# Top **URL:** https://discuss.elastic.co/top.md?page=583&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 584 --- ## [Logstash to Elasticsearch - SSL Connection Error](https://discuss.elastic.co/t/logstash-to-elasticsearch-ssl-connection-error/188714)
**Author:** [@Paul\_14](https://discuss.elastic.co/u/Paul_14)\ **Replies:** 2\ **Last updated:** [July 3, 2019, 2:48pm UTC](https://discuss.elastic.co/t/logstash-to-elasticsearch-ssl-connection-error/188714 "2019-07-03T14:48:30Z")
Hello, I am attempting to enable SSL encryption between Logstash and Elasticsearch but on restarting my logstash node, I receive error: \[2019-07-03T12:36:42,992\]\[DEBUG\]\[logstash.outputs.elasticsearch\] Running health c… --- ## [Suggester filter by certain condition](https://discuss.elastic.co/t/suggester-filter-by-certain-condition/189647)
**Author:** [@jslim](https://discuss.elastic.co/u/jslim)\ **Replies:** 1\ **Last updated:** [July 11, 2019, 1:15pm UTC](https://discuss.elastic.co/t/suggester-filter-by-certain-condition/189647 "2019-07-11T13:15:48Z")
Example, I have this data id title subtitle country\_id 1 Cheapest iPhone in town Lorem ipsum 123 2 iOS 13 beta released Lorem ipsum 25 3 iPadOS public beta Lorem ipsum 123 I want to get the suggestion fro… --- ## [If Condition in JSON filter](https://discuss.elastic.co/t/if-condition-in-json-filter/311456)
**Author:** [@sta02](https://discuss.elastic.co/u/sta02)\ **Replies:** 5\ **Last updated:** [August 4, 2022, 8:10pm UTC](https://discuss.elastic.co/t/if-condition-in-json-filter/311456 "2022-08-04T20:10:15Z")
Hello, I am ingesting JSON data to logstash, and I am using JSON filter. In the JSON data, when the KEY is either Value 1 or Value 2, I should add a field, and if this key is missing in the logs, I will have to drop it… --- ## [Very high CPU usage of elastic nodes](https://discuss.elastic.co/t/very-high-cpu-usage-of-elastic-nodes/121877)
**Author:** [@dboss101](https://discuss.elastic.co/u/dboss101)\ **Replies:** 5\ **Last updated:** [March 1, 2018, 1:20am UTC](https://discuss.elastic.co/t/very-high-cpu-usage-of-elastic-nodes/121877 "2018-03-01T01:20:49Z")
Hi, we are running a cluster of elasticsearch with the following specs: we run on AWS EC2's (self managed, not their Saas). 3 nodes (all do everything... data, master) each node is r4.large type (2 CPU, 15GB RAM), 8GB… --- ## [Configuracion de un cluster](https://discuss.elastic.co/t/configuracion-de-un-cluster/31869)
**Author:** [@Emiliano\_Baum](https://discuss.elastic.co/u/Emiliano_Baum)\ **Replies:** 5\ **Last updated:** [October 8, 2015, 6:28pm UTC](https://discuss.elastic.co/t/configuracion-de-un-cluster/31869 "2015-10-08T18:28:40Z")
Hola, quisiera consultar sobre cuestiones importantes a tener en cuenta para crear un cluster ES. Por lo que pude leer seria bueno tener una nodo que atienda las peticiones http, otros de almacenamiento y otro como maste… --- ## [Elasticsearch record aggregation in Power BI](https://discuss.elastic.co/t/elasticsearch-record-aggregation-in-power-bi/111374)
**Author:** [@wendt](https://discuss.elastic.co/u/wendt)\ **Replies:** 2\ **Last updated:** [December 14, 2017, 2:11pm UTC](https://discuss.elastic.co/t/elasticsearch-record-aggregation-in-power-bi/111374 "2017-12-14T14:11:09Z")
Hi there! I'm hoping someone here will have encountered a similar problem. I'm trying to query the Elasticsearch API to pull data into Power BI for visualization. What I quickly realized is that with larger datasets (\>1… --- ## [Winlogbeat and huge Windows Security Log](https://discuss.elastic.co/t/winlogbeat-and-huge-windows-security-log/64877)
**Author:** [@jameswatson3](https://discuss.elastic.co/u/jameswatson3)\ **Replies:** 2\ **Last updated:** [November 7, 2016, 1:53am UTC](https://discuss.elastic.co/t/winlogbeat-and-huge-windows-security-log/64877 "2016-11-07T01:53:34Z")
I'm on latest 5.0 Elastic version of Elastic/Logstash/Kibana/Beats and successfully using Winlogbeat to send multiple Windows server security logs to Logstash which outputs to Elasticsearch which are successfully viewabl… --- ## [Possible to use logstash to merge data from multiple files?](https://discuss.elastic.co/t/possible-to-use-logstash-to-merge-data-from-multiple-files/26653)
**Author:** [@bmonty](https://discuss.elastic.co/u/bmonty)\ **Replies:** 2\ **Last updated:** [August 4, 2015, 12:17pm UTC](https://discuss.elastic.co/t/possible-to-use-logstash-to-merge-data-from-multiple-files/26653 "2015-08-04T12:17:17Z")
I've got two files, an xml file and a csv file. When I ingest the data from the csv file I want to add\_fields from the xml file. Here's what my xml looks like \ \07.31.2015\ \ \Jo… --- ## [Graph not showing correct nodes](https://discuss.elastic.co/t/graph-not-showing-correct-nodes/249235)
**Author:** [@emahdij](https://discuss.elastic.co/u/emahdij)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 4:19pm UTC](https://discuss.elastic.co/t/graph-not-showing-correct-nodes/249235 "2020-10-08T16:19:17Z")
Hello When i add a field to a graph it doesn't show the correct nodes As you can see in below image i have five different value for 'DevName' field but when i add that to a graph it doesn't show any of them. --- ## [Rabbitmq logstash connection error](https://discuss.elastic.co/t/rabbitmq-logstash-connection-error/33479)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 4\ **Last updated:** [November 2, 2015, 6:55am UTC](https://discuss.elastic.co/t/rabbitmq-logstash-connection-error/33479 "2015-11-02T06:55:39Z")
This is my logstash.conf file. I want my output in rabbitmq server... but it showing me RABBITMQ connection Error.please help me out. input { file { path =\> "/var/log/" type =\> "syslog" } rabbitmq { hos… --- ## [Elasticsearch Service won't startup on reboot](https://discuss.elastic.co/t/elasticsearch-service-wont-startup-on-reboot/222502)
**Author:** [@edster](https://discuss.elastic.co/u/edster)\ **Replies:** 5\ **Last updated:** [March 12, 2020, 3:39pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-startup-on-reboot/222502 "2020-03-12T15:39:59Z")
Hello, We are running our elastic servers on Ubuntu 16.x servers. The services have been enabled. The version of elastic 7.2. Entire path has been included in the .service file and it was installed as a tar file. The sy… --- ## [How to filter visualization based on result of aggregate?](https://discuss.elastic.co/t/how-to-filter-visualization-based-on-result-of-aggregate/126669)
**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\ **Replies:** 2\ **Last updated:** [April 4, 2018, 6:10pm UTC](https://discuss.elastic.co/t/how-to-filter-visualization-based-on-result-of-aggregate/126669 "2018-04-04T18:10:40Z")
I'm trying to create a variety of visualizations based on aggregates. The index is holding financial transactions, and I'm looking for accounts with outstanding balances. The simplest visualization is a data table that … --- ## [Skip indexing based on field value](https://discuss.elastic.co/t/skip-indexing-based-on-field-value/107280)
**Author:** [@beng](https://discuss.elastic.co/u/beng)\ **Replies:** 6\ **Last updated:** [November 12, 2017, 3:19am UTC](https://discuss.elastic.co/t/skip-indexing-based-on-field-value/107280 "2017-11-12T03:19:34Z")
We're doing some nested indexing on an events property. Some of the events we don't need in elasticsearch and are causing for a large amount of unneeded internal documents. Is there a way to skip indexing a field based … --- ## [Help required for Kibana link redirection from Grafana](https://discuss.elastic.co/t/help-required-for-kibana-link-redirection-from-grafana/191126)
**Author:** [@akhisar](https://discuss.elastic.co/u/akhisar)\ **Replies:** 4\ **Last updated:** [August 16, 2019, 4:36am UTC](https://discuss.elastic.co/t/help-required-for-kibana-link-redirection-from-grafana/191126 "2019-08-16T04:36:03Z")
Hello Experts, I have a grafana dashboard with elastcsearch as data source showing the log ERROR/WARN "status by Group Panel". This panel provide a provision to redirect to the metric URL. I have used the below URL for … --- ## [Parsing http request in csv format](https://discuss.elastic.co/t/parsing-http-request-in-csv-format/86173)
**Author:** [@FrankC](https://discuss.elastic.co/u/FrankC)\ **Replies:** 4\ **Last updated:** [May 18, 2017, 7:45pm UTC](https://discuss.elastic.co/t/parsing-http-request-in-csv-format/86173 "2017-05-18T19:45:13Z")
Hi, I have a project that requires me to download data from Yahoo flurry in csv format. Yahoo provides the API and I have the token. I can get the data using a REST client, but I am having a hard time with the logs… --- ## [Filebeat.yml](https://discuss.elastic.co/t/filebeat-yml/87875)
**Author:** [@Vivek\_Samaga](https://discuss.elastic.co/u/Vivek_Samaga)\ **Replies:** 2\ **Last updated:** [June 1, 2017, 3:51pm UTC](https://discuss.elastic.co/t/filebeat-yml/87875 "2017-06-01T15:51:25Z")
I have migrated my filebeat to latest 5.4 and changed the filebeat.yml to latest config as below and sending output to logstash. But when i restart the filebeat service using /etc/init.d/filebeat restart it is giving the… --- ## [Logstash "sniffing" argument in the output configuration](https://discuss.elastic.co/t/logstash-sniffing-argument-in-the-output-configuration/154252)
**Author:** [@ggoodenough](https://discuss.elastic.co/u/ggoodenough)\ **Replies:** 3\ **Last updated:** [October 27, 2018, 9:41am UTC](https://discuss.elastic.co/t/logstash-sniffing-argument-in-the-output-configuration/154252 "2018-10-27T09:41:30Z")
I'm currently in the throws of implementation and come across something confusing. Hopefully one of you experts can help me out. First, my output code block which is in a separate file from the inputs: 90-ES\_output.conf … --- ## [Looking for working example data set to bulk index into ES6](https://discuss.elastic.co/t/looking-for-working-example-data-set-to-bulk-index-into-es6/128678)
**Author:** [@timogoosen](https://discuss.elastic.co/u/timogoosen)\ **Replies:** 3\ **Last updated:** [May 7, 2018, 8:30am UTC](https://discuss.elastic.co/t/looking-for-working-example-data-set-to-bulk-index-into-es6/128678 "2018-05-07T08:30:29Z")
I created a thread before, which I then closed, you can view it here: I'm looking for a sample dataset that I can index into Elasticsearch 6 using bulk indexing. I tried using this example: I downloaded the dataset,… --- ## [org.apache.lucene.index.CorruptIndexException: codec footer mismatch (file truncated?)](https://discuss.elastic.co/t/org-apache-lucene-index-corruptindexexception-codec-footer-mismatch-file-truncated/254517)
**Author:** [@Tin\_Deng](https://discuss.elastic.co/u/Tin_Deng)\ **Replies:** 2\ **Last updated:** [November 6, 2020, 1:34pm UTC](https://discuss.elastic.co/t/org-apache-lucene-index-corruptindexexception-codec-footer-mismatch-file-truncated/254517 "2020-11-06T13:34:38Z")
ES version: 5.6.8 1 master, 3 data nodes, replica = 0 Hi everyone, I was wondering if it's possible to recover the data with the exception in this case? Caused by: org.elasticsearch.gateway.CorruptStateException: org… --- ## [How to calculate timediff of two fields in the same event](https://discuss.elastic.co/t/how-to-calculate-timediff-of-two-fields-in-the-same-event/106417)
**Author:** [@Ganesh\_Venkataraman](https://discuss.elastic.co/u/Ganesh_Venkataraman)\ **Replies:** 2\ **Last updated:** [November 6, 2017, 7:58am UTC](https://discuss.elastic.co/t/how-to-calculate-timediff-of-two-fields-in-the-same-event/106417 "2017-11-06T07:58:14Z")
LOGSTASH - I would like to calculate time taken in seconds for two timestamps in the same event and store it in a different field say "e2e\_latency\_in\_seconds". The timestamps are in different format. I have successfully… --- ## [Using epoch timestamp for a date range query?](https://discuss.elastic.co/t/using-epoch-timestamp-for-a-date-range-query/25259)
**Author:** [@jpblair](https://discuss.elastic.co/u/jpblair)\ **Replies:** 2\ **Last updated:** [July 10, 2015, 7:33pm UTC](https://discuss.elastic.co/t/using-epoch-timestamp-for-a-date-range-query/25259 "2015-07-10T19:33:13Z")
I currently have a few date fields that I store as longs (epoch timestamp in seconds). When searching, I simply provide a range query with another timestamp value. This works perfectly since it's just number comparison… --- ## [Filebeat setup error](https://discuss.elastic.co/t/filebeat-setup-error/138247)
**Author:** [@eric\_Igbinosun](https://discuss.elastic.co/u/eric_Igbinosun)\ **Replies:** 6\ **Last updated:** [July 4, 2018, 4:42pm UTC](https://discuss.elastic.co/t/filebeat-setup-error/138247 "2018-07-04T16:42:27Z")
hello guys getting up filebeat after installation when i run the filebeat setup cmd, i get this error. Exiting: error loading config file: yaml : line 45: did not find '\_' indicator is it because i have not setup kiba… --- ## [Heartbeat scripts with check](https://discuss.elastic.co/t/heartbeat-scripts-with-check/85954)
**Author:** [@dodegaard](https://discuss.elastic.co/u/dodegaard)\ **Replies:** 6\ **Last updated:** [May 19, 2017, 2:45am UTC](https://discuss.elastic.co/t/heartbeat-scripts-with-check/85954 "2017-05-19T02:45:41Z")
I am wondering if Heartbeat allows us to take the HTTP response and scrape it for values or add a script that could do post-processing of the capture. I have a situation of needing to monitor pages beyond a login and ca… --- ## [Connect Rails app to elasticsearch server](https://discuss.elastic.co/t/connect-rails-app-to-elasticsearch-server/25978)
**Author:** [@Ankit\_Agarwal](https://discuss.elastic.co/u/Ankit_Agarwal)\ **Replies:** 6\ **Last updated:** [February 7, 2017, 5:22pm UTC](https://discuss.elastic.co/t/connect-rails-app-to-elasticsearch-server/25978 "2017-02-07T17:22:56Z")
Hello everyone, I am using logstash+elasticsearch to index server logs. The Elasticsearch server is running at localhost:9200 with millions of server log docs. I also have a Rails app running at localhost:3000. I need… --- ## [Feature Request - MQTT plugin for ES8266](https://discuss.elastic.co/t/feature-request-mqtt-plugin-for-es8266/51207)
**Author:** [@spuder](https://discuss.elastic.co/u/spuder)\ **Replies:** 3\ **Last updated:** [May 30, 2016, 12:04am UTC](https://discuss.elastic.co/t/feature-request-mqtt-plugin-for-es8266/51207 "2016-05-30T00:04:15Z")
MQTT is becoming a popular message buss for IOT devices like arduinos, raspberry Pi's and ES8266. It would be great if logstash had an input and an output pluging for MQTT message busses. Example use case: https:… --- ## [Delete indices from AWS managed services(ElasticSearch)](https://discuss.elastic.co/t/delete-indices-from-aws-managed-services-elasticsearch/128275)
**Author:** [@ardel](https://discuss.elastic.co/u/ardel)\ **Replies:** 5\ **Last updated:** [April 18, 2018, 8:15am UTC](https://discuss.elastic.co/t/delete-indices-from-aws-managed-services-elasticsearch/128275 "2018-04-18T08:15:57Z")
Hello I am knew to "Curator". Is there anyone here who know if we can use AWS managed services when deleting elastic search services. Please take note that I installed "Curator" in an ec2 Instance and the elasticsearch… --- ## [Do I need to run in background logstash process for schedule jdbc input plugin?](https://discuss.elastic.co/t/do-i-need-to-run-in-background-logstash-process-for-schedule-jdbc-input-plugin/53714)
**Author:** [@metload](https://discuss.elastic.co/u/metload)\ **Replies:** 5\ **Last updated:** [June 30, 2016, 5:47pm UTC](https://discuss.elastic.co/t/do-i-need-to-run-in-background-logstash-process-for-schedule-jdbc-input-plugin/53714 "2016-06-30T17:47:15Z")
Hi everybody I am trying to run logstash conf file through Jenkins, I am using a jdbc input plugin with a schedule property to run each morning at 6.00 AM and I have a question, Do I need to leave the process run in ba… --- ## [Easy way to transfer data from one node to another?](https://discuss.elastic.co/t/easy-way-to-transfer-data-from-one-node-to-another/268711)
**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\ **Replies:** 2\ **Last updated:** [March 30, 2021, 2:34am UTC](https://discuss.elastic.co/t/easy-way-to-transfer-data-from-one-node-to-another/268711 "2021-03-30T02:34:44Z")
From time to time, we know that we have to shutdown nodes (remove a node from a cluster) and add a new one. Normally, we shutdown the node, add a new one, and just let the cluster determine the best way to re-allocate ev… --- ## [Два Elasticsearch на одном хосте. Серты и порты](https://discuss.elastic.co/t/elasticsearch/252719)
**Author:** [@Sergei\_Frolov](https://discuss.elastic.co/u/Sergei_Frolov)\ **Replies:** 8\ **Last updated:** [November 10, 2020, 1:33am UTC](https://discuss.elastic.co/t/elasticsearch/252719 "2020-11-10T01:33:14Z")
Добрый день! Скажите пожалуйста, как правильно разместить на одном хосте два Elasticsearch? Как выпустить серты для каждого, с учетом того, что серты выпускаются на ip или на dns? Или два Elasticsearch могут работать с… --- ## [Logstash startup error](https://discuss.elastic.co/t/logstash-startup-error/318511)
**Author:** [@harijld](https://discuss.elastic.co/u/harijld)\ **Replies:** 7\ **Last updated:** [November 15, 2022, 9:02pm UTC](https://discuss.elastic.co/t/logstash-startup-error/318511 "2022-11-15T21:02:56Z")
HI All, I am trying to bring up Logstash on production server, getting below. Same set up working fine in UAT. Error Message 2022-11-08T15:30:28,121\]\[INFO \]\[logstash.runner \] Starting Logstash {"logstash.vers… --- ## [Risk of updating search.max\_buckets](https://discuss.elastic.co/t/risk-of-updating-search-max-buckets/202478)
**Author:** [@peropero](https://discuss.elastic.co/u/peropero)\ **Replies:** 7\ **Last updated:** [October 22, 2019, 3:43pm UTC](https://discuss.elastic.co/t/risk-of-updating-search-max-buckets/202478 "2019-10-22T15:43:24Z")
I am using kibana 7.2.0. What is the effect or risk of doing the following: \` PUT \_cluster / settings {"persistent": {"search.max\_buckets": 50000}} \` When I looked it up, I found an article with the following express… --- ## [Multiline pattern for logstash rsyslog](https://discuss.elastic.co/t/multiline-pattern-for-logstash-rsyslog/150654)
**Author:** [@7ee7d25eea152135bf4d](https://discuss.elastic.co/u/7ee7d25eea152135bf4d)\ **Replies:** 7\ **Last updated:** [October 4, 2018, 12:56pm UTC](https://discuss.elastic.co/t/multiline-pattern-for-logstash-rsyslog/150654 "2018-10-04T12:56:16Z")
--- ## [\*.raw fields](https://discuss.elastic.co/t/raw-fields/29943)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 1\ **Last updated:** [September 26, 2015, 4:55am UTC](https://discuss.elastic.co/t/raw-fields/29943 "2015-09-26T04:55:13Z")
This question is similar to https://discuss.elastic.co/t/kibana-this-field-is-present-in-your-elasticsearch-mapping-but-not-in-any-documents-in-the-search-results-you-may-still-be-able-to-visualize-or-search-on-it/25903 … --- ## [Data table visualization - display other value then matric value](https://discuss.elastic.co/t/data-table-visualization-display-other-value-then-matric-value/136465)
**Author:** [@Shneor\_Asa](https://discuss.elastic.co/u/Shneor_Asa)\ **Replies:** 4\ **Last updated:** [June 25, 2018, 9:11am UTC](https://discuss.elastic.co/t/data-table-visualization-display-other-value-then-matric-value/136465 "2018-06-25T09:11:14Z")
Hi, I have a question, how can i display some value on data table visualization based on other field matric? For example I have Max matric on 'date' field But i want to display some other value from the Document retur… --- ## [Automated CSV file generation](https://discuss.elastic.co/t/automated-csv-file-generation/183752)
**Author:** [@vipul12](https://discuss.elastic.co/u/vipul12)\ **Replies:** 5\ **Last updated:** [June 5, 2019, 1:46pm UTC](https://discuss.elastic.co/t/automated-csv-file-generation/183752 "2019-06-05T13:46:31Z")
Does Kibana have a scheduler to automatically export CSV and transfer the file to another path or is there a way to automate this backend, I checked the old post, but it mentions about pdf report genaration. But I want a… --- ## [Azure Active directory, SAML authentication](https://discuss.elastic.co/t/azure-active-directory-saml-authentication/175563)
**Author:** [@vishal.k](https://discuss.elastic.co/u/vishal.k)\ **Replies:** 5\ **Last updated:** [April 9, 2019, 1:36pm UTC](https://discuss.elastic.co/t/azure-active-directory-saml-authentication/175563 "2019-04-09T13:36:49Z")
I have gone through the docs from Elasticsearch and implemented SSO, however I'm getting below error while authenticating with Azure AD user. Can you please help me with this? { "error": { "root\_cause": \[ … --- ## [\[SOLVED\] Index issues after upgrade from 5.x to 6.2](https://discuss.elastic.co/t/solved-index-issues-after-upgrade-from-5-x-to-6-2/119119)
**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\ **Replies:** 5\ **Last updated:** [February 9, 2018, 10:20pm UTC](https://discuss.elastic.co/t/solved-index-issues-after-upgrade-from-5-x-to-6-2/119119 "2018-02-09T22:20:35Z")
Hello, all. Yesterday, I upgraded my Elastic stack from version 5.x to 6.2, and today, my logstash and filebeat indices no longer work. Here's some output from elasticsearch.log: \[2018-02-08T00:03:29,150\]\[WARN \]\[logst… --- ## [Using JSON input of Kibana Visualizations as filters](https://discuss.elastic.co/t/using-json-input-of-kibana-visualizations-as-filters/202327)
**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\ **Replies:** 2\ **Last updated:** [October 9, 2019, 11:28am UTC](https://discuss.elastic.co/t/using-json-input-of-kibana-visualizations-as-filters/202327 "2019-10-09T11:28:01Z")
Hi all, I am very new to ELK stack and I have the following requirement. I need to create a vertical bar visualization with two metrics (assume metricA and metricB). I have a common condition (a string) which can divide… --- ## [Geo shape self-intersection](https://discuss.elastic.co/t/geo-shape-self-intersection/242584)
**Author:** [@DenisDeis](https://discuss.elastic.co/u/DenisDeis)\ **Replies:** 4\ **Last updated:** [July 31, 2020, 3:56am UTC](https://discuss.elastic.co/t/geo-shape-self-intersection/242584 "2020-07-31T03:56:13Z")
I have the following feature: { "type": "Feature", "properties": { }, "geometry": { "type": "Polygon", "coordinates": \[\[ \[77.500, 13.500\], \[77.600, 13.500\], \[77.600, 13.400\], \[77.590, 13.400\], \[77.590, 13.390\], \[77.600,… --- ## [Help for a Newbie](https://discuss.elastic.co/t/help-for-a-newbie/121311)
**Author:** [@zifou](https://discuss.elastic.co/u/zifou)\ **Replies:** 4\ **Last updated:** [February 25, 2018, 4:40pm UTC](https://discuss.elastic.co/t/help-for-a-newbie/121311 "2018-02-25T16:40:46Z")
Hi All, I just start with ES to collect data from a netflow sensor for our company. I have implement nprobe to send data, everything is ok but the template given by nprobe is not compatible with the last version of ES. … --- ## [Logstash DNS Filter - Enrichment security example](https://discuss.elastic.co/t/logstash-dns-filter-enrichment-security-example/121040)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 4\ **Last updated:** [February 25, 2018, 9:30am UTC](https://discuss.elastic.co/t/logstash-dns-filter-enrichment-security-example/121040 "2018-02-25T09:30:05Z")
Hi All, I was trying to execute the Data enrichment logstash -IP addresses exist in an external DNSBL (DNS Blocklist)? filter { grok { match =\> { "message" =\> "%{WORD:addr1}.%{WORD:addr2}.%{WORD:addr3}.%{WORD… --- ## [Remove blank fields from output file](https://discuss.elastic.co/t/remove-blank-fields-from-output-file/75886)
**Author:** [@Tarun\_Kalluri](https://discuss.elastic.co/u/Tarun_Kalluri)\ **Replies:** 3\ **Last updated:** [February 22, 2017, 9:05am UTC](https://discuss.elastic.co/t/remove-blank-fields-from-output-file/75886 "2017-02-22T09:05:49Z")
I am pretty new to using log stash, so I need to know how to remove a line which does not match the grok pattern completely from the output. I have a 500 line input out of which 4-5 lines match my pattern. Presently, it … --- ## [Public key is not available](https://discuss.elastic.co/t/public-key-is-not-available/164332)
**Author:** [@Lucas\_Nathan](https://discuss.elastic.co/u/Lucas_Nathan)\ **Replies:** 1\ **Last updated:** [January 15, 2019, 3:44pm UTC](https://discuss.elastic.co/t/public-key-is-not-available/164332 "2019-01-15T15:44:54Z")
Hi everyone. I'm installing kibana using this process: Install Kibana with Debian package | Kibana Guide \[8.11\] | Elastic Unfortunately, when I run sudo apt-get install kibana it presents me with this error: sudo apt-… --- ## [Field value exact string Match](https://discuss.elastic.co/t/field-value-exact-string-match/145124)
**Author:** [@thiraj89](https://discuss.elastic.co/u/thiraj89)\ **Replies:** 2\ **Last updated:** [August 21, 2018, 7:18am UTC](https://discuss.elastic.co/t/field-value-exact-string-match/145124 "2018-08-21T07:18:22Z")
In source field have value "/var/access.log" and "/var/access.log - 20180820" . I want to search only source field value matched "/var/access.log". How to write discover query. Please guide me --- ## [Cluster suddenly starts rejecting bulk requests due to thread pool queue exhaustion](https://discuss.elastic.co/t/cluster-suddenly-starts-rejecting-bulk-requests-due-to-thread-pool-queue-exhaustion/81742)
**Author:** [@Sebastian\_Esponda](https://discuss.elastic.co/u/Sebastian_Esponda)\ **Replies:** 2\ **Last updated:** [April 10, 2017, 10:19pm UTC](https://discuss.elastic.co/t/cluster-suddenly-starts-rejecting-bulk-requests-due-to-thread-pool-queue-exhaustion/81742 "2017-04-10T22:19:37Z")
Summary Before the problem, the cluster could ingest 500+ records per second. When the problem happens, performance drops substantially and suddenly (e.g. 76 index operations taking +20s). The cluster recovers after a… --- ## [Xml parsing issue with xpath](https://discuss.elastic.co/t/xml-parsing-issue-with-xpath/79834)
**Author:** [@kamran.matloob](https://discuss.elastic.co/u/kamran.matloob)\ **Replies:** 6\ **Last updated:** [March 28, 2017, 8:49pm UTC](https://discuss.elastic.co/t/xml-parsing-issue-with-xpath/79834 "2017-03-28T20:49:31Z")
hi here ! I am new to use logstash groking sepcially with xml. My task is parsing xml.I successfully wrote the GROK xml filter for a specific data XML format but then i came to know that data (XML) has different form… --- ## [How to join two index](https://discuss.elastic.co/t/how-to-join-two-index/292629)
**Author:** [@arisxf](https://discuss.elastic.co/u/arisxf)\ **Replies:** 5\ **Last updated:** [December 23, 2021, 2:11am UTC](https://discuss.elastic.co/t/how-to-join-two-index/292629 "2021-12-23T02:11:36Z")
I've tried using aliases (aliases a and b) the results alert The data you are seeing might be incomplete or wrong. in the field at index b. Please help me POST /\_aliases { "actions" : \[ { "add" : { "index" :… --- ## [Recover a broken 3 node elasticsearch cluster that has only 1 node left](https://discuss.elastic.co/t/recover-a-broken-3-node-elasticsearch-cluster-that-has-only-1-node-left/244959)
**Author:** [@efan](https://discuss.elastic.co/u/efan)\ **Replies:** 5\ **Last updated:** [August 15, 2020, 2:00am UTC](https://discuss.elastic.co/t/recover-a-broken-3-node-elasticsearch-cluster-that-has-only-1-node-left/244959 "2020-08-15T02:00:50Z")
Hi, I have Elasticsearch cluster (7.6.1) that had 3 nodes. 2 of the nodes were accidentally dropped while all 3 servers were running. 1 of the 3 servers survived. I want to save the cluster and its data. How do I add new… --- ## [Indexing-time document deduplication](https://discuss.elastic.co/t/indexing-time-document-deduplication/4579)
**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\ **Replies:** 5\ **Last updated:** [June 9, 2011, 8:09pm UTC](https://discuss.elastic.co/t/indexing-time-document-deduplication/4579 "2011-06-09T20:09:30Z")
Hello, What's the best way to deal deduplication of documents in the cluster? Imagine the same document comes down some pipe to the app that indexes docs into ES. Imagine there is no unique and persistent documen… --- ## [Elastic Stack 6.0.0-beta2 is here!](https://discuss.elastic.co/t/elastic-stack-6-0-0-beta2-is-here/99020)
**Author:** [@asawari](https://discuss.elastic.co/u/asawari)\ **Replies:** 0\ **Last updated:** [August 31, 2017, 3:12pm UTC](https://discuss.elastic.co/t/elastic-stack-6-0-0-beta2-is-here/99020 "2017-08-31T15:12:45Z")
Elastic Stack 6.0.0-beta2 is here! The 6.0.0-beta2 Elasticsearch, Logstash, Beats, Kibana, and X-Pack are now available to download and test! Learn about what’s coming in 6.0: And then try them out today! Download th… [Previous page](https://discuss.elastic.co/top.md?page=582&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=584&per_page=50&period=all)