# Top **URL:** https://discuss.elastic.co/top.md?page=578&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 579 --- ## [Error decoding JSON: invalid character '\\x00' looking for beginning of value](https://discuss.elastic.co/t/error-decoding-json-invalid-character-x00-looking-for-beginning-of-value/209571)
**Author:** [@gstrickl](https://discuss.elastic.co/u/gstrickl)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 3:08pm UTC](https://discuss.elastic.co/t/error-decoding-json-invalid-character-x00-looking-for-beginning-of-value/209571 "2019-11-28T15:08:35Z")
Hello, I am new to elastic filebeat and need some assistance with an error. We wrote a powershell script to pull down Office 365 audit logs and write them out to CSV files. These records also include a field that cont… --- ## [Filters empty messages](https://discuss.elastic.co/t/filters-empty-messages/68461)
**Author:** [@webofmars](https://discuss.elastic.co/u/webofmars)\ **Replies:** 1\ **Last updated:** [December 8, 2016, 5:37pm UTC](https://discuss.elastic.co/t/filters-empty-messages/68461 "2016-12-08T17:37:04Z")
Hello, I'm trying to filter some empty messages sent from badly formated logs. By empty i mean they can contain just an unknown number of newlines charachters and/or just some spaces. i tried something like that : … --- ## [New line in file beat for java stack trace](https://discuss.elastic.co/t/new-line-in-file-beat-for-java-stack-trace/46284)
**Author:** [@kasi](https://discuss.elastic.co/u/kasi)\ **Replies:** 7\ **Last updated:** [April 6, 2016, 6:05pm UTC](https://discuss.elastic.co/t/new-line-in-file-beat-for-java-stack-trace/46284 "2016-04-06T18:05:20Z")
The following is my multi-line config (from file beat example from guide). multiline: pattern: "^\[\[:space:\]\]+(at|...)|^Caused by:" negate: false match: after This is the output in the log file org.xml.… --- ## [Allow\_explicit\_index and \_bulk](https://discuss.elastic.co/t/allow-explicit-index-and--bulk/15154)
**Author:** [@Gabe\_Gorelick\_Feldma](https://discuss.elastic.co/u/Gabe_Gorelick_Feldma)\ **Replies:** 7\ **Last updated:** [October 27, 2014, 9:43am UTC](https://discuss.elastic.co/t/allow-explicit-index-and--bulk/15154 "2014-10-27T09:43:56Z")
The documentation on URL-based access control implies that \_bulk still works if you set rest.action.multi.allow\_explicit\_index: false, as long as you specify the index in the URL. However, I can't get it to work. … --- ## [Batch size in Logstash](https://discuss.elastic.co/t/batch-size-in-logstash/301487)
**Author:** [@MuthulakshmiS](https://discuss.elastic.co/u/MuthulakshmiS)\ **Replies:** 3\ **Last updated:** [April 5, 2022, 9:57am UTC](https://discuss.elastic.co/t/batch-size-in-logstash/301487 "2022-04-05T09:57:04Z")
Hi Team, There is a confusion regarding the usage of pipeline.batch.size parameter in Logstash. Can anyone please clarify? From the documentations, got to understand that pipeline.batch.size is used to control the num… --- ## [Best approach to index a book content](https://discuss.elastic.co/t/best-approach-to-index-a-book-content/227186)
**Author:** [@Clony](https://discuss.elastic.co/u/Clony)\ **Replies:** 4\ **Last updated:** [April 10, 2020, 4:34pm UTC](https://discuss.elastic.co/t/best-approach-to-index-a-book-content/227186 "2020-04-10T16:34:26Z")
There are more requirements but most important ones are the following ones: I should make a search query that should look on ALL pages of a single book and give me score of the whole book(all pages). I should know whic… --- ## [Reporting from kibana max size 10mb](https://discuss.elastic.co/t/reporting-from-kibana-max-size-10mb/275550)
**Author:** [@Matteo\_Rainieri](https://discuss.elastic.co/u/Matteo_Rainieri)\ **Replies:** 1\ **Last updated:** [June 14, 2021, 3:04pm UTC](https://discuss.elastic.co/t/reporting-from-kibana-max-size-10mb/275550 "2021-06-14T15:04:02Z")
Good morning. I have a question: we tried to export several days of logs from the share\>csv report in kibana's interface. We only got 45 minutes of logs (instead on 1 month) cause the max size appears to be 10mb. I tr… --- ## [Aggregate filter plugin - need help to make it work](https://discuss.elastic.co/t/aggregate-filter-plugin-need-help-to-make-it-work/140901)
**Author:** [@Jevgenij](https://discuss.elastic.co/u/Jevgenij)\ **Replies:** 2\ **Last updated:** [July 20, 2018, 2:22pm UTC](https://discuss.elastic.co/t/aggregate-filter-plugin-need-help-to-make-it-work/140901 "2018-07-20T14:22:16Z")
Hello! I have some data in joined db tables. To collect it I use the following query: SELECT \`item\`.\`id\`, \`item\`.\`name\`, \`colour\`.\`name\` AS \`colour\` FROM \`item\` LEFT JOIN \`item\_has\_colour\` AS \`ic\` ON \`ic\`.\`item\` = \`it… --- ## [What does persistent connection in the Elasticsearch Python API mean?](https://discuss.elastic.co/t/what-does-persistent-connection-in-the-elasticsearch-python-api-mean/22950)
**Author:** [@Yogesh\_Kansal](https://discuss.elastic.co/u/Yogesh_Kansal)\ **Replies:** 2\ **Last updated:** [March 28, 2015, 1:52pm UTC](https://discuss.elastic.co/t/what-does-persistent-connection-in-the-elasticsearch-python-api-mean/22950 "2015-03-28T13:52:24Z")
Hi, I am using the Python Elasticsearch API to interact with ES in my Python Flask application (server is Python Tornado). Currently, as soon as the app gets a new user request, it does esclient = Elasticsear… --- ## [Highlighting a field with values from multiple other fields](https://discuss.elastic.co/t/highlighting-a-field-with-values-from-multiple-other-fields/220502)
**Author:** [@crab86](https://discuss.elastic.co/u/crab86)\ **Replies:** 4\ **Last updated:** [March 7, 2020, 12:00pm UTC](https://discuss.elastic.co/t/highlighting-a-field-with-values-from-multiple-other-fields/220502 "2020-03-07T12:00:21Z")
Hi there, is it somehow possible to highlight text from a field with values from multiple other fields? For example: "Text": "The dog eats an apple under a pine tree." "animals": \["dog","cat","mouse"\] "fruits": \["or… --- ## [Issue with Generating a PDF from a Dashboard](https://discuss.elastic.co/t/issue-with-generating-a-pdf-from-a-dashboard/84756)
**Author:** [@juice](https://discuss.elastic.co/u/juice)\ **Replies:** 6\ **Last updated:** [June 28, 2017, 3:55pm UTC](https://discuss.elastic.co/t/issue-with-generating-a-pdf-from-a-dashboard/84756 "2017-06-28T15:55:46Z")
Hi there, I've got Kibana 5.2.2 running nicely and I've created a dashboard containing about 12 different elements, a combo of bar chart, data table, and pie chart visualizations. The dashboard looks fine in my browser… --- ## [Load balance in elasticsearch with multiple nodes in same machine](https://discuss.elastic.co/t/load-balance-in-elasticsearch-with-multiple-nodes-in-same-machine/103036)
**Author:** [@surajbs](https://discuss.elastic.co/u/surajbs)\ **Replies:** 3\ **Last updated:** [October 18, 2017, 4:50pm UTC](https://discuss.elastic.co/t/load-balance-in-elasticsearch-with-multiple-nodes-in-same-machine/103036 "2017-10-18T16:50:59Z")
Hi, I am trying to run multiple nodes with different instances in same machine for load balancing in elasticsearch. I have downloaded three elasticsearch files in the same machine and configured their elasticsearch.yml… --- ## [Logstash conf file unable to read file for csv import](https://discuss.elastic.co/t/logstash-conf-file-unable-to-read-file-for-csv-import/108514)
**Author:** [@shivakv](https://discuss.elastic.co/u/shivakv)\ **Replies:** 7\ **Last updated:** [November 30, 2017, 3:09pm UTC](https://discuss.elastic.co/t/logstash-conf-file-unable-to-read-file-for-csv-import/108514 "2017-11-30T15:09:23Z")
I am trying to get log stash to import my csv data load to elastic search cluster and view in Kibana. Logstash/ES/Kibana instances are all up and running but LS does not create the index. Below is my Logstash.conf file … --- ## [How to integrate elasticsearch with multiple MS access database](https://discuss.elastic.co/t/how-to-integrate-elasticsearch-with-multiple-ms-access-database/104393)
**Author:** [@Nishan\_Singh](https://discuss.elastic.co/u/Nishan_Singh)\ **Replies:** 5\ **Last updated:** [October 18, 2017, 3:27pm UTC](https://discuss.elastic.co/t/how-to-integrate-elasticsearch-with-multiple-ms-access-database/104393 "2017-10-18T15:27:09Z")
we have multiple MS access database and i want to search in those mdb using elasticsearch. is it possible to do that using any plugin. --- ## [Client node vs tribe node](https://discuss.elastic.co/t/client-node-vs-tribe-node/45815)
**Author:** [@cirot87](https://discuss.elastic.co/u/cirot87)\ **Replies:** 6\ **Last updated:** [April 6, 2016, 1:49pm UTC](https://discuss.elastic.co/t/client-node-vs-tribe-node/45815 "2016-04-06T13:49:14Z")
Hi, I have a doubt regarding the client nodes and the tribe nodes. My application consists of several clusters and each has a load balancer that uses the client node ( client image ) . I would understand if it is corre… --- ## [Query with regular expression special characters](https://discuss.elastic.co/t/query-with-regular-expression-special-characters/200195)
**Author:** [@evalufran](https://discuss.elastic.co/u/evalufran)\ **Replies:** 2\ **Last updated:** [September 19, 2019, 1:40pm UTC](https://discuss.elastic.co/t/query-with-regular-expression-special-characters/200195 "2019-09-19T13:40:19Z")
HI everyone! I have a lot of fields with XML text and i want to make a query to check if some tags are closed. In order to do that i'm using the whitespace analyzer (so that i can query for char like "\<"). Assuming th… --- ## [Unenclosed quoted field on line 1 - frustrating error message](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959)
**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\ **Replies:** 2\ **Last updated:** [January 10, 2018, 9:04pm UTC](https://discuss.elastic.co/t/unenclosed-quoted-field-on-line-1-frustrating-error-message/114959 "2018-01-10T21:04:30Z")
Hello, I wanted to share some frustration, and maybe even hope for a solution - the logs are extremely unhelpful when it comes to my specific logstash experience. Here is an example where logs tell me there is an un-en… --- ## [DBeaver to Elasticsearch connectivity is OK but fails on listing tables](https://discuss.elastic.co/t/dbeaver-to-elasticsearch-connectivity-is-ok-but-fails-on-listing-tables/338444)
**Author:** [@Mike\_Z](https://discuss.elastic.co/u/Mike_Z)\ **Replies:** 3\ **Last updated:** [July 16, 2023, 12:50am UTC](https://discuss.elastic.co/t/dbeaver-to-elasticsearch-connectivity-is-ok-but-fails-on-listing-tables/338444 "2023-07-16T00:50:26Z")
On DBeaver v23.1.0, we created a connection to an instance of Elasticsearch v8.6.1. The connectivity test, and logging in are OK. However, when clicking on the icons to expand the "Tables", it got an error saying, ... T… --- ## [Marvel won\`t install on elasticsearch 2.0-beta1](https://discuss.elastic.co/t/marvel-won-t-install-on-elasticsearch-2-0-beta1/29110)
**Author:** [@Max\_Just](https://discuss.elastic.co/u/Max_Just)\ **Replies:** 3\ **Last updated:** [October 9, 2015, 9:23pm UTC](https://discuss.elastic.co/t/marvel-won-t-install-on-elasticsearch-2-0-beta1/29110 "2015-10-09T21:23:19Z")
Here the log: root@work:/usr/share/elasticsearch# bin/plugin install elasticsearch/marvel/latest -\> Installing elasticsearch/marvel/latest... Trying http://download.elastic.co/elasticsearch/marvel/marvel-latest.zip ... D… --- ## [Run ES on two servers and store the index in NAS](https://discuss.elastic.co/t/run-es-on-two-servers-and-store-the-index-in-nas/128982)
**Author:** [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)\ **Replies:** 5\ **Last updated:** [April 24, 2018, 4:24am UTC](https://discuss.elastic.co/t/run-es-on-two-servers-and-store-the-index-in-nas/128982 "2018-04-24T04:24:20Z")
Hello All, Is there a way to achieve the following approach? I want to setup an High Availability on ES. I can setup an HAProxy on top of two different ES servers and route the traffic if one node is down. But my quest… --- ## [No input via udp/syslog plugin](https://discuss.elastic.co/t/no-input-via-udp-syslog-plugin/29778)
**Author:** [@Tweek](https://discuss.elastic.co/u/Tweek)\ **Replies:** 5\ **Last updated:** [September 22, 2015, 2:17pm UTC](https://discuss.elastic.co/t/no-input-via-udp-syslog-plugin/29778 "2015-09-22T14:17:28Z")
My logstash-1.5.4 install does not collect any logs via the udp or the syslog input plugin anymore. I have the following config file: input { file{ path =\> "/opt/logs/tcpdump.log" } udp { port =\> "5… --- ## [Mget too slow for large amount of documents](https://discuss.elastic.co/t/mget-too-slow-for-large-amount-of-documents/294586)
**Author:** [@Benjamin\_Elkrieff](https://discuss.elastic.co/u/Benjamin_Elkrieff)\ **Replies:** 8\ **Last updated:** [January 19, 2022, 9:26pm UTC](https://discuss.elastic.co/t/mget-too-slow-for-large-amount-of-documents/294586 "2022-01-19T21:26:16Z")
Hello There. I use opensearch on AWS to store embeddings generated by a ML model. We need to use it for similarity search. I use 5 nodes of 4 CPU, 8 GB Ram, 1 shard per index, 5 replicas. The data we currently have in … --- ## [I need help with my logstash config](https://discuss.elastic.co/t/i-need-help-with-my-logstash-config/62516)
**Author:** [@keyboard112](https://discuss.elastic.co/u/keyboard112)\ **Replies:** 8\ **Last updated:** [October 10, 2016, 7:12pm UTC](https://discuss.elastic.co/t/i-need-help-with-my-logstash-config/62516 "2016-10-10T19:12:07Z")
Hello, Could someone help me with the message below. Im not sure if the issue is my configuration or the .csv file. This is a snippet from my debug Pushing flush onto pipeline {:level=\>:debug, :file=\>"logstash/pip… --- ## [Search\_after With Collapse Pagination Alternative](https://discuss.elastic.co/t/search-after-with-collapse-pagination-alternative/260451)
**Author:** [@MilanGatyas](https://discuss.elastic.co/u/MilanGatyas)\ **Replies:** 1\ **Last updated:** [January 7, 2021, 3:35pm UTC](https://discuss.elastic.co/t/search-after-with-collapse-pagination-alternative/260451 "2021-01-07T15:35:32Z")
We want to utilize the search\_after pagination strategy rather than from-size pagination strategy as we understood that search\_after has better performance for high pagination numbers. At the same time, we do collapse o… --- ## [How to collect logs from web browser?](https://discuss.elastic.co/t/how-to-collect-logs-from-web-browser/51585)
**Author:** [@kumarhanu](https://discuss.elastic.co/u/kumarhanu)\ **Replies:** 5\ **Last updated:** [June 6, 2016, 10:03am UTC](https://discuss.elastic.co/t/how-to-collect-logs-from-web-browser/51585 "2016-06-06T10:03:29Z")
Is there any beats or any agent to collect logs generated by web application from web browser and feed into elastic search? Appreciate any help in this regard. --- ## [Bytes can be at most 32766 in length got 36716](https://discuss.elastic.co/t/bytes-can-be-at-most-32766-in-length-got-36716/267463)
**Author:** [@ajaythakor](https://discuss.elastic.co/u/ajaythakor)\ **Replies:** 3\ **Last updated:** [March 19, 2021, 7:56am UTC](https://discuss.elastic.co/t/bytes-can-be-at-most-32766-in-length-got-36716/267463 "2021-03-19T07:56:36Z")
I have created new index named tbxmlcs Then I have added mapping: { "properties": { "34084-4": { "type": "keyword", "fields": { "keyword":{ "type":"keyword", "igno… --- ## [How to upgrade from Kibana 4.4.1 to 4.5](https://discuss.elastic.co/t/how-to-upgrade-from-kibana-4-4-1-to-4-5/49043)
**Author:** [@Jeremy\_Colton](https://discuss.elastic.co/u/Jeremy_Colton)\ **Replies:** 7\ **Last updated:** [June 28, 2016, 6:39am UTC](https://discuss.elastic.co/t/how-to-upgrade-from-kibana-4-4-1-to-4-5/49043 "2016-06-28T06:39:05Z")
Hi, I have installed on Ubuntu 14.04.4. I've configured Kibana 4.4.1 to work with Elastic Search and installed: Marvel, Sense and TimeLion. How do I upgrade from Kibana 4.4.1 to 4.5? Many thanks. --- ## [Is it allowed to connect multiple Kibana but all with exact same versions to the same elastic cluster](https://discuss.elastic.co/t/is-it-allowed-to-connect-multiple-kibana-but-all-with-exact-same-versions-to-the-same-elastic-cluster/230235)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 1\ **Last updated:** [April 29, 2020, 12:52am UTC](https://discuss.elastic.co/t/is-it-allowed-to-connect-multiple-kibana-but-all-with-exact-same-versions-to-the-same-elastic-cluster/230235 "2020-04-29T00:52:49Z")
I tried to connect a second Kibana to a running elastic search cluster. The elastic cluster originally already has a Kibana connected to it. There were some users created through the first Kibana UI, and those users we… --- ## [Not able to parse date in format "YYYY-mm-dd:HH:mm:ss" using grok pattern](https://discuss.elastic.co/t/not-able-to-parse-date-in-format-yyyy-mm-dd-hh-mm-ss-using-grok-pattern/74656)
**Author:** [@anisen](https://discuss.elastic.co/u/anisen)\ **Replies:** 1\ **Last updated:** [February 12, 2017, 6:31pm UTC](https://discuss.elastic.co/t/not-able-to-parse-date-in-format-yyyy-mm-dd-hh-mm-ss-using-grok-pattern/74656 "2017-02-12T18:31:44Z")
My Log file looks like this: 2015-06-12:00:08:55 195.160.1.191 POST /abc/xyz - 80 - 192.160.1.129 Mozilla/4.0+(compatible;+MSIE+4.01;+Windows+NT;+MS+Search+6.0+Robot) - 401 0 0 37 2015-06-12:00:08:54 195.160.1.191 POST… --- ## [I need to index my field as type=keyword as oppose to type=text](https://discuss.elastic.co/t/i-need-to-index-my-field-as-type-keyword-as-oppose-to-type-text/163524)
**Author:** [@utki](https://discuss.elastic.co/u/utki)\ **Replies:** 8\ **Last updated:** [January 17, 2019, 10:05am UTC](https://discuss.elastic.co/t/i-need-to-index-my-field-as-type-keyword-as-oppose-to-type-text/163524 "2019-01-17T10:05:56Z")
I need to index my field as type=keyword as oppose to type=text, since I need to create dashboard using the fields which are tagged as type text and I am not able to create one. Below is my config file: input { file … --- ## [ECS - Difference between event.id and event.code](https://discuss.elastic.co/t/ecs-difference-between-event-id-and-event-code/299924)
**Author:** [@Sako](https://discuss.elastic.co/u/Sako)\ **Replies:** 4\ **Last updated:** [March 24, 2022, 3:24pm UTC](https://discuss.elastic.co/t/ecs-difference-between-event-id-and-event-code/299924 "2022-03-24T15:24:35Z")
Hi, I have a question regarding the usage of the ECS fields event.id and event.code. What is the intended difference between these two fields? Is there any guidance on how to use them? The example for event.code refer… --- ## [GrokDebugger: \[security\_exception\] action \[cluster:admin/ingest/pipeline/simulate\] is unauthorized for user \[kibana\]](https://discuss.elastic.co/t/grokdebugger-security-exception-action-cluster-admin-ingest-pipeline-simulate-is-unauthorized-for-user-kibana/111041)
**Author:** [@land-pack](https://discuss.elastic.co/u/land-pack)\ **Replies:** 4\ **Last updated:** [December 13, 2017, 2:24am UTC](https://discuss.elastic.co/t/grokdebugger-security-exception-action-cluster-admin-ingest-pipeline-simulate-is-unauthorized-for-user-kibana/111041 "2017-12-13T02:24:00Z")
I have work with kibana + ElasticSearch + Logstash very well! but when I try to install x-pack , I want to run GrokDebug to work! I got this error! I didn't find any configuration docs from official website! anyone help? … --- ## [Install winlogbeat.template.json](https://discuss.elastic.co/t/install-winlogbeat-template-json/65746)
**Author:** [@MSAdmin](https://discuss.elastic.co/u/MSAdmin)\ **Replies:** 3\ **Last updated:** [November 22, 2016, 4:28pm UTC](https://discuss.elastic.co/t/install-winlogbeat-template-json/65746 "2016-11-22T16:28:13Z")
I've been trying to setup monitoring for failed logins. I have winlogbeat running on my server and its feeding event logs over to my elastic server. When I loaded the JSON file (winlogbeat-account-usage-dashboard.json) f… --- ## [NoSuchMethodError CharBuffer.flip() using java 8 with spring boot and APM 1.0.0](https://discuss.elastic.co/t/nosuchmethoderror-charbuffer-flip-using-java-8-with-spring-boot-and-apm-1-0-0/156870)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 5\ **Last updated:** [November 15, 2018, 5:35pm UTC](https://discuss.elastic.co/t/nosuchmethoderror-charbuffer-flip-using-java-8-with-spring-boot-and-apm-1-0-0/156870 "2018-11-15T17:35:29Z")
Hi I want to play around with APM and used a spring boot application to play around. However, I get this exception. I am running on a mac with jdk 8. Any idea what I am doing wrong? java.lang.NoSuchMethodError: java.nio… --- ## [Grok filtering in logstash for multiple defined patterns](https://discuss.elastic.co/t/grok-filtering-in-logstash-for-multiple-defined-patterns/77788)
**Author:** [@OucemaBellagha](https://discuss.elastic.co/u/OucemaBellagha)\ **Replies:** 5\ **Last updated:** [March 10, 2017, 12:42pm UTC](https://discuss.elastic.co/t/grok-filtering-in-logstash-for-multiple-defined-patterns/77788 "2017-03-10T12:42:27Z")
I am trying to filter my logs matching few patterns I have in the field "full\_log" e.g: E/vincinity/dholland\_view\_sql\_global/IN/Cluster\_Node/SSL-CACHE/Dsal1 F/vincinity/dholland\_view\_sql\_local/IN/Cluster\_Node3/SSL-CACH… --- ## [Data model for Graph](https://discuss.elastic.co/t/data-model-for-graph/57185)
**Author:** [@geethaRam](https://discuss.elastic.co/u/geethaRam)\ **Replies:** 5\ **Last updated:** [August 4, 2016, 9:16am UTC](https://discuss.elastic.co/t/data-model-for-graph/57185 "2016-08-04T09:16:09Z")
I need help in reviewing my data model suitable for graph: I have two entities: person : name, indicator docket: docket\_number person and docket have many-many relationship. Each person can be present in one or multi… --- ## [Check for presence of email address in query string?](https://discuss.elastic.co/t/check-for-presence-of-email-address-in-query-string/82327)
**Author:** [@muppix](https://discuss.elastic.co/u/muppix)\ **Replies:** 2\ **Last updated:** [April 19, 2017, 10:54am UTC](https://discuss.elastic.co/t/check-for-presence-of-email-address-in-query-string/82327 "2017-04-19T10:54:44Z")
Hi everyone. Apologies if this is a n00b question, I just can't find the answer anywhere, and my Kibana / RegEx knowledge is failing me. Say my logs' msg field contains a value like this: host.com/path/resource?foo=012… --- ## [Remove a specific field from the log and overwrite the message field](https://discuss.elastic.co/t/remove-a-specific-field-from-the-log-and-overwrite-the-message-field/221820)
**Author:** [@nmoham](https://discuss.elastic.co/u/nmoham)\ **Replies:** 7\ **Last updated:** [March 5, 2020, 8:07am UTC](https://discuss.elastic.co/t/remove-a-specific-field-from-the-log-and-overwrite-the-message-field/221820 "2020-03-05T08:07:14Z")
trying to parse the following log using the KV filter ; but there are some fields "message", "type" and "index" in the log message, which is overwriting the original "message", "type", "index" fields dropping the entire … --- ## [Global Variables in Canvas](https://discuss.elastic.co/t/global-variables-in-canvas/169871)
**Author:** [@JamesNotJamez](https://discuss.elastic.co/u/JamesNotJamez)\ **Replies:** 4\ **Last updated:** [March 12, 2019, 8:59pm UTC](https://discuss.elastic.co/t/global-variables-in-canvas/169871 "2019-03-12T20:59:14Z")
Is it possible to define a global variable in Canvas. At the moment I am defining a target, but when I update this target I have to change queries of each individually. Thanks e.g. --- ## [ElasticSearch-head not working for newbie on 1-doc index](https://discuss.elastic.co/t/elasticsearch-head-not-working-for-newbie-on-1-doc-index/10737)
**Author:** [@caymanag](https://discuss.elastic.co/u/caymanag)\ **Replies:** 8\ **Last updated:** [February 18, 2013, 3:56am UTC](https://discuss.elastic.co/t/elasticsearch-head-not-working-for-newbie-on-1-doc-index/10737 "2013-02-18T03:56:34Z")
Hi, I am new to ES and ES-head. I just downloaded ES 0.20.4. I just installed ES-head, both as a plugin and manual download. I created a new index called twitter with type tweet, and inserted one document: { use… --- ## [Kibana Cross-Site Scripting Vulnerability CVE-2015-4093](https://discuss.elastic.co/t/kibana-cross-site-scripting-vulnerability-cve-2015-4093/2258)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [June 9, 2015, 9:43pm UTC](https://discuss.elastic.co/t/kibana-cross-site-scripting-vulnerability-cve-2015-4093/2258 "2015-06-09T21:43:31Z")
Summary: Kibana versions 4.0.0, 4.0.1 and 4.0.2 are vulnerable to a cross-site scripting (XSS) attack. The attack allows execution of arbitrary JavaScript in the context of the user’s browser. We have been assigned CVE… --- ## [Script\_fields always returns array. how to return an object or simple data type?](https://discuss.elastic.co/t/script-fields-always-returns-array-how-to-return-an-object-or-simple-data-type/146891)
**Author:** [@andrx](https://discuss.elastic.co/u/andrx)\ **Replies:** 1\ **Last updated:** [September 4, 2018, 6:43pm UTC](https://discuss.elastic.co/t/script-fields-always-returns-array-how-to-return-an-object-or-simple-data-type/146891 "2018-09-04T18:43:27Z")
I noticed that when using script\_fields it always return array of the values that should be returned. I wonder why is this happening and is it possible to just return a non-array data type like an object or bool? Exampl… --- ## [Elasticsearch Heap size growing with time and lot of GC, eventually pulling the cluster down](https://discuss.elastic.co/t/elasticsearch-heap-size-growing-with-time-and-lot-of-gc-eventually-pulling-the-cluster-down/34098)
**Author:** [@ramindar](https://discuss.elastic.co/u/ramindar)\ **Replies:** 5\ **Last updated:** [November 20, 2015, 4:13am UTC](https://discuss.elastic.co/t/elasticsearch-heap-size-growing-with-time-and-lot-of-gc-eventually-pulling-the-cluster-down/34098 "2015-11-20T04:13:33Z")
I have a ES cluster with 16 nodes in Azure 3 Master (A2 machine - 3.5GB mem) 3 Search (A2 machine - 3.5GB mem) 10 Data Nodes (A3 machine - 7 GB mem) In total 6 indexes Index Doc Size Shards Replicas … --- ## [ScriptException\[dynamic scripting for \[groovy\] disabled\] with Java API](https://discuss.elastic.co/t/scriptexception-dynamic-scripting-for-groovy-disabled-with-java-api/25699)
**Author:** [@ryan686806](https://discuss.elastic.co/u/ryan686806)\ **Replies:** 6\ **Last updated:** [July 16, 2015, 9:49am UTC](https://discuss.elastic.co/t/scriptexception-dynamic-scripting-for-groovy-disabled-with-java-api/25699 "2015-07-16T09:49:09Z")
I am into troubles when i use elasticsearch 1.5.2 by javaAPI, this is my code: Settings settings = ImmutableSettings.settingsBuilder() .put("client.transport.ignore\_cluster\_name", true) .put("client.transport.s… --- ## [Username or password is incorrect. Please try again. / HTTP/1.1 401 Unauthorized](https://discuss.elastic.co/t/username-or-password-is-incorrect-please-try-again-http-1-1-401-unauthorized/309145)
**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\ **Replies:** 3\ **Last updated:** [July 9, 2022, 4:41am UTC](https://discuss.elastic.co/t/username-or-password-is-incorrect-please-try-again-http-1-1-401-unauthorized/309145 "2022-07-09T04:41:33Z")
Hello World! I'm trying to follow Install Kibana with Docker | Kibana Guide \[7.17\] | Elastic and even though it looks like Kibana started fine: % docker compose logs --tail 1 kibana | {"type":"log","@timestamp":"2022-… --- ## [If/Else condition for Output to Elasticsearch](https://discuss.elastic.co/t/if-else-condition-for-output-to-elasticsearch/275790)
**Author:** [@valhalla](https://discuss.elastic.co/u/valhalla)\ **Replies:** 3\ **Last updated:** [June 14, 2021, 9:01am UTC](https://discuss.elastic.co/t/if-else-condition-for-output-to-elasticsearch/275790 "2021-06-14T09:01:32Z")
Hi team, Would like to ask for your help with regards on having an if else condition on Filebeat’s output to elasticsearch. Would like to check if fields.age ==10 the output to be one array of hosts else other array of … --- ## [How to reload logstash conf files - Docker container](https://discuss.elastic.co/t/how-to-reload-logstash-conf-files-docker-container/201817)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 3\ **Last updated:** [October 1, 2019, 7:00pm UTC](https://discuss.elastic.co/t/how-to-reload-logstash-conf-files-docker-container/201817 "2019-10-01T19:00:03Z")
What is the easiest way to tell Logstash to reload its configuration (.conf) files? I am now running the Elastic Stack, and Logstash, in a Docker container (sebp-elk, to be specific). Now, I am restarting the entire co… --- ## [Java Timestamp to ElasticSearch Java REST Client 6.6](https://discuss.elastic.co/t/java-timestamp-to-elasticsearch-java-rest-client-6-6/167187)
**Author:** [@clouduser](https://discuss.elastic.co/u/clouduser)\ **Replies:** 3\ **Last updated:** [February 20, 2019, 10:52am UTC](https://discuss.elastic.co/t/java-timestamp-to-elasticsearch-java-rest-client-6-6/167187 "2019-02-20T10:52:26Z")
I have sample value "1547674800000" which I formated to Java.sql.timestamp and tryng to insert into ELastic Search via Java REST Client. Timestamp Value :1547674800000 I am getting error Exception in thread "main" ja… --- ## [Prevent inclusion of Authorization header](https://discuss.elastic.co/t/prevent-inclusion-of-authorization-header/164917)
**Author:** [@Michael\_Daly](https://discuss.elastic.co/u/Michael_Daly)\ **Replies:** 3\ **Last updated:** [January 22, 2019, 3:51pm UTC](https://discuss.elastic.co/t/prevent-inclusion-of-authorization-header/164917 "2019-01-22T15:51:14Z")
To get FileBeat working with AWS ES, the Authorization http header must not be included in the http request. How can I prevent FileBeat sending a basic auth header? Setting -E output.elasticsearch.username="" -E output… --- ## [Service start fails with chown: invalid user: \`kibana:kibana'](https://discuss.elastic.co/t/service-start-fails-with-chown-invalid-user-kibana-kibana/136939)
**Author:** [@PD\_Wanjari](https://discuss.elastic.co/u/PD_Wanjari)\ **Replies:** 3\ **Last updated:** [June 23, 2018, 12:27am UTC](https://discuss.elastic.co/t/service-start-fails-with-chown-invalid-user-kibana-kibana/136939 "2018-06-23T00:27:25Z")
Installed Kibana with RPM following the instructions from here - https://www.elastic.co/guide/en/kibana/current/rpm.html I am now trying to start the service using sudo service kibana start but I am getting the error … [Previous page](https://discuss.elastic.co/top.md?page=577&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=579&per_page=50&period=all)