# Top **URL:** https://discuss.elastic.co/top.md?page=672&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 673 --- ## [Condition in JSON Input Script/aggs](https://discuss.elastic.co/t/condition-in-json-input-script-aggs/119815)
**Author:** [@phia](https://discuss.elastic.co/u/phia)\ **Replies:** 2\ **Last updated:** [February 15, 2018, 10:13am UTC](https://discuss.elastic.co/t/condition-in-json-input-script-aggs/119815 "2018-02-15T10:13:14Z")
Hey guys, is it possible to make some conditions in the JSON Input/Aggregations. For example: "aggs": { "calculation": { "sum": { "script": if (doc\['Field1'\].value - doc\['F… --- ## [\[apm\]A message is displayed indicating that the Remote configuration is not available](https://discuss.elastic.co/t/apm-a-message-is-displayed-indicating-that-the-remote-configuration-is-not-available/322445)
**Author:** [@ntmxglrtayl03](https://discuss.elastic.co/u/ntmxglrtayl03)\ **Replies:** 3\ **Last updated:** [January 4, 2023, 3:09pm UTC](https://discuss.elastic.co/t/apm-a-message-is-displayed-indicating-that-the-remote-configuration-is-not-available/322445 "2023-01-04T15:09:34Z")
Kibana version: 7.17.8 Elasticsearch version: 7.17.8 APM Server version: 7.17.8 APM Agent language and version: java 1.35.0 A message is displayed indicating that the Remote configuration is not available, But I … --- ## [ElasticSearch Hash Function](https://discuss.elastic.co/t/elasticsearch-hash-function/21420)
**Author:** [@costya](https://discuss.elastic.co/u/costya)\ **Replies:** 1\ **Last updated:** [December 29, 2014, 3:18pm UTC](https://discuss.elastic.co/t/elasticsearch-hash-function/21420 "2014-12-29T15:18:04Z")
Hi, I would like to predict the shards routing of a set of keys as a function of the number of shards,without defining the actual index. Elasticsearch Version 1.4.2 How can i check which hash function is us… --- ## [Elasticsearch-sql-cli Syntax :: "For the Last Five Minutes..." Query?](https://discuss.elastic.co/t/elasticsearch-sql-cli-syntax-for-the-last-five-minutes-query/204677)
**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\ **Replies:** 4\ **Last updated:** [October 24, 2019, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-sql-cli-syntax-for-the-last-five-minutes-query/204677 "2019-10-24T06:56:23Z")
Hi Elasticsearch Gurus, I’ve recently spun up an Elasticsearch v7.4.0 Docker container. Within the container, I’ve been playing with the “elasticsearch-sql-cli” script and successfully submitting SQL-like queries again… --- ## [What does Impact mean in APM Transactions on Kibana?](https://discuss.elastic.co/t/what-does-impact-mean-in-apm-transactions-on-kibana/196470)
**Author:** [@yashshanker](https://discuss.elastic.co/u/yashshanker)\ **Replies:** 4\ **Last updated:** [August 28, 2019, 6:52pm UTC](https://discuss.elastic.co/t/what-does-impact-mean-in-apm-transactions-on-kibana/196470 "2019-08-28T18:52:12Z")
I was looking at the Kibana dashboard for APM for one of my services, and in the Transactions tab, I came across a column named "Impact". Can anyone tell me, what does Impact means in this context ? Like, impact on what… --- ## [Filebeats is not detecting new log entries](https://discuss.elastic.co/t/filebeats-is-not-detecting-new-log-entries/49371)
**Author:** [@kpocalypse](https://discuss.elastic.co/u/kpocalypse)\ **Replies:** 4\ **Last updated:** [May 9, 2016, 9:45am UTC](https://discuss.elastic.co/t/filebeats-is-not-detecting-new-log-entries/49371 "2016-05-09T09:45:50Z")
OS: CENTOS 6 kernel 2.6.32-573.12.1.el6.x86\_64 Filebeats: filebeat-5.0.0-alpha2-x86\_64 I am trying to run filebeats with the kafka output, and have run into issues. When I start filebeats, it will harvest the files u… --- ## [Logstash-input-jdbcをオフライン環境でインストールしたい](https://discuss.elastic.co/t/logstash-input-jdbc/26459)
**Author:** [@kikuchan](https://discuss.elastic.co/u/kikuchan)\ **Replies:** 4\ **Last updated:** [August 24, 2015, 9:38am UTC](https://discuss.elastic.co/t/logstash-input-jdbc/26459 "2015-08-24T09:38:40Z")
お世話になります。 現在、Windows7 64bit(オフライン環境)にてlogstashの環境構築をしようとしております。 logstash自体は問題なく動くのですが、logstashとDBをJDBC接続したいと考えております。 そのため、以下のページを読み、logstash-input-jdbcのインストールを試みました。 参考ページ：https://rubygems.org/gems/logstash-input-jdbc/ve… --- ## [Logstash error using \`split\` on JSON array, where array is converted from hash](https://discuss.elastic.co/t/logstash-error-using-split-on-json-array-where-array-is-converted-from-hash/207395)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 5\ **Last updated:** [November 11, 2019, 7:26pm UTC](https://discuss.elastic.co/t/logstash-error-using-split-on-json-array-where-array-is-converted-from-hash/207395 "2019-11-11T19:26:23Z")
TL;DR Receiving errors when using logstash split filter after using ruby filter to convert JSON dict (hash) to array. The rest of the story... I have Logstash polling an application for mbean metrics. The data set is co… --- ## [Logstash filter ruby create new event?](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377)
**Author:** [@quejinho](https://discuss.elastic.co/u/quejinho)\ **Replies:** 5\ **Last updated:** [October 20, 2015, 7:43am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377 "2015-10-20T07:43:34Z")
I am planning to create a time difference betwen one logstash and another so in second one i made a ruby code to make a time difference. Although i am quite there i need to not add a field to an event but to create a ne… --- ## [Settings from elasticsearch-keystore not loaded](https://discuss.elastic.co/t/settings-from-elasticsearch-keystore-not-loaded/133067)
**Author:** [@sureshsubramaniyan](https://discuss.elastic.co/u/sureshsubramaniyan)\ **Replies:** 2\ **Last updated:** [May 29, 2018, 12:34pm UTC](https://discuss.elastic.co/t/settings-from-elasticsearch-keystore-not-loaded/133067 "2018-05-29T12:34:29Z")
I have stored the active directory bind user password in elasticsearch keystore . but password not getting read from the keystore . elasticsearch.yml settings: xpack: security: authc: realms: native… --- ## [Fail to install logstash plugin, version 7.6.2](https://discuss.elastic.co/t/fail-to-install-logstash-plugin-version-7-6-2/262443)
**Author:** [@wink](https://discuss.elastic.co/u/wink)\ **Replies:** 7\ **Last updated:** [February 3, 2021, 2:59am UTC](https://discuss.elastic.co/t/fail-to-install-logstash-plugin-version-7-6-2/262443 "2021-02-03T02:59:01Z")
Hi, I just do everything like on https://www.elastic.co/guide/en/logstash/current/java-filter-plugin.html#\_copy\_the\_example\_repo\_3. I did not change any code. But It comes out some error when I try to install the plug… --- ## [Filebeat to logstash problem to parse json message](https://discuss.elastic.co/t/filebeat-to-logstash-problem-to-parse-json-message/111642)
**Author:** [@Fabio\_Scoppetta](https://discuss.elastic.co/u/Fabio_Scoppetta)\ **Replies:** 6\ **Last updated:** [December 13, 2017, 9:58pm UTC](https://discuss.elastic.co/t/filebeat-to-logstash-problem-to-parse-json-message/111642 "2017-12-13T21:58:51Z")
Hello I am trying to parse json logs in filebeat and send to elastic without logstash If a have message like in below works fine: {"@timestamp":"2017-12-11T19:52:51.262-02:00","@version":1,"message":"foo","logger\_name"… --- ## [How to parse dir command output from txt file and append filenames to directory](https://discuss.elastic.co/t/how-to-parse-dir-command-output-from-txt-file-and-append-filenames-to-directory/276185)
**Author:** [@baileys20055](https://discuss.elastic.co/u/baileys20055)\ **Replies:** 4\ **Last updated:** [June 16, 2021, 8:33pm UTC](https://discuss.elastic.co/t/how-to-parse-dir-command-output-from-txt-file-and-append-filenames-to-directory/276185 "2021-06-16T20:33:46Z")
Hello, I am trying to parse dir command txt files that are formatted as follows: Directory of C:\\Windows\\addins 09/15/2018 02:33 AM \ . 09/15/2018 02:33 AM \ .. 09/15/2018 02:29 AM… --- ## [Corosync + pacemaker + logstash](https://discuss.elastic.co/t/corosync-pacemaker-logstash/25055)
**Author:** [@saif](https://discuss.elastic.co/u/saif)\ **Replies:** 4\ **Last updated:** [July 10, 2015, 1:00pm UTC](https://discuss.elastic.co/t/corosync-pacemaker-logstash/25055 "2015-07-10T13:00:23Z")
hello I wanted to know if I can use corosync and pacemaker with logstash if not are there any other solution to do a cluster between 2 instance of logstash thank you --- ## [Search after example in java8](https://discuss.elastic.co/t/search-after-example-in-java8/330969)
**Author:** [@suresh\_chaudhari](https://discuss.elastic.co/u/suresh_chaudhari)\ **Replies:** 2\ **Last updated:** [April 28, 2023, 8:07am UTC](https://discuss.elastic.co/t/search-after-example-in-java8/330969 "2023-04-28T08:07:34Z")
I cant follow example mentioned in rest api documentation.Elastic java client is really tough to understand. Can some one share how to use searchafter api with java tutorial. There is some sort field we need to share w… --- ## [Adding Synonyms on existing Index](https://discuss.elastic.co/t/adding-synonyms-on-existing-index/6046)
**Author:** [@Greg\_Brown](https://discuss.elastic.co/u/Greg_Brown)\ **Replies:** 2\ **Last updated:** [December 2, 2011, 2:48pm UTC](https://discuss.elastic.co/t/adding-synonyms-on-existing-index/6046 "2011-12-02T14:48:07Z")
Greetings, I have had a cluster running 0.17.8 which I just just updated to 0.18.5 and (foolishly) at the same time I added a synonym file with the mapping of "plug-in, plug in, plugin, plug-ins, plug ins, plugins"… --- ## [Http output plugin is not working in logstash, Please help](https://discuss.elastic.co/t/http-output-plugin-is-not-working-in-logstash-please-help/275889)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 7\ **Last updated:** [June 17, 2021, 2:53pm UTC](https://discuss.elastic.co/t/http-output-plugin-is-not-working-in-logstash-please-help/275889 "2021-06-17T14:53:17Z")
Hi, I am trying to send json message to kibana api using http plugin, I found the below error, Please help and appreciated. \[2021-06-14T14:45:26,361\]\[ERROR\]\[logstash.outputs.http \] \[HTTP Output Failure\] Encountered n… --- ## [openJDK on ARM crashes Elastic](https://discuss.elastic.co/t/openjdk-on-arm-crashes-elastic/27283)
**Author:** [@Alleycat](https://discuss.elastic.co/u/Alleycat)\ **Replies:** 1\ **Last updated:** [August 13, 2015, 11:48am UTC](https://discuss.elastic.co/t/openjdk-on-arm-crashes-elastic/27283 "2015-08-13T11:48:58Z")
Hi I've just built a Debian Jessie install on a Cubox-i4 Pro (ARMHF). I installed openJDK from the repo, downloaded, unzipped and succussfully ran Elastic. As I started to work through your tutorial I could view clu… --- ## [Kibana: How to get the top hits for a field and then do a count of them in terms of another field](https://discuss.elastic.co/t/kibana-how-to-get-the-top-hits-for-a-field-and-then-do-a-count-of-them-in-terms-of-another-field/106446)
**Author:** [@suchitgupta](https://discuss.elastic.co/u/suchitgupta)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 6:45pm UTC](https://discuss.elastic.co/t/kibana-how-to-get-the-top-hits-for-a-field-and-then-do-a-count-of-them-in-terms-of-another-field/106446 "2017-11-07T18:45:01Z")
I have documents with fields account\_id(primary key for my relational db) and status. Whenever there is a change in the status of the account, I pushed the event to the Elasticsearch with the account\_id and status. So o… --- ## [How should i grok the sentence](https://discuss.elastic.co/t/how-should-i-grok-the-sentence/129808)
**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\ **Replies:** 6\ **Last updated:** [May 8, 2018, 2:36am UTC](https://discuss.elastic.co/t/how-should-i-grok-the-sentence/129808 "2018-05-08T02:36:39Z")
I have a syslog like "2018-04-26 15:22:23,200の\[INFO\]の123" and i using "%{TIMESTAMP\_ISO8601:time}の\[%{WORD:FFF}\]の%{INT:DD}" it does work. But when i change the information to "2018-04-26 15:22:23,200の\[INFO\]のtest" and i u… --- ## [Xpack disable](https://discuss.elastic.co/t/xpack-disable/338350)
**Author:** [@mannoj87](https://discuss.elastic.co/u/mannoj87)\ **Replies:** 4\ **Last updated:** [July 14, 2023, 7:10am UTC](https://discuss.elastic.co/t/xpack-disable/338350 "2023-07-14T07:10:16Z")
ES Version: 7.10.2 Query 1 : If I need to disable xpack I need to make yml changes to make xpack settings to false and restart each nodes ? Query1 My Understanding is : Yes, there is no API call to disable or enable dy… --- ## [Logstash sysconfig file missing](https://discuss.elastic.co/t/logstash-sysconfig-file-missing/74115)
**Author:** [@Rinat](https://discuss.elastic.co/u/Rinat)\ **Replies:** 5\ **Last updated:** [February 7, 2017, 5:42pm UTC](https://discuss.elastic.co/t/logstash-sysconfig-file-missing/74115 "2017-02-07T17:42:58Z")
Hi, I've been reading many posts about adjusting /etc/sysconfig/logstash or /etc/init.d/logstash files for some settings. I can't find any of those files in any of those directories. When I start Logstash it works. M… --- ## [Message Field missing](https://discuss.elastic.co/t/message-field-missing/78421)
**Author:** [@negeric](https://discuss.elastic.co/u/negeric)\ **Replies:** 3\ **Last updated:** [March 15, 2017, 1:40am UTC](https://discuss.elastic.co/t/message-field-missing/78421 "2017-03-15T01:40:40Z")
Hello, I've been using Logstash to parse my IIS logs for some time now. I decided to start using Filebeat to send logs directly to Logstash to make things easier. My problem is that the message field appears to be miss… --- ## [Is APM Server (port 8200) secure by default? How to make it secure?](https://discuss.elastic.co/t/is-apm-server-port-8200-secure-by-default-how-to-make-it-secure/213780)
**Author:** [@Jonny\_the\_Ponny](https://discuss.elastic.co/u/Jonny_the_Ponny)\ **Replies:** 2\ **Last updated:** [January 8, 2020, 3:35am UTC](https://discuss.elastic.co/t/is-apm-server-port-8200-secure-by-default-how-to-make-it-secure/213780 "2020-01-08T03:35:54Z")
Hello, it would be very kind, if an expert could help me. I try to setup (for a non profit project) the elastic stack: Is a default APM Server Installation (from the official Docker Image), as described here: https://w… --- ## [Case-insensitive term query](https://discuss.elastic.co/t/case-insensitive-term-query/69810)
**Author:** [@Lars2](https://discuss.elastic.co/u/Lars2)\ **Replies:** 2\ **Last updated:** [December 23, 2016, 8:16am UTC](https://discuss.elastic.co/t/case-insensitive-term-query/69810 "2016-12-23T08:16:02Z")
Hey, i want to search my records case insensitive. I have the following mapping in my field: "name": { "type": "string", "analyzer": "lowercase\_analyzer" }, Wh… --- ## [Logstash 7.5.1 High CPU Usage](https://discuss.elastic.co/t/logstash-7-5-1-high-cpu-usage/214120)
**Author:** [@chris\_g](https://discuss.elastic.co/u/chris_g)\ **Replies:** 6\ **Last updated:** [January 9, 2020, 3:46pm UTC](https://discuss.elastic.co/t/logstash-7-5-1-high-cpu-usage/214120 "2020-01-09T15:46:02Z")
I recently upgraded Elastic from 7.0.1 to 7.5.1. Elasticsearch and Kibana had no issues but I am having some trouble with Logstash. When I run Logstash 7.0.1, no issues. Everything works as normal. Then, I upgraded to 7… --- ## [Watcher is firing twice for the same watch](https://discuss.elastic.co/t/watcher-is-firing-twice-for-the-same-watch/122111)
**Author:** [@Maxime\_Poirier-Journ](https://discuss.elastic.co/u/Maxime_Poirier-Journ)\ **Replies:** 6\ **Last updated:** [March 5, 2018, 9:47am UTC](https://discuss.elastic.co/t/watcher-is-firing-twice-for-the-same-watch/122111 "2018-03-05T09:47:25Z")
Hi there, I have 1 or 2 watchers that I'm having issues with right now. It is set to trigger once every 30 minutes with a time range of now-30m. For some reason, they are firing twice and I have no idea why. At first i … --- ## [Elasticsearch node does not starts](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421)
**Author:** [@pszemesy](https://discuss.elastic.co/u/pszemesy)\ **Replies:** 5\ **Last updated:** [February 18, 2019, 8:50am UTC](https://discuss.elastic.co/t/elasticsearch-node-does-not-starts/168421 "2019-02-18T08:50:30Z")
Hi All, I have a problem with starting one of my nodes. The ES runs on a cluster of 3 nodes (version 6.6). The node2 dosen't want to start up. When I start it from systemctl it seems to be running: ● elasticsearch.… --- ## [Lightweight alternative to the java client](https://discuss.elastic.co/t/lightweight-alternative-to-the-java-client/119013)
**Author:** [@aclowkey](https://discuss.elastic.co/u/aclowkey)\ **Replies:** 5\ **Last updated:** [February 9, 2018, 10:39am UTC](https://discuss.elastic.co/t/lightweight-alternative-to-the-java-client/119013 "2018-02-09T10:39:51Z")
Hi, Using the Java client of ElasticSearch seems to be depdneded on the whole Elasticsearch and Lucene, etc. This seems to make the server application twice as heavy.. Are there alternatives to that library, except man… --- ## [Error when installing basic license for x-pack on ES 5.6.2](https://discuss.elastic.co/t/error-when-installing-basic-license-for-x-pack-on-es-5-6-2/103731)
**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\ **Replies:** 5\ **Last updated:** [October 31, 2017, 5:37pm UTC](https://discuss.elastic.co/t/error-when-installing-basic-license-for-x-pack-on-es-5-6-2/103731 "2017-10-31T17:37:11Z")
I get the following when trying to install x-pack on ES 5.6.2 "error":{"root\_cause":\[{"type":"action\_not\_found\_transport\_exception","reason":"No handler for action \[cluster:admin/xpack/license/put\]"}\],"type":"action\_no… --- ## [Insert data from hive to elasticsearch](https://discuss.elastic.co/t/insert-data-from-hive-to-elasticsearch/1538)
**Author:** [@gzvince](https://discuss.elastic.co/u/gzvince)\ **Replies:** 5\ **Last updated:** [June 25, 2015, 12:10am UTC](https://discuss.elastic.co/t/insert-data-from-hive-to-elasticsearch/1538 "2015-06-25T00:10:35Z")
I have CDH 5.3.2 and Elasticsearch 1.5.2. Then I have used Elasticsearch-hadoop 2.0.2 to connected them. I have created a table in Hive for es: CREATE EXTERNAL TABLE user (id INT, name STRING) ROW FORMAT SERDE … --- ## [Mass allocate\_stale\_primary](https://discuss.elastic.co/t/mass-allocate-stale-primary/162719)
**Author:** [@amomchilov](https://discuss.elastic.co/u/amomchilov)\ **Replies:** 4\ **Last updated:** [January 4, 2019, 6:39pm UTC](https://discuss.elastic.co/t/mass-allocate-stale-primary/162719 "2019-01-04T18:39:48Z")
We have a pretty sizable Elasticsearch cluster (currently storing 1.2 PB) that has had some data loss due to some PEBCAK. This is for a logging/debugging usecase, so we can tolerate data loss, it's a minor inconvenience,… --- ## [@timestamp shows indexed date/time and not time from log entry](https://discuss.elastic.co/t/timestamp-shows-indexed-date-time-and-not-time-from-log-entry/74472)
**Author:** [@hoagieben](https://discuss.elastic.co/u/hoagieben)\ **Replies:** 4\ **Last updated:** [February 9, 2017, 9:37am UTC](https://discuss.elastic.co/t/timestamp-shows-indexed-date-time-and-not-time-from-log-entry/74472 "2017-02-09T09:37:21Z")
Being very new to ELK I have borrowed the following logstash config which seems to work in the main. Annoyingly though the @timestamp values are not the same as the values in the WebSphere logs but the date/time in which… --- ## [Increasing the search queue size error(s)](https://discuss.elastic.co/t/increasing-the-search-queue-size-error-s/90068)
**Author:** [@barry1](https://discuss.elastic.co/u/barry1)\ **Replies:** 3\ **Last updated:** [June 21, 2017, 1:27pm UTC](https://discuss.elastic.co/t/increasing-the-search-queue-size-error-s/90068 "2017-06-21T13:27:07Z")
Hello, I'm getting this error: rejected execution of org.elasticsearch.transport.TransportService$7@4dfdde91 on EsThreadPoolExecutor\[search, queue capacity = 1000, org.elasticsearch.common.util.concurrent.EsThreadPool… --- ## [Elasticsearch/Marvel - Exception in thread "main" java.lang.IllegalStateException: Could not load plugin descriptor for existing plugin \[plugin-descriptor.properties\]. Was the plugin built before 2.0? Likely root cause: java.nio.file.FileSystemException:](https://discuss.elastic.co/t/elasticsearch-marvel-exception-in-thread-main-java-lang-illegalstateexception-could-not-load-plugin-descriptor-for-existing-plugin-plugin-descriptor-properties-was-the-plugin-built-before-2-0-likely-root-cause-java-nio-file-filesystemexception/43127)
**Author:** [@jeurich](https://discuss.elastic.co/u/jeurich)\ **Replies:** 3\ **Last updated:** [March 1, 2016, 9:03pm UTC](https://discuss.elastic.co/t/elasticsearch-marvel-exception-in-thread-main-java-lang-illegalstateexception-could-not-load-plugin-descriptor-for-existing-plugin-plugin-descriptor-properties-was-the-plugin-built-before-2-0-likely-root-cause-java-nio-file-filesystemexception/43127 "2016-03-01T21:03:05Z")
I cannot get Elasticsearch to start after manually installing Marvel agent 2.2.0. - HELP --- ## [Checksum failed (hardware problem?)](https://discuss.elastic.co/t/checksum-failed-hardware-problem/341061)
**Author:** [@bigjohns97](https://discuss.elastic.co/u/bigjohns97)\ **Replies:** 6\ **Last updated:** [September 2, 2023, 2:07pm UTC](https://discuss.elastic.co/t/checksum-failed-hardware-problem/341061 "2023-09-02T14:07:09Z")
I am using a simple one node Elasticsearch instance on a Debian VM running on top of a Hyper-V Windows 11 system with an AMD 3950 CPU DDR4 RAM and SSD disk. Using elasticsearch as a index for a graylog instance and sendi… --- ## [Accessing images into elasticsearch](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844)
**Author:** [@Salman\_Ali](https://discuss.elastic.co/u/Salman_Ali)\ **Replies:** 6\ **Last updated:** [October 28, 2021, 6:21am UTC](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844 "2021-10-28T06:21:01Z")
Hey I have screenshots of different sites stored on my local machine. I want to store it in Elasticsearch. So I can view each screenshot against the relevant domain in kibana. But I don't have any clue how to do this. … --- ## [Composite ID](https://discuss.elastic.co/t/composite-id/115284)
**Author:** [@devil\_srj7](https://discuss.elastic.co/u/devil_srj7)\ **Replies:** 6\ **Last updated:** [January 23, 2018, 12:27pm UTC](https://discuss.elastic.co/t/composite-id/115284 "2018-01-23T12:27:46Z")
I require a way to create a composite key for the document in elastic search through logstash corresponding to the composite key in my MySQL database. --- ## [Authentication using apikey failed](https://discuss.elastic.co/t/authentication-using-apikey-failed/333244)
**Author:** [@dmrlixos](https://discuss.elastic.co/u/dmrlixos)\ **Replies:** 5\ **Last updated:** [May 23, 2023, 2:08pm UTC](https://discuss.elastic.co/t/authentication-using-apikey-failed/333244 "2023-05-23T14:08:21Z")
Hi I have a cluster with 3 instances ( 1 Master 2 Data Nodes ) Recenty looking into my cluster, i found a lot of warnings about Authentication using apikey failed on specific apikey id EjkscocB14\*\*\*\*\*\*\*\* I try search… --- ## [TSVB, Value is 0 when time filter set to "Today" and "Data time range mode" set to"Last Value"](https://discuss.elastic.co/t/tsvb-value-is-0-when-time-filter-set-to-today-and-data-time-range-mode-set-to-last-value/246719)
**Author:** [@mcarthcat](https://discuss.elastic.co/u/mcarthcat)\ **Replies:** 5\ **Last updated:** [September 22, 2020, 11:00am UTC](https://discuss.elastic.co/t/tsvb-value-is-0-when-time-filter-set-to-today-and-data-time-range-mode-set-to-last-value/246719 "2020-09-22T11:00:59Z")
first.. i\`m not good at english. Excuse me.. scenario kibana v7.8.0 metricbeat (cpu) is running Time Filter : Today visulize : \[ TSVB / Gauge \] Data Metric Aggregation : Average Field: system. memory.used.pct G… --- ## [Script\_file in symlinked subdirectory of config/scripts not executing](https://discuss.elastic.co/t/script-file-in-symlinked-subdirectory-of-config-scripts-not-executing/26016)
**Author:** [@twigbranch](https://discuss.elastic.co/u/twigbranch)\ **Replies:** 5\ **Last updated:** [July 23, 2015, 12:30am UTC](https://discuss.elastic.co/t/script-file-in-symlinked-subdirectory-of-config-scripts-not-executing/26016 "2015-07-23T00:30:19Z")
Continuing the discussion from Deploying script files to disk across all nodes: I'm trying to deploy scripts into the config/scripts directory by setting a symlink to a newly deployed release. This effectively puts th… --- ## [APM Java Agent : Unable to start tomcat server getting error "Failed to find Premain-Class manifest attribute"](https://discuss.elastic.co/t/apm-java-agent-unable-to-start-tomcat-server-getting-error-failed-to-find-premain-class-manifest-attribute/158890)
**Author:** [@BSP](https://discuss.elastic.co/u/BSP)\ **Replies:** 4\ **Last updated:** [November 30, 2018, 1:00pm UTC](https://discuss.elastic.co/t/apm-java-agent-unable-to-start-tomcat-server-getting-error-failed-to-find-premain-class-manifest-attribute/158890 "2018-11-30T13:00:15Z")
Command Line: java -server -showversion -XX:NewRatio=8 -Djava.net.preferIPv4Stack=true -Dintershop.HomeDirectory="C:\\ish710\\710\\intershop-cisetup-sources\\projects\\corporateshop\\build\\server\\local" -Djava.security.auth.l… --- ## [Alert when watcher is in error state - .watcher\_history](https://discuss.elastic.co/t/alert-when-watcher-is-in-error-state-watcher-history/136348)
**Author:** [@Piotr\_Pawlak](https://discuss.elastic.co/u/Piotr_Pawlak)\ **Replies:** 4\ **Last updated:** [June 25, 2018, 9:06am UTC](https://discuss.elastic.co/t/alert-when-watcher-is-in-error-state-watcher-history/136348 "2018-06-25T09:06:57Z")
Hi, we have a number of watchers that send notification to rest\_api (Service.now) to create an incident. I would like to create a generic alert that if a watcher cannot send notification or is in Error state (Execution … --- ## [Setting default value to drop down in Controls](https://discuss.elastic.co/t/setting-default-value-to-drop-down-in-controls/146185)
**Author:** [@jay\_shah](https://discuss.elastic.co/u/jay_shah)\ **Replies:** 3\ **Last updated:** [September 7, 2018, 9:25pm UTC](https://discuss.elastic.co/t/setting-default-value-to-drop-down-in-controls/146185 "2018-09-07T21:25:27Z")
Hi, I have a requirement to set the default value in dropdown created using Controls visualization. In existing setup, I have hardcoded and set the default value of dropdown and whenever the dashboard is loaded for the… --- ## [Correct way to configure index settings from Java client](https://discuss.elastic.co/t/correct-way-to-configure-index-settings-from-java-client/11000)
**Author:** [@Max\_Alexejev](https://discuss.elastic.co/u/Max_Alexejev)\ **Replies:** 3\ **Last updated:** [March 5, 2013, 9:20am UTC](https://discuss.elastic.co/t/correct-way-to-configure-index-settings-from-java-client/11000 "2013-03-05T09:20:44Z")
Hi guys. I use single-node ES application with embedded node (i.e. 1 node cluster, node is a data node, client is obtained as NodeBuilder.nodeBuilder().build().client()). I have elasticsearch.yml file in my res… --- ## [Logstash 7.7.0 on Windows - java.nio.file.AccessDeniedException](https://discuss.elastic.co/t/logstash-7-7-0-on-windows-java-nio-file-accessdeniedexception/234923)
**Author:** [@Coinology](https://discuss.elastic.co/u/Coinology)\ **Replies:** 6\ **Last updated:** [June 2, 2020, 3:02pm UTC](https://discuss.elastic.co/t/logstash-7-7-0-on-windows-java-nio-file-accessdeniedexception/234923 "2020-06-02T15:02:34Z")
Hello all, I am hoping that someone may be able to help me with an issue I've recently ran into with Logstash. I am running 7.7.0 on Windows Server 2016 and I have recently began experiencing Logstash crashes. I'll past… --- ## [Grok in Logstash not working](https://discuss.elastic.co/t/grok-in-logstash-not-working/113675)
**Author:** [@Bikash\_Behuria](https://discuss.elastic.co/u/Bikash_Behuria)\ **Replies:** 6\ **Last updated:** [January 2, 2018, 9:57am UTC](https://discuss.elastic.co/t/grok-in-logstash-not-working/113675 "2018-01-02T09:57:53Z")
I wanted to parse application logs which has information like timestamp , host name , message , log level etc. When I am using Grok pattern , I dont see the correct value is being assigned to the respscive variable. F… --- ## [Import CSV - Column names are also present in the values](https://discuss.elastic.co/t/import-csv-column-names-are-also-present-in-the-values/47383)
**Author:** [@Denny](https://discuss.elastic.co/u/Denny)\ **Replies:** 1\ **Last updated:** [April 15, 2016, 6:05am UTC](https://discuss.elastic.co/t/import-csv-column-names-are-also-present-in-the-values/47383 "2016-04-15T06:05:38Z")
Hi, I've used Logstash to import a csv-file which works great and all was looking good but then I tried another csv-file and then I saw something strange. In Kibana I saw that the headers of the file are also in the val… --- ## [Index, Filter and Query Strategy](https://discuss.elastic.co/t/index-filter-and-query-strategy/25536)
**Author:** [@taylorsuk](https://discuss.elastic.co/u/taylorsuk)\ **Replies:** 5\ **Last updated:** [July 14, 2015, 6:06pm UTC](https://discuss.elastic.co/t/index-filter-and-query-strategy/25536 "2015-07-14T18:06:56Z")
I have made the move to a search tool (Elastic) after using many filters / REST queries etc and it has been amazing so far however I am very 'green' on the subject. I have two main problems: 1. Bulk and strategy for t… --- ## [Kibana -Quering inside message body having field json object type](https://discuss.elastic.co/t/kibana-quering-inside-message-body-having-field-json-object-type/179722)
**Author:** [@prabhat\_ranjan](https://discuss.elastic.co/u/prabhat_ranjan)\ **Replies:** 2\ **Last updated:** [May 14, 2019, 6:56am UTC](https://discuss.elastic.co/t/kibana-quering-inside-message-body-having-field-json-object-type/179722 "2019-05-14T06:56:23Z")
Hi Team, i have file beat index having field "body" which contains the json objects. I want to query on the properties of the body and create labels for the same. Below are the sample data.i need my result to be filter… [Previous page](https://discuss.elastic.co/top.md?page=671&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=673&per_page=50&period=all)