# Top **URL:** https://discuss.elastic.co/top.md?page=641&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 642 --- ## [How to de-duplicate results in Kibana Search](https://discuss.elastic.co/t/how-to-de-duplicate-results-in-kibana-search/242193)
**Author:** [@sxddhxrthx](https://discuss.elastic.co/u/sxddhxrthx)\ **Replies:** 1\ **Last updated:** [July 23, 2020, 3:31pm UTC](https://discuss.elastic.co/t/how-to-de-duplicate-results-in-kibana-search/242193 "2020-07-23T15:31:08Z")
I am trying to build dashboards using Shakespeare play data. on searching play\_name:\* in kql search box I am getting play names all the time they are indexed. I want to display one play names only once Any help how c… --- ## [Elasticsearch 2.4.3 very high cpu usage](https://discuss.elastic.co/t/elasticsearch-2-4-3-very-high-cpu-usage/184424)
**Author:** [@fgd123](https://discuss.elastic.co/u/fgd123)\ **Replies:** 7\ **Last updated:** [June 7, 2019, 12:44am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-3-very-high-cpu-usage/184424 "2019-06-07T00:44:09Z")
ES version :2.4.3 java version:1.8.0\_121 Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode) My production ES nodes just only one,it is master node and also the data node ,it have 4 CPUs, and 8 GB RAM,ES … --- ## [Failed to connect to node \[{}{}{localhost}{127.0.0.1:9300}\], removed from nodes list](https://discuss.elastic.co/t/failed-to-connect-to-node-localhost-127-0-0-1-9300-removed-from-nodes-list/226640)
**Author:** [@Vishnu\_Vardhan](https://discuss.elastic.co/u/Vishnu_Vardhan)\ **Replies:** 4\ **Last updated:** [May 4, 2020, 10:47am UTC](https://discuss.elastic.co/t/failed-to-connect-to-node-localhost-127-0-0-1-9300-removed-from-nodes-list/226640 "2020-05-04T10:47:25Z")
geoportal\_1 | 2020-04-05 06:46:38,400 INFO \[org.elasticsearch.client.transport.TransportClientNodesService\] - failed to connect to node \[{#transport#-1}{DTai1v8zS96dztCUpGku4w}{localhost}{127.0.0.1:9300}\], removed f… --- ## [Problem with large files & output](https://discuss.elastic.co/t/problem-with-large-files-output/49378)
**Author:** [@Janet](https://discuss.elastic.co/u/Janet)\ **Replies:** 4\ **Last updated:** [May 7, 2016, 4:15am UTC](https://discuss.elastic.co/t/problem-with-large-files-output/49378 "2016-05-07T04:15:40Z")
I have a case that works fine on logstash 1.5.x but breaks in 2.2, 2.3, and 5.0 (I haven't tried 2.0 or 2.1). I have hourly syslog files that are approximately 3 gig each. I'm trying to backfill logs going back to Janu… --- ## [Kibana is unable to find any mapping](https://discuss.elastic.co/t/kibana-is-unable-to-find-any-mapping/1212)
**Author:** [@iinquisitivee](https://discuss.elastic.co/u/iinquisitivee)\ **Replies:** 4\ **Last updated:** [May 25, 2015, 5:06pm UTC](https://discuss.elastic.co/t/kibana-is-unable-to-find-any-mapping/1212 "2015-05-25T17:06:22Z")
I just installed Elastic search some 3 days back on my windows machine and created indexes with the names 1. places 2. restaurants 3. index 4. ' 3 and 4 were created by mistake... downloaded Kibana 4 today though Kib… --- ## [Filebeat 7.17.3 invalid CRI log format error](https://discuss.elastic.co/t/filebeat-7-17-3-invalid-cri-log-format-error/307130)
**Author:** [@krish0608](https://discuss.elastic.co/u/krish0608)\ **Replies:** 5\ **Last updated:** [June 16, 2022, 10:17am UTC](https://discuss.elastic.co/t/filebeat-7-17-3-invalid-cri-log-format-error/307130 "2022-06-16T10:17:01Z")
I am getting various CRI parsing errors, on Filebeat 7.17.3. I have cleared all filebeat state and restarted Filebeat, but these errors always occur. Here are a couple: FYI :- I am using Nomad containers. ERROR \[rea… --- ## [Filebeat -\> elastic: onConnect callback failed: error loading template](https://discuss.elastic.co/t/filebeat-elastic-onconnect-callback-failed-error-loading-template/296121)
**Author:** [@mevan](https://discuss.elastic.co/u/mevan)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 2:10pm UTC](https://discuss.elastic.co/t/filebeat-elastic-onconnect-callback-failed-error-loading-template/296121 "2022-02-07T14:10:52Z")
I have followed the instructions here: Grant privileges and roles needed for publishing | Filebeat Reference \[7.17\] | Elastic I have setup.ilm.check\_exists: false set in /etc/filebeat/filebeat.yml See screenshot of my … --- ## [Integration java testing](https://discuss.elastic.co/t/integration-java-testing/79237)
**Author:** [@Maarten\_Vandermeiren](https://discuss.elastic.co/u/Maarten_Vandermeiren)\ **Replies:** 1\ **Last updated:** [March 20, 2017, 2:20pm UTC](https://discuss.elastic.co/t/integration-java-testing/79237 "2017-03-20T14:20:31Z")
I have a spring MVC web application. Recently I started the migration of ElasticSearch 2.4 to 5.2 but I'm having problems with my Integration Tests in my application. With Elastic 2.4 I used an embedded elasticsearch f… --- ## [Multiple pipelines and multiple filebeats](https://discuss.elastic.co/t/multiple-pipelines-and-multiple-filebeats/141994)
**Author:** [@HRG](https://discuss.elastic.co/u/HRG)\ **Replies:** 2\ **Last updated:** [July 30, 2018, 8:25pm UTC](https://discuss.elastic.co/t/multiple-pipelines-and-multiple-filebeats/141994 "2018-07-30T20:25:34Z")
Can you please help me below. I have multiple pipelines. each pipleline configuration is receives data from different application servers where we installed filebeat. When i have single pipeline config running(on l… --- ## [Endgame not detecting malware](https://discuss.elastic.co/t/endgame-not-detecting-malware/289165)
**Author:** [@TimoG](https://discuss.elastic.co/u/TimoG)\ **Replies:** 7\ **Last updated:** [November 23, 2021, 9:25am UTC](https://discuss.elastic.co/t/endgame-not-detecting-malware/289165 "2021-11-23T09:25:24Z")
Hi, we are currently evaluating the Elastic Agent to be used as endpoint security solution within our company. We are especially interested in the features provided by Endgame. To get a feeling for the system I have se… --- ## [Implementing boost factor on conditional query](https://discuss.elastic.co/t/implementing-boost-factor-on-conditional-query/51235)
**Author:** [@manoj241176](https://discuss.elastic.co/u/manoj241176)\ **Replies:** 5\ **Last updated:** [May 30, 2016, 8:00am UTC](https://discuss.elastic.co/t/implementing-boost-factor-on-conditional-query/51235 "2016-05-30T08:00:34Z")
Hi, I am new to elasticsearch. I have document having values for employee, their department and salary. I want to apply boost factor based on department and their salary condition based i.e. salary less than 1500$ shou… --- ## [The offset field - what is it?](https://discuss.elastic.co/t/the-offset-field-what-is-it/24752)
**Author:** [@LansK](https://discuss.elastic.co/u/LansK)\ **Replies:** 0\ **Last updated:** [July 1, 2015, 7:17pm UTC](https://discuss.elastic.co/t/the-offset-field-what-is-it/24752 "2015-07-01T19:17:36Z")
For inputs that use the multiline codec, a field is created called “offset” and it is stored in elasticsearch. What is this field represent or is used for? I am guessing it is the location of the first character in the l… --- ## [X\_content\_parse\_exception](https://discuss.elastic.co/t/x-content-parse-exception/350381)
**Author:** [@redk1te](https://discuss.elastic.co/u/redk1te)\ **Replies:** 3\ **Last updated:** [January 5, 2024, 1:35pm UTC](https://discuss.elastic.co/t/x-content-parse-exception/350381 "2024-01-05T13:35:18Z")
Hi, I get the x\_content\_parse\_exception error with the next query. "reason": "\[10:13\] \[bool\] unknown field \[wildcard\]" without the "bool" section I get the error: "reason": "unknown query \[must\_not\]" Any suggestions… --- ## [Moving indices back to ilm hot phase](https://discuss.elastic.co/t/moving-indices-back-to-ilm-hot-phase/271413)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 3\ **Last updated:** [April 28, 2021, 11:31pm UTC](https://discuss.elastic.co/t/moving-indices-back-to-ilm-hot-phase/271413 "2021-04-28T23:31:46Z")
Hello, Is it possible to change the rules of ilm , so that indices will get back to hot node? For example, the original configuration was "move to warm storage after 5 days" , and we want to change it to 90 days. Ide… --- ## [Windows create beat fails with /build/python-env/bin/activate: No such file or directory](https://discuss.elastic.co/t/windows-create-beat-fails-with-build-python-env-bin-activate-no-such-file-or-directory/70203)
**Author:** [@mast](https://discuss.elastic.co/u/mast)\ **Replies:** 6\ **Last updated:** [January 5, 2017, 11:27am UTC](https://discuss.elastic.co/t/windows-create-beat-fails-with-build-python-env-bin-activate-no-such-file-or-directory/70203 "2017-01-05T11:27:52Z")
Hi, Trying to build a custom beat on windows but the command "make setup" fails with: \[path to custom beat folder\]/build/python-env/bin/activate: No such file or directory Seems like there is something wrong with th… --- ## [Where should "cluster.routing.allocation.same\_shard.host" be set?](https://discuss.elastic.co/t/where-should-cluster-routing-allocation-same-shard-host-be-set/38346)
**Author:** [@Chris\_Fraschetti](https://discuss.elastic.co/u/Chris_Fraschetti)\ **Replies:** 6\ **Last updated:** [May 24, 2016, 8:00pm UTC](https://discuss.elastic.co/t/where-should-cluster-routing-allocation-same-shard-host-be-set/38346 "2016-05-24T20:00:44Z")
Hi Folks. Can anyone confirm that when I have dedicated masters, "cluster.routing.allocation.same\_shard.host" is only relevant on the master nodes? Also, can I assume all cluster.routing.\* settings only apply to t… --- ## [ElasticSearch bulk api performance](https://discuss.elastic.co/t/elasticsearch-bulk-api-performance/4818)
**Author:** [@allwefantasy](https://discuss.elastic.co/u/allwefantasy)\ **Replies:** 6\ **Last updated:** [July 11, 2011, 11:38pm UTC](https://discuss.elastic.co/t/elasticsearch-bulk-api-performance/4818 "2011-07-11T23:38:34Z")
here is my code using bulk api: https://gist.github.com/1071233 single node (node info and performance log) https://gist.github.com/1071237 i find it really really slow. 20 documents per second! if i start… --- ## [Elasticsearch 6.2 - how to format date (epoch) field in yyyymm string in painless inline scripting](https://discuss.elastic.co/t/elasticsearch-6-2-how-to-format-date-epoch-field-in-yyyymm-string-in-painless-inline-scripting/133734)
**Author:** [@pungent](https://discuss.elastic.co/u/pungent)\ **Replies:** 0\ **Last updated:** [May 29, 2018, 6:22pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-how-to-format-date-epoch-field-in-yyyymm-string-in-painless-inline-scripting/133734 "2018-05-29T18:22:06Z")
In Elasticsearch 6.2, I have an index where there are two timestamp fields as follows: "start\_ts": { "type": "date", "format": "epoch\_second" }, "end\_ts": { "type": "date", "format": "epoch\_s… --- ## [Logstash 1.4.3 released](https://discuss.elastic.co/t/logstash-1-4-3-released/2238)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [June 9, 2015, 5:00pm UTC](https://discuss.elastic.co/t/logstash-1-4-3-released/2238 "2015-06-09T17:00:38Z")
Hello, We are pleased to announce the release of Logstash 1.4.3, an important bug fix release for the 1.4 series. Please check this blog for details: www.elastic.co/blog/logstash-1-4-3-released Download: https://www… --- ## [Extract hour and weekday from custom date time field](https://discuss.elastic.co/t/extract-hour-and-weekday-from-custom-date-time-field/237286)
**Author:** [@Rushabh\_Doshi](https://discuss.elastic.co/u/Rushabh_Doshi)\ **Replies:** 5\ **Last updated:** [June 17, 2020, 10:22am UTC](https://discuss.elastic.co/t/extract-hour-and-weekday-from-custom-date-time-field/237286 "2020-06-17T10:22:25Z")
for extracting hour and weekday from Activity-Time field the logstash snippet is as below: date{ match =\> \[ "Activity-Time", "yyyy-MM-dd HH:mm:ss" \] target =\> "Activity-Time-New" add\_field =\> {"hour" =\> "%{+HH}"} ad… --- ## [What is the boost factor of a should in a bool\_query?](https://discuss.elastic.co/t/what-is-the-boost-factor-of-a-should-in-a-bool-query/225163)
**Author:** [@abemail1](https://discuss.elastic.co/u/abemail1)\ **Replies:** 5\ **Last updated:** [March 26, 2020, 8:16pm UTC](https://discuss.elastic.co/t/what-is-the-boost-factor-of-a-should-in-a-bool-query/225163 "2020-03-26T20:16:57Z")
Hi, I'm a newbie to elasticsearch and couldn't find the answer to this in the online docs. I have a bool\_query with a must and a should. As I wanted the should part causes those results to be boosted. However, what I … --- ## [Indexing throttling in Elasticsearch \[2\]](https://discuss.elastic.co/t/indexing-throttling-in-elasticsearch-2/166033)
**Author:** [@bkostya](https://discuss.elastic.co/u/bkostya)\ **Replies:** 5\ **Last updated:** [January 30, 2019, 8:41am UTC](https://discuss.elastic.co/t/indexing-throttling-in-elasticsearch-2/166033 "2019-01-30T08:41:56Z")
Hello All, Back to the discussion from 2017 Is there a way for Elasticsearch to throttle indexing or search requests? I would argue on "All we have done is move the backpressure problem." We should let the client app… --- ## [Unable to run set-password in 6.1](https://discuss.elastic.co/t/unable-to-run-set-password-in-6-1/117326)
**Author:** [@intrepid1](https://discuss.elastic.co/u/intrepid1)\ **Replies:** 5\ **Last updated:** [February 2, 2018, 9:19pm UTC](https://discuss.elastic.co/t/unable-to-run-set-password-in-6-1/117326 "2018-02-02T21:19:36Z")
Hi there, I am setting up TLS on 6.1 and am having problems running set-password. I configure ES as follows: rm -rf elasticsearch-6.1.2 unzip elasticsearch-6.1.2.zip cp elasticsearch.yml /config ./bin/elasticsearch… --- ## [Pulling details of an event entry with Winlogbeat](https://discuss.elastic.co/t/pulling-details-of-an-event-entry-with-winlogbeat/43506)
**Author:** [@snbart1](https://discuss.elastic.co/u/snbart1)\ **Replies:** 5\ **Last updated:** [March 22, 2016, 11:44am UTC](https://discuss.elastic.co/t/pulling-details-of-an-event-entry-with-winlogbeat/43506 "2016-03-22T11:44:40Z")
Hello everybody, I'm new working with the ELK stack. Actually I realized that it seems to be impossible to get the details of events with Winlogbeat. Only the General (or System in XML view) section is parsed. Did I m… --- ## [RestClient and TransportClient what is reccomended](https://discuss.elastic.co/t/restclient-and-transportclient-what-is-reccomended/88226)
**Author:** [@jshraddha](https://discuss.elastic.co/u/jshraddha)\ **Replies:** 7\ **Last updated:** [June 6, 2017, 11:25am UTC](https://discuss.elastic.co/t/restclient-and-transportclient-what-is-reccomended/88226 "2017-06-06T11:25:40Z")
Hi, For data ingestion to ES I have used transport client API previously. It was working fine on local cluster but when I tried pushing it to amazon elasticsearch instance it was having problems. I searched for the iss… --- ## [Can't join node after upgrade](https://discuss.elastic.co/t/cant-join-node-after-upgrade/151693)
**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\ **Replies:** 8\ **Last updated:** [October 23, 2018, 5:51pm UTC](https://discuss.elastic.co/t/cant-join-node-after-upgrade/151693 "2018-10-23T17:51:07Z")
I can't join my upgraded node to my cluster again. \[2018-10-09T19:21:39,386\]\[WARN \]\[r.suppressed \] path: /se-tcj-al-2018-10-09/log/c309f128- 9c17-4848-9fb0-1c2ae3a835c5, params: {index=se-tcj-al-2018-10-0… --- ## [CAN LOGSTASH OUTPUT TO A DATABASE](https://discuss.elastic.co/t/can-logstash-output-to-a-database/218485)
**Author:** [@Adam\_Songambele](https://discuss.elastic.co/u/Adam_Songambele)\ **Replies:** 4\ **Last updated:** [February 12, 2020, 4:08am UTC](https://discuss.elastic.co/t/can-logstash-output-to-a-database/218485 "2020-02-12T04:08:00Z")
hi, i am new to the ELK stack and i have a few question, I have case study that consist in collecting logs that can be saved in a database which could then be pulled down by a bot connect to a user to perform several t… --- ## [Backup/Restore Question](https://discuss.elastic.co/t/backup-restore-question/68259)
**Author:** [@James\_Tighe](https://discuss.elastic.co/u/James_Tighe)\ **Replies:** 4\ **Last updated:** [December 9, 2016, 3:10pm UTC](https://discuss.elastic.co/t/backup-restore-question/68259 "2016-12-09T15:10:02Z")
Hi All, I am currently in the process of trying to setup a backup strategy for our Elasticsearch cluster. I understand there is backup/restore snapshot functionality available in Elasticsearch that can be used, howev… --- ## [Plugin "metricsEntities" is disabled](https://discuss.elastic.co/t/plugin-metricsentities-is-disabled/280728)
**Author:** [@Naim\_Rihan](https://discuss.elastic.co/u/Naim_Rihan)\ **Replies:** 6\ **Last updated:** [August 10, 2021, 7:27am UTC](https://discuss.elastic.co/t/plugin-metricsentities-is-disabled/280728 "2021-08-10T07:27:09Z")
Hi, I install Kibana 7.14 and command with "my\_path".\\bin\\kibana.bat but I get the following error: Plugin "metricsEntities" is disabled How can I fix it? Thanks --- ## ["There are no ingest nodes in this cluster, unable to forward request to an ingest node" errors](https://discuss.elastic.co/t/there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node-errors/332701)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 2\ **Last updated:** [May 9, 2023, 3:02am UTC](https://discuss.elastic.co/t/there-are-no-ingest-nodes-in-this-cluster-unable-to-forward-request-to-an-ingest-node-errors/332701 "2023-05-09T03:02:10Z")
Kibana version: 8.7.1 Elasticsearch version: 8.7.1 APM Server version: 8.7.1 APM Agent language and version: Node.JS 19 Browser version: Original install method (e.g. download page, yum, deb, from source, etc.) and … --- ## [Cassandra + Elasticsearch or Just Elasticsearch for Primary data store](https://discuss.elastic.co/t/cassandra-elasticsearch-or-just-elasticsearch-for-primary-data-store/18660)
**Author:** [@pranav\_amin](https://discuss.elastic.co/u/pranav_amin)\ **Replies:** 5\ **Last updated:** [July 19, 2014, 4:41am UTC](https://discuss.elastic.co/t/cassandra-elasticsearch-or-just-elasticsearch-for-primary-data-store/18660 "2014-07-19T04:41:37Z")
Hi, I'm struggling to chose between these two options: with having Elasticsearch as a primary data store or should I need Cassandra as the primary data store and then data being copied in ES for indexing? The g… --- ## [Java.io.IOException: Connection timed out error](https://discuss.elastic.co/t/java-io-ioexception-connection-timed-out-error/22671)
**Author:** [@Sunil](https://discuss.elastic.co/u/Sunil)\ **Replies:** 1\ **Last updated:** [March 16, 2015, 4:20pm UTC](https://discuss.elastic.co/t/java-io-ioexception-connection-timed-out-error/22671 "2015-03-16T16:20:36Z")
Hi, We are using ElasticSearch 1.1.0 server. I have a Java Web Application that connects to ElasticSearch using Transport Client. When the application starts it is able to connect to elasticsearch server and all the… --- ## [Index from Elasticsearch to excel](https://discuss.elastic.co/t/index-from-elasticsearch-to-excel/80142)
**Author:** [@wolfghost](https://discuss.elastic.co/u/wolfghost)\ **Replies:** 8\ **Last updated:** [March 28, 2017, 7:48am UTC](https://discuss.elastic.co/t/index-from-elasticsearch-to-excel/80142 "2017-03-28T07:48:40Z")
How can i export data from ES to excel file? --- ## [How to specify Docker host on Windows?](https://discuss.elastic.co/t/how-to-specify-docker-host-on-windows/94153)
**Author:** [@godefroi](https://discuss.elastic.co/u/godefroi)\ **Replies:** 4\ **Last updated:** [July 25, 2017, 2:38pm UTC](https://discuss.elastic.co/t/how-to-specify-docker-host-on-windows/94153 "2017-07-25T14:38:35Z")
I'm trying out Metricbeat, and attempting to get some data from the Docker module. I've got the thing configured (just the bare minimum so far, with the "container" metricset), and I've run into some difficulty in specif… --- ## [Including the max and min aggregations in a query](https://discuss.elastic.co/t/including-the-max-and-min-aggregations-in-a-query/77308)
**Author:** [@GautamP](https://discuss.elastic.co/u/GautamP)\ **Replies:** 4\ **Last updated:** [March 6, 2017, 5:34am UTC](https://discuss.elastic.co/t/including-the-max-and-min-aggregations-in-a-query/77308 "2017-03-06T05:34:09Z")
Hi all, I have a set of hierarchical jobs which are executed every night as part of a batch. I have log files where each line contains the name of the job prefixed with the names of all its parent jobs up to the highes… --- ## [About Comments within Logstash Plugin Config](https://discuss.elastic.co/t/about-comments-within-logstash-plugin-config/295120)
**Author:** [@usb](https://discuss.elastic.co/u/usb)\ **Replies:** 2\ **Last updated:** [January 23, 2022, 4:34am UTC](https://discuss.elastic.co/t/about-comments-within-logstash-plugin-config/295120 "2022-01-23T04:34:53Z")
Hi everyone. Recently, I am trying to add more comments to my Logstash pipeline config so that it is more understandable. However, I found that it seems comments cannot be added in-between lines of a plugin config. For … --- ## [Error in visualization \[esaggs\] \> Service unavailable when time filtering](https://discuss.elastic.co/t/error-in-visualization-esaggs-service-unavailable-when-time-filtering/239987)
**Author:** [@Kevin\_Renalda](https://discuss.elastic.co/u/Kevin_Renalda)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 12:05pm UTC](https://discuss.elastic.co/t/error-in-visualization-esaggs-service-unavailable-when-time-filtering/239987 "2020-07-08T12:05:55Z")
Hi, I'm fairly new to kibana, I wanna ask about this error I keep getting every time I set the filter time range in my dashboard to a wide range and when I click the see the full error it just shows the exact same err… --- ## [Installation de elactic search sur serveur linux](https://discuss.elastic.co/t/installation-de-elactic-search-sur-serveur-linux/35552)
**Author:** [@stax](https://discuss.elastic.co/u/stax)\ **Replies:** 6\ **Last updated:** [December 1, 2015, 10:34am UTC](https://discuss.elastic.co/t/installation-de-elactic-search-sur-serveur-linux/35552 "2015-12-01T10:34:16Z")
Bonjour je suis dans l'installation d'elastic sur un serveur linux. J'ai fais un wget de la derniere version d'elasticsearch, je l'ai unzip puis j'ai lancé la commande bin/elasticsearch qui me retourne ceci: log4j:WARN… --- ## [SQS input plugin only pulls one JSON object from SQS Payload](https://discuss.elastic.co/t/sqs-input-plugin-only-pulls-one-json-object-from-sqs-payload/50352)
**Author:** [@packplusplus](https://discuss.elastic.co/u/packplusplus)\ **Replies:** 2\ **Last updated:** [May 18, 2016, 4:15pm UTC](https://discuss.elastic.co/t/sqs-input-plugin-only-pulls-one-json-object-from-sqs-payload/50352 "2016-05-18T16:15:10Z")
When using the SQS input plugin from the 2.0 branch, and (some of the) 1.5 branch. Payloads with multiple json objects only return a single json object. When using the json codec, it returns the last json object in the p… --- ## [Unable to intercept/send APM transactions in NestJS using elastic-apm-node package](https://discuss.elastic.co/t/unable-to-intercept-send-apm-transactions-in-nestjs-using-elastic-apm-node-package/332992)
**Author:** [@Frank\_Corona](https://discuss.elastic.co/u/Frank_Corona)\ **Replies:** 4\ **Last updated:** [May 10, 2023, 6:21pm UTC](https://discuss.elastic.co/t/unable-to-intercept-send-apm-transactions-in-nestjs-using-elastic-apm-node-package/332992 "2023-05-10T18:21:57Z")
Kibana version: v8.6.2 ECS version: 1.6.0 APM Agent language and version: "elastic-apm-node": "3.44.1" Fresh install or upgraded from other version? Fresh Install Is there anything special in your setup? For example,… --- ## [Grok Filter help needed with Suricata Logs](https://discuss.elastic.co/t/grok-filter-help-needed-with-suricata-logs/90727)
**Author:** [@Malik\_Mazhar](https://discuss.elastic.co/u/Malik_Mazhar)\ **Replies:** 4\ **Last updated:** [July 3, 2017, 5:46am UTC](https://discuss.elastic.co/t/grok-filter-help-needed-with-suricata-logs/90727 "2017-07-03T05:46:39Z")
Hi Guys, i am trying to sort my Suricata logs on pfsense, got it working but one issue i cant seperate Priority from the number and proto from the {}.. below is the sample log need your help. \[1:2210045:2\] SURICATA ST… --- ## [C# NEST Client - An established connection was aborted by the software in your host machine](https://discuss.elastic.co/t/c-nest-client-an-established-connection-was-aborted-by-the-software-in-your-host-machine/169495)
**Author:** [@bo.clifton](https://discuss.elastic.co/u/bo.clifton)\ **Replies:** 1\ **Last updated:** [February 21, 2019, 10:29pm UTC](https://discuss.elastic.co/t/c-nest-client-an-established-connection-was-aborted-by-the-software-in-your-host-machine/169495 "2019-02-21T22:29:43Z")
We're investigating using Elasticsearch as our index searching client so I've set up the service on my local workstation for testing. We'll need to be using the Bulk API for uploading as we'll be dealing with very large… --- ## [Understanding the default behaviour of log rotation of file output plugin](https://discuss.elastic.co/t/understanding-the-default-behaviour-of-log-rotation-of-file-output-plugin/189339)
**Author:** [@Satish\_Mundru](https://discuss.elastic.co/u/Satish_Mundru)\ **Replies:** 3\ **Last updated:** [July 9, 2019, 4:00am UTC](https://discuss.elastic.co/t/understanding-the-default-behaviour-of-log-rotation-of-file-output-plugin/189339 "2019-07-09T04:00:02Z")
Hi, As I understood that the log is rotated per day by using this config 'path' parameter - file { path =\> "/var/logstash/server-%{+YYYY-MM-dd}.log" codec =\> line { format =\> "%{\[message\]}"} } A) I'm trying to make… --- ## [How to set a socks5 proxy for ElasticsearchTemplate (Java Client)](https://discuss.elastic.co/t/how-to-set-a-socks5-proxy-for-elasticsearchtemplate-java-client/126796)
**Author:** [@blalasaadri](https://discuss.elastic.co/u/blalasaadri)\ **Replies:** 3\ **Last updated:** [April 10, 2018, 2:18pm UTC](https://discuss.elastic.co/t/how-to-set-a-socks5-proxy-for-elasticsearchtemplate-java-client/126796 "2018-04-10T14:18:20Z")
Hi! I'm trying to connect to a remote Elasticsearch instance; to do so, I have to tunnel my traffic through a socks5 proxy. In my Java code, I'm using the ElasticsearchTemplate which in turn uses a PreBuiltTransportCli… --- ## [How to aggregate data by date range](https://discuss.elastic.co/t/how-to-aggregate-data-by-date-range/28666)
**Author:** [@z\_w\_w1981](https://discuss.elastic.co/u/z_w_w1981)\ **Replies:** 3\ **Last updated:** [September 5, 2015, 10:09am UTC](https://discuss.elastic.co/t/how-to-aggregate-data-by-date-range/28666 "2015-09-05T10:09:09Z")
Hi, I'm a fresh to ElasticSearch, I created the environment and insert some sample date to test, my data is very simple (just 2 rows from the Apache log): { "message" =\> "199.201.64.129 - - \[19/Aug/2015:07:0… --- ## [Curator crontab not running](https://discuss.elastic.co/t/curator-crontab-not-running/141530)
**Author:** [@babydoll](https://discuss.elastic.co/u/babydoll)\ **Replies:** 5\ **Last updated:** [July 26, 2018, 10:41am UTC](https://discuss.elastic.co/t/curator-crontab-not-running/141530 "2018-07-26T10:41:49Z")
Hello. I'm running elasticsearch curator on Ubuntu. So my curator works: curator --config /home/xen/curator/curator.yml /home/xen/curator/rollover.yml and executing the curator creates a new index as I expected. I want… --- ## [Logstash config unable to load](https://discuss.elastic.co/t/logstash-config-unable-to-load/121392)
**Author:** [@abhivj7b](https://discuss.elastic.co/u/abhivj7b)\ **Replies:** 5\ **Last updated:** [February 28, 2018, 5:21am UTC](https://discuss.elastic.co/t/logstash-config-unable-to-load/121392 "2018-02-28T05:21:45Z")
While running logstash config on my windows server I am getting this error. -java.lqng.illegqlstateException:org.jruby.exceptions.Raiseexceptions: Please help to fix. --- ## [How can i disable filters in Respective visualizations present in kibana dashboard?](https://discuss.elastic.co/t/how-can-i-disable-filters-in-respective-visualizations-present-in-kibana-dashboard/316751)
**Author:** [@andy4](https://discuss.elastic.co/u/andy4)\ **Replies:** 6\ **Last updated:** [January 30, 2023, 9:18am UTC](https://discuss.elastic.co/t/how-can-i-disable-filters-in-respective-visualizations-present-in-kibana-dashboard/316751 "2023-01-30T09:18:19Z")
multiple visualizations collectively makes up a dashboard and we have interactive filter application feature available through most of the visualization , Now suppose I want to disable filters to be applied on dashboard … --- ## [ES grok processor break\_on\_match =\> false needed](https://discuss.elastic.co/t/es-grok-processor-break-on-match-false-needed/96697)
**Author:** [@ffoysal](https://discuss.elastic.co/u/ffoysal)\ **Replies:** 2\ **Last updated:** [August 22, 2017, 2:04pm UTC](https://discuss.elastic.co/t/es-grok-processor-break-on-match-false-needed/96697 "2017-08-22T14:04:13Z")
We have a pattern in logstash grok filter like this grok { break\_on\_match =\> false match =\> \[ “message”,".+mv=(?\\[\\w\]+)\[\\s&\]+.+", “message”,".+mf=(?\\[\\w\]+)\[\\s&\]+.+", “message”,".+cmd=(?\ **Author:** [@jobyjohny](https://discuss.elastic.co/u/jobyjohny)\ **Replies:** 2\ **Last updated:** [June 19, 2017, 3:54pm UTC](https://discuss.elastic.co/t/writing-data-from-spark-to-elasticsearch/89414 "2017-06-19T15:54:02Z") I am using spark2.0 and using the spark session variable .trying to write some data into elastic search cluster installed in my local machine.code snippet is given below spark.conf.set("es.index.auto.create", "true") s… [Previous page](https://discuss.elastic.co/top.md?page=640&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=642&per_page=50&period=all)