# Top

**URL:** https://discuss.elastic.co/top.md?page=582&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 583

---

## ["uuid" and "fingerprint" fields](https://discuss.elastic.co/t/uuid-and-fingerprint-fields/58794)

<div class="topic-metadata">

**Author:** [@gayathri](https://discuss.elastic.co/u/gayathri)\
**Replies:** 7\
**Last updated:** [August 24, 2016, 11:35am UTC](https://discuss.elastic.co/t/uuid-and-fingerprint-fields/58794 "2016-08-24T11:35:04Z")

</div>

Hi Team, I am using below configuration in logstash.conf for avoiding duplicate log entries: filter{ uuid { target =\> "@uuid" overwrite =\> true } fingerprint { source =\> \["message"\] target =\> "fingerp…

---

## [Elasticsearch 5.0.0 installation error (error='Cannot allocate memory' (errno=12))](https://discuss.elastic.co/t/elasticsearch-5-0-0-installation-error-error-cannot-allocate-memory-errno-12/64995)

<div class="topic-metadata">

**Author:** [@Hilal](https://discuss.elastic.co/u/Hilal)\
**Replies:** 2\
**Last updated:** [November 4, 2016, 2:55pm UTC](https://discuss.elastic.co/t/elasticsearch-5-0-0-installation-error-error-cannot-allocate-memory-errno-12/64995 "2016-11-04T14:55:06Z")

</div>

Hi, I want to installation ES 5.0.0 on CEntos 6.7 I installed jdk 8u73 sudo yum install jdk-8u73-linux-x64.rpm and I installed ES 5.0.0 sudo yum install elasticsearch-5.0.0.rpm and /bin/elasticsearch my…

---

## [Kibana won't start after upgrade to 7.8.0](https://discuss.elastic.co/t/kibana-wont-start-after-upgrade-to-7-8-0/237819)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 8\
**Last updated:** [June 23, 2020, 2:00pm UTC](https://discuss.elastic.co/t/kibana-wont-start-after-upgrade-to-7-8-0/237819 "2020-06-23T14:00:12Z")

</div>

I apply this to three node cluster all of them are master/data/kibana two of them starts up kibana without any problem one does not. it do not even puts any log on log file or on screen systemctl status kibana ● kib…

---

## [Kibana dashboard only User](https://discuss.elastic.co/t/kibana-dashboard-only-user/194155)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 8\
**Last updated:** [August 23, 2019, 10:06am UTC](https://discuss.elastic.co/t/kibana-dashboard-only-user/194155 "2019-08-23T10:06:59Z")

</div>

Hi, I have setup kibana 7.3 i need some of my teammates to view only the kibana dashboard so i created the new user and assigned role as kibana dashboard only user the user was successfully created.When they login login…

---

## [Output email plugin](https://discuss.elastic.co/t/output-email-plugin/89580)

<div class="topic-metadata">

**Author:** [@baha1](https://discuss.elastic.co/u/baha1)\
**Replies:** 8\
**Last updated:** [June 15, 2017, 9:32pm UTC](https://discuss.elastic.co/t/output-email-plugin/89580 "2017-06-15T21:32:42Z")

</div>

Hi there i want to use email plugin.i get this error: Cannot create pipeline {:reason=\>"Couldn't find any output plugin named 'email' this is pipeline.conf: output { if "ERROR" in \[LEVEL\] { elasticsearch { hosts…

---

## [Elasticsearch 2.1.1 on localhost Java client error MasterNotDiscoveredException waited for 30s](https://discuss.elastic.co/t/elasticsearch-2-1-1-on-localhost-java-client-error-masternotdiscoveredexception-waited-for-30s/39294)

<div class="topic-metadata">

**Author:** [@Jigar\_Gosar](https://discuss.elastic.co/u/Jigar_Gosar)\
**Replies:** 4\
**Last updated:** [February 5, 2016, 6:57am UTC](https://discuss.elastic.co/t/elasticsearch-2-1-1-on-localhost-java-client-error-masternotdiscoveredexception-waited-for-30s/39294 "2016-02-05T06:57:33Z")

</div>

So on my localmachine, with latest version of elasticsearch, java client node doesn't receive any information regarding masternode. And disconnects. I have tried the following code even with default configuration. And …

---

## [Issue with conditionals in logstash with fields from Kafka ----\> FileBeat prospectors](https://discuss.elastic.co/t/issue-with-conditionals-in-logstash-with-fields-from-kafka-filebeat-prospectors/67217)

<div class="topic-metadata">

**Author:** [@rodher](https://discuss.elastic.co/u/rodher)\
**Replies:** 0\
**Last updated:** [November 25, 2016, 8:15pm UTC](https://discuss.elastic.co/t/issue-with-conditionals-in-logstash-with-fields-from-kafka-filebeat-prospectors/67217 "2016-11-25T20:15:17Z")

</div>

Hello experts I have the following scenario: FileBeat ----\> Kafka -----\> Logstash -----\> Elastic ----\> Kibana In Filebeat I have 2 prospectors the in YML file,,. and I've added some fields to identify in logstash t…

---

## [How to calculate daily new users to a website](https://discuss.elastic.co/t/how-to-calculate-daily-new-users-to-a-website/186214)

<div class="topic-metadata">

**Author:** [@Havana](https://discuss.elastic.co/u/Havana)\
**Replies:** 3\
**Last updated:** [June 24, 2019, 11:32pm UTC](https://discuss.elastic.co/t/how-to-calculate-daily-new-users-to-a-website/186214 "2019-06-24T23:32:45Z")

</div>

We're using Elasticsearch to visualize our website usage data. Each day there are new users coming into our website. How can I calculate the number of new users and visualize it with a line graph?

---

## [Using keyword type for mapping](https://discuss.elastic.co/t/using-keyword-type-for-mapping/137535)

<div class="topic-metadata">

**Author:** [@ybegus](https://discuss.elastic.co/u/ybegus)\
**Replies:** 6\
**Last updated:** [July 3, 2018, 1:51am UTC](https://discuss.elastic.co/t/using-keyword-type-for-mapping/137535 "2018-07-03T01:51:33Z")

</div>

I cxreate indices on daily base. I use the same mapping types for all of them. Mapping contains 23 fields. 6 of them are keyword. Also I prepared index pattern to process them together. I coilected data for several days…

---

## [Need a Logstash filter to query a rest api/tcp on conditional statement and return JSON response](https://discuss.elastic.co/t/need-a-logstash-filter-to-query-a-rest-api-tcp-on-conditional-statement-and-return-json-response/178819)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 5\
**Last updated:** [April 29, 2019, 7:47pm UTC](https://discuss.elastic.co/t/need-a-logstash-filter-to-query-a-rest-api-tcp-on-conditional-statement-and-return-json-response/178819 "2019-04-29T19:47:13Z")

</div>

hi, i'd love some help, i've googled all i know to google, read the logstash documents.. and i'm still not finding what i need. i am bringing in a ton of logs from various sources dealing with network traffic. i'd like …

---

## [Kibana user count based on start and end date](https://discuss.elastic.co/t/kibana-user-count-based-on-start-and-end-date/101700)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 5\
**Last updated:** [September 28, 2017, 6:20am UTC](https://discuss.elastic.co/t/kibana-user-count-based-on-start-and-end-date/101700 "2017-09-28T06:20:18Z")

</div>

hi all , i want to create visual which show number of user login based on start or end time in say 30 minute bucket for example if one user login 10 and logout 10.30 so graph whould show 10-10.30 1 10.30 - 10.45 …

---

## [Help with Netflow Configuration](https://discuss.elastic.co/t/help-with-netflow-configuration/79387)

<div class="topic-metadata">

**Author:** [@BenoitJ76](https://discuss.elastic.co/u/BenoitJ76)\
**Replies:** 5\
**Last updated:** [March 22, 2017, 1:15pm UTC](https://discuss.elastic.co/t/help-with-netflow-configuration/79387 "2017-03-22T13:15:26Z")

</div>

Hello, First, I have this error : "\[2017-03-21T11:36:33,543\]\[WARN \]\[logstash.codecs.netflow \] No matching template for flow id 260" I read a lot of topics about that but I don't know how to solve this. Then, I trie…

---

## [How to monitor for filter cache churn?](https://discuss.elastic.co/t/how-to-monitor-for-filter-cache-churn/15439)

<div class="topic-metadata">

**Author:** [@Tikitu\_de\_Jager](https://discuss.elastic.co/u/Tikitu_de_Jager)\
**Replies:** 5\
**Last updated:** [January 28, 2014, 8:22pm UTC](https://discuss.elastic.co/t/how-to-monitor-for-filter-cache-churn/15439 "2014-01-28T20:22:03Z")

</div>

Hi folks, I'm optimising our queries based on the advice in Zachary Tong's presentation: https://speakerdeck.com/polyfractal/elasticsearch-query-optimization So far just switching all our query elements to filt…

---

## [Can't set up ES service on CentOS 7](https://discuss.elastic.co/t/cant-set-up-es-service-on-centos-7/289)

<div class="topic-metadata">

**Author:** [@davisjs](https://discuss.elastic.co/u/davisjs)\
**Replies:** 2\
**Last updated:** [May 6, 2015, 11:28pm UTC](https://discuss.elastic.co/t/cant-set-up-es-service-on-centos-7/289 "2015-05-06T23:28:52Z")

</div>

I've had success with older versions of ElasticSearch (1.0.x) on Fedora. I now need to install ES 1.5 on CentOS 7. Getting ES to run on CentOS 7 is easy but I'm having trouble running it as a service. I'm aware of the fo…

---

## [Help with watcher alert configuration in Kibana](https://discuss.elastic.co/t/help-with-watcher-alert-configuration-in-kibana/174154)

<div class="topic-metadata">

**Author:** [@Josip\_Cagalj](https://discuss.elastic.co/u/Josip_Cagalj)\
**Replies:** 7\
**Last updated:** [April 3, 2019, 2:20pm UTC](https://discuss.elastic.co/t/help-with-watcher-alert-configuration-in-kibana/174154 "2019-04-03T14:20:42Z")

</div>

Hi, this is my first post so yes I'm a noob who just recently started with ELK. I'm trying to set up an advanced watcher in Kibana. Let's say I have one index 'store' which contains documents with fields e.g. 'amountSpe…

---

## [Confused about interaction between unique count and buckets](https://discuss.elastic.co/t/confused-about-interaction-between-unique-count-and-buckets/49243)

<div class="topic-metadata">

**Author:** [@Fran\_Fabrizio](https://discuss.elastic.co/u/Fran_Fabrizio)\
**Replies:** 7\
**Last updated:** [May 7, 2016, 9:17am UTC](https://discuss.elastic.co/t/confused-about-interaction-between-unique-count-and-buckets/49243 "2016-05-07T09:17:32Z")

</div>

Let's say I set my time range to be 2013-01-01 00:00:00.000 to 2013-01-31 23:59:59.999 (entire month of January 2013). Then I do a line graph visualization and keep the default y-axis setup which is a count of \_all docu…

---

## [New used memory \[6.4gb\] for data of \[\<reused\_arrays\>\] would be larger than configured breaker](https://discuss.elastic.co/t/new-used-memory-6-4gb-for-data-of-reused-arrays-would-be-larger-than-configured-breaker/51643)

<div class="topic-metadata">

**Author:** [@vin01](https://discuss.elastic.co/u/vin01)\
**Replies:** 2\
**Last updated:** [June 3, 2016, 3:41pm UTC](https://discuss.elastic.co/t/new-used-memory-6-4gb-for-data-of-reused-arrays-would-be-larger-than-configured-breaker/51643 "2016-06-03T15:41:00Z")

</div>

Elasticsearch version 2.3.1. For searches which include heavy aggregation over long period of time (1 year data in this case), i start getting :- WARN request:143 - \[request\] New used memory 6915236168 \[6.4gb\] for d…

---

## [Creating a subquery - similar to SQL "not in or not exists"](https://discuss.elastic.co/t/creating-a-subquery-similar-to-sql-not-in-or-not-exists/51017)

<div class="topic-metadata">

**Author:** [@Lori](https://discuss.elastic.co/u/Lori)\
**Replies:** 5\
**Last updated:** [May 31, 2016, 6:35pm UTC](https://discuss.elastic.co/t/creating-a-subquery-similar-to-sql-not-in-or-not-exists/51017 "2016-05-31T18:35:19Z")

</div>

Hello. I am using Kibana 4.5. I am trying to create a new custom filter based on a condition of another query. For example, values in query 1 -\> animal: cat dog pig horse rabbit bird Now, in query 2, I will select fr…

---

## ["Lumberjack input: the pipeline is blocked"](https://discuss.elastic.co/t/lumberjack-input-the-pipeline-is-blocked/31645)

<div class="topic-metadata">

**Author:** [@Mark\_van\_Rossum](https://discuss.elastic.co/u/Mark_van_Rossum)\
**Replies:** 6\
**Last updated:** [November 19, 2015, 10:24pm UTC](https://discuss.elastic.co/t/lumberjack-input-the-pipeline-is-blocked/31645 "2015-11-19T22:24:08Z")

</div>

I have a basic ELK stack with Lumberjack shipping data into Logstash, and then to Elasticsearch. Versions: Logstash :1.5.3 Elasticsearch 1.7.0 I'm getting the errors below logged a lot in logstash.log. {:timestamp…

---

## [Custom ECS to Index Template](https://discuss.elastic.co/t/custom-ecs-to-index-template/245638)

<div class="topic-metadata">

**Author:** [@jakobdoering](https://discuss.elastic.co/u/jakobdoering)\
**Replies:** 7\
**Last updated:** [August 31, 2020, 4:05pm UTC](https://discuss.elastic.co/t/custom-ecs-to-index-template/245638 "2020-08-31T16:05:54Z")

</div>

Hi, we extended ECS for a specific use case where logstash is used to read some CSV, filter the data to match the custom ECS Extension and then send the data to elasticsearch. I am now wondering how to transfer my ECS e…

---

## [ドキュメント作成時に@timestampに現在日時を埋め込む方法](https://discuss.elastic.co/t/timestamp/275513)

<div class="topic-metadata">

**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\
**Replies:** 2\
**Last updated:** [June 14, 2021, 5:56am UTC](https://discuss.elastic.co/t/timestamp/275513 "2021-06-14T05:56:36Z")

</div>

以下のURLを参照しています インデックス作成APIを実行する際、タイムスタンプ型のフィールドに現在時刻を設定する方法があればご教示頂けないでしょうか？ 以下の例でいうと、@timestampフィールドに現在時刻を設定したいです PUT my-index-000001/\_doc/1?timeout=5m { "@timestamp": "2099-11-15T13:12:00", "message": "GET /sea…

---

## [Consistent Pie Colors](https://discuss.elastic.co/t/consistent-pie-colors/133095)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 3\
**Last updated:** [May 24, 2018, 5:23pm UTC](https://discuss.elastic.co/t/consistent-pie-colors/133095 "2018-05-24T17:23:33Z")

</div>

I find my self almost daily adapting the colors of buckets in my pie charts. They keep changing "magically". In one example it's just different between a pie in the dashboard and that same visualisation viewed on it's o…

---

## [org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes/135571)

<div class="topic-metadata">

**Author:** [@Carlos\_Palomares](https://discuss.elastic.co/u/Carlos_Palomares)\
**Replies:** 1\
**Last updated:** [June 21, 2018, 5:28pm UTC](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes/135571 "2018-06-21T17:28:36Z")

</div>

We have a problem with the library elastic for hadoop in sparkSQL with scala, Everything is working perfectly when we save a RDD in a specific index into of the cluster: 3 nodes with 16GB of ran everyone configuration…

---

## [Filebeat to Elasticsearch log shipping is very slow](https://discuss.elastic.co/t/filebeat-to-elasticsearch-log-shipping-is-very-slow/135570)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 8\
**Last updated:** [June 25, 2018, 6:57am UTC](https://discuss.elastic.co/t/filebeat-to-elasticsearch-log-shipping-is-very-slow/135570 "2018-06-25T06:57:57Z")

</div>

Hi, I have found some posts on this before. But, have not got a definitive answer with respect to Beats 6.x as spool\_size has been removed. The following tests have been performed on Filebeat 6.x Elasticsearch 6.2.4 …

---

## [Logstash does nothing for valid json input](https://discuss.elastic.co/t/logstash-does-nothing-for-valid-json-input/77595)

<div class="topic-metadata">

**Author:** [@tushartyagi](https://discuss.elastic.co/u/tushartyagi)\
**Replies:** 8\
**Last updated:** [March 7, 2017, 7:28am UTC](https://discuss.elastic.co/t/logstash-does-nothing-for-valid-json-input/77595 "2017-03-07T07:28:03Z")

</div>

Hi, Since yesterday I am trying to work with logstash but I am not able to make much progress. I have some sentiment data in json which I am trying to read in. If there is a syntax error in the file, or if I use "jso…

---

## [Using Point To Point in Maps](https://discuss.elastic.co/t/using-point-to-point-in-maps/206108)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [November 1, 2019, 3:05pm UTC](https://discuss.elastic.co/t/using-point-to-point-in-maps/206108 "2019-11-01T15:05:58Z")

</div>

I have an index with multiple geo\_point data types that I'd like to visualize in Maps using the new point to point data source. However, it tells me Selected index pattern does not contain source and destination fields. …

---

## [How to export the data from discover menu?](https://discuss.elastic.co/t/how-to-export-the-data-from-discover-menu/38517)

<div class="topic-metadata">

**Author:** [@Rahul](https://discuss.elastic.co/u/Rahul)\
**Replies:** 2\
**Last updated:** [January 14, 2016, 8:59pm UTC](https://discuss.elastic.co/t/how-to-export-the-data-from-discover-menu/38517 "2016-01-14T20:59:53Z")

</div>

Hi, We have added saved search component created through Discover menu on our dashboard, but now we have requirement to export the data from this search result. Is there any way we can have export available for search …

---

## [How can i improve accuracy of term aggregation?](https://discuss.elastic.co/t/how-can-i-improve-accuracy-of-term-aggregation/127588)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 3\
**Last updated:** [April 12, 2018, 12:45pm UTC](https://discuss.elastic.co/t/how-can-i-improve-accuracy-of-term-aggregation/127588 "2018-04-12T12:45:03Z")

</div>

Hello, I am creating visualizations in which term aggregation is not showing accurate values. How can i increase accuracy and make it exact value so that i can have proper visualization? Thank You, Meet

---

## [Reading encrypted Avro records, do I need a new codec?](https://discuss.elastic.co/t/reading-encrypted-avro-records-do-i-need-a-new-codec/123291)

<div class="topic-metadata">

**Author:** [@JacksonBailey](https://discuss.elastic.co/u/JacksonBailey)\
**Replies:** 3\
**Last updated:** [March 15, 2018, 5:09pm UTC](https://discuss.elastic.co/t/reading-encrypted-avro-records-do-i-need-a-new-codec/123291 "2018-03-15T17:09:28Z")

</div>

Previously we have read from Kafka topics containing Avro records using the avro codec and Avro records using Confluent Schema Registry using the avro\_schema\_registry codec. Now, we have encrypted Kafka messages. Our en…

---

## [Logstash date conversion from string to date not working](https://discuss.elastic.co/t/logstash-date-conversion-from-string-to-date-not-working/123699)

<div class="topic-metadata">

**Author:** [@ahir](https://discuss.elastic.co/u/ahir)\
**Replies:** 3\
**Last updated:** [March 13, 2018, 12:42pm UTC](https://discuss.elastic.co/t/logstash-date-conversion-from-string-to-date-not-working/123699 "2018-03-13T12:42:12Z")

</div>

Hi, I am a beginner in the elastic stack. I have a CSV file, contents of which I want to load into elastic search. In the CSV there is a "date" column which has dates in the following format: 2/27/2018 M/d/yyyy I am …

---

## [Timeout exception with many time-based indices after 00:00](https://discuss.elastic.co/t/timeout-exception-with-many-time-based-indices-after-00-00/63340)

<div class="topic-metadata">

**Author:** [@ogibayashi](https://discuss.elastic.co/u/ogibayashi)\
**Replies:** 5\
**Last updated:** [October 20, 2016, 4:41am UTC](https://discuss.elastic.co/t/timeout-exception-with-many-time-based-indices-after-00-00/63340 "2016-10-20T04:41:26Z")

</div>

Hello, I am putting various kind of logs into Elasticsearch with daily time-based index (somedata-YYYY.MM.DD). Recently, I have started to put many other kind of logs into ES, then ES started to logs many ProcessClust…

---

## [Kibana Offline Maps](https://discuss.elastic.co/t/kibana-offline-maps/101056)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 1\
**Last updated:** [September 19, 2017, 6:53pm UTC](https://discuss.elastic.co/t/kibana-offline-maps/101056 "2017-09-19T18:53:47Z")

</div>

Hi, How can we use Kibana Offline map ? I am running ELK on an offline server (no internet connectivity). When try to create a coordinate map using the lat/long values in my logs , I encounter the following issue: "Coo…

---

## [Average sum calculation in kibana](https://discuss.elastic.co/t/average-sum-calculation-in-kibana/58648)

<div class="topic-metadata">

**Author:** [@vandana\_sethi](https://discuss.elastic.co/u/vandana_sethi)\
**Replies:** 3\
**Last updated:** [June 1, 2017, 3:00pm UTC](https://discuss.elastic.co/t/average-sum-calculation-in-kibana/58648 "2017-06-01T15:00:36Z")

</div>

hello I have created a metric that shows sum of a field . It is for calculating revenue now I want to create a one more metric that will show the average of revenue not the average of that field . I am confused how can i…

---

## [Network data with Logstash and Packetbeat](https://discuss.elastic.co/t/network-data-with-logstash-and-packetbeat/51514)

<div class="topic-metadata">

**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\
**Replies:** 8\
**Last updated:** [June 2, 2016, 3:19am UTC](https://discuss.elastic.co/t/network-data-with-logstash-and-packetbeat/51514 "2016-06-02T03:19:04Z")

</div>

I have configured packetbeat to send data to logstash and I have setup a conf file in logstash; however, seems nothing is generated, can anyone advise me for how to collect network data with packetbeat and logstash? in…

---

## [Single index has multi shard or multi index has single shard](https://discuss.elastic.co/t/single-index-has-multi-shard-or-multi-index-has-single-shard/102801)

<div class="topic-metadata">

**Author:** [@gangxiong\_chen](https://discuss.elastic.co/u/gangxiong_chen)\
**Replies:** 7\
**Last updated:** [October 5, 2017, 11:08am UTC](https://discuss.elastic.co/t/single-index-has-multi-shard-or-multi-index-has-single-shard/102801 "2017-10-05T11:08:00Z")

</div>

assume all data are same, data count is 100,000,000 single index has multi shard( plan A) multi index has single shard( plan B) both without replica when indexing, plan A single index name INDEX\_LOG has 5shard …

---

## [Unable to write matching date pattern in log stash](https://discuss.elastic.co/t/unable-to-write-matching-date-pattern-in-log-stash/52544)

<div class="topic-metadata">

**Author:** [@Sri\_ram](https://discuss.elastic.co/u/Sri_ram)\
**Replies:** 7\
**Last updated:** [June 16, 2016, 6:27am UTC](https://discuss.elastic.co/t/unable-to-write-matching-date-pattern-in-log-stash/52544 "2016-06-16T06:27:10Z")

</div>

Hi, I would like to match the date \[Mon Apr 4 12:23:30 CDT 2016\] in my log file. I tried: filter { grok { match =\> \[ "message", "(?%{DAY} %{MONTH} %{MONTHDAY} %{TIME} %{YEAR})" \] } date { …

---

## [Does Elasticsearch \_ in between the field name?](https://discuss.elastic.co/t/does-elasticsearch---in-between-the-field-name/65786)

<div class="topic-metadata">

**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\
**Replies:** 4\
**Last updated:** [November 11, 2016, 2:39pm UTC](https://discuss.elastic.co/t/does-elasticsearch---in-between-the-field-name/65786 "2016-11-11T14:39:53Z")

</div>

master\_deal\_no is my field name while I'm trying to create mapping it throwing me mapper parsing exception.

---

## [WARN elasticsearch/client.go:520 Cannot index event publisher.Event](https://discuss.elastic.co/t/warn-elasticsearch-client-go-520-cannot-index-event-publisher-event/155683)

<div class="topic-metadata">

**Author:** [@gp4004](https://discuss.elastic.co/u/gp4004)\
**Replies:** 1\
**Last updated:** [November 8, 2018, 8:37am UTC](https://discuss.elastic.co/t/warn-elasticsearch-client-go-520-cannot-index-event-publisher-event/155683 "2018-11-08T08:37:50Z")

</div>

Hi, I have the following issue since in the APM logs 2 days : 2018-11-06T09:34:13.816Z WARN elasticsearch/client.go:520 Cannot index event publisher.Event{Content:beat.Event{Timestamp:time.Time{wall:0x35495b80, ext:63…

---

## [7.0.1: template with geo\_point + geoip processor in pipeline + bulk = crash](https://discuss.elastic.co/t/7-0-1-template-with-geo-point-geoip-processor-in-pipeline-bulk-crash/182039)

<div class="topic-metadata">

**Author:** [@dperetti](https://discuss.elastic.co/u/dperetti)\
**Replies:** 6\
**Last updated:** [May 25, 2019, 10:19am UTC](https://discuss.elastic.co/t/7-0-1-template-with-geo-point-geoip-processor-in-pipeline-bulk-crash/182039 "2019-05-25T10:19:05Z")

</div>

I'm encountering a similar issue as: I'm sending logs from kubernetes using fluent-bit to an ES pipeline with a geoip processor. PUT \_ingest/pipeline/geoip { "description": "Ingest nginx-ingress logs", "processors…

---

## [Kibana Visualization Column Name](https://discuss.elastic.co/t/kibana-visualization-column-name/129407)

<div class="topic-metadata">

**Author:** [@Dhanashree](https://discuss.elastic.co/u/Dhanashree)\
**Replies:** 7\
**Last updated:** [May 23, 2018, 7:40pm UTC](https://discuss.elastic.co/t/kibana-visualization-column-name/129407 "2018-05-23T19:40:03Z")

</div>

Hi, I wish to edit column names in saved search in kibana 6.2.2. I tried creating a data table visualization but there i am getting count as a default column which is not needed as per my requirements. Is it possible to…

---

## [Unable to create index in Elastic search using API](https://discuss.elastic.co/t/unable-to-create-index-in-elastic-search-using-api/233446)

<div class="topic-metadata">

**Author:** [@rupini](https://discuss.elastic.co/u/rupini)\
**Replies:** 3\
**Last updated:** [May 21, 2020, 12:24am UTC](https://discuss.elastic.co/t/unable-to-create-index-in-elastic-search-using-api/233446 "2020-05-21T00:24:59Z")

</div>

Hi, I am trying to create index in Elastic search using API in Kibana dev tools. PUT /ipflow-logs { "ipflow-logs" : { "mappings" : { "properties" : { "conn\_state" : { "type" : "keyword" …

---

## [HELP... How to Increase bulk Index rate performance - 15 Node Elasticsearch Cluster (error 429)](https://discuss.elastic.co/t/help-how-to-increase-bulk-index-rate-performance-15-node-elasticsearch-cluster-error-429/68056)

<div class="topic-metadata">

**Author:** [@jeriel20](https://discuss.elastic.co/u/jeriel20)\
**Replies:** 3\
**Last updated:** [December 7, 2016, 11:59am UTC](https://discuss.elastic.co/t/help-how-to-increase-bulk-index-rate-performance-15-node-elasticsearch-cluster-error-429/68056 "2016-12-07T11:59:55Z")

</div>

Need Help! How do I increase bulk index rate/throughput to my cluster? Elasticsearch keeps throttling back sending 429 errors seen from Logstash debug logs. What settings do I need to tweak in either Elasticsearch or l…

---

## [Large CSV export issue](https://discuss.elastic.co/t/large-csv-export-issue/245976)

<div class="topic-metadata">

**Author:** [@adnanahmed](https://discuss.elastic.co/u/adnanahmed)\
**Replies:** 4\
**Last updated:** [August 27, 2020, 10:09am UTC](https://discuss.elastic.co/t/large-csv-export-issue/245976 "2020-08-27T10:09:45Z")

</div>

Hi Friends, we are using ELK 7.9 version. We are having problem with CSV export of "Saved search" through our Dashboard, it got hanged if size of CSV gets more than 150 MB nevertheless we are able to export c…

---

## [What is the best OS to install ELK](https://discuss.elastic.co/t/what-is-the-best-os-to-install-elk/219659)

<div class="topic-metadata">

**Author:** [@kumar4](https://discuss.elastic.co/u/kumar4)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 8:06pm UTC](https://discuss.elastic.co/t/what-is-the-best-os-to-install-elk/219659 "2020-02-17T20:06:56Z")

</div>

i have two servers (with similar CPU, RAM and storage but diffrent OS) one with unix and the other with microsoft Windows, i want to know what is the suitable OS fot installing ELK in terms of performance and security t…

---

## [Kubernetes Helm Chart with multiple PV for data path](https://discuss.elastic.co/t/kubernetes-helm-chart-with-multiple-pv-for-data-path/190438)

<div class="topic-metadata">

**Author:** [@tgruenert](https://discuss.elastic.co/u/tgruenert)\
**Replies:** 2\
**Last updated:** [August 19, 2019, 7:25am UTC](https://discuss.elastic.co/t/kubernetes-helm-chart-with-multiple-pv-for-data-path/190438 "2019-08-19T07:25:12Z")

</div>

Hi there, is there any template or solution for defining multiple data paths within a helm chart? The question is not only about the env variable, which i am able to handle. The problem is more about defining extra vo…

---

## ["unable to install test security manager" when using ESTestCase](https://discuss.elastic.co/t/unable-to-install-test-security-manager-when-using-estestcase/150031)

<div class="topic-metadata">

**Author:** [@uwieuwe4](https://discuss.elastic.co/u/uwieuwe4)\
**Replies:** 6\
**Last updated:** [November 5, 2018, 8:36pm UTC](https://discuss.elastic.co/t/unable-to-install-test-security-manager-when-using-estestcase/150031 "2018-11-05T20:36:52Z")

</div>

I am testing my code using ESTestCase. When running the test I get the following error: java.lang.RuntimeException: unable to install test security manager at org.elasticsearch.bootstrap.BootstrapForTesting.\<clinit\>(B…

---

## [How to grep number](https://discuss.elastic.co/t/how-to-grep-number/89696)

<div class="topic-metadata">

**Author:** [@Aris\_Pratama](https://discuss.elastic.co/u/Aris_Pratama)\
**Replies:** 6\
**Last updated:** [June 19, 2017, 3:42am UTC](https://discuss.elastic.co/t/how-to-grep-number/89696 "2017-06-19T03:42:10Z")

</div>

hey all, i have log message: Jun 16 18:09:12 mail postfix/qmgr\[30910\]: 63F9C18BE69: from=root@test.srv, size=1116, nrcpt=1 (queue active) but i only want to grep the number after word "size=" , is there any solutio…

---

## [Plugin not found](https://discuss.elastic.co/t/plugin-not-found/73472)

<div class="topic-metadata">

**Author:** [@pjanzen](https://discuss.elastic.co/u/pjanzen)\
**Replies:** 6\
**Last updated:** [February 1, 2017, 9:28am UTC](https://discuss.elastic.co/t/plugin-not-found/73472 "2017-02-01T09:28:26Z")

</div>

Hi, I am trying to install logstash-filter-elasticsearch plugin using the following command: JARS\_DEBUG=true JARS\_VERBOSE=true DEBUG=1 bin/logstash-plugin install logstash-filter-elasticsearch The error I get is: Err…

---

## [How to check with \* wildcard condition in Logstash filter](https://discuss.elastic.co/t/how-to-check-with-wildcard-condition-in-logstash-filter/137770)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [June 28, 2018, 11:09am UTC](https://discuss.elastic.co/t/how-to-check-with-wildcard-condition-in-logstash-filter/137770 "2018-06-28T11:09:38Z")

</div>

Hi, I am using Logstash GA 6.3.0. In my Logstash, inside filter, I am checking a url like; filter{ if \[requestUrl\] == "/section1/process1" { //doing some stuff here } } This is working fine. But this w…

---

## [Pipeline with id does not exist](https://discuss.elastic.co/t/pipeline-with-id-does-not-exist/256689)

<div class="topic-metadata">

**Author:** [@Integration](https://discuss.elastic.co/u/Integration)\
**Replies:** 2\
**Last updated:** [November 26, 2020, 7:32am UTC](https://discuss.elastic.co/t/pipeline-with-id-does-not-exist/256689 "2020-11-26T07:32:37Z")

</div>

Hello, I'm trying to configure my filebeat.yml file with a pipeline that I created, and it's not working. I created the pipeline using Ingest Node Pipelines on the ElasticSearch UI. I get this error: 'pipeline with i…

[Previous page](https://discuss.elastic.co/top.md?page=581&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=583&per_page=50&period=all)
