:57pm UTC](https://discuss.elastic.co/t/not-able-connect-with-rest-high-level-client-in-esintegtestcase-of-elasticsearch-7-0-0/179307 "2020-04-09T15:57:26Z")
Hello, I have written some integration tests for my project which uses ElasticSearch as database. I was using Rest High Level Client with ElasticSearch version 6.6.0. But recently I upgraded the version to 7.0.0. Now, … --- ## ["path: /\_security/api\_key... api keys are not enabled" while loading prebuilt detection rules](https://discuss.elastic.co/t/path-security-api-key-api-keys-are-not-enabled-while-loading-prebuilt-detection-rules/219319)
**Author:** [@Slavik\_Fursov](https://discuss.elastic.co/u/Slavik_Fursov)\ **Replies:** 3\ **Last updated:** [February 16, 2020, 10:33am UTC](https://discuss.elastic.co/t/path-security-api-key-api-keys-are-not-enabled-while-loading-prebuilt-detection-rules/219319 "2020-02-16T10:33:59Z")
I upgraded to 7.6.0 today. I wanted to try Detections, but I'm getting error (below) when clicking "load prebuilt detection rules". My complete Kibana config: --- ## Default Kibana configuration from Kibana base image… --- ## [\[ANNOUNCE\] YCSB 0.7.0 Release](https://discuss.elastic.co/t/announce-ycsb-0-7-0-release/42890)
**Author:** [@Kevin\_Risden](https://discuss.elastic.co/u/Kevin_Risden)\ **Replies:** 0\ **Last updated:** [February 26, 2016, 7:10pm UTC](https://discuss.elastic.co/t/announce-ycsb-0-7-0-release/42890 "2016-02-26T19:10:30Z")
On behalf of the development community, I am pleased to announce the release of YCSB 0.7.0. Highlights: GemFire binding replaced with Apache Geode (incubating) binding Apache Solr binding was added OrientDB binding … --- ## [Synthetic monitoring without docker](https://discuss.elastic.co/t/synthetic-monitoring-without-docker/257840)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 7\ **Last updated:** [December 15, 2020, 7:40am UTC](https://discuss.elastic.co/t/synthetic-monitoring-without-docker/257840 "2020-12-15T07:40:30Z")
Hi, I wanted to test the synthetic monitoring in my test environment using the documentation found here but I only saw a quickstart for docker. Is it possible to use synthetics without docker? Best regards Wolfram PS… --- ## [Elk snort](https://discuss.elastic.co/t/elk-snort/149353)
**Author:** [@Pirate\_Trkmn](https://discuss.elastic.co/u/Pirate_Trkmn)\ **Replies:** 7\ **Last updated:** [September 21, 2018, 7:28am UTC](https://discuss.elastic.co/t/elk-snort/149353 "2018-09-21T07:28:18Z")
Hi i am configuring logstash for snort logs following few tutorials from web, but can not parse snort logs i have \[%{INT:ids\_gid}:%{INT:ids\_sid}:%{INT:ids\_rev}\].%{GREEDYDATA:ids\_alert}.\[Classification: %{DATA:ids\_classi… --- ## [Xml filter: Unable to get parent and child attributes in one row](https://discuss.elastic.co/t/xml-filter-unable-to-get-parent-and-child-attributes-in-one-row/114643)
**Author:** [@robert2](https://discuss.elastic.co/u/robert2)\ **Replies:** 7\ **Last updated:** [January 11, 2018, 8:38am UTC](https://discuss.elastic.co/t/xml-filter-unable-to-get-parent-and-child-attributes-in-one-row/114643 "2018-01-11T08:38:03Z")
Hi Team I am new to Kibana, logstash. I am trying push xml (generated as output of nunit) in logstash. I want to have the xml elements attributes, its Parents attributes and child attributes in the same row in Kibana. … --- ## [Dec 1st, 2024: \[EN\] Monitor the opening of Santa toy's order service](https://discuss.elastic.co/t/dec-1st-2024-en-monitor-the-opening-of-santa-toys-order-service/368424)
**Author:** [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Replies:** 0\ **Last updated:** [December 1, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-1st-2024-en-monitor-the-opening-of-santa-toys-order-service/368424 "2024-12-01T08:00:15Z")
Cet article est aussi disponible en Français. This post is coming from a true story where I wanted to immediately alert my daughter when her university registration page is available. The page that needed to be monitore… --- ## [Can I set \_ttl in a Logstash config file?](https://discuss.elastic.co/t/can-i-set--ttl-in-a-logstash-config-file/32308)
**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\ **Replies:** 2\ **Last updated:** [October 19, 2015, 5:01pm UTC](https://discuss.elastic.co/t/can-i-set--ttl-in-a-logstash-config-file/32308 "2015-10-19T17:01:20Z")
I see lots of documentation on setting the TTL in a template file to be applied to all indices but can I set them individually? I tried using add\_field for ttl but got a configtest error saying ""-prefixed fields cannot … --- ## [Can elasticsearch reads and stores data in HDFS by es-hadoop?](https://discuss.elastic.co/t/can-elasticsearch-reads-and-stores-data-in-hdfs-by-es-hadoop/40713)
**Author:** [@Cancellala](https://discuss.elastic.co/u/Cancellala)\ **Replies:** 5\ **Last updated:** [May 23, 2016, 6:28am UTC](https://discuss.elastic.co/t/can-elasticsearch-reads-and-stores-data-in-hdfs-by-es-hadoop/40713 "2016-05-23T06:28:40Z")
Hi all, I run elastic on YARN refer to this page:https://www.elastic.co/guide/en/elasticsearch/hadoop/master/ey-usage.html#yarn-provision-es I saw that the elasticsearch service runs on datanode randomly, and the d… --- ## [Searching for abbreviated German street names](https://discuss.elastic.co/t/searching-for-abbreviated-german-street-names/75348)
**Author:** [@singer](https://discuss.elastic.co/u/singer)\ **Replies:** 4\ **Last updated:** [February 17, 2017, 10:51am UTC](https://discuss.elastic.co/t/searching-for-abbreviated-german-street-names/75348 "2017-02-17T10:51:36Z")
I'm looking for an advice which query and/or analyzer settings to use for German street names in the form of "Johann-Sebastian-Bach-Straße" I'm currently using the standard analyzer and a "match\_phrase\_prefix" query. T… [Previous page](https://discuss.elastic.co/top.md?page=572&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=574&per_page=50&period=all)