# Top **URL:** https://discuss.elastic.co/top.md?page=579&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 580 --- ## [Configuring fields.yml for custom Beat](https://discuss.elastic.co/t/configuring-fields-yml-for-custom-beat/92358)
**Author:** [@Russell\_Seymour](https://discuss.elastic.co/u/Russell_Seymour)\ **Replies:** 2\ **Last updated:** [July 10, 2017, 7:23am UTC](https://discuss.elastic.co/t/configuring-fields-yml-for-custom-beat/92358 "2017-07-10T07:23:13Z")
I am writing a custom beat to read temperature. I have created the Beat using this, https://www.elastic.co/blog/build-your-own-beat, as an example. However I am confused as to how to modify the fields.yml file so tha… --- ## [Delete an nonexistent document](https://discuss.elastic.co/t/delete-an-nonexistent-document/232073)
**Author:** [@ekrx](https://discuss.elastic.co/u/ekrx)\ **Replies:** 5\ **Last updated:** [May 11, 2020, 7:40pm UTC](https://discuss.elastic.co/t/delete-an-nonexistent-document/232073 "2020-05-11T19:40:59Z")
I would like to understand what are the implications of sending a delete by id for a document that does not exist. We have such case where we are sending delete operations for a big number of documents where almost 90% o… --- ## [My JDBC SQL statement have both single (') and double (") quote, how do i supply it in JDBC input plugin?](https://discuss.elastic.co/t/my-jdbc-sql-statement-have-both-single-and-double-quote-how-do-i-supply-it-in-jdbc-input-plugin/118396)
**Author:** [@Somnath\_Pal](https://discuss.elastic.co/u/Somnath_Pal)\ **Replies:** 2\ **Last updated:** [February 5, 2018, 10:05am UTC](https://discuss.elastic.co/t/my-jdbc-sql-statement-have-both-single-and-double-quote-how-do-i-supply-it-in-jdbc-input-plugin/118396 "2018-02-05T10:05:26Z")
My input looks like input { jdbc { jdbc\_connection\_string =\> "jdbc:redshift://infa-iidiq-cluster-qa1.ctd4xsffelb3.us-west-2.redshift.amazonaws.com:5439/iidiqdatabase" jdbc\_user =\> "" jdbc\_password =\> "" jdbc\_valida… --- ## [Logstash not sending logs](https://discuss.elastic.co/t/logstash-not-sending-logs/111564)
**Author:** [@anudeepmk](https://discuss.elastic.co/u/anudeepmk)\ **Replies:** 3\ **Last updated:** [December 15, 2017, 6:52pm UTC](https://discuss.elastic.co/t/logstash-not-sending-logs/111564 "2017-12-15T18:52:53Z")
I am newbie to ELK, I am trying to send the SAP hybris logs to elasticsearch from logstash on the server input { file { path =\> "/hybris/log/hybris\*.log" type =\> "hybris" start\_po… --- ## [Time based index pattern + wildcard](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053)
**Author:** [@korpa](https://discuss.elastic.co/u/korpa)\ **Replies:** 3\ **Last updated:** [July 22, 2015, 5:02pm UTC](https://discuss.elastic.co/t/time-based-index-pattern-wildcard/26053 "2015-07-22T17:02:14Z")
Hej, I have multiple indices defined: logstash-1-day-2015.07.20 logstash-2-day-2015.07.20 logstash-1-day-2015.07.21 logstash-2-day-2015.07.21 Now I wonder how to set up a timebased index pattern in Kibana. I already… --- ## [File integrity Monitoring with elasticsearch](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250)
**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\ **Replies:** 4\ **Last updated:** [May 17, 2018, 9:59am UTC](https://discuss.elastic.co/t/file-integrity-monitoring-with-elasticsearch/132250 "2018-05-17T09:59:18Z")
Hello Folks, I want to know any file integrity monitoring solution integration is their with elastic stack ? I am using OSSEC Wazuh for FIM but i want other open source or any FIM solution that we can integrate with El… --- ## [Rollover index daily](https://discuss.elastic.co/t/rollover-index-daily/86062)
**Author:** [@bouboune](https://discuss.elastic.co/u/bouboune)\ **Replies:** 4\ **Last updated:** [June 10, 2017, 8:34am UTC](https://discuss.elastic.co/t/rollover-index-daily/86062 "2017-06-10T08:34:20Z")
Hello, There is something that is still unclear for me about rollover index. What i understood is, If i set the indice to rollover each day, each day i have a new index: day 1 ===\> logs-2017.05.17-1 day 2 ===\> logs-2… --- ## [Permission Errors](https://discuss.elastic.co/t/permission-errors/85479)
**Author:** [@Scott\_Robinson](https://discuss.elastic.co/u/Scott_Robinson)\ **Replies:** 4\ **Last updated:** [May 14, 2017, 12:15pm UTC](https://discuss.elastic.co/t/permission-errors/85479 "2017-05-14T12:15:00Z")
Howdy, Can I get filebeat to ignore permission errors and carry on reading other files? 2017-05-11T20:41:19Z ERR Failed opening /var/log/mediator/sysman.log: open /var/log/mediator/sysman.log: permission denied 2017-… --- ## [Changing index.codec on existing index?](https://discuss.elastic.co/t/changing-index-codec-on-existing-index/63249)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 4\ **Last updated:** [October 20, 2016, 7:10am UTC](https://discuss.elastic.co/t/changing-index-codec-on-existing-index/63249 "2016-10-20T07:10:10Z")
Hi, i tried changing the index.codec on a existing index to "best\_compression"(DEFLATE) to achieve better compression values, than the standard LZ4. I closed the index, changed the codec, reopened it and than run the… --- ## [JSON - Analyzer configuration](https://discuss.elastic.co/t/json-analyzer-configuration/7790)
**Author:** [@Diego\_Sosa](https://discuss.elastic.co/u/Diego_Sosa)\ **Replies:** 4\ **Last updated:** [May 25, 2012, 8:27pm UTC](https://discuss.elastic.co/t/json-analyzer-configuration/7790 "2012-05-25T20:27:51Z")
Hello everyone, I am trying to create the mapping for my first object. It has two properties for now: an id and a name. The ID is not searchable but the name is and I would like to use the snowball analyzer configur… --- ## [Need assistance to create map based on longitude ,lat fields?](https://discuss.elastic.co/t/need-assistance-to-create-map-based-on-longitude-lat-fields/41439)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 7\ **Last updated:** [February 18, 2016, 2:01pm UTC](https://discuss.elastic.co/t/need-assistance-to-create-map-based-on-longitude-lat-fields/41439 "2016-02-18T14:01:06Z")
Hi Experts, I have 2 fields in my logs with the name , dlong,dlat and values are like 37.3394012451,-121.8950042724. I want to show them on map in kibana . Please suggest how I can achieve this? Thanks VG --- ## [Cross compile Topbeat for Windows on Linux](https://discuss.elastic.co/t/cross-compile-topbeat-for-windows-on-linux/53102)
**Author:** [@arunachala](https://discuss.elastic.co/u/arunachala)\ **Replies:** 7\ **Last updated:** [June 23, 2016, 4:32pm UTC](https://discuss.elastic.co/t/cross-compile-topbeat-for-windows-on-linux/53102 "2016-06-23T16:32:52Z")
Hi, I want to compile topbeat for Windows on my Linux desktop. I have the following installed: \* docker \* go \* beats-packer (from github.com/elastic/beats-packer) Now, when try to cross compile Topbeat for Windo… --- ## [Is it possible to update an index by importing an updated .csv file?](https://discuss.elastic.co/t/is-it-possible-to-update-an-index-by-importing-an-updated-csv-file/292029)
**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\ **Replies:** 1\ **Last updated:** [December 15, 2021, 8:35pm UTC](https://discuss.elastic.co/t/is-it-possible-to-update-an-index-by-importing-an-updated-csv-file/292029 "2021-12-15T20:35:24Z")
I want to update my index by importing a .csv file via Logstash. Currently, the plan is to delete all the records from the index and then reimport the new .csv file from scratch. But I was wondering if it's possible to j… --- ## [Combine request and response based on field in log - ELK](https://discuss.elastic.co/t/combine-request-and-response-based-on-field-in-log-elk/207073)
**Author:** [@pdkgamage](https://discuss.elastic.co/u/pdkgamage)\ **Replies:** 1\ **Last updated:** [November 8, 2019, 3:02pm UTC](https://discuss.elastic.co/t/combine-request-and-response-based-on-field-in-log-elk/207073 "2019-11-08T15:02:51Z")
We have ELK setup with filebeat, logstash and elasticsearch and kibana. I need aggregate request and response at the logstash. I have configured pipeline configuration as below. now log aggregation working without any i… --- ## [Unable to update ILM policy](https://discuss.elastic.co/t/unable-to-update-ilm-policy/199480)
**Author:** [@anirudhra10](https://discuss.elastic.co/u/anirudhra10)\ **Replies:** 4\ **Last updated:** [October 10, 2019, 9:18pm UTC](https://discuss.elastic.co/t/unable-to-update-ilm-policy/199480 "2019-10-10T21:18:46Z")
Hello, I have a hot-warm architecture cluster running in production containing 1000+ daily indices spanning 3 months. A single ILM policy moves indices from hot to warm after 4 days of creation, then to cold phase after… --- ## [Kibana error - can't start due to error (problem with ES)](https://discuss.elastic.co/t/kibana-error-cant-start-due-to-error-problem-with-es/325409)
**Author:** [@Blazej\_Makula](https://discuss.elastic.co/u/Blazej_Makula)\ **Replies:** 5\ **Last updated:** [February 16, 2023, 8:47pm UTC](https://discuss.elastic.co/t/kibana-error-cant-start-due-to-error-problem-with-es/325409 "2023-02-16T20:47:58Z")
Hello, can you please help me with my home lab log collection system. I have two hosts one with logstash + elasticsearch + kibana and the other with logstash + elasticsearch. I want to connect kibana to both ES cluster… --- ## [How to customize kibana UI?](https://discuss.elastic.co/t/how-to-customize-kibana-ui/140445)
**Author:** [@ahrtr](https://discuss.elastic.co/u/ahrtr)\ **Replies:** 2\ **Last updated:** [July 19, 2018, 1:06am UTC](https://discuss.elastic.co/t/how-to-customize-kibana-ui/140445 "2018-07-19T01:06:08Z")
The kibana version I am using is 6.2.2. Is it possible to customize the kibana UI as below? Modify the default home page or replace it with a customized page; Remove the Timelion plugin; Remove/hide some items in \[Mana… --- ## [Cannot create repository for snapshot](https://discuss.elastic.co/t/cannot-create-repository-for-snapshot/77018)
**Author:** [@madleeen](https://discuss.elastic.co/u/madleeen)\ **Replies:** 1\ **Last updated:** [March 2, 2017, 1:07pm UTC](https://discuss.elastic.co/t/cannot-create-repository-for-snapshot/77018 "2017-03-02T13:07:03Z")
Hello, I am trying to migrate data from ES version: 2.3.4, Build: e455fd0/2016-06-30T11:24:31Z, JVM: 1.8.0\_91 to newer ES 5x. I want to create snasphot a restore it in new ES, but I have problem with creating repository.… --- ## [Metricbeat to Logstash to ElasticSearch - Cannot See Any Hosts Defined, But Data Is Definitely Coming In](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715)
**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\ **Replies:** 8\ **Last updated:** [June 14, 2021, 7:46pm UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715 "2021-06-14T19:46:03Z")
For background information, I've tried following instructions in these posts and am still encountering an issue: Kibana Metrics – 500 Internal Server Error Host data wont populate in dashboards when upgrading beats fro… --- ## [Get one document per bucket in elasticsearch aggregation](https://discuss.elastic.co/t/get-one-document-per-bucket-in-elasticsearch-aggregation/144086)
**Author:** [@tvvignesh](https://discuss.elastic.co/u/tvvignesh)\ **Replies:** 3\ **Last updated:** [August 13, 2018, 8:52am UTC](https://discuss.elastic.co/t/get-one-document-per-bucket-in-elasticsearch-aggregation/144086 "2018-08-13T08:52:32Z")
I had asked a question in Stack Overflow: https://stackoverflow.com/questions/51816815/get-one-document-per-bucket-in-elasticsearch-aggregation Sharing it here. Please let me know if you know the solution for the same. --- ## [Bulk insert to elasticsearch in spark using scala](https://discuss.elastic.co/t/bulk-insert-to-elasticsearch-in-spark-using-scala/76573)
**Author:** [@rulanitee](https://discuss.elastic.co/u/rulanitee)\ **Replies:** 3\ **Last updated:** [February 28, 2017, 9:23am UTC](https://discuss.elastic.co/t/bulk-insert-to-elasticsearch-in-spark-using-scala/76573 "2017-02-28T09:23:03Z")
Hello there, Is there a way to save the following Json in spark using scala: {"index":{"id":1662034,"type":"fhl","\_index":"loan"}} {"name":"John","surname":"Doe","dob":"1985-01-03","title":"Mr", per\_id:1662034} {"in… --- ## [Date Histogram not showing Vertical bar chart](https://discuss.elastic.co/t/date-histogram-not-showing-vertical-bar-chart/69773)
**Author:** [@roopendra](https://discuss.elastic.co/u/roopendra)\ **Replies:** 7\ **Last updated:** [December 27, 2016, 2:50pm UTC](https://discuss.elastic.co/t/date-histogram-not-showing-vertical-bar-chart/69773 "2016-12-27T14:50:54Z")
I am storing application build logs in an Elasticsearch index; Same index configured in Kibana as an index pattern for creating Visualization. I am able to search data on behalf of that index in Discover tab. Now when I … --- ## [Http.max\_content\_length update on cluster](https://discuss.elastic.co/t/http-max-content-length-update-on-cluster/301476)
**Author:** [@gerasimysys](https://discuss.elastic.co/u/gerasimysys)\ **Replies:** 4\ **Last updated:** [April 5, 2022, 11:19am UTC](https://discuss.elastic.co/t/http-max-content-length-update-on-cluster/301476 "2022-04-05T11:19:24Z")
Hello. On the logstash, have error \[ERROR\]\[logstash.outputs.elasticsearch\]\[main\]\[4662344eb1eeab4baf336e2996a14ddadf8c61b8943c6e31c68cb582d77f72de\] Encountered a retryable error (will retry with exponential ba ckoff) {:… --- ## [How can I set a parent / child relationship](https://discuss.elastic.co/t/how-can-i-set-a-parent-child-relationship/82679)
**Author:** [@ToujouAya](https://discuss.elastic.co/u/ToujouAya)\ **Replies:** 8\ **Last updated:** [April 20, 2017, 7:59am UTC](https://discuss.elastic.co/t/how-can-i-set-a-parent-child-relationship/82679 "2017-04-20T07:59:12Z")
I'm trying to create two documents, one build a child of the other. My mapping config is like this 'mappings' =\> \[ "roadType" =\> \[ "properties" =\> \[ \] \], … --- ## [App for monitoring Kafka consumer lag](https://discuss.elastic.co/t/app-for-monitoring-kafka-consumer-lag/86311)
**Author:** [@John\_06](https://discuss.elastic.co/u/John_06)\ **Replies:** 6\ **Last updated:** [June 2, 2017, 3:54pm UTC](https://discuss.elastic.co/t/app-for-monitoring-kafka-consumer-lag/86311 "2017-06-02T15:54:22Z")
I am wondering if there is an alternative to Kafkabeat app to perform Kafka consumer lag monitoring. It looks like Metricbeat doesn't collect related metrics. --- ## [Dynamic Index in ElasticSearch](https://discuss.elastic.co/t/dynamic-index-in-elasticsearch/53267)
**Author:** [@supercoder](https://discuss.elastic.co/u/supercoder)\ **Replies:** 3\ **Last updated:** [June 21, 2016, 4:18am UTC](https://discuss.elastic.co/t/dynamic-index-in-elasticsearch/53267 "2016-06-21T04:18:59Z")
I have following configuration in logstash whereby I am able to create dynamic "document\_type" into ES based on input JSON received: elasticsearch { hosts =\> \["localhost:9200"\] index =\> "queuelogs" … --- ## [Statsd module for metricbeat](https://discuss.elastic.co/t/statsd-module-for-metricbeat/68355)
**Author:** [@eduardohl](https://discuss.elastic.co/u/eduardohl)\ **Replies:** 7\ **Last updated:** [December 13, 2016, 1:06pm UTC](https://discuss.elastic.co/t/statsd-module-for-metricbeat/68355 "2016-12-13T13:06:20Z")
I've been using statsd, telegraf (when using InfluxDB) and datadog agent (when using datadog) with great results for metric collection, but now that I'm trying to use elastic search as the tsdb for my metrics I'm having … --- ## [Requirements per node role](https://discuss.elastic.co/t/requirements-per-node-role/6295)
**Author:** [@plaflamme](https://discuss.elastic.co/u/plaflamme)\ **Replies:** 7\ **Last updated:** [January 12, 2012, 10:33am UTC](https://discuss.elastic.co/t/requirements-per-node-role/6295 "2012-01-12T10:33:00Z")
Hi, A node in a cluster can be configured to serve exclusively as: a data, master or "client" node. By deciding a node's role a-priori, I suspect one should tweak its hardware (more RAM, less CPU, etc.) to fit. What… --- ## [Kibana server is not ready yet \[7.6.2\]](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-7-6-2/231398)
**Author:** [@alwaysastudent](https://discuss.elastic.co/u/alwaysastudent)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 8:30pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-7-6-2/231398 "2020-05-07T20:30:03Z")
I have brought up the "elastic:7.6.2" and "kibana:7.6.2" (1 count each) using the latest kubernetes operator version 1.1. I deployed the elastic first, waited for the pod to turn green, and then more just to make sure t… --- ## [The third node cannot join the cluster (ES-7.1.0)](https://discuss.elastic.co/t/the-third-node-cannot-join-the-cluster-es-7-1-0/183660)
**Author:** [@ellison001](https://discuss.elastic.co/u/ellison001)\ **Replies:** 8\ **Last updated:** [June 5, 2019, 2:49pm UTC](https://discuss.elastic.co/t/the-third-node-cannot-join-the-cluster-es-7-1-0/183660 "2019-06-05T14:49:55Z")
Hi, I am using the ES 7.1.0 with below config. The second node can join the cluster successfully, but when I start to the third node, it failed to join the cluster due to below error. \`--- cluster.name: dev-elasticsea… --- ## [I'm getting exceptions while searching using cirrussearch from Mediawiki](https://discuss.elastic.co/t/im-getting-exceptions-while-searching-using-cirrussearch-from-mediawiki/20455)
**Author:** [@Vijay\_K1](https://discuss.elastic.co/u/Vijay_K1)\ **Replies:** 6\ **Last updated:** [October 28, 2014, 12:30pm UTC](https://discuss.elastic.co/t/im-getting-exceptions-while-searching-using-cirrussearch-from-mediawiki/20455 "2014-10-28T12:30:11Z")
I've installed the Elasticsearch 1.3.1 in Mediawiki 1.23, Elastica extension version 1.0.1.2 (e112720 ) , Cirrus search 0.2 (aeccd2e) . Whenever I'm searching from the Mediawiki, I'm facing issues and result… --- ## [How to mask sensitive data in logstash](https://discuss.elastic.co/t/how-to-mask-sensitive-data-in-logstash/170333)
**Author:** [@manickalai](https://discuss.elastic.co/u/manickalai)\ **Replies:** 2\ **Last updated:** [March 1, 2019, 12:27pm UTC](https://discuss.elastic.co/t/how-to-mask-sensitive-data-in-logstash/170333 "2019-03-01T12:27:51Z")
i have to mask the Card no : 712345678901236, OTP : 1234, expiryDate:01/01/2018, cvv:000, MobileNo:1234567890 the masked data should be Card no : 71231236, OTP : 14, expiryDate://20, cvv:\*\*, MobileNo:12\*\*\*\*\*\*\*90 kindl… --- ## [Issue while installing curator](https://discuss.elastic.co/t/issue-while-installing-curator/37714)
**Author:** [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\ **Replies:** 7\ **Last updated:** [January 4, 2016, 6:15pm UTC](https://discuss.elastic.co/t/issue-while-installing-curator/37714 "2016-01-04T18:15:55Z")
I have configured ELK (elasticsearch 1.7.2) by unzipping the packages. Now I want to install curator. I have below packages. click-5.1.tar.gz elasticsearch-curator-3.4.0.tar.gz urllib3-1.12.tar.gz elasticsearch-py-1.… --- ## [Shield with SSO](https://discuss.elastic.co/t/shield-with-sso/39347)
**Author:** [@tommyg](https://discuss.elastic.co/u/tommyg)\ **Replies:** 3\ **Last updated:** [January 19, 2016, 12:29pm UTC](https://discuss.elastic.co/t/shield-with-sso/39347 "2016-01-19T12:29:28Z")
How to integrate shield with SSO (Oracle Access Manager or CA Siteminder)? If Kibana4 is front ended with apache or nginx and the URL https://mykibana.com is protected by the access manager, does Shield has capability to… --- ## [Is there a graphical interface for Logstash?](https://discuss.elastic.co/t/is-there-a-graphical-interface-for-logstash/263024)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 2\ **Last updated:** [February 4, 2021, 3:27am UTC](https://discuss.elastic.co/t/is-there-a-graphical-interface-for-logstash/263024 "2021-02-04T03:27:11Z")
Is there a graphical interface for Logstash? If no, can I get a documentation for highly scalable setup for logstash? As I read another post, it was somewhere down the line in 2015. I am not able to get a full-proof s… --- ## [How to query with JSON when use Java API in ElasticSearch?](https://discuss.elastic.co/t/how-to-query-with-json-when-use-java-api-in-elasticsearch/19781)
**Author:** [@11166](https://discuss.elastic.co/u/11166)\ **Replies:** 2\ **Last updated:** [September 23, 2014, 12:10pm UTC](https://discuss.elastic.co/t/how-to-query-with-json-when-use-java-api-in-elasticsearch/19781 "2014-09-23T12:10:52Z")
Hi all, I'm using ElasticSearch as a search service in Spring Web project. Now I'm using Transport Client to communicate with ES. I'm wondering if there exists a method which can construct a QueryBuilder from… --- ## [Dec 20th, 2018: \[EN\]\[Python/Elasticsearch\] Python DSL for Elasticsearch](https://discuss.elastic.co/t/dec-20th-2018-en-python-elasticsearch-python-dsl-for-elasticsearch/161203)
**Author:** [@honzakral](https://discuss.elastic.co/u/honzakral)\ **Replies:** 1\ **Last updated:** [December 20, 2018, 12:00am UTC](https://discuss.elastic.co/t/dec-20th-2018-en-python-elasticsearch-python-dsl-for-elasticsearch/161203 "2018-12-20T00:00:14Z")
Python DSL for Elasticsearch In the previous post we learned about elasticsearch-dsl and created an index in Elasticsearch to store all of our git history, now it's time to load in the data and see what we can do with it… --- ## [Cluster block exception: Forbidden](https://discuss.elastic.co/t/cluster-block-exception-forbidden/189384)
**Author:** [@amitavmohanty01](https://discuss.elastic.co/u/amitavmohanty01)\ **Replies:** 6\ **Last updated:** [July 9, 2019, 5:30am UTC](https://discuss.elastic.co/t/cluster-block-exception-forbidden/189384 "2019-07-09T05:30:16Z")
I keep getting messages like the following and the drop in indexing rate correlates with these messages but the watermark is far from being breached. \[2019-07-08T08:50:29,228\]\[INFO \]\[logstash.outputs.elasticsearch\] retr… --- ## [Kibana Chart x-axis customization issue](https://discuss.elastic.co/t/kibana-chart-x-axis-customization-issue/139820)
**Author:** [@vic18](https://discuss.elastic.co/u/vic18)\ **Replies:** 6\ **Last updated:** [July 17, 2018, 7:59pm UTC](https://discuss.elastic.co/t/kibana-chart-x-axis-customization-issue/139820 "2018-07-17T19:59:48Z")
I have a vertical bar chart. X-axis is the Date Histogram Aggregation on timestamp. Interval is Daily. However, the labels are automatically generated and not matching the column very well. Is there a way to change th… --- ## [Kibana not showing Netflow data?](https://discuss.elastic.co/t/kibana-not-showing-netflow-data/33467)
**Author:** [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Replies:** 6\ **Last updated:** [November 1, 2015, 10:09pm UTC](https://discuss.elastic.co/t/kibana-not-showing-netflow-data/33467 "2015-11-01T22:09:32Z")
I've been struggling attempting to prove out the ELK stack with a particular input. I've successfully setup all of the latest versions thinking that was my issue to no avail. Here's what i have. On a single box (linu… --- ## [Setting up elasticsearch.yml for Discovery](https://discuss.elastic.co/t/setting-up-elasticsearch-yml-for-discovery/4310)
**Author:** [@Thor](https://discuss.elastic.co/u/Thor)\ **Replies:** 6\ **Last updated:** [July 1, 2011, 6:19am UTC](https://discuss.elastic.co/t/setting-up-elasticsearch-yml-for-discovery/4310 "2011-07-01T06:19:18Z")
Greetings for Norway! Question for the kind folks, I am a new to ES. I am using RHEL Here is my YML file... I have two nodes, but when they startup they are not seeing each other, and electing themselves as mas… --- ## [Permission to give permission to Indices](https://discuss.elastic.co/t/permission-to-give-permission-to-indices/262253)
**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\ **Replies:** 4\ **Last updated:** [January 29, 2021, 5:57am UTC](https://discuss.elastic.co/t/permission-to-give-permission-to-indices/262253 "2021-01-29T05:57:07Z")
Hi! I was wondering - is it possible to give someone permission to read some indices AND also a permission to give read-only permissions to other users? My point is: I have 5 indices and 5 people, each person has permi… --- ## [Elasticsearch doesn't find bundled JDK](https://discuss.elastic.co/t/elasticsearch-doesnt-find-bundled-jdk/186962)
**Author:** [@dandago](https://discuss.elastic.co/u/dandago)\ **Replies:** 4\ **Last updated:** [July 9, 2019, 8:25pm UTC](https://discuss.elastic.co/t/elasticsearch-doesnt-find-bundled-jdk/186962 "2019-07-09T20:25:24Z")
I've just downloaded Elasticsearch 7.1.1 and am trying it out on Windows 10. Just today I learned that 7.0+ comes with a bundled JDK, so I decided to give it a try without setting JAVA\_HOME. However, it cannot find the J… --- ## [Logstash syslog output format](https://discuss.elastic.co/t/logstash-syslog-output-format/185834)
**Author:** [@vld53](https://discuss.elastic.co/u/vld53)\ **Replies:** 5\ **Last updated:** [June 14, 2019, 11:36am UTC](https://discuss.elastic.co/t/logstash-syslog-output-format/185834 "2019-06-14T11:36:23Z")
Hello guys! I have question about syslog output plugin. Configuration: output { if "mail" in \[tags\] { syslog { facility =\> "local0" host =\> "192.168.0.3… --- ## [Logstash adding tag issue](https://discuss.elastic.co/t/logstash-adding-tag-issue/250787)
**Author:** [@Ashish\_Jindal](https://discuss.elastic.co/u/Ashish_Jindal)\ **Replies:** 7\ **Last updated:** [October 12, 2020, 4:35am UTC](https://discuss.elastic.co/t/logstash-adding-tag-issue/250787 "2020-10-12T04:35:33Z")
We had given a task as Try adding tag A if the data read is a. a b a c d Ensure that the input data is tagged with type as a test, and write the output to the file output.txt in the path usr/share/logstash . For whi… --- ## [How to update index in Elasticsearch](https://discuss.elastic.co/t/how-to-update-index-in-elasticsearch/275773)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 6\ **Last updated:** [June 16, 2021, 7:14pm UTC](https://discuss.elastic.co/t/how-to-update-index-in-elasticsearch/275773 "2021-06-16T19:14:37Z")
Hi All, I have an ELK 7.6.2 stack running in the environment. In my setup logstash is set to ingest file as an input and performs certain operations on it and creates an index in ES. First few lines of the logstash co… --- ## [How to access \_id from Painless in Query context?](https://discuss.elastic.co/t/how-to-access-id-from-painless-in-query-context/155211)
**Author:** [@m9aertner](https://discuss.elastic.co/u/m9aertner)\ **Replies:** 2\ **Last updated:** [November 6, 2018, 10:45am UTC](https://discuss.elastic.co/t/how-to-access-id-from-painless-in-query-context/155211 "2018-11-06T10:45:49Z")
I would like to sanity-check indexed data. Is it possible to access the \_id field in a Painless script condition, in query context? That is, something like (ES 5.3.x): { "query": { "bool": { "must": \[ … --- ## [Global variables in LS possible?](https://discuss.elastic.co/t/global-variables-in-ls-possible/75043)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 2\ **Last updated:** [February 14, 2017, 2:51pm UTC](https://discuss.elastic.co/t/global-variables-in-ls-possible/75043 "2017-02-14T14:51:14Z")
So I'm an amateur ruby user and I'm trying to figure this out, but a bit hard trying to mesh my limited ruby knowledge and trying to incorporate it with how the ruby plugin works in logstash. I'd like to somehow save a… --- ## [Extract data from { }](https://discuss.elastic.co/t/extract-data-from/107862)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 5\ **Last updated:** [November 21, 2017, 2:48am UTC](https://discuss.elastic.co/t/extract-data-from/107862 "2017-11-21T02:48:35Z")
Hi, I'm struggling with parsing Fortigate logs. Right now I got up to the point where I got all log data within a field marked with { logdata }. I'm using a grok filter and a KV filter after that. The problem with the … --- ## [Text VS Keyword](https://discuss.elastic.co/t/text-vs-keyword/137532)
**Author:** [@safhw91](https://discuss.elastic.co/u/safhw91)\ **Replies:** 3\ **Last updated:** [June 27, 2018, 3:56am UTC](https://discuss.elastic.co/t/text-vs-keyword/137532 "2018-06-27T03:56:15Z")
I am going to set my string as not indexed by elastic via mapping. So I do not need ANY search, aggregation, etc, whatsoever for certain strings. I just need the string to come out together with other data when I search… [Previous page](https://discuss.elastic.co/top.md?page=578&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=580&per_page=50&period=all)