# Top

**URL:** https://discuss.elastic.co/top.md?page=648&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 649

---

## [How to format a date as a string in Painless](https://discuss.elastic.co/t/how-to-format-a-date-as-a-string-in-painless/138618)

<div class="topic-metadata">

**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\
**Replies:** 0\
**Last updated:** [July 5, 2018, 2:45am UTC](https://discuss.elastic.co/t/how-to-format-a-date-as-a-string-in-painless/138618 "2018-07-05T02:45:38Z")

</div>

Continuing the discussion from Elasticsearch 6.2 - how to format date (epoch) field in yyyymm string in painless inline scripting: Despite the frequent mentions of switching to java.time in the docs, my cloud.elastic.co …

---

## [Elastic search null\_value for integers is failing](https://discuss.elastic.co/t/elastic-search-null-value-for-integers-is-failing/113104)

<div class="topic-metadata">

**Author:** [@putharekulu](https://discuss.elastic.co/u/putharekulu)\
**Replies:** 1\
**Last updated:** [December 27, 2017, 4:16pm UTC](https://discuss.elastic.co/t/elastic-search-null-value-for-integers-is-failing/113104 "2017-12-27T16:16:07Z")

</div>

Ask Question up vote 0 down vote favorite i have the following in my mapping. The id can be null sometimes so i am using null\_value : 1. "Id" : { "type" : "integer", "store" : true, "doc\_values" : true, "null\_value"…

---

## [Difficulty in formulating query for my usecase](https://discuss.elastic.co/t/difficulty-in-formulating-query-for-my-usecase/28773)

<div class="topic-metadata">

**Author:** [@N\_M\_10](https://discuss.elastic.co/u/N_M_10)\
**Replies:** 7\
**Last updated:** [September 8, 2015, 1:22pm UTC](https://discuss.elastic.co/t/difficulty-in-formulating-query-for-my-usecase/28773 "2015-09-08T13:22:38Z")

</div>

Note: We are not using elasticsearch's parent-child concept. Below is my JSON Doc inside elasticsearch. { "\_index": "in22", "\_type": "event", "\_source": { "Title": "Jurassic World…

---

## [How to change colour of progress wheel according to label value in kibana canvas](https://discuss.elastic.co/t/how-to-change-colour-of-progress-wheel-according-to-label-value-in-kibana-canvas/186028)

<div class="topic-metadata">

**Author:** [@Malini\_Sahoo](https://discuss.elastic.co/u/Malini_Sahoo)\
**Replies:** 4\
**Last updated:** [June 29, 2019, 10:27am UTC](https://discuss.elastic.co/t/how-to-change-colour-of-progress-wheel-according-to-label-value-in-kibana-canvas/186028 "2019-06-29T10:27:07Z")

</div>

Hi, how to change colour of progress wheel according to label value in kibana canvas?

---

## [Logstash - Reading from Kafka and Inserting into ElasticSearch cluster - kafka topic lag not going down](https://discuss.elastic.co/t/logstash-reading-from-kafka-and-inserting-into-elasticsearch-cluster-kafka-topic-lag-not-going-down/62072)

<div class="topic-metadata">

**Author:** [@narendra.agashe](https://discuss.elastic.co/u/narendra.agashe)\
**Replies:** 4\
**Last updated:** [October 15, 2016, 4:36pm UTC](https://discuss.elastic.co/t/logstash-reading-from-kafka-and-inserting-into-elasticsearch-cluster-kafka-topic-lag-not-going-down/62072 "2016-10-15T16:36:35Z")

</div>

Team, My ELK stack is as follows ES Version :- 2.3.5 (3 servers, 2 Master Eligible nodes and 1 Client, where Logstash is pointed to for inserting messages into ES) Kafka :- 0.8 (Cluster of 3) topic has 3 partitions. Lo…

---

## ["You are not authorized to access Monitoring" after upgrade to 8.1.0](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-after-upgrade-to-8-1-0/299473)

<div class="topic-metadata">

**Author:** [@bricevalenza](https://discuss.elastic.co/u/bricevalenza)\
**Replies:** 5\
**Last updated:** [April 7, 2022, 12:10pm UTC](https://discuss.elastic.co/t/you-are-not-authorized-to-access-monitoring-after-upgrade-to-8-1-0/299473 "2022-04-07T12:10:56Z")

</div>

Hello, after upgrading my stack to version 8.1.0, I can't access the monitoring page on Kibana. I checked rights on my (local) account and it's OK. I also made a role with very large accesses, and still the same …

---

## [Dashboard Not Saving](https://discuss.elastic.co/t/dashboard-not-saving/33007)

<div class="topic-metadata">

**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\
**Replies:** 5\
**Last updated:** [October 29, 2015, 12:57pm UTC](https://discuss.elastic.co/t/dashboard-not-saving/33007 "2015-10-29T12:57:16Z")

</div>

When I create a dashboard using Kibana4 and his the save button I get a ribbon on top of the screen that states Dashboard Saved but when I navigate away from the page and back, the dashboard is not save in the last state…

---

## [JSON \> Logstash \> ElasticSearch](https://discuss.elastic.co/t/json-logstash-elasticsearch/25544)

<div class="topic-metadata">

**Author:** [@taylorsuk](https://discuss.elastic.co/u/taylorsuk)\
**Replies:** 5\
**Last updated:** [September 15, 2015, 8:32pm UTC](https://discuss.elastic.co/t/json-logstash-elasticsearch/25544 "2015-09-15T20:32:27Z")

</div>

I have had some good info from a user in answer to my question here and am having issues with my config. Basically I would like to import / index my pretty JSON file map one field to not\_analized to my remote ElasticS…

---

## [Troubleshooting APM Agent to Fleet Server](https://discuss.elastic.co/t/troubleshooting-apm-agent-to-fleet-server/318136)

<div class="topic-metadata">

**Author:** [@sb-devora](https://discuss.elastic.co/u/sb-devora)\
**Replies:** 8\
**Last updated:** [November 8, 2022, 4:54pm UTC](https://discuss.elastic.co/t/troubleshooting-apm-agent-to-fleet-server/318136 "2022-11-08T16:54:21Z")

</div>

Hi, I'm trying to set up Elastic APM on a dotnet mvc app. Testing with a dotnet core console app but my intended setup is for a regular dotnet framework project in mvc. I have Elasticsearch and Kibana set up. I have m…

---

## [Elasticsearch autocomplete- sorting words by their relevance to a keyword](https://discuss.elastic.co/t/elasticsearch-autocomplete-sorting-words-by-their-relevance-to-a-keyword/110603)

<div class="topic-metadata">

**Author:** [@arafath](https://discuss.elastic.co/u/arafath)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 4:13pm UTC](https://discuss.elastic.co/t/elasticsearch-autocomplete-sorting-words-by-their-relevance-to-a-keyword/110603 "2017-12-07T16:13:07Z")

</div>

I'm currently working on a search using elasticsearch. We have a very large amount of users. Here is the elasticsearch mapping : PUT /example\_index/\_mapping/users { "properties": { "user\_autocomplete": { "ty…

---

## [Connecting Elasticsearch in Ubuntu 17.04](https://discuss.elastic.co/t/connecting-elasticsearch-in-ubuntu-17-04/113085)

<div class="topic-metadata">

**Author:** [@Kilmer\_Luiz\_Aleluia](https://discuss.elastic.co/u/Kilmer_Luiz_Aleluia)\
**Replies:** 6\
**Last updated:** [December 27, 2017, 8:58pm UTC](https://discuss.elastic.co/t/connecting-elasticsearch-in-ubuntu-17-04/113085 "2017-12-27T20:58:40Z")

</div>

Even if a do a sudo service elasticsearch start, I'm not able to access http://localhost:9200/: This site can’t be reached. localhost refused to connect. But when I hit elasticsearch status, I get: ● elasticsearch.serv…

---

## [No emails in 3 days](https://discuss.elastic.co/t/no-emails-in-3-days/44634)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 6\
**Last updated:** [April 2, 2016, 1:51am UTC](https://discuss.elastic.co/t/no-emails-in-3-days/44634 "2016-04-02T01:51:01Z")

</div>

I am watching several categories, including the high volume Elasticsearch category. I have not received an email since March 13th, 6:16 PM PDT (this post: https://discuss.elastic.co/t/clusterblockexception-when-master-se…

---

## [Disabling shard allocation not working as expected](https://discuss.elastic.co/t/disabling-shard-allocation-not-working-as-expected/341135)

<div class="topic-metadata">

**Author:** [@Brent\_Plummer](https://discuss.elastic.co/u/Brent_Plummer)\
**Replies:** 4\
**Last updated:** [August 18, 2023, 11:20pm UTC](https://discuss.elastic.co/t/disabling-shard-allocation-not-working-as-expected/341135 "2023-08-18T23:20:15Z")

</div>

One of my 6 Elasticsearch clusters at work is not respecting when i try to disable shard allocation prior to pull a node/server from the cluster. When I run the curl command below I get the "true" response you would exp…

---

## [Convert from string to integer](https://discuss.elastic.co/t/convert-from-string-to-integer/63163)

<div class="topic-metadata">

**Author:** [@Lego](https://discuss.elastic.co/u/Lego)\
**Replies:** 4\
**Last updated:** [October 17, 2016, 12:31pm UTC](https://discuss.elastic.co/t/convert-from-string-to-integer/63163 "2016-10-17T12:31:53Z")

</div>

Hello. I need to convert data from string to integer. I use following syntax: filter { if \[type\] == "log1c" { csv { columns =\> \[ "ReportDate","ReportTime","UserName","ErpMode","Actio…

---

## [Elasticsearch Template from JSON file](https://discuss.elastic.co/t/elasticsearch-template-from-json-file/62356)

<div class="topic-metadata">

**Author:** [@sreeram](https://discuss.elastic.co/u/sreeram)\
**Replies:** 4\
**Last updated:** [October 9, 2016, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-template-from-json-file/62356 "2016-10-09T13:35:14Z")

</div>

Hi, I'm using Elasticsearch-2.3.4 in windows server machine and trying import global template (for all index) from "default-template.json" file instead of using XPUT . I've placed the file "default-template.json" fil…

---

## [Ingest Json File into Elasticsearch](https://discuss.elastic.co/t/ingest-json-file-into-elasticsearch/130871)

<div class="topic-metadata">

**Author:** [@Mahroon](https://discuss.elastic.co/u/Mahroon)\
**Replies:** 2\
**Last updated:** [May 9, 2018, 7:03am UTC](https://discuss.elastic.co/t/ingest-json-file-into-elasticsearch/130871 "2018-05-09T07:03:18Z")

</div>

Dear Elasticer, The main question is how to ingest the json file into ES? Should I create an index and after that mapping then I can Ingest the data. Look forward to hearing from you soon. Thanks,

---

## [Elastic search, Logstash and Kibana installation on Windows environment](https://discuss.elastic.co/t/elastic-search-logstash-and-kibana-installation-on-windows-environment/26862)

<div class="topic-metadata">

**Author:** [@Jemli\_Fathi](https://discuss.elastic.co/u/Jemli_Fathi)\
**Replies:** 7\
**Last updated:** [November 12, 2015, 11:14pm UTC](https://discuss.elastic.co/t/elastic-search-logstash-and-kibana-installation-on-windows-environment/26862 "2015-11-12T23:14:06Z")

</div>

Can someone give me detailed steps on how to install Elastic search, Logstash and Kibana on Windows environment. Thanks a lot

---

## [Grok filter add\_field](https://discuss.elastic.co/t/grok-filter-add-field/226902)

<div class="topic-metadata">

**Author:** [@Jeffreyshoptrader](https://discuss.elastic.co/u/Jeffreyshoptrader)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 6:01am UTC](https://discuss.elastic.co/t/grok-filter-add-field/226902 "2020-04-21T06:01:52Z")

</div>

Hi, I've tried using a add\_field in the grok filter. I want to extract the domain name from the log files I have. I've added those in my Apache logs and see them, but I'm not sure how to extract them. What I have so …

---

## [New Server "Kibana server is not ready yet"](https://discuss.elastic.co/t/new-server-kibana-server-is-not-ready-yet/159751)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 5\
**Last updated:** [December 6, 2018, 3:29pm UTC](https://discuss.elastic.co/t/new-server-kibana-server-is-not-ready-yet/159751 "2018-12-06T15:29:28Z")

</div>

Have been getting this error I cannot see the log file because there isnt one. First time downloading Kibana on this server. I have seen many people getting this error after last months patch. I tried many of the sol…

---

## [Increasing Threadpool Queue Sizes](https://discuss.elastic.co/t/increasing-threadpool-queue-sizes/39700)

<div class="topic-metadata">

**Author:** [@kbutler](https://discuss.elastic.co/u/kbutler)\
**Replies:** 5\
**Last updated:** [January 25, 2016, 10:17pm UTC](https://discuss.elastic.co/t/increasing-threadpool-queue-sizes/39700 "2016-01-25T22:17:21Z")

</div>

I was wondering if anybody had any experience with increasing bulk and index queue sizes. I am working on an application that encounters large bursts of index requests that have so far been managed by increasing the queu…

---

## [Having ElasticSearch ignore filter when field does not exist](https://discuss.elastic.co/t/having-elasticsearch-ignore-filter-when-field-does-not-exist/35920)

<div class="topic-metadata">

**Author:** [@thiagolocatelli](https://discuss.elastic.co/u/thiagolocatelli)\
**Replies:** 2\
**Last updated:** [December 1, 2015, 2:15am UTC](https://discuss.elastic.co/t/having-elasticsearch-ignore-filter-when-field-does-not-exist/35920 "2015-12-01T02:15:07Z")

</div>

Hi all, I am running a query against an alias that is currently pointing to a dozen of indexes. Not all documents have the same structure across these indexes, so I am trying to run a filtered query: GET /thiago/\_se…

---

## [Index on words with spaces](https://discuss.elastic.co/t/index-on-words-with-spaces/27831)

<div class="topic-metadata">

**Author:** [@mkpandey](https://discuss.elastic.co/u/mkpandey)\
**Replies:** 2\
**Last updated:** [August 22, 2015, 5:20am UTC](https://discuss.elastic.co/t/index-on-words-with-spaces/27831 "2015-08-22T05:20:23Z")

</div>

We are facing issue on elastic search index. When I create Index on words e.g Polo Shirts, what its doing is creating two Indexs one on Polo and another on Shirts. However I am expecting only one Index on Polo Shirts onl…

---

## [How to pass multiple values from Data Table for next drilldown to filter data?](https://discuss.elastic.co/t/how-to-pass-multiple-values-from-data-table-for-next-drilldown-to-filter-data/219801)

<div class="topic-metadata">

**Author:** [@venkata.kodapaka](https://discuss.elastic.co/u/venkata.kodapaka)\
**Replies:** 4\
**Last updated:** [February 20, 2020, 9:54am UTC](https://discuss.elastic.co/t/how-to-pass-multiple-values-from-data-table-for-next-drilldown-to-filter-data/219801 "2020-02-20T09:54:46Z")

</div>

Hi Team, I've built a Visualization as Data Table as Summary report in which I have multiple columns. When I click on any cell, it has to open the respective drilldown data where in which Column1 and Column2 have to be …

---

## [Does ES as DB can replace MongoDB?](https://discuss.elastic.co/t/does-es-as-db-can-replace-mongodb/84920)

<div class="topic-metadata">

**Author:** [@Nesrine](https://discuss.elastic.co/u/Nesrine)\
**Replies:** 4\
**Last updated:** [May 10, 2017, 8:21am UTC](https://discuss.elastic.co/t/does-es-as-db-can-replace-mongodb/84920 "2017-05-10T08:21:48Z")

</div>

I wonder if ES as DB could replace MongoDB ?

---

## [ES datanode can't join the cluster since disconnected from master](https://discuss.elastic.co/t/es-datanode-cant-join-the-cluster-since-disconnected-from-master/257023)

<div class="topic-metadata">

**Author:** [@AngryCookie](https://discuss.elastic.co/u/AngryCookie)\
**Replies:** 6\
**Last updated:** [November 30, 2020, 10:16am UTC](https://discuss.elastic.co/t/es-datanode-cant-join-the-cluster-since-disconnected-from-master/257023 "2020-11-30T10:16:20Z")

</div>

​ Hi, we are faced with a huge problem that is random nodes started disconnecting from the master and can't join to the cluster again util i restart it. First, the messages from master node.The master detects that a nod…

---

## [Top 10 IPs visiting a website](https://discuss.elastic.co/t/top-10-ips-visiting-a-website/96133)

<div class="topic-metadata">

**Author:** [@hding](https://discuss.elastic.co/u/hding)\
**Replies:** 6\
**Last updated:** [August 8, 2017, 9:29am UTC](https://discuss.elastic.co/t/top-10-ips-visiting-a-website/96133 "2017-08-08T09:29:02Z")

</div>

I have indexed some network logs. How do I search for the top 10 IP addresses that have visited a given website within a time range? Do I use aggregations? Do I need to enable “doc\_values”, and also set “index\_options” …

---

## [ELK 6.3.1 - how to delete \_cluster/settings](https://discuss.elastic.co/t/elk-6-3-1-how-to-delete-cluster-settings/141795)

<div class="topic-metadata">

**Author:** [@Harshad\_Velapure](https://discuss.elastic.co/u/Harshad_Velapure)\
**Replies:** 8\
**Last updated:** [July 29, 2018, 8:23pm UTC](https://discuss.elastic.co/t/elk-6-3-1-how-to-delete-cluster-settings/141795 "2018-07-29T20:23:43Z")

</div>

Hello, I am facing issue with updating cluster settings in ES 6.3.1 I tried below command PUT \_cluster/settings { "transient": { "cluster.routing.allocation.disk.watermark.low": "100gb", "cluster.routing.allocatio…

---

## [Avro plugin logstash issue](https://discuss.elastic.co/t/avro-plugin-logstash-issue/104615)

<div class="topic-metadata">

**Author:** [@venkat\_venkat](https://discuss.elastic.co/u/venkat_venkat)\
**Replies:** 0\
**Last updated:** [October 19, 2017, 8:20pm UTC](https://discuss.elastic.co/t/avro-plugin-logstash-issue/104615 "2017-10-19T20:20:31Z")

</div>

I have installed logstash avro plugin "bin/logstash-plugin install logstash-codec-avro" and I am using below config input { kafka { topics =\> 'cdn' bootstrap\_servers =\> 'XXXXXXXX:9092,XXXXXXXXXXX:9092,XXXXXXXXXX:9092…

---

## [IOException with C# client](https://discuss.elastic.co/t/ioexception-with-c-client/5731)

<div class="topic-metadata">

**Author:** [@Arxisos](https://discuss.elastic.co/u/Arxisos)\
**Replies:** 7\
**Last updated:** [November 2, 2011, 10:11pm UTC](https://discuss.elastic.co/t/ioexception-with-c-client/5731 "2011-11-02T22:11:04Z")

</div>

Hi, I'm in the progress of creating a custom C# client for elastic search with RestSharp . Everything works without a problem except searching. I'm indexing this document: { "Content": "Hello!", "User": "A…

---

## [Couldnt start filebeat-Please HELP!](https://discuss.elastic.co/t/couldnt-start-filebeat-please-help/203623)

<div class="topic-metadata">

**Author:** [@anusree\_arun](https://discuss.elastic.co/u/anusree_arun)\
**Replies:** 2\
**Last updated:** [October 16, 2019, 4:08am UTC](https://discuss.elastic.co/t/couldnt-start-filebeat-please-help/203623 "2019-10-16T04:08:00Z")

</div>

systemctl status filebeat â filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/usr/lib/systemd/system/filebeat.service; enabled; vendor preset: disabled) Active: fa…

---

## [Packetbeat input from pcap -\> all sniffed field on ELK](https://discuss.elastic.co/t/packetbeat-input-from-pcap-all-sniffed-field-on-elk/147440)

<div class="topic-metadata">

**Author:** [@mardux](https://discuss.elastic.co/u/mardux)\
**Replies:** 5\
**Last updated:** [September 6, 2018, 3:04pm UTC](https://discuss.elastic.co/t/packetbeat-input-from-pcap-all-sniffed-field-on-elk/147440 "2018-09-06T15:04:49Z")

</div>

Hi all. i try to import a pcap file in ELK, using packetbeat. in my pcap file i have about 100k packets (999671 packet are HTTP traffic on port 80, the rest other protocol and port, like TLS/HTTPS on port 443) using t…

---

## [Kibana throwing 404 when trying to view Logstash Node](https://discuss.elastic.co/t/kibana-throwing-404-when-trying-to-view-logstash-node/95402)

<div class="topic-metadata">

**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\
**Replies:** 5\
**Last updated:** [August 4, 2017, 6:20pm UTC](https://discuss.elastic.co/t/kibana-throwing-404-when-trying-to-view-logstash-node/95402 "2017-08-04T18:20:38Z")

</div>

I have monitoring configured in logstash and Kibana and i get the overview of Logstash all good. But as soon as i hit Logstash nodes link on Monitoring tab. I get a 404. I have the kibana log that error for me. But need…

---

## [Clean up Indices? ..... free some storage](https://discuss.elastic.co/t/clean-up-indices-free-some-storage/318925)

<div class="topic-metadata">

**Author:** [@theacodes](https://discuss.elastic.co/u/theacodes)\
**Replies:** 4\
**Last updated:** [November 15, 2022, 8:06am UTC](https://discuss.elastic.co/t/clean-up-indices-free-some-storage/318925 "2022-11-15T08:06:14Z")

</div>

storage utilised over 90% and until now I haven't cleaned up any indices. What would be the perfect way to clean up indices or delete some old index data ? I've searched a lot but there's too much confusion over the in…

---

## [Filebeat invalid CRI log format error](https://discuss.elastic.co/t/filebeat-invalid-cri-log-format-error/263324)

<div class="topic-metadata">

**Author:** [@user2416](https://discuss.elastic.co/u/user2416)\
**Replies:** 4\
**Last updated:** [February 17, 2021, 6:45am UTC](https://discuss.elastic.co/t/filebeat-invalid-cri-log-format-error/263324 "2021-02-17T06:45:27Z")

</div>

Hi, I am frequently seeing invalid CRI log format ERROR with filebeat. We are running filebeat as deamonset on kubernetes nodes to collect container logs. This Error is causing filebeat to stop sending logs to logstash …

---

## [Increase max queue capacity?](https://discuss.elastic.co/t/increase-max-queue-capacity/132195)

<div class="topic-metadata">

**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\
**Replies:** 4\
**Last updated:** [May 17, 2018, 2:31pm UTC](https://discuss.elastic.co/t/increase-max-queue-capacity/132195 "2018-05-17T14:31:43Z")

</div>

Running 6.2.4 We are getting this error in one of our dashboards. rejected execution of org.elasticsearch.common.util.concurrent.TimedRunnable@55490381 on QueueResizingEsThreadPoolExecutor\[name = es-01/search, queue cap…

---

## [Passing document field value as parameter for advanced script](https://discuss.elastic.co/t/passing-document-field-value-as-parameter-for-advanced-script/126350)

<div class="topic-metadata">

**Author:** [@maarab](https://discuss.elastic.co/u/maarab)\
**Replies:** 4\
**Last updated:** [April 19, 2018, 6:31am UTC](https://discuss.elastic.co/t/passing-document-field-value-as-parameter-for-advanced-script/126350 "2018-04-19T06:31:26Z")

</div>

In elasticsearch, I have implemented a custom script using java and am using it in the query. The java code (created plugin for elasticsearch) is a method that will accept two string and return a value. One is a hard-cod…

---

## [Getting the IP address of the Winlogbeat host from Logstash](https://discuss.elastic.co/t/getting-the-ip-address-of-the-winlogbeat-host-from-logstash/55444)

<div class="topic-metadata">

**Author:** [@Aron\_Pedersen](https://discuss.elastic.co/u/Aron_Pedersen)\
**Replies:** 3\
**Last updated:** [August 2, 2016, 6:16pm UTC](https://discuss.elastic.co/t/getting-the-ip-address-of-the-winlogbeat-host-from-logstash/55444 "2016-08-02T18:16:36Z")

</div>

In the new upcoming Winlogbeat 5.0.0 will it be able to send the computers IP address to logstash, so that in logstash we can add a Geo Location?

---

## [In-memory indices](https://discuss.elastic.co/t/in-memory-indices/5391)

<div class="topic-metadata">

**Author:** [@rcch](https://discuss.elastic.co/u/rcch)\
**Replies:** 8\
**Last updated:** [September 18, 2011, 7:45pm UTC](https://discuss.elastic.co/t/in-memory-indices/5391 "2011-09-18T19:45:14Z")

</div>

Hi all, 1) I set up an index with -Des.index.storage.type=memory. 2) I added a bunch of documents. 3) Then, I killed elastic search 4) I brought it back up and queried the index - and the searches were sucessful. …

---

## [Use multiple codec in one file input](https://discuss.elastic.co/t/use-multiple-codec-in-one-file-input/79722)

<div class="topic-metadata">

**Author:** [@stef35340](https://discuss.elastic.co/u/stef35340)\
**Replies:** 2\
**Last updated:** [March 23, 2017, 10:10am UTC](https://discuss.elastic.co/t/use-multiple-codec-in-one-file-input/79722 "2017-03-23T10:10:09Z")

</div>

Hello, Do you know if there is a possibility to use multiple codecs in the same file input? I need to manage "multiline" and "plain" codecs for the same file. Currently, here is my configuration (I have anonymized da…

---

## [HTTPS access via x-pack problems](https://discuss.elastic.co/t/https-access-via-x-pack-problems/146690)

<div class="topic-metadata">

**Author:** [@Arthur\_Bulakaiev](https://discuss.elastic.co/u/Arthur_Bulakaiev)\
**Replies:** 5\
**Last updated:** [August 30, 2018, 1:24pm UTC](https://discuss.elastic.co/t/https-access-via-x-pack-problems/146690 "2018-08-30T13:24:42Z")

</div>

Hi all! I'm trying to configure an https access to my elasticsearch server and I got stuck with it. My elasticsearch version is 6.2.4, I have installed x-pack for it, and followed this article: https://www.elastic.co/g…

---

## [Unknown provider: translateFilterProvider \<- translateFilter](https://discuss.elastic.co/t/unknown-provider-translatefilterprovider-translatefilter/143271)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 5\
**Last updated:** [August 13, 2018, 6:45am UTC](https://discuss.elastic.co/t/unknown-provider-translatefilterprovider-translatefilter/143271 "2018-08-13T06:45:42Z")

</div>

does kibana 6.3 drop feture translate? I try to use translate like below in html, \<span\>{{ 'SUBMIT' | translate }}\</span\> but return: angular.js:14800 Error: \[$injector:unpr\] Unknown provider: translateFilterPr…

---

## [Logstash.confのoutputのif文の設定について](https://discuss.elastic.co/t/logstash-conf-output-if/223271)

<div class="topic-metadata">

**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\
**Replies:** 2\
**Last updated:** [March 12, 2020, 10:27am UTC](https://discuss.elastic.co/t/logstash-conf-output-if/223271 "2020-03-12T10:27:11Z")

</div>

Filebeatで、タグ名「Apache\_access\_log」をつけたログのみ、Logstashを経由して、Elastiscsearchに格納したいです。 下記のlogstash.confの設定をif文で、しているのですが、Logstashで、エラー出力されうまくいきません。 原因と対処のご教示をお願いします。 logstash.conf input{ beats { port =\> "504…

---

## [Logstash output to file but not right hostname](https://discuss.elastic.co/t/logstash-output-to-file-but-not-right-hostname/62783)

<div class="topic-metadata">

**Author:** [@viet\_anh\_phan](https://discuss.elastic.co/u/viet_anh_phan)\
**Replies:** 2\
**Last updated:** [October 12, 2016, 7:45am UTC](https://discuss.elastic.co/t/logstash-output-to-file-but-not-right-hostname/62783 "2016-10-12T07:45:58Z")

</div>

Hi everyone, I'm a newer of using logstash, here is my case: - In right case: log nginx (hostname: staging) --\> filebeat ---\> logstash ---\> output to file: /opt/logs/staging/2016-09-27.log ( right folder "staging" as I …

---

## [Relevance sorting in multimatch query](https://discuss.elastic.co/t/relevance-sorting-in-multimatch-query/100451)

<div class="topic-metadata">

**Author:** [@Sayan\_Bhattacharya](https://discuss.elastic.co/u/Sayan_Bhattacharya)\
**Replies:** 3\
**Last updated:** [September 15, 2017, 7:53pm UTC](https://discuss.elastic.co/t/relevance-sorting-in-multimatch-query/100451 "2017-09-15T19:53:36Z")

</div>

i'm uisng the following query for matching against five fileds but unable to see any sorting by relevance in Elasticsearch 5.5 .How to achieve the said thing within this form of query pattern? body = { "query": { "mu…

---

## [Curator Snapshot Error with Closed indices](https://discuss.elastic.co/t/curator-snapshot-error-with-closed-indices/134259)

<div class="topic-metadata">

**Author:** [@wanshishi](https://discuss.elastic.co/u/wanshishi)\
**Replies:** 6\
**Last updated:** [June 1, 2018, 8:51pm UTC](https://discuss.elastic.co/t/curator-snapshot-error-with-closed-indices/134259 "2018-06-01T20:51:37Z")

</div>

Snapshot is having an error with close indices. I have this curator script that runs multiple actions. I am not sure if I am doing it correctly or the order of the action affects how it ran. allocation forcemerge clos…

---

## [Logstash 5.0.0-alpha4 installation and configuration problem](https://discuss.elastic.co/t/logstash-5-0-0-alpha4-installation-and-configuration-problem/56865)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 6\
**Last updated:** [August 5, 2016, 4:19pm UTC](https://discuss.elastic.co/t/logstash-5-0-0-alpha4-installation-and-configuration-problem/56865 "2016-08-05T16:19:51Z")

</div>

System OS: Ubuntu 14.04.4 LTS java -version: java version "1.8.0\_101" Java(TM) SE Runtime Environment (build 1.8.0\_101-b13) Java HotSpot(TM) 64-Bit Server VM (build 25.101-b13, mixed mode) I install Logstash just f…

---

## [Help With Elasticsearch DSL MultiMatch Not Working with Searching Through Text and Integer Doc Types? Transport Error 400](https://discuss.elastic.co/t/help-with-elasticsearch-dsl-multimatch-not-working-with-searching-through-text-and-integer-doc-types-transport-error-400/104857)

<div class="topic-metadata">

**Author:** [@thejeffchen](https://discuss.elastic.co/u/thejeffchen)\
**Replies:** 4\
**Last updated:** [October 24, 2017, 10:10am UTC](https://discuss.elastic.co/t/help-with-elasticsearch-dsl-multimatch-not-working-with-searching-through-text-and-integer-doc-types-transport-error-400/104857 "2017-10-24T10:10:45Z")

</div>

Hey everyone, I'm having trouble getting the elasticsearch DSL to search through text and integer doc types. If I only do the fields with text() or integer(), there is no problem, but when I try to get elasticsearch to …

---

## [Kibana server not ready after update to 7.15](https://discuss.elastic.co/t/kibana-server-not-ready-after-update-to-7-15/286509)

<div class="topic-metadata">

**Author:** [@someone83](https://discuss.elastic.co/u/someone83)\
**Replies:** 5\
**Last updated:** [November 8, 2021, 12:13pm UTC](https://discuss.elastic.co/t/kibana-server-not-ready-after-update-to-7-15/286509 "2021-11-08T12:13:55Z")

</div>

I upgraded my ELK-Stack from 7.14 to 7.15. There are two Elasticsearch nodes (1 hot / 1 warm) and a kibana server. From the kibana server on the web-interface i get just the message "Kibana server is not ready yet" and…

---

## [Indexed documents not showing up in search results](https://discuss.elastic.co/t/indexed-documents-not-showing-up-in-search-results/20341)

<div class="topic-metadata">

**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\
**Replies:** 1\
**Last updated:** [October 20, 2014, 2:01pm UTC](https://discuss.elastic.co/t/indexed-documents-not-showing-up-in-search-results/20341 "2014-10-20T14:01:00Z")

</div>

Good afternoon. The subject might be a little misleading as to the true nature of my problem - which I'll try to explain here in as much detail as possible. First of all , I am rather new to Elasticsearch. Se…

---

## [Logstash - extraction substring from the raw message](https://discuss.elastic.co/t/logstash-extraction-substring-from-the-raw-message/130162)

<div class="topic-metadata">

**Author:** [@jfnoteba](https://discuss.elastic.co/u/jfnoteba)\
**Replies:** 3\
**Last updated:** [May 2, 2018, 4:59pm UTC](https://discuss.elastic.co/t/logstash-extraction-substring-from-the-raw-message/130162 "2018-05-02T16:59:21Z")

</div>

Hi Everyone, I'm trying to see if there is any logstash plugin which we can use to perform a quick filtering on 2 substrings without need to parse the entire message using grok command: An example of the log is below a…

[Previous page](https://discuss.elastic.co/top.md?page=647&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=649&per_page=50&period=all)
