# Top **URL:** https://discuss.elastic.co/top.md?page=613&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 614 --- ## [Displaying String (Text) Value in TSVB](https://discuss.elastic.co/t/displaying-string-text-value-in-tsvb/199223)
**Author:** [@arnim](https://discuss.elastic.co/u/arnim)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 2:58am UTC](https://discuss.elastic.co/t/displaying-string-text-value-in-tsvb/199223 "2019-09-18T02:58:34Z")
Hi, I would like to create a markdown in TSVB that display the top hit of following data: query\_id \[string\] longest\_duration \[int\] highest\_concurrent\_transaction \[int\] I would like to display all of them in a single… --- ## [Unsupported ciphers with Java and Shield](https://discuss.elastic.co/t/unsupported-ciphers-with-java-and-shield/34487)
**Author:** [@jnewmoyer](https://discuss.elastic.co/u/jnewmoyer)\ **Replies:** 2\ **Last updated:** [November 13, 2015, 3:57pm UTC](https://discuss.elastic.co/t/unsupported-ciphers-with-java-and-shield/34487 "2015-11-13T15:57:06Z")
Using Java 1.7 with Shield to connect to our Found hosted instance using ElasticSearch 1.7.3. Getting the following stack when connecting: ERROR 2015-11-13 06:09:56,500 main - \[Saturnyne\] unsupported ciphers \[\[TLS\_ECDH… --- ## [How to embedded kibana dashboard in IOS mobile](https://discuss.elastic.co/t/how-to-embedded-kibana-dashboard-in-ios-mobile/158586)
**Author:** [@Nethaji](https://discuss.elastic.co/u/Nethaji)\ **Replies:** 7\ **Last updated:** [November 29, 2018, 3:21pm UTC](https://discuss.elastic.co/t/how-to-embedded-kibana-dashboard-in-ios-mobile/158586 "2018-11-29T15:21:19Z")
Hi How we create a dashboard in Mobile layout in kibana , it have only desktop layout. can u please provide some suggestions to create a dashboard in mobile layout. and how to embedded the kibana dashboard in IOS --- ## [Elastic Endpoint Expected CPU Usage](https://discuss.elastic.co/t/elastic-endpoint-expected-cpu-usage/259889)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 6\ **Last updated:** [January 2, 2021, 4:29pm UTC](https://discuss.elastic.co/t/elastic-endpoint-expected-cpu-usage/259889 "2021-01-02T16:29:18Z")
Hello, I've been playing around with Elastic Endpoint lately on my home Windows 10 pc, which has 4 CPU cores. I see that the elastic-endpoint.exe process is using around 24 % Normalized CPU: I'm just wondering if thi… --- ## [Call to route in Kibana plugin and then to external REST API](https://discuss.elastic.co/t/call-to-route-in-kibana-plugin-and-then-to-external-rest-api/252087)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 6\ **Last updated:** [October 15, 2020, 10:42am UTC](https://discuss.elastic.co/t/call-to-route-in-kibana-plugin-and-then-to-external-rest-api/252087 "2020-10-15T10:42:35Z")
I am creating a visualization plugin for extracting all filters that is applied to the current dashboard and submit it to an external rest API. It is working effortlessly in my local development environment (ES & Kibana … --- ## [Cross cluster replication](https://discuss.elastic.co/t/cross-cluster-replication/94547)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 6\ **Last updated:** [July 27, 2017, 3:44pm UTC](https://discuss.elastic.co/t/cross-cluster-replication/94547 "2017-07-27T15:44:22Z")
https://www.elastic.co/cloud/as-a-service/pricing mentions that there is an option for HA (High Availability) that offers replication and automatic fail over. A few questions about replication: Is this active repli… --- ## [Default Mapping Setup](https://discuss.elastic.co/t/default-mapping-setup/28111)
**Author:** [@JoeeGrigg](https://discuss.elastic.co/u/JoeeGrigg)\ **Replies:** 6\ **Last updated:** [August 26, 2015, 2:21pm UTC](https://discuss.elastic.co/t/default-mapping-setup/28111 "2015-08-26T14:21:09Z")
I have been trying to set up default mappings for a brand new index and I keep getting errors. This is what I am doing PUT /documents { mappings": { "\_default\_: { "title": {"type": "string"}, "autho… --- ## [Visualize Count specific text](https://discuss.elastic.co/t/visualize-count-specific-text/179301)
**Author:** [@yasin](https://discuss.elastic.co/u/yasin)\ **Replies:** 4\ **Last updated:** [May 3, 2019, 8:51am UTC](https://discuss.elastic.co/t/visualize-count-specific-text/179301 "2019-05-03T08:51:22Z")
Dear Team, I want to have two counts on same BAR. One with the following: "must": \[ { "match": { "message": "Start ^ofp+auto-release as FINAL" And one with : "must": \[ { … --- ## [Search using "OR" condition on keyword field that contains spaces](https://discuss.elastic.co/t/search-using-or-condition-on-keyword-field-that-contains-spaces/213976)
**Author:** [@dedicatedmanagers](https://discuss.elastic.co/u/dedicatedmanagers)\ **Replies:** 8\ **Last updated:** [January 8, 2020, 9:01am UTC](https://discuss.elastic.co/t/search-using-or-condition-on-keyword-field-that-contains-spaces/213976 "2020-01-08T09:01:03Z")
My data "keywords" contain spaces. So "X AAA" is one "keyword". And "B AAA" is another keyword. My data will only have one of these in the actual field. So the data field will never look like a combination of the tw… --- ## [Delete index from logstash](https://discuss.elastic.co/t/delete-index-from-logstash/206555)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 8\ **Last updated:** [November 14, 2019, 8:49am UTC](https://discuss.elastic.co/t/delete-index-from-logstash/206555 "2019-11-14T08:49:13Z")
hi i have 1 summary index , which get refresh once in day . i want to delete all the data from index every day when logstash run i want to delete data from index or index itself . here i cant use id column to update … --- ## [Sensu to send logs to logstash](https://discuss.elastic.co/t/sensu-to-send-logs-to-logstash/74920)
**Author:** [@Lakshmi\_D](https://discuss.elastic.co/u/Lakshmi_D)\ **Replies:** 8\ **Last updated:** [February 14, 2017, 7:31pm UTC](https://discuss.elastic.co/t/sensu-to-send-logs-to-logstash/74920 "2017-02-14T19:31:17Z")
im not able to see logs from to elk --- ## [Fortinet firewall logs in ELK](https://discuss.elastic.co/t/fortinet-firewall-logs-in-elk/213343)
**Author:** [@rguptarg](https://discuss.elastic.co/u/rguptarg)\ **Replies:** 3\ **Last updated:** [December 30, 2019, 1:49pm UTC](https://discuss.elastic.co/t/fortinet-firewall-logs-in-elk/213343 "2019-12-30T13:49:34Z")
HI Team, I am getting logs from Fortinet firewall and config file for this input { tcp { port =\> 5014 type =\> syslog } udp { port =\> 5014 type =\> syslog } } filter { if \[type\] == "syslog" { grok { match =\> … --- ## [Alert when there is anomaly in machine learning?](https://discuss.elastic.co/t/alert-when-there-is-anomaly-in-machine-learning/92751)
**Author:** [@michaelcheung](https://discuss.elastic.co/u/michaelcheung)\ **Replies:** 3\ **Last updated:** [July 14, 2017, 4:32pm UTC](https://discuss.elastic.co/t/alert-when-there-is-anomaly-in-machine-learning/92751 "2017-07-14T16:32:47Z")
Using machine learning, I feed my system's cpu load data to a job continuously. I would like to know if there is combination usage with x-pack's watcher, alerting me when there is anomaly analyzed in machine learning. I… --- ## [Unique count metric is Inconsistent](https://discuss.elastic.co/t/unique-count-metric-is-inconsistent/33128)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 3\ **Last updated:** [October 28, 2015, 12:18pm UTC](https://discuss.elastic.co/t/unique-count-metric-is-inconsistent/33128 "2015-10-28T12:18:47Z")
I have two visualizations - both against the same saved search (and the same timeframe). One is a Data table , that on top of some other summaries (which in this case includes all docs) , includes a Unique count metric … --- ## [Permanently Delete All Old Documents with a Rollup Job?](https://discuss.elastic.co/t/permanently-delete-all-old-documents-with-a-rollup-job/218801)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 5\ **Last updated:** [February 17, 2020, 11:48am UTC](https://discuss.elastic.co/t/permanently-delete-all-old-documents-with-a-rollup-job/218801 "2020-02-17T11:48:47Z")
Hello Master Elasticsearch Gurus, I am new to ELK and last year implemented a simple Elasticsearch server (ver 7.4.0, I know, I have to upgrade) that is archiving some simple production user data. When I set up ES, I t… --- ## [Metricbeats on GKE not working as expected - Missing deployments, nodes, etc](https://discuss.elastic.co/t/metricbeats-on-gke-not-working-as-expected-missing-deployments-nodes-etc/204948)
**Author:** [@Henrique\_Marques\_Fer](https://discuss.elastic.co/u/Henrique_Marques_Fer)\ **Replies:** 7\ **Last updated:** [December 7, 2019, 10:24pm UTC](https://discuss.elastic.co/t/metricbeats-on-gke-not-working-as-expected-missing-deployments-nodes-etc/204948 "2019-12-07T22:24:30Z")
I followed everything as the tutorial is saying: https://www.elastic.co/guide/en/beats/metricbeat/current/running-on-kubernetes.html But I still don't get my nodes and deployments status: I have kube-state-metrics ru… --- ## [Packetbeat: Packetbeat on Windows Server 2008, running but not logging](https://discuss.elastic.co/t/packetbeat-packetbeat-on-windows-server-2008-running-but-not-logging/44970)
**Author:** [@krushnat\_khawale](https://discuss.elastic.co/u/krushnat_khawale)\ **Replies:** 7\ **Last updated:** [March 23, 2016, 1:19pm UTC](https://discuss.elastic.co/t/packetbeat-packetbeat-on-windows-server-2008-running-but-not-logging/44970 "2016-03-23T13:19:12Z")
Hello {Elastic} World, I am able to run Packetbeat successfully on one of staging server(windows server 2008), but it is not sending data to ES of remote computers. I've packetbeat logs for 3 days, and I am only seeing… --- ## [Elasticsearch 1.7.2 sudden crash after 26 hours](https://discuss.elastic.co/t/elasticsearch-1-7-2-sudden-crash-after-26-hours/34382)
**Author:** [@jaminvp](https://discuss.elastic.co/u/jaminvp)\ **Replies:** 7\ **Last updated:** [March 4, 2016, 6:43am UTC](https://discuss.elastic.co/t/elasticsearch-1-7-2-sudden-crash-after-26-hours/34382 "2016-03-04T06:43:08Z")
Greetings, I noticed my Elasticsearch v1.7.2 crashed after running for over 24 hours. The exact error is: "A fatal error has been detected by the Java Runtime Environment: EXCEPTION\_ACCESS\_VIOLATION (0xc0000005) … --- ## [Unable to connect to elasticsearch using elasticsearch-py when password contains special characters](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-using-elasticsearch-py-when-password-contains-special-characters/35612)
**Author:** [@etfeet](https://discuss.elastic.co/u/etfeet)\ **Replies:** 1\ **Last updated:** [November 25, 2015, 11:54pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-using-elasticsearch-py-when-password-contains-special-characters/35612 "2015-11-25T23:54:14Z")
I have a python script and when I try to connect to an elasticsearch cluster that is using shield and the user's password contains special characters I am unable to connect. python script is unable to connect to es clu… --- ## [Logstash Output Elasticsearch bulk\_path](https://discuss.elastic.co/t/logstash-output-elasticsearch-bulk-path/117031)
**Author:** [@TclasenITVT](https://discuss.elastic.co/u/TclasenITVT)\ **Replies:** 6\ **Last updated:** [January 29, 2018, 11:04am UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-bulk-path/117031 "2018-01-29T11:04:55Z")
Maybe I just don't understood the Documentation of bulk\_path but as I understood you would use bulk\_path to specifiy the index and then logstash automatically appends /\_bulk. I noticed running Logstash 6.1.1 and Elastics… --- ## [Unable to install plugins in elastic search](https://discuss.elastic.co/t/unable-to-install-plugins-in-elastic-search/65638)
**Author:** [@narendra\_reddy](https://discuss.elastic.co/u/narendra_reddy)\ **Replies:** 1\ **Last updated:** [November 10, 2016, 11:21am UTC](https://discuss.elastic.co/t/unable-to-install-plugins-in-elastic-search/65638 "2016-11-10T11:21:37Z")
Hi I am trying to install the plugin royrusso/elasticsearch-HQ its not working, below is the output. Raja:bin XXXX$ ./elasticsearch-plugin install file:///Users/XXXX/Downloads/royrusso-elasticsearch-HQ-v2.0.3-2-gfe18b… --- ## [Duplicate events with filebeat -\> logstash -\> elasticsearch pipeline](https://discuss.elastic.co/t/duplicate-events-with-filebeat-logstash-elasticsearch-pipeline/105348)
**Author:** [@an.secure](https://discuss.elastic.co/u/an.secure)\ **Replies:** 5\ **Last updated:** [October 31, 2017, 4:42pm UTC](https://discuss.elastic.co/t/duplicate-events-with-filebeat-logstash-elasticsearch-pipeline/105348 "2017-10-31T16:42:27Z")
I have below pipeline to parse the log files written by an application and send them to elasticsearch : filebeat -\> logstash -\> elasticsearch For some time my elasticsearch node went down. When I restarted the elastics… --- ## [UEBA for elk](https://discuss.elastic.co/t/ueba-for-elk/223353)
**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\ **Replies:** 2\ **Last updated:** [March 13, 2020, 7:54am UTC](https://discuss.elastic.co/t/ueba-for-elk/223353 "2020-03-13T07:54:06Z")
hello there is there an opensource UEBA that can be integrated with Elastic stack? and also a Netework monitoring tools --- ## [How to query a multi-value field?](https://discuss.elastic.co/t/how-to-query-a-multi-value-field/14671)
**Author:** [@Daniel\_Guo](https://discuss.elastic.co/u/Daniel_Guo)\ **Replies:** 2\ **Last updated:** [December 3, 2013, 10:17am UTC](https://discuss.elastic.co/t/how-to-query-a-multi-value-field/14671 "2013-12-03T10:17:21Z")
For example, I have a field which can have multiple value: { "areaId" : \[12, 45, 86, 92, 10\] } If I want to index documents whose "areaId" field contains 92, or contains 92 and 10, what is the best approach? Thank… --- ## [Elasticsearch Indexing Rate - API](https://discuss.elastic.co/t/elasticsearch-indexing-rate-api/209312)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 3\ **Last updated:** [November 25, 2019, 2:53pm UTC](https://discuss.elastic.co/t/elasticsearch-indexing-rate-api/209312 "2019-11-25T14:53:17Z")
Hi, I'm trying to calculate the Indexing rate for our cluster using the API. I'm basically trying to replicate the data from the "Monitoring" graphs for our external alerting system. As you can see these are showing an … --- ## [\[script\] Too many dynamic script compilations within one minute, max: \[15/min\]](https://discuss.elastic.co/t/script-too-many-dynamic-script-compilations-within-one-minute-max-15-min/129406)
**Author:** [@anoopvalluthadam](https://discuss.elastic.co/u/anoopvalluthadam)\ **Replies:** 6\ **Last updated:** [May 20, 2018, 9:23pm UTC](https://discuss.elastic.co/t/script-too-many-dynamic-script-compilations-within-one-minute-max-15-min/129406 "2018-05-20T21:23:34Z")
I have almost 10K of scripts like this: POST \_scripts/536672d3cface3ddbb63666bf1b6030f { "script": { "lang": "painless", "source": "Pattern p = /\\\\s?a\\\\S\*?/i; p.matcher(params.\_source.summary ?: '').find()… --- ## [Does kibana support weighted average calculations](https://discuss.elastic.co/t/does-kibana-support-weighted-average-calculations/109928)
**Author:** [@scch](https://discuss.elastic.co/u/scch)\ **Replies:** 6\ **Last updated:** [December 11, 2017, 6:14am UTC](https://discuss.elastic.co/t/does-kibana-support-weighted-average-calculations/109928 "2017-12-11T06:14:51Z")
Hi, Does kibana support weighted average if yes, can someone shed some light on it ? or is there any way to write a query for same? Thank you.. --- ## [Csv file upload in logstash but data is not showing in kibana and elasticsearch](https://discuss.elastic.co/t/csv-file-upload-in-logstash-but-data-is-not-showing-in-kibana-and-elasticsearch/187508)
**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\ **Replies:** 7\ **Last updated:** [June 27, 2019, 4:32am UTC](https://discuss.elastic.co/t/csv-file-upload-in-logstash-but-data-is-not-showing-in-kibana-and-elasticsearch/187508 "2019-06-27T04:32:14Z")
I am trying to upload countrties csv file on logstash and follow output I get on windows 10. Can some one help me on this so I will upload csv file in logstash D:\\ELK\\Logstash\\logstash-7.1.1\\bin\>logstash --config.test\_… --- ## [Cluster nodes not detecting each others (V7.2)](https://discuss.elastic.co/t/cluster-nodes-not-detecting-each-others-v7-2/188090)
**Author:** [@EtienneDemers](https://discuss.elastic.co/u/EtienneDemers)\ **Replies:** 2\ **Last updated:** [June 28, 2019, 5:40pm UTC](https://discuss.elastic.co/t/cluster-nodes-not-detecting-each-others-v7-2/188090 "2019-06-28T17:40:19Z")
I've got 6 centOS7 servers with fresh ES 7.2 installed on them. I'm trying to get them all in a single cluster but somehow all none of them detects the other nodes. All firewalld are disabled and stopped so i don't thin… --- ## ["No endpoint or operation is available at \[\_xpack\]"](https://discuss.elastic.co/t/no-endpoint-or-operation-is-available-at--xpack/83050)
**Author:** [@X\_Calibur](https://discuss.elastic.co/u/X_Calibur)\ **Replies:** 2\ **Last updated:** [April 24, 2017, 11:35am UTC](https://discuss.elastic.co/t/no-endpoint-or-operation-is-available-at--xpack/83050 "2017-04-24T11:35:09Z")
After installing X-Pack I get "too many redirects" on the browser and the above message in the Kibana logs. What went wrong? --- ## [ELK stack running on Marathon](https://discuss.elastic.co/t/elk-stack-running-on-marathon/29929)
**Author:** [@cruizpollino](https://discuss.elastic.co/u/cruizpollino)\ **Replies:** 2\ **Last updated:** [September 29, 2015, 4:58pm UTC](https://discuss.elastic.co/t/elk-stack-running-on-marathon/29929 "2015-09-29T16:58:57Z")
Good evening everyone, As part of a new project within my company we decided to use ELK stack. One of the pre-requisites of such project is that all components shall have HA configured. For ElasticSearch HA comes b… --- ## [Aggregate "array" length's across documents](https://discuss.elastic.co/t/aggregate-array-lengths-across-documents/254646)
**Author:** [@Courtan](https://discuss.elastic.co/u/Courtan)\ **Replies:** 1\ **Last updated:** [November 8, 2020, 2:53pm UTC](https://discuss.elastic.co/t/aggregate-array-lengths-across-documents/254646 "2020-11-08T14:53:55Z")
I am trying to count Array Elements across all documents and sum them up, but I keep getting this error: "No field found for \[offers\] in mapping with types \[ \]" Mappings { "mappings": { "properties": { "of… --- ## [Dead Letter Queue and its usage](https://discuss.elastic.co/t/dead-letter-queue-and-its-usage/189984)
**Author:** [@dhruvsingh](https://discuss.elastic.co/u/dhruvsingh)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 1:58pm UTC](https://discuss.elastic.co/t/dead-letter-queue-and-its-usage/189984 "2019-07-15T13:58:22Z")
There have already been a lot of discussions on dead\_letter\_queue but FWIW I could not find answers to all my questions, and thus posting them out here. My setup (local machine): logstash - 6.8.1 ES - Version: 6.8.1, … --- ## [Obtain complete raws logs in Table Visualization](https://discuss.elastic.co/t/obtain-complete-raws-logs-in-table-visualization/81150)
**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\ **Replies:** 2\ **Last updated:** [April 5, 2017, 8:00am UTC](https://discuss.elastic.co/t/obtain-complete-raws-logs-in-table-visualization/81150 "2017-04-05T08:00:43Z")
Hello, I would like to display raw logs in a Table visualization like in Discover Tab View : But when i build my Table visualization, Kibana cut each raw : Did you have an idea to resolve this? Thanks, --- ## [Combining data from two document types in Kibana Visualization](https://discuss.elastic.co/t/combining-data-from-two-document-types-in-kibana-visualization/121826)
**Author:** [@vinay.bhardwaj](https://discuss.elastic.co/u/vinay.bhardwaj)\ **Replies:** 2\ **Last updated:** [March 1, 2018, 8:20pm UTC](https://discuss.elastic.co/t/combining-data-from-two-document-types-in-kibana-visualization/121826 "2018-03-01T20:20:30Z")
How can I combine data from two different types in Kibana? Suppose I have a document type 'child' with fields 'firstName' & 'fathersFirstName' and document type 'parent' with fields 'firstName' & 'lastName'. I want to … --- ## [Logstash architecture](https://discuss.elastic.co/t/logstash-architecture/88983)
**Author:** [@Fly](https://discuss.elastic.co/u/Fly)\ **Replies:** 7\ **Last updated:** [June 12, 2017, 9:42am UTC](https://discuss.elastic.co/t/logstash-architecture/88983 "2017-06-12T09:42:10Z")
hi admin I want to ask, Logstash architecture is similar to ELK architecture??? --- ## [Kibana starts but does not show in browser](https://discuss.elastic.co/t/kibana-starts-but-does-not-show-in-browser/61251)
**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\ **Replies:** 1\ **Last updated:** [September 23, 2016, 3:07am UTC](https://discuss.elastic.co/t/kibana-starts-but-does-not-show-in-browser/61251 "2016-09-23T03:07:26Z")
Hi, I've upgraded my nodes to Elasticsearch 2.4.0 and that went fine. Elasticsearch cluster is up and running. Then I upgraded Kibana from 4.5.0 to 4.6.1 and it will start but I cannot access Kibana in my browser. I've… --- ## [How do i add a custom HTTP header using the python client?](https://discuss.elastic.co/t/how-do-i-add-a-custom-http-header-using-the-python-client/38907)
**Author:** [@danaronson](https://discuss.elastic.co/u/danaronson)\ **Replies:** 1\ **Last updated:** [January 12, 2016, 11:14pm UTC](https://discuss.elastic.co/t/how-do-i-add-a-custom-http-header-using-the-python-client/38907 "2016-01-12T23:14:36Z")
I'm currently looking thought the code, but haven't found a way to do it yet. I want to add a constant custom header to each of the HTTP requests. I'm using RequestsHttpConnection. My use case is that i am trying to … --- ## [X-Pack Watcher Duplicate Slack Notifications](https://discuss.elastic.co/t/x-pack-watcher-duplicate-slack-notifications/136087)
**Author:** [@ddregalo](https://discuss.elastic.co/u/ddregalo)\ **Replies:** 2\ **Last updated:** [June 25, 2018, 11:11am UTC](https://discuss.elastic.co/t/x-pack-watcher-duplicate-slack-notifications/136087 "2018-06-25T11:11:03Z")
Hi, I have set up a watcher to check "monitor.status": "down" with a condition of "ctx.payload.hits.total" : { "gt": 0 } and throttle\_period of 30 minutes (inside the actions) for a "notify-slack" action. This works fi… --- ## [Filebeat as sidecar best practices](https://discuss.elastic.co/t/filebeat-as-sidecar-best-practices/296289)
**Author:** [@rpetre](https://discuss.elastic.co/u/rpetre)\ **Replies:** 0\ **Last updated:** [February 4, 2022, 12:04pm UTC](https://discuss.elastic.co/t/filebeat-as-sidecar-best-practices/296289 "2022-02-04T12:04:06Z")
I'm using filebeat inside of kubernetes both as daemonset (to capture stdout of all containers), but also as sidecar in specific pods, to ship application logs that are written to shared volumes. The documentation is som… --- ## [Problem with kv filter](https://discuss.elastic.co/t/problem-with-kv-filter/185644)
**Author:** [@GGUERRA](https://discuss.elastic.co/u/GGUERRA)\ **Replies:** 3\ **Last updated:** [June 17, 2019, 7:24am UTC](https://discuss.elastic.co/t/problem-with-kv-filter/185644 "2019-06-17T07:24:11Z")
Hello everyone, I have the following situation, I am reading the logs from a file and these come as follows: Jun 12 23:29:08 172.17.6.10 field1="value1" field2=value2 field3=value3 ... etc My input, filter and output … --- ## [Duplicate IDs across rollover indices](https://discuss.elastic.co/t/duplicate-ids-across-rollover-indices/196388)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 5\ **Last updated:** [August 26, 2019, 2:18pm UTC](https://discuss.elastic.co/t/duplicate-ids-across-rollover-indices/196388 "2019-08-26T14:18:15Z")
I am ingesting data into a rollover index. The data comes from an API and gives updates on previously ingested events. Each event has a field that is unique and I am using this as the document ID. However, I've come a… --- ## [ElasticSearch performance problem for dynamic field mapping](https://discuss.elastic.co/t/elasticsearch-performance-problem-for-dynamic-field-mapping/105094)
**Author:** [@live4forever](https://discuss.elastic.co/u/live4forever)\ **Replies:** 8\ **Last updated:** [October 25, 2017, 7:03pm UTC](https://discuss.elastic.co/t/elasticsearch-performance-problem-for-dynamic-field-mapping/105094 "2017-10-25T19:03:28Z")
I have an ES on linux and I index the documents using Nest framework. But the problem is there is one object that containes dynamic field. For exp: there is a class named Product and one of its properties is dynamic whic… --- ## [Compare 2 tables and add matching field in second table to first table](https://discuss.elastic.co/t/compare-2-tables-and-add-matching-field-in-second-table-to-first-table/38781)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 8\ **Last updated:** [April 6, 2016, 7:47am UTC](https://discuss.elastic.co/t/compare-2-tables-and-add-matching-field-in-second-table-to-first-table/38781 "2016-04-06T07:47:57Z")
How can I Compare 2 tables and add matching field in second table to first table. Not sure what query syntax should I use Table 1 Field1 1020 1021 1022 1023 1025 Table2 Field1 FieldX 1021 "Good" 1023 "Bad" Re… --- ## [Newbie trying to setup elastic search with mongodb and nodejs](https://discuss.elastic.co/t/newbie-trying-to-setup-elastic-search-with-mongodb-and-nodejs/11996)
**Author:** [@nik\_jain](https://discuss.elastic.co/u/nik_jain)\ **Replies:** 8\ **Last updated:** [May 17, 2013, 4:01pm UTC](https://discuss.elastic.co/t/newbie-trying-to-setup-elastic-search-with-mongodb-and-nodejs/11996 "2013-05-17T16:01:34Z")
I have followed the steps in this guide here: https://coderwall.com/p/sy1qcw This is what I am trying to update with. #!/bin/sh curl -XPUT "localhost:9200/\_river/some\_db/\_meta" -d ' { "type": "mongodb", "mo… --- ## [Delete snapshot not working in Elasticsearch 1.7.3](https://discuss.elastic.co/t/delete-snapshot-not-working-in-elasticsearch-1-7-3/42301)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 6\ **Last updated:** [February 23, 2016, 6:18am UTC](https://discuss.elastic.co/t/delete-snapshot-not-working-in-elasticsearch-1-7-3/42301 "2016-02-23T06:18:04Z")
Hi All, I am trying to delete old snapshots in the ES Repository by using the following curl command but I am getting below error, Repository name:- backup Repository path:- opt/grd/common/ES\_Backup Curl command cu… --- ## [Trouble with \_msearch, Unexpected character (':' (code 58)):](https://discuss.elastic.co/t/trouble-with--msearch-unexpected-character-code-58/10139)
**Author:** [@David\_Boon](https://discuss.elastic.co/u/David_Boon)\ **Replies:** 3\ **Last updated:** [December 22, 2012, 12:35am UTC](https://discuss.elastic.co/t/trouble-with--msearch-unexpected-character-code-58/10139 "2012-12-22T00:35:04Z")
I'm having some trouble getting a search to work. I started with a working query against one index, here's the query that works with one index: curl -s -v -XGET http://localhost:9200/persons/\_search\\?pretty\\=true -… --- ## [Upgrade Rollback](https://discuss.elastic.co/t/upgrade-rollback/218774)
**Author:** [@rahulka](https://discuss.elastic.co/u/rahulka)\ **Replies:** 1\ **Last updated:** [February 11, 2020, 1:35pm UTC](https://discuss.elastic.co/t/upgrade-rollback/218774 "2020-02-11T13:35:45Z")
I have elastic search version 5.5 planning to upgrade it to 7.x .h How can we rollback es node to 5.5 again after the upgrade. Is it even possible? --- ## [Logstash syslog \_grokparsefailure errors](https://discuss.elastic.co/t/logstash-syslog-grokparsefailure-errors/180918)
**Author:** [@mkain](https://discuss.elastic.co/u/mkain)\ **Replies:** 1\ **Last updated:** [May 14, 2019, 6:26am UTC](https://discuss.elastic.co/t/logstash-syslog-grokparsefailure-errors/180918 "2019-05-14T06:26:58Z")
Hi, I am using default syslog parser config from elastic site. input { tcp { port =\> 514 type =\> syslog } udp { port =\> 514 type =\> syslog } } filter { if \[type\] == "syslog" { grok { … --- ## [Show colored heading in the Kibana Dashboard](https://discuss.elastic.co/t/show-colored-heading-in-the-kibana-dashboard/272039)
**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\ **Replies:** 2\ **Last updated:** [May 4, 2021, 2:32pm UTC](https://discuss.elastic.co/t/show-colored-heading-in-the-kibana-dashboard/272039 "2021-05-04T14:32:54Z")
Hi, I want to show a heading in my health check dashboard. Color of this heading should be able to change to Green, Yellow and Red depending on the health status. I could not find any straight forward way to create this… [Previous page](https://discuss.elastic.co/top.md?page=612&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=614&per_page=50&period=all)