# Top **URL:** https://discuss.elastic.co/top.md?page=649&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 650 --- ## [Levenshtein distance](https://discuss.elastic.co/t/levenshtein-distance/17780)
**Author:** [@Adrian\_C](https://discuss.elastic.co/u/Adrian_C)\ **Replies:** 1\ **Last updated:** [May 29, 2014, 1:35pm UTC](https://discuss.elastic.co/t/levenshtein-distance/17780 "2014-05-29T13:35:36Z")
Hi, I am new to ES and have been doing some simple testing of fuzzy matching. I have a query related to Levenshtein distance. Does ElasticSearch use Levenshtein distance or Damerau–Levenshtein distance? For exa… --- ## [Creation of PIT using Rest High Level Client in Java SDK](https://discuss.elastic.co/t/creation-of-pit-using-rest-high-level-client-in-java-sdk/270039)
**Author:** [@RapTvin](https://discuss.elastic.co/u/RapTvin)\ **Replies:** 6\ **Last updated:** [April 13, 2021, 10:00pm UTC](https://discuss.elastic.co/t/creation-of-pit-using-rest-high-level-client-in-java-sdk/270039 "2021-04-13T22:00:22Z")
I was going through the Rest High-Level Client and wasn't able to get a method to create a Point In Time via the java SDK of the client. Is there a way to do it programmatically? I went through a earlier post which add… --- ## [Can I attach a messages byte-count as a metadata field?](https://discuss.elastic.co/t/can-i-attach-a-messages-byte-count-as-a-metadata-field/59531)
**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\ **Replies:** 6\ **Last updated:** [September 2, 2016, 3:08pm UTC](https://discuss.elastic.co/t/can-i-attach-a-messages-byte-count-as-a-metadata-field/59531 "2016-09-02T15:08:56Z")
Hi; I'm currently running a Logstash server in which I receive messages from various sources. I'd like to find out the the approximate byte-count of each incoming message and attach this as a @metadata field, so I can dr… --- ## [Elasticsearch as Logwatch](https://discuss.elastic.co/t/elasticsearch-as-logwatch/19958)
**Author:** [@Daniel\_Fazio](https://discuss.elastic.co/u/Daniel_Fazio)\ **Replies:** 6\ **Last updated:** [February 11, 2015, 5:08pm UTC](https://discuss.elastic.co/t/elasticsearch-as-logwatch/19958 "2015-02-11T17:08:55Z")
Hello, We currently use Logwatch in our Server Farm to have a daily report of all the logs of all the machines. The problem is that receiving everyday hundred of email makes it difficult to go through all them. … --- ## [Update document with Rest High Level Client](https://discuss.elastic.co/t/update-document-with-rest-high-level-client/248714)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 2\ **Last updated:** [September 16, 2020, 4:19pm UTC](https://discuss.elastic.co/t/update-document-with-rest-high-level-client/248714 "2020-09-16T16:19:13Z")
Hi, I have to update a document in my Java app, using the Rest High Level Client. I must to override the document, i.e.: I need to replace completely the document with a new version. I am trying this but it only makes … --- ## [Filebeat - difference in beat\_timestamp and @timestamp](https://discuss.elastic.co/t/filebeat-difference-in-beat-timestamp-and-timestamp/142811)
**Author:** [@if-meaton](https://discuss.elastic.co/u/if-meaton)\ **Replies:** 4\ **Last updated:** [August 3, 2018, 10:39am UTC](https://discuss.elastic.co/t/filebeat-difference-in-beat-timestamp-and-timestamp/142811 "2018-08-03T10:39:14Z")
HI Guys, first, let me explain my setup. Using filebeat, Kibana and Elasticsearch 6.3.x. Windows Server (filebeat and iis module & metricsbeat) -\> Logstash Server -\> ElasticSearch \<- Kibana Configs: Filebeat.yml: #=… --- ## [Capitalize Every Word In String](https://discuss.elastic.co/t/capitalize-every-word-in-string/266997)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 8\ **Last updated:** [March 12, 2021, 3:56pm UTC](https://discuss.elastic.co/t/capitalize-every-word-in-string/266997 "2021-03-12T15:56:27Z")
Trying to capitalize each word in a fields value. I initially tried the titleize function of Ruby, but that didn't work...I guess because it's not part of Ruby internals or something like that? ruby { code =\> 'ev… --- ## [Vega-lite - how to clip bars that extend beyond view range](https://discuss.elastic.co/t/vega-lite-how-to-clip-bars-that-extend-beyond-view-range/137808)
**Author:** [@andrassy](https://discuss.elastic.co/u/andrassy)\ **Replies:** 8\ **Last updated:** [July 17, 2018, 3:50pm UTC](https://discuss.elastic.co/t/vega-lite-how-to-clip-bars-that-extend-beyond-view-range/137808 "2018-07-17T15:50:34Z")
I've been trying to build a Gantt style chart showing the execution periods of a bunch of tasks using Vega-lite in Kibana 6.3 (similar to Gantt Visualization Using Vega) with some success. The time window is controlled b… --- ## [Better understanding of Timelion-moving average needed](https://discuss.elastic.co/t/better-understanding-of-timelion-moving-average-needed/83832)
**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\ **Replies:** 1\ **Last updated:** [April 28, 2017, 7:22pm UTC](https://discuss.elastic.co/t/better-understanding-of-timelion-moving-average-needed/83832 "2017-04-28T19:22:11Z")
Hi, I am generating a moving average timelion graph for my data. Below are the graphs: I have only changed the interval(or whatever it is representing) from 3 min to 4 min. I am not able to understand What this p… --- ## [How do I confirm DNS round robin is working correctly?](https://discuss.elastic.co/t/how-do-i-confirm-dns-round-robin-is-working-correctly/82068)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 7\ **Last updated:** [April 13, 2017, 3:38am UTC](https://discuss.elastic.co/t/how-do-i-confirm-dns-round-robin-is-working-correctly/82068 "2017-04-13T03:38:52Z")
I have logstash pointing to a round robin DNS record: elasticsearch { hosts =\> my.cluster.com index =\> "myindex" ....etc How can I confirm logstash is load balancing across all those servers? Or more importantly… --- ## [How can I see if there is an exception in the delete operation?](https://discuss.elastic.co/t/how-can-i-see-if-there-is-an-exception-in-the-delete-operation/3414)
**Author:** [@Shelly](https://discuss.elastic.co/u/Shelly)\ **Replies:** 7\ **Last updated:** [October 7, 2010, 12:00pm UTC](https://discuss.elastic.co/t/how-can-i-see-if-there-is-an-exception-in-the-delete-operation/3414 "2010-10-07T12:00:51Z")
Is there a way to know when the deletion operation is failed? I don't see that the client delete operation throws any exception. Does it make this operation via a REST call? cause it says in the documentation that the… --- ## [Broken Pipe errors while talking to AWS-ElsaticSearch service](https://discuss.elastic.co/t/broken-pipe-errors-while-talking-to-aws-elsaticsearch-service/62179)
**Author:** [@rgstreekstra](https://discuss.elastic.co/u/rgstreekstra)\ **Replies:** 2\ **Last updated:** [October 11, 2016, 3:22pm UTC](https://discuss.elastic.co/t/broken-pipe-errors-while-talking-to-aws-elsaticsearch-service/62179 "2016-10-11T15:22:01Z")
Hi all, I am getting the following error: "INFO: I/O exception (java.net.SocketException) caught when processing request to {}-\>http://:80: Broken pipe" In logstash.err file during the same time in the logstash.log fil… --- ## [How long the data is being stored in Elastic](https://discuss.elastic.co/t/how-long-the-data-is-being-stored-in-elastic/1488)
**Author:** [@michaltaratuta](https://discuss.elastic.co/u/michaltaratuta)\ **Replies:** 2\ **Last updated:** [May 29, 2015, 8:01am UTC](https://discuss.elastic.co/t/how-long-the-data-is-being-stored-in-elastic/1488 "2015-05-29T08:01:24Z")
How long the data is being stored in Elastic? How to purge it and control for how long is it stored? --- ## [Kafka input json](https://discuss.elastic.co/t/kafka-input-json/32567)
**Author:** [@afreen](https://discuss.elastic.co/u/afreen)\ **Replies:** 1\ **Last updated:** [October 20, 2015, 11:58am UTC](https://discuss.elastic.co/t/kafka-input-json/32567 "2015-10-20T11:58:15Z")
Hi, I have input coming from kafka topic to logstash. Which is json data. JSON structure of my data "field1" : "val1", "field2" : "val2", "field3" : { "field4" : { "field5" : "val5", "field6" : "val6" } } input … --- ## [After install watcher logstash cannot join the cluster](https://discuss.elastic.co/t/after-install-watcher-logstash-cannot-join-the-cluster/1744)
**Author:** [@ourlord](https://discuss.elastic.co/u/ourlord)\ **Replies:** 3\ **Last updated:** [June 3, 2015, 10:37pm UTC](https://discuss.elastic.co/t/after-install-watcher-logstash-cannot-join-the-cluster/1744 "2015-06-03T22:37:05Z")
Hello good people, I have 3 nodes cluster and 2 logstash instance use elasticsearch node output. After installing watcher for all 3 nodes, the logstash instances repeatedly showing the following warning and cannot do a… --- ## [File input documentation for logstash 2.2](https://discuss.elastic.co/t/file-input-documentation-for-logstash-2-2/41421)
**Author:** [@damartin77](https://discuss.elastic.co/u/damartin77)\ **Replies:** 0\ **Last updated:** [February 10, 2016, 6:43pm UTC](https://discuss.elastic.co/t/file-input-documentation-for-logstash-2-2/41421 "2016-02-10T18:43:38Z")
I recently updated to logstash-2.2 and found this in the log soon after startup: :message=\>"Reached open files limit: 4095, set by the 'max\_open\_files' option I don't see the max\_open\_files option in: enter link descri… --- ## [\[APM Java agent\] Ignore Exception](https://discuss.elastic.co/t/apm-java-agent-ignore-exception/193005)
**Author:** [@Hong\_Phuoc\_Cao](https://discuss.elastic.co/u/Hong_Phuoc_Cao)\ **Replies:** 6\ **Last updated:** [July 31, 2019, 8:30pm UTC](https://discuss.elastic.co/t/apm-java-agent-ignore-exception/193005 "2019-07-31T20:30:54Z")
Hi Elastic team, Is there any way to ignore Exception catched in try catch block or ignore specific Exception ? The latest apm (1.8.0) is collecting so many knowns errors, but I dont care about those exceptions. Thank… --- ## [Failed to execute action error in Logstash](https://discuss.elastic.co/t/failed-to-execute-action-error-in-logstash/154384)
**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\ **Replies:** 2\ **Last updated:** [October 29, 2018, 9:07am UTC](https://discuss.elastic.co/t/failed-to-execute-action-error-in-logstash/154384 "2018-10-29T09:07:55Z")
Hi All, I have a logstash\_sample.conf file which have :- input { jdbc { jdbc\_connection\_string =\> "jdbc:oracle:thin:@host:port/XE" jdbc\_user =\> "username" jdbc\_password =\> "password" jdbc\_d… --- ## [ILM Hot, Warm, Cold?](https://discuss.elastic.co/t/ilm-hot-warm-cold/256958)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 8\ **Last updated:** [December 4, 2020, 11:41pm UTC](https://discuss.elastic.co/t/ilm-hot-warm-cold/256958 "2020-12-04T23:41:09Z")
Hello, When I try to setup ILM to make an index to become "Warm" after 30 days, then "Cold" after 60 days, and deleted after 90 days, I get the following: You can't control shard allocation without node attributes. Ca… --- ## [Delete indices with 50 gb or older than](https://discuss.elastic.co/t/delete-indices-with-50-gb-or-older-than/315884)
**Author:** [@anon90868141](https://discuss.elastic.co/u/anon90868141)\ **Replies:** 7\ **Last updated:** [October 6, 2022, 6:14am UTC](https://discuss.elastic.co/t/delete-indices-with-50-gb-or-older-than/315884 "2022-10-06T06:14:34Z")
Hello, I'm currently trying to delete indices which are either greater than 50 GB or older than 31 days, but it seems like this is not possible with ILM. ILM uses, if anything defined in the hot stage, the days since r… --- ## [Term matching with elastic search edge n gram](https://discuss.elastic.co/t/term-matching-with-elastic-search-edge-n-gram/73891)
**Author:** [@venkata\_sreekanth\_bh](https://discuss.elastic.co/u/venkata_sreekanth_bh)\ **Replies:** 7\ **Last updated:** [February 7, 2017, 6:47pm UTC](https://discuss.elastic.co/t/term-matching-with-elastic-search-edge-n-gram/73891 "2017-02-07T18:47:12Z")
I have an custom analyzer with char replace filter, keyword tokenizer and lowercase filter. The problem I want solve is follows Original string in index : 1812abcdefg user input query : 812abcdefg the index has ot… --- ## [How to display duplicate values of a particular field in Kibana](https://discuss.elastic.co/t/how-to-display-duplicate-values-of-a-particular-field-in-kibana/58669)
**Author:** [@ishanim](https://discuss.elastic.co/u/ishanim)\ **Replies:** 1\ **Last updated:** [August 23, 2016, 7:36pm UTC](https://discuss.elastic.co/t/how-to-display-duplicate-values-of-a-particular-field-in-kibana/58669 "2016-08-23T19:36:13Z")
I have log data as follows: udp 81.0.0.1:1024 11.0.0.5:1024 --- --- udp 81.0.0.1:1024 11.0.0.5:1024 --- --- udp 81.0.0.1:1024 11.0.0.5:1024… --- ## [Network.host: "\[\_site\_\]" does not work](https://discuss.elastic.co/t/network-host--site--does-not-work/75332)
**Author:** [@kaushalshriyan](https://discuss.elastic.co/u/kaushalshriyan)\ **Replies:** 3\ **Last updated:** [February 20, 2017, 8:59am UTC](https://discuss.elastic.co/t/network-host--site--does-not-work/75332 "2017-02-20T08:59:07Z")
Hi, I am running elasticsearch-5.2.0-1.noarch on CentOS release 6.8 (Final). I am trying to configure network.host: "\[\_site\_\]" while referring to https://www.elastic.co/guide/en/elasticsearch/reference/current/modules-… --- ## [Jar Hell when staring integration test](https://discuss.elastic.co/t/jar-hell-when-staring-integration-test/41885)
**Author:** [@Pawel\_Rog](https://discuss.elastic.co/u/Pawel_Rog)\ **Replies:** 3\ **Last updated:** [July 14, 2016, 9:42am UTC](https://discuss.elastic.co/t/jar-hell-when-staring-integration-test/41885 "2016-07-14T09:42:40Z")
I have a plugin which i decided to move to ES 2.2. This is what I get when integration test start (ESIntegTestCase) co\*grationTest Time elapsed: 0.008 sec \<\<\< ERROR! java.lang.RuntimeException: found jar … --- ## [Watcher:failed to send sample slack message to user](https://discuss.elastic.co/t/watcher-failed-to-send-sample-slack-message-to-user/152624)
**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\ **Replies:** 6\ **Last updated:** [October 17, 2018, 5:04am UTC](https://discuss.elastic.co/t/watcher-failed-to-send-sample-slack-message-to-user/152624 "2018-10-17T05:04:50Z")
HI, I want to create new threshold alert and alert should send via slack. I have configured my slack webhook URL on elasticsearch.yml. when i try to send sample i'm below error, watcher:failed to send sample slack mess… --- ## [Error kibana at Installation of X-pack](https://discuss.elastic.co/t/error-kibana-at-installation-of-x-pack/50911)
**Author:** [@lucas51000](https://discuss.elastic.co/u/lucas51000)\ **Replies:** 6\ **Last updated:** [May 25, 2016, 4:22pm UTC](https://discuss.elastic.co/t/error-kibana-at-installation-of-x-pack/50911 "2016-05-25T16:22:43Z")
Hello I have a problem following the installation of x-pack, I sometimes have to start the Kibana service. I encounter the following error and I can not solve the problem "FATAL {\[Error:. Xpack.security.encryptionKe… --- ## [Integration between kibana and opsgenie](https://discuss.elastic.co/t/integration-between-kibana-and-opsgenie/205572)
**Author:** [@andres\_fever](https://discuss.elastic.co/u/andres_fever)\ **Replies:** 1\ **Last updated:** [October 30, 2019, 9:23am UTC](https://discuss.elastic.co/t/integration-between-kibana-and-opsgenie/205572 "2019-10-30T09:23:54Z")
I'm trying do a integration with alerts between kibana and opsgenie. I created a watcher in kibana and this alert send me a email, but now, I want to send a post message to Api alerts of Opsgenie. Something information … --- ## [Filebeat not sending metadata to Graylog even I included add\_kubernetes\_metadata](https://discuss.elastic.co/t/filebeat-not-sending-metadata-to-graylog-even-i-included-add-kubernetes-metadata/186080)
**Author:** [@Sai\_Sanaka](https://discuss.elastic.co/u/Sai_Sanaka)\ **Replies:** 5\ **Last updated:** [July 11, 2019, 1:41pm UTC](https://discuss.elastic.co/t/filebeat-not-sending-metadata-to-graylog-even-i-included-add-kubernetes-metadata/186080 "2019-07-11T13:41:52Z")
Hi I have Filebeat setup to pull logs from Kubernetes which is not working. Little background: I have Graylog running with mongo and elastic search on a single server. I have a beats plugin "graylog-plugin-beats-2.4.7"… --- ## [Logstash terminate if using sqlite plugin](https://discuss.elastic.co/t/logstash-terminate-if-using-sqlite-plugin/32432)
**Author:** [@M.Tyler](https://discuss.elastic.co/u/M.Tyler)\ **Replies:** 5\ **Last updated:** [October 26, 2015, 12:58am UTC](https://discuss.elastic.co/t/logstash-terminate-if-using-sqlite-plugin/32432 "2015-10-26T00:58:40Z")
Please let me question about sqlite plugin. Logstash version: 1.5.4 OS: Windows Vista I set logstash.conf as the below on input section after I ran "bin/plugin install logstash-input-sqlite". But Logstash terminate i… --- ## [GetResponse.getFields() is deprecated, but no alternative?](https://discuss.elastic.co/t/getresponse-getfields-is-deprecated-but-no-alternative/67955)
**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\ **Replies:** 8\ **Last updated:** [December 5, 2016, 8:06pm UTC](https://discuss.elastic.co/t/getresponse-getfields-is-deprecated-but-no-alternative/67955 "2016-12-05T20:06:53Z")
I use ES 5.0.2 and Transport 5.0.2. The GetResponse.getFields() is marked deprecated with a notice to use .getSource() instead. However, if I submit a Get request with stored\_fields=x,y,z, I get back a 'fields' element, … --- ## [Best Translog configuration for ES 2.2.0](https://discuss.elastic.co/t/best-translog-configuration-for-es-2-2-0/43348)
**Author:** [@radap](https://discuss.elastic.co/u/radap)\ **Replies:** 8\ **Last updated:** [March 3, 2016, 10:19am UTC](https://discuss.elastic.co/t/best-translog-configuration-for-es-2-2-0/43348 "2016-03-03T10:19:32Z")
As described in the documentation, in 2.2.0 ver the Translog is fsync and commit after every request by default. Is it better to set the index.translog.durability to async with sync\_interval of 5s? Or maybe 10s, 30s? Th… --- ## [Checking length of a message](https://discuss.elastic.co/t/checking-length-of-a-message/154044)
**Author:** [@Parvatayya\_Malimath](https://discuss.elastic.co/u/Parvatayya_Malimath)\ **Replies:** 4\ **Last updated:** [October 29, 2018, 2:40pm UTC](https://discuss.elastic.co/t/checking-length-of-a-message/154044 "2018-10-29T14:40:23Z")
Hi I am creating logstash filter, for a message like below 10.134.246.236 - username \[24/Oct/2018:15:51:39 +0200\] "POST /xyz/xyz/xyz/ i need to create a filter, which will check the length of username and create a ta… --- ## [Getting error SyntaxError: (ruby filter code):3: syntax error, unexpected kIN logstash](https://discuss.elastic.co/t/getting-error-syntaxerror-ruby-filter-code-3-syntax-error-unexpected-kin-logstash/26567)
**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\ **Replies:** 4\ **Last updated:** [July 30, 2015, 2:56pm UTC](https://discuss.elastic.co/t/getting-error-syntaxerror-ruby-filter-code-3-syntax-error-unexpected-kin-logstash/26567 "2015-07-30T14:56:06Z")
I want to split string field "label" which contains hyphen e.g. "Label =SCR1-xyz\_abc-Page " I am trying to split Scenario= SCR1 Transaction =xyz\_abc Request=Page But with below config getting syntax error. Any idea … --- ## [Calculate Apdex value in elasticsearch](https://discuss.elastic.co/t/calculate-apdex-value-in-elasticsearch/305955)
**Author:** [@mmartinez](https://discuss.elastic.co/u/mmartinez)\ **Replies:** 6\ **Last updated:** [July 8, 2022, 4:21pm UTC](https://discuss.elastic.co/t/calculate-apdex-value-in-elasticsearch/305955 "2022-07-08T16:21:00Z")
Hello, Recently, we migrated our New Relic APM stack to escloud but we realised there is no official way to calculate the Apdex value. There is this new User Experience App but some people from our company are still req… --- ## [Kafka output, CPU spikes if Kafka Cluster Unavailable](https://discuss.elastic.co/t/kafka-output-cpu-spikes-if-kafka-cluster-unavailable/48892)
**Author:** [@landonix](https://discuss.elastic.co/u/landonix)\ **Replies:** 6\ **Last updated:** [May 17, 2016, 11:45am UTC](https://discuss.elastic.co/t/kafka-output-cpu-spikes-if-kafka-cluster-unavailable/48892 "2016-05-17T11:45:46Z")
I have been testing Winlogbeat by dropping event log output directly into a Kafka cluster queue. It works very well with uninterrupted/reliable network connectivity. However in my test case I wanted to see the impact if … --- ## [Cohort Analysis Data](https://discuss.elastic.co/t/cohort-analysis-data/162557)
**Author:** [@aseemmittal](https://discuss.elastic.co/u/aseemmittal)\ **Replies:** 0\ **Last updated:** [January 1, 2019, 9:17am UTC](https://discuss.elastic.co/t/cohort-analysis-data/162557 "2019-01-01T09:17:30Z")
I am starting on creating data for user retention analysis. How should be the data modelling for this. And how in Kibana can it be visualized. The Cohort plugin seems to be outdated --- ## [Analyzing Hebrew string](https://discuss.elastic.co/t/analyzing-hebrew-string/183850)
**Author:** [@ProxyMasterMerger](https://discuss.elastic.co/u/ProxyMasterMerger)\ **Replies:** 3\ **Last updated:** [June 6, 2019, 7:04am UTC](https://discuss.elastic.co/t/analyzing-hebrew-string/183850 "2019-06-06T07:04:41Z")
Hey guys. I need help with writing an analyzer for a hebrew string. Basically, hebrew words can contain prefix/postfix characters that I want to tokenize. But the thing is that I want my list of terms to include both wo… --- ## [Mapper-attachment and base64 encoding](https://discuss.elastic.co/t/mapper-attachment-and-base64-encoding/22657)
**Author:** [@Austin\_Harmon](https://discuss.elastic.co/u/Austin_Harmon)\ **Replies:** 3\ **Last updated:** [February 10, 2016, 2:24pm UTC](https://discuss.elastic.co/t/mapper-attachment-and-base64-encoding/22657 "2016-02-10T14:24:36Z")
Hello, I am trying to index a large amount of data with the mapper attachment so I can get the contents of the documents. My plan of attack is to write a php script that encodes all my files to base64. Then input … --- ## [Index HTML documents](https://discuss.elastic.co/t/index-html-documents/11478)
**Author:** [@mjk](https://discuss.elastic.co/u/mjk)\ **Replies:** 3\ **Last updated:** [April 8, 2013, 5:12am UTC](https://discuss.elastic.co/t/index-html-documents/11478 "2013-04-08T05:12:53Z")
I have been trying to use the attachment plugin to index HTML documents. I want to do a couple things to start to build an understanding of: a) how to control a mapping b) control what gets stored and what does not.… --- ## [How to Enable Alerting With Basic License?](https://discuss.elastic.co/t/how-to-enable-alerting-with-basic-license/236764)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 4\ **Last updated:** [June 11, 2020, 9:05pm UTC](https://discuss.elastic.co/t/how-to-enable-alerting-with-basic-license/236764 "2020-06-11T21:05:31Z")
According to elastic licensing page alerting is available with basic free license. We have 6 node cluster (with TLS/security enabled) and we are unable to see any alerting options on cluster monitoring dashboards in Kib… --- ## [How to handle grok optional pattern (?:)](https://discuss.elastic.co/t/how-to-handle-grok-optional-pattern/303796)
**Author:** [@marwen](https://discuss.elastic.co/u/marwen)\ **Replies:** 6\ **Last updated:** [May 4, 2022, 7:36am UTC](https://discuss.elastic.co/t/how-to-handle-grok-optional-pattern/303796 "2022-05-04T07:36:37Z")
Hi everyone I'm new to Elastick Stack, I set grok custom pattern using RegEx: MODULE\_NAME (?:((?\<=\[\\\[\])\\/\\S\[^\\\]\]+)) the problem is it's optional pattern so I want the "module\_name" field to be empty instead of showing … --- ## [Canvas - Rounding point series axis data](https://discuss.elastic.co/t/canvas-rounding-point-series-axis-data/197939)
**Author:** [@rajeev1](https://discuss.elastic.co/u/rajeev1)\ **Replies:** 6\ **Last updated:** [September 4, 2019, 7:19pm UTC](https://discuss.elastic.co/t/canvas-rounding-point-series-axis-data/197939 "2019-09-04T19:19:23Z")
I am facing couple of issues with Canvas pointseries. I am using x-axis as @timestamp and y-axis is average of a field. The issue is that sometime average can have more than 2 digits after the decimal point but the Ca… --- ## [No Result Found After X Pack Install](https://discuss.elastic.co/t/no-result-found-after-x-pack-install/93689)
**Author:** [@Vinay\_Gowda](https://discuss.elastic.co/u/Vinay_Gowda)\ **Replies:** 6\ **Last updated:** [July 28, 2017, 10:48am UTC](https://discuss.elastic.co/t/no-result-found-after-x-pack-install/93689 "2017-07-28T10:48:45Z")
Hi Here is my Configuration , OS - Ubuntu 16.04 Elastic Search - 5.5.0 kibana - 5.5.0 logstash - 5.5.0 and I have installed metric and winlog beats on windows machine. I can able to see metric and winlog indices. … --- ## [Multiple pipelines + docker](https://discuss.elastic.co/t/multiple-pipelines-docker/141728)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 2\ **Last updated:** [August 3, 2018, 10:31am UTC](https://discuss.elastic.co/t/multiple-pipelines-docker/141728 "2018-08-03T10:31:59Z")
After reading the docs on running logstash on docker it isn't clear how we should treat the pipelines.yml file when using docker. I have tried bind mounting like so :slight\_smile: volumes: - /root/pipeline2/:/usr/… --- ## [FileBeat - Logstash - Filter CSV - Elastic](https://discuss.elastic.co/t/filebeat-logstash-filter-csv-elastic/71760)
**Author:** [@Ajay1](https://discuss.elastic.co/u/Ajay1)\ **Replies:** 5\ **Last updated:** [January 31, 2017, 12:34pm UTC](https://discuss.elastic.co/t/filebeat-logstash-filter-csv-elastic/71760 "2017-01-31T12:34:56Z")
Hi @magnusbaeck, I have installed Filebeat in local server where i want to pick some log files from different folders on daily basis . But also the folder contains data for past 30 days . Will File beat work based on t… --- ## [Force\_peer/peer option fails to validate client certificate](https://discuss.elastic.co/t/force-peer-peer-option-fails-to-validate-client-certificate/59929)
**Author:** [@Akshaykapoor](https://discuss.elastic.co/u/Akshaykapoor)\ **Replies:** 5\ **Last updated:** [September 14, 2016, 12:12am UTC](https://discuss.elastic.co/t/force-peer-peer-option-fails-to-validate-client-certificate/59929 "2016-09-14T00:12:01Z")
This is the following i tried, Had server cert enabled on logstash with sl\_verify\_mode: none. This worked fine and and filebeat was able to connect to server and send logs. Now, when i enable ssl\_verify\_mode: force\_… --- ## [How to make changes in config elasticsearch.yml from elasticsearch operator](https://discuss.elastic.co/t/how-to-make-changes-in-config-elasticsearch-yml-from-elasticsearch-operator/217840)
**Author:** [@viveknagar](https://discuss.elastic.co/u/viveknagar)\ **Replies:** 2\ **Last updated:** [February 5, 2020, 8:40am UTC](https://discuss.elastic.co/t/how-to-make-changes-in-config-elasticsearch-yml-from-elasticsearch-operator/217840 "2020-02-05T08:40:03Z")
Hello , I want to make changes in /usr/share/elasticsearch/config/elasticsearch.yml from elasticsearch operator. I am using docker.elastic.co/eck/eck-operator:1.0.0 image of operator . And I have deployed elasticsearc… --- ## [How to query in condition of length of string fields and the field ending with "99"](https://discuss.elastic.co/t/how-to-query-in-condition-of-length-of-string-fields-and-the-field-ending-with-99/168528)
**Author:** [@kennymarx0](https://discuss.elastic.co/u/kennymarx0)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 9:25am UTC](https://discuss.elastic.co/t/how-to-query-in-condition-of-length-of-string-fields-and-the-field-ending-with-99/168528 "2019-02-15T09:25:11Z")
there is a error when using the query below: GET trxdetail-fj/\_search { "query": { "script": { "script": { "source": "doc\['OPPACC'\].length()\>10", "lang": "painless" } } } } errror message: { "error": { … --- ## [Parsing multiline logs in Logstash](https://discuss.elastic.co/t/parsing-multiline-logs-in-logstash/89676)
**Author:** [@nmane](https://discuss.elastic.co/u/nmane)\ **Replies:** 3\ **Last updated:** [June 22, 2017, 12:22pm UTC](https://discuss.elastic.co/t/parsing-multiline-logs-in-logstash/89676 "2017-06-22T12:22:31Z")
I am using Logstash to parse my multiline logs. I have used multiline in filebeat. I am able to use grok filter for the first line of the log. But the pattern is not same for all multiline logs. For example, my logs are: … --- ## [How to create replica only Node?](https://discuss.elastic.co/t/how-to-create-replica-only-node/22476)
**Author:** [@Davinder\_Deol](https://discuss.elastic.co/u/Davinder_Deol)\ **Replies:** 3\ **Last updated:** [March 3, 2015, 12:54pm UTC](https://discuss.elastic.co/t/how-to-create-replica-only-node/22476 "2015-03-03T12:54:19Z")
We have a requirement where we want to create a node and ask it to join the cluster. But we don't want this node to have primary shard. it is like a Disaster scenario where I have a node running on disaster serve… [Previous page](https://discuss.elastic.co/top.md?page=648&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=650&per_page=50&period=all)