# Top **URL:** https://discuss.elastic.co/top.md?page=601&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 602 --- ## [Machine Learning datafeed started but not processing data](https://discuss.elastic.co/t/machine-learning-datafeed-started-but-not-processing-data/99850)
**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\ **Replies:** 6\ **Last updated:** [September 11, 2017, 12:30pm UTC](https://discuss.elastic.co/t/machine-learning-datafeed-started-but-not-processing-data/99850 "2017-09-11T12:30:36Z")
Hi, I hadn't looked at my machine learning jobs in a while, when I did look at them they were all in a state of JobState = closed, DatafeedState = started. The Latest timestamp was from a month ago. How can I get the… --- ## [Error installing Elastic-Agent v7.10.0](https://discuss.elastic.co/t/error-installing-elastic-agent-v7-10-0/258140)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 4\ **Last updated:** [December 16, 2020, 8:46pm UTC](https://discuss.elastic.co/t/error-installing-elastic-agent-v7-10-0/258140 "2020-12-16T20:46:32Z")
Hi, I am trying ELK 7.10.0 and it's beats. I have successfully installed the Elastic-Agent 7.10.0 in two machines, running Win 10 and Win 10 Pro, but I am unable to install the same agent on a machine running Windows Se… --- ## [How to get document insert date from Elastic search](https://discuss.elastic.co/t/how-to-get-document-insert-date-from-elastic-search/122935)
**Author:** [@oraclept](https://discuss.elastic.co/u/oraclept)\ **Replies:** 1\ **Last updated:** [March 7, 2018, 6:39pm UTC](https://discuss.elastic.co/t/how-to-get-document-insert-date-from-elastic-search/122935 "2018-03-07T18:39:53Z")
Hi - I am using logstash to ship messages to ES. Logstash automatically adds @timestamp field. I want to know if there is way to tell elastic search or logstash to have actual insert timestamp on document ? is there a e… --- ## [Create Pie graph with filter](https://discuss.elastic.co/t/create-pie-graph-with-filter/174430)
**Author:** [@xefil](https://discuss.elastic.co/u/xefil)\ **Replies:** 2\ **Last updated:** [March 31, 2019, 2:37pm UTC](https://discuss.elastic.co/t/create-pie-graph-with-filter/174430 "2019-03-31T14:37:47Z")
Hi all, I'm new to this product and it's amazing! BTW I've a lot to learn and I'm already having issues with a simple graph. I'm logging pfSense logs (firewall). I would like to create i.e. a pie graph that shows me b… --- ## [Adding image to record](https://discuss.elastic.co/t/adding-image-to-record/98241)
**Author:** [@vineets928](https://discuss.elastic.co/u/vineets928)\ **Replies:** 2\ **Last updated:** [September 4, 2017, 2:06pm UTC](https://discuss.elastic.co/t/adding-image-to-record/98241 "2017-09-04T14:06:41Z")
Hi, We migrated MySql employee table to elasticsearch and it is working good. Now, we want to add .jpg image to every employee record which is in folder on the same node. I don’t have any clue how to do this. Can anyon… --- ## [How to send error message to Elastic APM and show the error in Kibana tab](https://discuss.elastic.co/t/how-to-send-error-message-to-elastic-apm-and-show-the-error-in-kibana-tab/329183)
**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\ **Replies:** 8\ **Last updated:** [April 11, 2023, 6:31pm UTC](https://discuss.elastic.co/t/how-to-send-error-message-to-elastic-apm-and-show-the-error-in-kibana-tab/329183 "2023-04-11T18:31:58Z")
I followed the set up of this page I am using the template.yml to set up my lambda function and Elastic APM ... Resources: yourLambdaFunction: Type: AWS::Serverless::Function Properties: ... Envi… --- ## [Watcher history index - use case and good practices](https://discuss.elastic.co/t/watcher-history-index-use-case-and-good-practices/153067)
**Author:** [@mpandey](https://discuss.elastic.co/u/mpandey)\ **Replies:** 1\ **Last updated:** [October 19, 2018, 9:03am UTC](https://discuss.elastic.co/t/watcher-history-index-use-case-and-good-practices/153067 "2018-10-19T09:03:28Z")
Hi everyone, I have enabled monitoring on my production cluster and pushing the logs to the monitoring cluster. But I see .watcher-history-7 index is getting created every day in my prod cluster. It would be great someo… --- ## [Adding data to existing index for which dashboards are created](https://discuss.elastic.co/t/adding-data-to-existing-index-for-which-dashboards-are-created/164700)
**Author:** [@samnayak](https://discuss.elastic.co/u/samnayak)\ **Replies:** 5\ **Last updated:** [January 17, 2019, 9:58pm UTC](https://discuss.elastic.co/t/adding-data-to-existing-index-for-which-dashboards-are-created/164700 "2019-01-17T21:58:11Z")
Hi All, I am trying to add new data to an existing index in Elasticsearch by running the same config file in Logstash. I already have kibana dashboard created for that index. My doubt is, does Logstah copy again the ol… --- ## [Kibana 5.0.0-snapshot requires Elasticsearch ^3.0.0?](https://discuss.elastic.co/t/kibana-5-0-0-snapshot-requires-elasticsearch-3-0-0/41464)
**Author:** [@michele\_crudele](https://discuss.elastic.co/u/michele_crudele)\ **Replies:** 4\ **Last updated:** [February 25, 2016, 5:10pm UTC](https://discuss.elastic.co/t/kibana-5-0-0-snapshot-requires-elasticsearch-3-0-0/41464 "2016-02-25T17:10:16Z")
I did setup a Kibana dev env for developing a plugin. Everything was working well until I pulled latest changes of kibana. Now when I try to start it I get the message log \[10:18:55.878\] \[error\]\[status\]\[plugin:el… --- ## [Dec 16th, 2020: \[FR\] Monitorer les tâches et pipelines Tekton avec Elastic Observability](https://discuss.elastic.co/t/dec-16th-2020-fr-monitorer-les-taches-et-pipelines-tekton-avec-elastic-observability/258847)
**Author:** [@mgreau](https://discuss.elastic.co/u/mgreau)\ **Replies:** 0\ **Last updated:** [January 6, 2021, 8:00am UTC](https://discuss.elastic.co/t/dec-16th-2020-fr-monitorer-les-taches-et-pipelines-tekton-avec-elastic-observability/258847 "2021-01-06T08:00:04Z")
English Version Savez-vous que Elastic a delivre 21 releases en 2020? Chaque fois qu'une version est delivree, ce sont 500+ artifacts publiés dans multiplies emplacements publics (bucket, registres Docker, Maven Centra… --- ## [Presenting two different type results separately on the same page](https://discuss.elastic.co/t/presenting-two-different-type-results-separately-on-the-same-page/180895)
**Author:** [@bobclewell](https://discuss.elastic.co/u/bobclewell)\ **Replies:** 0\ **Last updated:** [May 13, 2019, 9:26pm UTC](https://discuss.elastic.co/t/presenting-two-different-type-results-separately-on-the-same-page/180895 "2019-05-13T21:26:05Z")
I've got a database of two types, products and blog entries. Right now we are using Swiftype to search the full database and return all the results merged together as a single result set. I'd like to separate products, … --- ## [Visual Builder Top N not matching Data Table for same query](https://discuss.elastic.co/t/visual-builder-top-n-not-matching-data-table-for-same-query/101093)
**Author:** [@Terry\_C](https://discuss.elastic.co/u/Terry_C)\ **Replies:** 6\ **Last updated:** [October 13, 2017, 11:10pm UTC](https://discuss.elastic.co/t/visual-builder-top-n-not-matching-data-table-for-same-query/101093 "2017-10-13T23:10:33Z")
Hello, I have a data table with the Top 10 callers based on the data I have and want to convert it to use the Top N in the Timer Series Visual Builder as it has a nicer visualization. I'm finding that the Top N doesn't … --- ## [How to combine multiple fields values within single field](https://discuss.elastic.co/t/how-to-combine-multiple-fields-values-within-single-field/208826)
**Author:** [@rameshkr1994](https://discuss.elastic.co/u/rameshkr1994)\ **Replies:** 3\ **Last updated:** [November 21, 2019, 3:26pm UTC](https://discuss.elastic.co/t/how-to-combine-multiple-fields-values-within-single-field/208826 "2019-11-21T15:26:18Z")
Dear All. again i came here from long time with some issue. i have data inside elastic search like below:- id name cnt marks 101 ram ind 80.32 101 ram ...... null 101 … --- ## [Migration error](https://discuss.elastic.co/t/migration-error/293764)
**Author:** [@pawars21](https://discuss.elastic.co/u/pawars21)\ **Replies:** 1\ **Last updated:** [January 10, 2022, 12:25pm UTC](https://discuss.elastic.co/t/migration-error/293764 "2022-01-10T12:25:28Z")
I'm getting below error while running kibana.bat for 7.16.2 version. Error: Unable to complete saved object migrations for the \[.kibana\_task\_manager\] index: Migrations failed. Reason: 2 corrupt saved object documents we… --- ## [Can I add leading zeros to a field?](https://discuss.elastic.co/t/can-i-add-leading-zeros-to-a-field/122081)
**Author:** [@david\_reynolds](https://discuss.elastic.co/u/david_reynolds)\ **Replies:** 4\ **Last updated:** [March 2, 2018, 9:06am UTC](https://discuss.elastic.co/t/can-i-add-leading-zeros-to-a-field/122081 "2018-03-02T09:06:01Z")
Question about Logstash (Elastic Stack). Can someone give me a pointer on how to add a new field (add\_field) that will format a number with leading zeroes? e.g. given somefield == 123 then someotherfield == "00123". --- ## [Docker gelf and logstash to logstash](https://discuss.elastic.co/t/docker-gelf-and-logstash-to-logstash/52740)
**Author:** [@elmamazo](https://discuss.elastic.co/u/elmamazo)\ **Replies:** 4\ **Last updated:** [June 20, 2016, 4:01pm UTC](https://discuss.elastic.co/t/docker-gelf-and-logstash-to-logstash/52740 "2016-06-20T16:01:41Z")
Hello guys Im using the dock gelf logging driver and I have the gelf input plugin and elastic search as output this works fine. What I want to is is docker -\> gelf\_input -\> lumberjack\_out -\> lunberjack\_in -\> es the p… --- ## [Large XML crashes logstash with OOM](https://discuss.elastic.co/t/large-xml-crashes-logstash-with-oom/28682)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 4\ **Last updated:** [September 8, 2015, 4:11pm UTC](https://discuss.elastic.co/t/large-xml-crashes-logstash-with-oom/28682 "2015-09-08T16:11:54Z")
Hi, Working on a setup with large XML files as part of the logs. The XMLs at times could be 10,20MB large. Facing issues with such large files and logstash crashing with OutOfMemory error, or entity expansion grown too… --- ## [Access array element after split processor](https://discuss.elastic.co/t/access-array-element-after-split-processor/90539)
**Author:** [@hding](https://discuss.elastic.co/u/hding)\ **Replies:** 3\ **Last updated:** [June 27, 2017, 12:43pm UTC](https://discuss.elastic.co/t/access-array-element-after-split-processor/90539 "2017-06-27T12:43:06Z")
I'm trying to access array element after splitting a string into array using a 'split' processor in an ingest node pipeline? I have a long string separated by slash ('/'). I only want to pass one substring to index, an… --- ## [Supported Data Sources](https://discuss.elastic.co/t/supported-data-sources/10265)
**Author:** [@Will\_Eve](https://discuss.elastic.co/u/Will_Eve)\ **Replies:** 3\ **Last updated:** [January 9, 2013, 4:38pm UTC](https://discuss.elastic.co/t/supported-data-sources/10265 "2013-01-09T16:38:09Z")
Hi, I am new to ElasticSearch and need some basic information: Does ES support the following Data Sources? - Lotus Notes Database - File Servers - web-based documents (intranet) - DokuWiki Thanks in advanc… --- ## [KV how to extract data between square brackets](https://discuss.elastic.co/t/kv-how-to-extract-data-between-square-brackets/221678)
**Author:** [@sahar](https://discuss.elastic.co/u/sahar)\ **Replies:** 7\ **Last updated:** [March 3, 2020, 8:14pm UTC](https://discuss.elastic.co/t/kv-how-to-extract-data-between-square-brackets/221678 "2020-03-03T20:14:29Z")
Hello, Assume I have the following message: "Some message \[key1=val1\] more text \[key2=some \[special\] value\], more text." From the above message I would like to extract key1 and key2 as follows: key1 = val1 key2 = so… --- ## [How to logstash if field equals value assign other field value?](https://discuss.elastic.co/t/how-to-logstash-if-field-equals-value-assign-other-field-value/284857)
**Author:** [@Max\_Wang](https://discuss.elastic.co/u/Max_Wang)\ **Replies:** 2\ **Last updated:** [September 22, 2021, 12:05pm UTC](https://discuss.elastic.co/t/how-to-logstash-if-field-equals-value-assign-other-field-value/284857 "2021-09-22T12:05:07Z")
I have a logstash conf field A : Value A field B : Value B ——————————————————————————— I would like to become The value of field A is equal to N/A, i will use the value of field B, as follows: field A : N/A -\> … --- ## [Monitor GC duration/count](https://discuss.elastic.co/t/monitor-gc-duration-count/176183)
**Author:** [@Beuhlet\_Reseau](https://discuss.elastic.co/u/Beuhlet_Reseau)\ **Replies:** 6\ **Last updated:** [April 10, 2019, 12:48pm UTC](https://discuss.elastic.co/t/monitor-gc-duration-count/176183 "2019-04-10T12:48:06Z")
Hello, I want know how many GC are executed in last 5 min how long duration's GC is ? I want use : GET /\_nodes/elasticsearch\_instance1/stats/jvm : Output return : "jvm": { "timestamp": 1554888379405, … --- ## [What is the date format to be used with Logstash to match 9 digits millisecond](https://discuss.elastic.co/t/what-is-the-date-format-to-be-used-with-logstash-to-match-9-digits-millisecond/107032)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [November 9, 2017, 11:40am UTC](https://discuss.elastic.co/t/what-is-the-date-format-to-be-used-with-logstash-to-match-9-digits-millisecond/107032 "2017-11-09T11:40:04Z")
Hi, I am using Logstash 5.6.3. I have a date time field in my log entry like 07-11-17 13:35:35.656000000 . I would like to use it as my @timestamp, so that I am using date filter to match it and target to @timestamp. A… --- ## [ERROR: Installation aborted, verification failed for --version](https://discuss.elastic.co/t/error-installation-aborted-verification-failed-for-version/117765)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [February 1, 2018, 6:56am UTC](https://discuss.elastic.co/t/error-installation-aborted-verification-failed-for-version/117765 "2018-02-01T06:56:50Z")
Hi, As per the subject line, how do you install a older version of a plugin? In my case I tried "--version 3.5.1", "--version v3.5.1" and some other variations but they all fail. /usr/share/logstash# bin/logstash-plugi… --- ## [为什么相同的文本搜索结果的\_score不同？](https://discuss.elastic.co/t/-score/78135)
**Author:** [@watson](https://discuss.elastic.co/u/watson)\ **Replies:** 3\ **Last updated:** [May 29, 2017, 3:35pm UTC](https://discuss.elastic.co/t/-score/78135 "2017-05-29T15:35:15Z")
\*\*Elasticsearch version2.3.3: Plugins installed: \[head,ik\] \*\*JVM versionopenjdk version "1.8.0\_111": \*\*OS versionCentOS release 6.8 (Final): +++++++++++++++++++++++++++++++++++++++++ my mapping： "mappings": { "we… --- ## [Throttling / Forcing Garbage Collection during Bulk Indexing](https://discuss.elastic.co/t/throttling-forcing-garbage-collection-during-bulk-indexing/10314)
**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\ **Replies:** 3\ **Last updated:** [January 15, 2013, 4:48pm UTC](https://discuss.elastic.co/t/throttling-forcing-garbage-collection-during-bulk-indexing/10314 "2013-01-15T16:48:04Z")
Hi, The use case I have is occasional bursts of millions of index updates, which uses up alot of JVM Heap space, but after these bursts, the heap usage goes back to a low level. I find the quantity of updates c… --- ## [APM application\_packages for WebLogic](https://discuss.elastic.co/t/apm-application-packages-for-weblogic/217069)
**Author:** [@Sirius](https://discuss.elastic.co/u/Sirius)\ **Replies:** 4\ **Last updated:** [February 4, 2020, 10:34pm UTC](https://discuss.elastic.co/t/apm-application-packages-for-weblogic/217069 "2020-02-04T22:34:48Z")
I have running APM java agent for weblogic which is streaming fine to APM serve in this case only for usage resource metrics as default. At this point I'm not getting traces / transactions / errors information, is that b… --- ## [Json is storing as string in es](https://discuss.elastic.co/t/json-is-storing-as-string-in-es/93062)
**Author:** [@Narayanan\_Sukumar](https://discuss.elastic.co/u/Narayanan_Sukumar)\ **Replies:** 4\ **Last updated:** [July 14, 2017, 7:07am UTC](https://discuss.elastic.co/t/json-is-storing-as-string-in-es/93062 "2017-07-14T07:07:36Z")
ELK I created is filebeat - \> KAFKA -\> logstash -\> ES &Kibana (AWS elastic search) the logs are generated in json format and it is pushed to kafka with below config: ========================= filebeat.prospectors: i… --- ## [Reindex.remote.whitelist needs to be set in the .yml. . . on all nodes? Or just master and/or client?](https://discuss.elastic.co/t/reindex-remote-whitelist-needs-to-be-set-in-the-yml-on-all-nodes-or-just-master-and-or-client/72946)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 2\ **Last updated:** [May 24, 2018, 3:22am UTC](https://discuss.elastic.co/t/reindex-remote-whitelist-needs-to-be-set-in-the-yml-on-all-nodes-or-just-master-and-or-client/72946 "2018-05-24T03:22:38Z")
Hi, According to https://www.elastic.co/guide/en/elasticsearch/reference/current/docs-reindex.html: "Remote hosts have to be explicitly whitelisted in elasticsearch.yaml using the reindex.remote.whitelist property." Q… --- ## [Scripted fields need to calculate percentage](https://discuss.elastic.co/t/scripted-fields-need-to-calculate-percentage/52051)
**Author:** [@kumarts](https://discuss.elastic.co/u/kumarts)\ **Replies:** 2\ **Last updated:** [June 8, 2016, 2:20am UTC](https://discuss.elastic.co/t/scripted-fields-need-to-calculate-percentage/52051 "2016-06-08T02:20:07Z")
Hi I am trying to display the difference between 2 values eg: Plan spend versus Actual spend and Percentage of spend. doc\['PLAN-EXP'\].value - doc\['ACT-EXP'\].value 2.(doc\['PLAN-EXP'\].value - doc\['ACT-EXP'\].value)/sum… --- ## [Elastic Scoring for perfect match](https://discuss.elastic.co/t/elastic-scoring-for-perfect-match/228720)
**Author:** [@AndyS](https://discuss.elastic.co/u/AndyS)\ **Replies:** 5\ **Last updated:** [April 20, 2020, 10:51am UTC](https://discuss.elastic.co/t/elastic-scoring-for-perfect-match/228720 "2020-04-20T10:51:48Z")
Hey, I have a JSON query that gives different results when executed in Elastic vs executed in Kibana. In my use case of security log searching perfect matches are the desired answer, so I believe that Kibana is 'right'… --- ## [Adding a field from existing ones](https://discuss.elastic.co/t/adding-a-field-from-existing-ones/77697)
**Author:** [@Mohamed](https://discuss.elastic.co/u/Mohamed)\ **Replies:** 8\ **Last updated:** [March 15, 2017, 6:45pm UTC](https://discuss.elastic.co/t/adding-a-field-from-existing-ones/77697 "2017-03-15T18:45:57Z")
Hello, I want to add a field composed of some other fields, like this: suppose we have fields "name": \[ "XX" \], "adress": \[ "584" \], I want to add a field like that: "p… --- ## [Capturing all the queries](https://discuss.elastic.co/t/capturing-all-the-queries/36218)
**Author:** [@Pradeep\_Gowda](https://discuss.elastic.co/u/Pradeep_Gowda)\ **Replies:** 6\ **Last updated:** [December 2, 2015, 11:34pm UTC](https://discuss.elastic.co/t/capturing-all-the-queries/36218 "2015-12-02T23:34:51Z")
Hi All, Is there any way to capture all the incoming quires in Elasticsearch? I tried to play around with log settings in elasticsearch.yml but I am not seeing any quires getting logged. Can some one help me with this? --- ## [Kibana 4.4.0 released](https://discuss.elastic.co/t/kibana-4-4-0-released/40763)
**Author:** [@Court](https://discuss.elastic.co/u/Court)\ **Replies:** 0\ **Last updated:** [February 2, 2016, 5:04pm UTC](https://discuss.elastic.co/t/kibana-4-4-0-released/40763 "2016-02-02T17:04:18Z")
Kibana 4.4.0, with support for Elasticsearch 2.2.0 has landed. Highlights from this release include the ability to select custom colors for visualizations, short url sharing options, and many improvements to the plugin … --- ## [Translog is corrupted](https://discuss.elastic.co/t/translog-is-corrupted/285208)
**Author:** [@fetch](https://discuss.elastic.co/u/fetch)\ **Replies:** 2\ **Last updated:** [October 4, 2021, 4:24am UTC](https://discuss.elastic.co/t/translog-is-corrupted/285208 "2021-10-04T04:24:02Z")
Hello, I have a cluster of 3 ES nodes that uses 7.10.1 version. One node had an HDD failure last night. We have bring it up and almost all indices have recovered successfully. However, there are 4 indices that fails to… --- ## [Error putting base64 converted string into Elasticsearch](https://discuss.elastic.co/t/error-putting-base64-converted-string-into-elasticsearch/61595)
**Author:** [@avion](https://discuss.elastic.co/u/avion)\ **Replies:** 3\ **Last updated:** [December 29, 2016, 12:00pm UTC](https://discuss.elastic.co/t/error-putting-base64-converted-string-into-elasticsearch/61595 "2016-12-29T12:00:34Z")
I create a simple mapping: curl -XPUT 'localhost:9200/ficherosindex?pretty=true' -d '{ "mappings": { "items": { "dynamic": "strict", "properties" : { "title" : { … --- ## [Sort results based on the number of matched nested documents](https://discuss.elastic.co/t/sort-results-based-on-the-number-of-matched-nested-documents/64525)
**Author:** [@Dzmitry\_Kavalionak](https://discuss.elastic.co/u/Dzmitry_Kavalionak)\ **Replies:** 3\ **Last updated:** [November 11, 2016, 3:07pm UTC](https://discuss.elastic.co/t/sort-results-based-on-the-number-of-matched-nested-documents/64525 "2016-11-11T15:07:53Z")
I have the following index PUT /index/blogpost/2 { "title": "Investment secrets", "body": "What they don't tell you ...", "tags": \[ "shares", "equities" \], "comments": \[ { "name": "Mary Brown", … --- ## [Elasticsearch(2.3.5) is still initializing the kibana index](https://discuss.elastic.co/t/elasticsearch-2-3-5-is-still-initializing-the-kibana-index/57402)
**Author:** [@imewish](https://discuss.elastic.co/u/imewish)\ **Replies:** 4\ **Last updated:** [August 7, 2016, 8:47am UTC](https://discuss.elastic.co/t/elasticsearch-2-3-5-is-still-initializing-the-kibana-index/57402 "2016-08-07T08:47:49Z")
Elasticsearch version: 2.3.5 \*\*KIbana Version : 4.5.4 Plugins installed: \[kopf\] JVM version: 8 OS version: ubuntu 16.04 I recently installed elastic search 2.3.5 and Kibana 4.5.4 on my EC2 instance. Both serv… --- ## [\[Logstash\]:ConfigurationError ":message=\>"Expected one of #, input, filter, output "](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output/192045)
**Author:** [@Moustapha\_Berrou](https://discuss.elastic.co/u/Moustapha_Berrou)\ **Replies:** 5\ **Last updated:** [July 26, 2019, 9:55am UTC](https://discuss.elastic.co/t/logstash-configurationerror-message-expected-one-of-input-filter-output/192045 "2019-07-26T09:55:29Z")
Dear all, i am uploading a json file with Logstash 7.2.0 in to Elasticsearch =\> Grafana (All with Docker) input{ file{ codec =\> multiline { pattern =\> '^{' negate =\> true what =\> previous }… --- ## [Can we have multiple input and output section in logstash config file](https://discuss.elastic.co/t/can-we-have-multiple-input-and-output-section-in-logstash-config-file/127778)
**Author:** [@manjur](https://discuss.elastic.co/u/manjur)\ **Replies:** 5\ **Last updated:** [April 12, 2018, 4:18pm UTC](https://discuss.elastic.co/t/can-we-have-multiple-input-and-output-section-in-logstash-config-file/127778 "2018-04-12T16:18:05Z")
can we have multiple input and output section in logstash config file. So that we can deal with multiple indexes in same run. --- ## [Elastic Search with GUID](https://discuss.elastic.co/t/elastic-search-with-guid/114215)
**Author:** [@aneesh](https://discuss.elastic.co/u/aneesh)\ **Replies:** 2\ **Last updated:** [January 5, 2018, 8:29am UTC](https://discuss.elastic.co/t/elastic-search-with-guid/114215 "2018-01-05T08:29:46Z")
Hi I am trying to search with a column having GIUD as value Search Query ElasticsearchResponse\ objElasticResponse = objClient.Search\("pupil", "pupil", @" { ""query"" : { … --- ## [Timestamp range with aggregation query](https://discuss.elastic.co/t/timestamp-range-with-aggregation-query/85089)
**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 2\ **Last updated:** [May 10, 2017, 4:56am UTC](https://discuss.elastic.co/t/timestamp-range-with-aggregation-query/85089 "2017-05-10T04:56:13Z")
I am trying to get top 5 IP between certain time range with the below query. But it is not working. Please tell me what is the problem with query and how to fix it? { "size":0, "query": { "bool"… --- ## [IndexRequestBuilder.execute().actionGet() vs IndexRequestBuilder.get()](https://discuss.elastic.co/t/indexrequestbuilder-execute-actionget-vs-indexrequestbuilder-get/44396)
**Author:** [@gordonhko](https://discuss.elastic.co/u/gordonhko)\ **Replies:** 1\ **Last updated:** [March 18, 2016, 3:52pm UTC](https://discuss.elastic.co/t/indexrequestbuilder-execute-actionget-vs-indexrequestbuilder-get/44396 "2016-03-18T15:52:38Z")
Can someone explain the different of this two APIs (actionGet and get). I know the IndexRequestBuilder.execute().actionGet() is a combination of an async call execute() and actionGet() waits for its result with an add… --- ## [Filebeat Issue - all log entries are merged in a single message instead of multiple messages](https://discuss.elastic.co/t/filebeat-issue-all-log-entries-are-merged-in-a-single-message-instead-of-multiple-messages/184055)
**Author:** [@sukanta007](https://discuss.elastic.co/u/sukanta007)\ **Replies:** 4\ **Last updated:** [June 4, 2019, 11:39am UTC](https://discuss.elastic.co/t/filebeat-issue-all-log-entries-are-merged-in-a-single-message-instead-of-multiple-messages/184055 "2019-06-04T11:39:35Z")
Hello team, Hope I will get a resolution for this issue ASAP. I am using filebeat v5.6.2 to send log file to ELK where log entries will be displayed in Kibana for visualization & analysis purpose. I have noticed that l… --- ## [Restoring a snapshot from a remote repository](https://discuss.elastic.co/t/restoring-a-snapshot-from-a-remote-repository/75378)
**Author:** [@guilherme\_maranhao](https://discuss.elastic.co/u/guilherme_maranhao)\ **Replies:** 2\ **Last updated:** [February 16, 2017, 6:58pm UTC](https://discuss.elastic.co/t/restoring-a-snapshot-from-a-remote-repository/75378 "2017-02-16T18:58:55Z")
Hi all, I set a local repository with type: "url" to access a remote repository. PUT localhost:9200/\_snapshot/elastic\_backup { "type": "url", "settings": { "url": "http://remote\_url\_repository:9205" … --- ## [Order Mismatch in Update Operations](https://discuss.elastic.co/t/order-mismatch-in-update-operations/108243)
**Author:** [@panda2004](https://discuss.elastic.co/u/panda2004)\ **Replies:** 5\ **Last updated:** [November 19, 2017, 9:15pm UTC](https://discuss.elastic.co/t/order-mismatch-in-update-operations/108243 "2017-11-19T21:15:16Z")
Hey threre, Background: In our system events arrive in stream. In most cases, we just need to index (Add) the events to new or existsing documnts (Upsert Operation), however there is one event in which we need to updat… --- ## [Max\_doc\_count in terms aggragation](https://discuss.elastic.co/t/max-doc-count-in-terms-aggragation/131142)
**Author:** [@gilisade](https://discuss.elastic.co/u/gilisade)\ **Replies:** 1\ **Last updated:** [May 10, 2018, 4:43pm UTC](https://discuss.elastic.co/t/max-doc-count-in-terms-aggragation/131142 "2018-05-10T16:43:42Z")
Hi using Es 5.4 Is there a way to do a max doc count like min doc count in terms agg? i want to get back only the first 200 (size : 200) buckets that contain max of 2000 doc count . what i encountered with is this: … --- ## [Filter on in elasticsearch-1.2.1 trigger the error below. How can i resolve this? i am new to elasticsearch](https://discuss.elastic.co/t/filter-on-in-elasticsearch-1-2-1-trigger-the-error-below-how-can-i-resolve-this-i-am-new-to-elasticsearch/111944)
**Author:** [@Hein\_Htet](https://discuss.elastic.co/u/Hein_Htet)\ **Replies:** 7\ **Last updated:** [December 16, 2017, 8:06am UTC](https://discuss.elastic.co/t/filter-on-in-elasticsearch-1-2-1-trigger-the-error-below-how-can-i-resolve-this-i-am-new-to-elasticsearch/111944 "2017-12-16T08:06:41Z")
\[DEBUG\]\[action.search.type \] \[Hobgoblin II\] \[product\_catalogue\]\[4\], node\[DKcHeBciTEmIBk6UsZuSTQ\], \[P\], s\[STARTED\]: Failed to execute \[org.elasticsearch.action.search.SearchRequest@79f7411\] org.elasticsearch.search.Search… --- ## [Phantom immediately exited with: 127](https://discuss.elastic.co/t/phantom-immediately-exited-with-127/59641)
**Author:** [@pvogensen](https://discuss.elastic.co/u/pvogensen)\ **Replies:** 7\ **Last updated:** [December 8, 2016, 4:59pm UTC](https://discuss.elastic.co/t/phantom-immediately-exited-with-127/59641 "2016-12-08T16:59:54Z")
I've just finished installing Reporting and have tried several times to generate a report, however every time i try I receive the following text "Phantom immediately exited with: 127" and the report fails. Any advice g… --- ## [Cant get Logstash to connect to ES ( localhost )](https://discuss.elastic.co/t/cant-get-logstash-to-connect-to-es-localhost/33592)
**Author:** [@Kyle\_Hartigan](https://discuss.elastic.co/u/Kyle_Hartigan)\ **Replies:** 7\ **Last updated:** [November 4, 2015, 2:20pm UTC](https://discuss.elastic.co/t/cant-get-logstash-to-connect-to-es-localhost/33592 "2015-11-04T14:20:55Z")
i am doing a brand new clean install of Logstash and Elasticsearch ( version 2.0) and i am having issues getting logstash to connect to the elasticsearch server on the same host, there is no firewall installed and i c… [Previous page](https://discuss.elastic.co/top.md?page=600&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=602&per_page=50&period=all)