# Top

**URL:** https://discuss.elastic.co/top.md?page=676&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 677

---

## [High read I/O and Load Average after upgrading to Elasticsearch 5.3.2](https://discuss.elastic.co/t/high-read-i-o-and-load-average-after-upgrading-to-elasticsearch-5-3-2/93984)

<div class="topic-metadata">

**Author:** [@Amitm](https://discuss.elastic.co/u/Amitm)\
**Replies:** 1\
**Last updated:** [July 28, 2017, 8:20am UTC](https://discuss.elastic.co/t/high-read-i-o-and-load-average-after-upgrading-to-elasticsearch-5-3-2/93984 "2017-07-28T08:20:58Z")

</div>

Hello, We upgraded our Elasticsearch to 5.3.2 from 1.7.4 after a long process of migration. A few hours after the upgrade, we started to have performance issues in our app. We saw that 1 or 2 nodes (out of 12 data nod…

---

## [Error when starting elasticsearch](https://discuss.elastic.co/t/error-when-starting-elasticsearch/315026)

<div class="topic-metadata">

**Author:** [@morad\_della3](https://discuss.elastic.co/u/morad_della3)\
**Replies:** 5\
**Last updated:** [September 23, 2022, 9:18pm UTC](https://discuss.elastic.co/t/error-when-starting-elasticsearch/315026 "2022-09-23T21:18:21Z")

</div>

I HAVE elastic 8.4.1 in ubuntu 22.04 and when i make this cmd "discovery.type: single-node" in elasticsearch.yml because i installed elastic ad kibana in the same server i have this error \[2022-09-23T14:30:10,954\]\[ERRO…

---

## [Integrate APM Elastic for Android / iOS APP](https://discuss.elastic.co/t/integrate-apm-elastic-for-android-ios-app/261235)

<div class="topic-metadata">

**Author:** [@fio](https://discuss.elastic.co/u/fio)\
**Replies:** 5\
**Last updated:** [January 20, 2021, 10:54pm UTC](https://discuss.elastic.co/t/integrate-apm-elastic-for-android-ios-app/261235 "2021-01-20T22:54:09Z")

</div>

Hi All, How can I integrate APM Elastic into my APP (Swift and Kotlin)? Can I use APM API (Events Intake API)?

---

## [Elasticsearch filter no longer working in 2.3.1](https://discuss.elastic.co/t/elasticsearch-filter-no-longer-working-in-2-3-1/47908)

<div class="topic-metadata">

**Author:** [@xdzhou](https://discuss.elastic.co/u/xdzhou)\
**Replies:** 5\
**Last updated:** [July 15, 2016, 3:14pm UTC](https://discuss.elastic.co/t/elasticsearch-filter-no-longer-working-in-2-3-1/47908 "2016-07-15T15:14:40Z")

</div>

I was using logstash-all-plugins-2.2.0 package before and now I am switching to logstash-all-plugins-2.3.1, the same configuration goes against a ES 2.3.1 works using 2.2.0 version, but not 2.3.1 version. The elasticse…

---

## [Integrating Search UI with NextJS Router Dynamic Routes](https://discuss.elastic.co/t/integrating-search-ui-with-nextjs-router-dynamic-routes/322248)

<div class="topic-metadata">

**Author:** [@Lew\_Ashby](https://discuss.elastic.co/u/Lew_Ashby)\
**Replies:** 5\
**Last updated:** [January 10, 2023, 12:54pm UTC](https://discuss.elastic.co/t/integrating-search-ui-with-nextjs-router-dynamic-routes/322248 "2023-01-10T12:54:21Z")

</div>

I'm using the steps written in NextJS Integration , when integrating Search UI with NextJS Router, I'm having troubles in the case I have dynamic routes, ie. /seller/\[id\], then when activating some Facets, the url get lo…

---

## [Logstash user in Xpack](https://discuss.elastic.co/t/logstash-user-in-xpack/95727)

<div class="topic-metadata">

**Author:** [@dencowboy](https://discuss.elastic.co/u/dencowboy)\
**Replies:** 3\
**Last updated:** [August 4, 2017, 1:20pm UTC](https://discuss.elastic.co/t/logstash-user-in-xpack/95727 "2017-08-04T13:20:31Z")

</div>

there are 2 configuration files for our logstash: config/logstash.yml pipeline/logstash.conf Now I want to know which roles and which user(s) we minimal need to define to get data to elasticsearch and to see it in kib…

---

## [Logstash Handling Filter Errors](https://discuss.elastic.co/t/logstash-handling-filter-errors/287309)

<div class="topic-metadata">

**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 11:31am UTC](https://discuss.elastic.co/t/logstash-handling-filter-errors/287309 "2021-10-21T11:31:20Z")

</div>

I want to handle errors in my Logstash Filter. How do I do that? And more importantly, where is the documentation? I can see there is Documentation here for Elastic Pipeline Error Handling: Is there something similar…

---

## [Devtools only showing 10,000 hits](https://discuss.elastic.co/t/devtools-only-showing-10-000-hits/250663)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 2\
**Last updated:** [October 2, 2020, 7:25pm UTC](https://discuss.elastic.co/t/devtools-only-showing-10-000-hits/250663 "2020-10-02T19:25:23Z")

</div>

I have just installed Elasticsearch 7.8.0 on my laptop as a dev environment. I am using 6.8.10 in production. I have a dataset of around 600,000 documents however when I did a match\_all in devtools, its only showing 10,0…

---

## [Combine Bar and Line Charts in a single visualization](https://discuss.elastic.co/t/combine-bar-and-line-charts-in-a-single-visualization/162344)

<div class="topic-metadata">

**Author:** [@IAmGreg](https://discuss.elastic.co/u/IAmGreg)\
**Replies:** 2\
**Last updated:** [January 25, 2019, 1:12pm UTC](https://discuss.elastic.co/t/combine-bar-and-line-charts-in-a-single-visualization/162344 "2019-01-25T13:12:52Z")

</div>

I want to create a visualization object with a combined bar and line charts? Is this doable? If yes, your help will be much appreciated. Thank you.

---

## [Calculate ratio of success in a field kibana](https://discuss.elastic.co/t/calculate-ratio-of-success-in-a-field-kibana/117417)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 2\
**Last updated:** [January 29, 2018, 10:32am UTC](https://discuss.elastic.co/t/calculate-ratio-of-success-in-a-field-kibana/117417 "2018-01-29T10:32:39Z")

</div>

Hi all, i have a field named Status that contains values (ok and failed), i want to visualise the ratio of success under a metric visualisation (i dont want to use a pie chart) is that possible through scripted field or…

---

## [MySQL 8: Could not create connection to database server](https://discuss.elastic.co/t/mysql-8-could-not-create-connection-to-database-server/280064)

<div class="topic-metadata">

**Author:** [@Justin\_Morgan](https://discuss.elastic.co/u/Justin_Morgan)\
**Replies:** 1\
**Last updated:** [July 30, 2021, 11:57am UTC](https://discuss.elastic.co/t/mysql-8-could-not-create-connection-to-database-server/280064 "2021-07-30T11:57:29Z")

</div>

After upgrading to MySQL 8 I get the following error from my logstash pod: Loading class \`com.mysql.jdbc.Driver'. This is deprecated. The new driver class is \`com.mysql.cj.jdbc.Driver'. The driver is automatically regis…

---

## [Most Recent Trend, Most Searchable keyword with ElasticSearch API](https://discuss.elastic.co/t/most-recent-trend-most-searchable-keyword-with-elasticsearch-api/262783)

<div class="topic-metadata">

**Author:** [@het](https://discuss.elastic.co/u/het)\
**Replies:** 3\
**Last updated:** [February 1, 2021, 10:41am UTC](https://discuss.elastic.co/t/most-recent-trend-most-searchable-keyword-with-elasticsearch-api/262783 "2021-02-01T10:41:16Z")

</div>

Hi Team, Does Elasticsearch provide an API that gives the Most searched words, new search words, and so on? For example like google, top 10 recently searched items, top 10 most searched items? Can we achieve something…

---

## [Logstash mixing up two configuration files?!](https://discuss.elastic.co/t/logstash-mixing-up-two-configuration-files/238540)

<div class="topic-metadata">

**Author:** [@RonGros](https://discuss.elastic.co/u/RonGros)\
**Replies:** 7\
**Last updated:** [June 24, 2020, 6:26pm UTC](https://discuss.elastic.co/t/logstash-mixing-up-two-configuration-files/238540 "2020-06-24T18:26:06Z")

</div>

Hi, I swear to god I don't believe myself when I am writng this. I have a logstash configuration. it takes a CSV file we have and throws it into logstash. I have some ugly patches there that take information from the fi…

---

## [Docker container custom logs - how to process them into kibana](https://discuss.elastic.co/t/docker-container-custom-logs-how-to-process-them-into-kibana/157188)

<div class="topic-metadata">

**Author:** [@Palino1611](https://discuss.elastic.co/u/Palino1611)\
**Replies:** 7\
**Last updated:** [November 24, 2018, 9:56am UTC](https://discuss.elastic.co/t/docker-container-custom-logs-how-to-process-them-into-kibana/157188 "2018-11-24T09:56:25Z")

</div>

I have many containers running on server. One of them is nginx - I enabled filebeat module nginx, I have also created /etc/logstash/conf.d/nginx.conf -taken from website https://www.elastic.co/guide/en/logstash/current/l…

---

## [Metric Beat Mongo](https://discuss.elastic.co/t/metric-beat-mongo/84801)

<div class="topic-metadata">

**Author:** [@karunakarkotha](https://discuss.elastic.co/u/karunakarkotha)\
**Replies:** 7\
**Last updated:** [May 11, 2017, 7:41pm UTC](https://discuss.elastic.co/t/metric-beat-mongo/84801 "2017-05-11T19:41:30Z")

</div>

Hello All, I am interested to capture ,load and visualize MongoDB performance metrics using MetricBeat with ElasticSearch with the below sample dashboard. Here's the below sample linnk which I am interested to setup…

---

## [No thread pool info on dashboard of marvel 2.1?](https://discuss.elastic.co/t/no-thread-pool-info-on-dashboard-of-marvel-2-1/36350)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 7\
**Last updated:** [August 26, 2016, 5:03pm UTC](https://discuss.elastic.co/t/no-thread-pool-info-on-dashboard-of-marvel-2-1/36350 "2016-08-26T17:03:00Z")

</div>

I'd like to confirm cause it is a very usefull info for my use case

---

## [Nest: Add a custom ContractResolver](https://discuss.elastic.co/t/nest-add-a-custom-contractresolver/58935)

<div class="topic-metadata">

**Author:** [@Denis\_Lamanov](https://discuss.elastic.co/u/Denis_Lamanov)\
**Replies:** 4\
**Last updated:** [August 31, 2016, 9:03am UTC](https://discuss.elastic.co/t/nest-add-a-custom-contractresolver/58935 "2016-08-31T09:03:23Z")

</div>

Hi guys, How can I add a custom ContractResolver in order prevent calling default constructor? Tried to do this, but it does not work: public class MyJsonNetSerializer : JsonNetSerializer { ... protected override …

---

## [Quick recovery after node restart in elasticsearch](https://discuss.elastic.co/t/quick-recovery-after-node-restart-in-elasticsearch/11701)

<div class="topic-metadata">

**Author:** [@ovamsikrishna](https://discuss.elastic.co/u/ovamsikrishna)\
**Replies:** 4\
**Last updated:** [August 28, 2013, 2:55pm UTC](https://discuss.elastic.co/t/quick-recovery-after-node-restart-in-elasticsearch/11701 "2013-08-28T14:55:04Z")

</div>

Consider the below settings in the elasticsearch.yml gateway.recover\_after\_data\_nodes: 3 gateway.recover\_after\_time: 5m gateway.expected\_data\_nodes: 3 Current setting: Say, I have 3 data nodes. Now if I dec…

---

## [Elasticsearch for Apache Hadoop 5.0.0-alpha5 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-0-0-alpha5-released/57613)

<div class="topic-metadata">

**Author:** [@james.baiera](https://discuss.elastic.co/u/james.baiera)\
**Replies:** 0\
**Last updated:** [August 9, 2016, 4:06pm UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-5-0-0-alpha5-released/57613 "2016-08-09T16:06:53Z")

</div>

ES-Hadoop 5.0.0-alpha5 has been released. Please note this is an alpha release. You can read more about these releases in this blog post.

---

## [Changing tokenizer from whitespace to standard](https://discuss.elastic.co/t/changing-tokenizer-from-whitespace-to-standard/11600)

<div class="topic-metadata">

**Author:** [@Andy\_Bajka\_2](https://discuss.elastic.co/u/Andy_Bajka_2)\
**Replies:** 3\
**Last updated:** [November 22, 2013, 12:24pm UTC](https://discuss.elastic.co/t/changing-tokenizer-from-whitespace-to-standard/11600 "2013-11-22T12:24:59Z")

</div>

Looks like using "whitespace" doesn't work very well for my forum searches as we often search for alphanumeric words. When I do a search for example: test12345678 I get back thousands of results when I should get…

---

## [Use of index.merge.policy.reclaim\_deletes\_weight in 2.3](https://discuss.elastic.co/t/use-of-index-merge-policy-reclaim-deletes-weight-in-2-3/73746)

<div class="topic-metadata">

**Author:** [@kadey](https://discuss.elastic.co/u/kadey)\
**Replies:** 5\
**Last updated:** [February 3, 2017, 4:07pm UTC](https://discuss.elastic.co/t/use-of-index-merge-policy-reclaim-deletes-weight-in-2-3/73746 "2017-02-03T16:07:47Z")

</div>

Does the index.merge.policy.reclaim\_deletes\_weight configuration parameter still exist in 2.3.3? I could not find it in the documentation. The last version that contains a reference to this is 1.7.

---

## [Large amounts of shards failing](https://discuss.elastic.co/t/large-amounts-of-shards-failing/27216)

<div class="topic-metadata">

**Author:** [@DC64](https://discuss.elastic.co/u/DC64)\
**Replies:** 5\
**Last updated:** [August 17, 2015, 2:38pm UTC](https://discuss.elastic.co/t/large-amounts-of-shards-failing/27216 "2015-08-17T14:38:55Z")

</div>

Earlier today, for the first time, I have been receiving errors in Kibana saying that x/185 shards have failed. Depending on how large my date filter is (last 7 days or last hour) the number and total shards will change. …

---

## [Comparing Plain, FVH and Postings Highlighter Performance](https://discuss.elastic.co/t/comparing-plain-fvh-and-postings-highlighter-performance/14117)

<div class="topic-metadata">

**Author:** [@roytmana](https://discuss.elastic.co/u/roytmana)\
**Replies:** 5\
**Last updated:** [November 2, 2013, 12:52pm UTC](https://discuss.elastic.co/t/comparing-plain-fvh-and-postings-highlighter-performance/14117 "2013-11-02T12:52:45Z")

</div>

Hi I did some performance comparison of the new Postings highlighter introduced in 0.9.6-SNAPSHOT with the two existing highlighters. My case may not be exactly common as I highlight many rather short fields: out o…

---

## [Add 1 filed is sum of other field in logstash](https://discuss.elastic.co/t/add-1-filed-is-sum-of-other-field-in-logstash/70832)

<div class="topic-metadata">

**Author:** [@Tr\_ng\_Trang](https://discuss.elastic.co/u/Tr_ng_Trang)\
**Replies:** 1\
**Last updated:** [January 7, 2017, 6:17am UTC](https://discuss.elastic.co/t/add-1-filed-is-sum-of-other-field-in-logstash/70832 "2017-01-07T06:17:47Z")

</div>

i have 2 filed is number is upbyte and downbyte, and i want to add 1 filed is bandwith (sum of there) in logstash, how can i do this?

---

## [Question about Split Table when making a Table Visualization](https://discuss.elastic.co/t/question-about-split-table-when-making-a-table-visualization/167234)

<div class="topic-metadata">

**Author:** [@AMiura](https://discuss.elastic.co/u/AMiura)\
**Replies:** 2\
**Last updated:** [February 6, 2019, 5:46pm UTC](https://discuss.elastic.co/t/question-about-split-table-when-making-a-table-visualization/167234 "2019-02-06T17:46:59Z")

</div>

We're on Kibana 6.6. My Firewall Guy has asked me to build him some Top Talkers and Listeners visualizations for our proof of concept display of the Elastic Stack. I've thought I'd be nice and build him a table of what t…

---

## [Pushing flush onto pipeline error](https://discuss.elastic.co/t/pushing-flush-onto-pipeline-error/139564)

<div class="topic-metadata">

**Author:** [@rihab\_feki](https://discuss.elastic.co/u/rihab_feki)\
**Replies:** 2\
**Last updated:** [July 16, 2018, 9:35am UTC](https://discuss.elastic.co/t/pushing-flush-onto-pipeline-error/139564 "2018-07-16T09:35:04Z")

</div>

i want to start logstash with a custom configuration and showing the result in stdout but I've alwyas this logs ..Ididn't understand the probllem .. can anyone help me thanks \[2018-07-11T11:46:32,944\]\[INFO \]\[logstash.pi…

---

## [How to move Kibana to another server](https://discuss.elastic.co/t/how-to-move-kibana-to-another-server/122417)

<div class="topic-metadata">

**Author:** [@orestes](https://discuss.elastic.co/u/orestes)\
**Replies:** 2\
**Last updated:** [March 4, 2018, 7:26pm UTC](https://discuss.elastic.co/t/how-to-move-kibana-to-another-server/122417 "2018-03-04T19:26:03Z")

</div>

Hi, I installed kibana in a server and for a while it worked. I have a bunch of dashboards on it. Now I installed X-Pack and it is not working efficiently, since it is hosted in a small server with just 1 Mb. I am plan…

---

## [How to create a dashboard with action button?](https://discuss.elastic.co/t/how-to-create-a-dashboard-with-action-button/101673)

<div class="topic-metadata">

**Author:** [@pascaldergane](https://discuss.elastic.co/u/pascaldergane)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 11:39am UTC](https://discuss.elastic.co/t/how-to-create-a-dashboard-with-action-button/101673 "2017-09-28T11:39:14Z")

</div>

Hi all, I'm new with Kibana. I would like to migrate my old system using NagVIS to Kibana. Do you know how to create a dashboard representing as map your monitored system and display in the dashboard some action button…

---

## [Filtering json fields to be outputted by logstash](https://discuss.elastic.co/t/filtering-json-fields-to-be-outputted-by-logstash/92253)

<div class="topic-metadata">

**Author:** [@aszac](https://discuss.elastic.co/u/aszac)\
**Replies:** 2\
**Last updated:** [July 12, 2017, 1:38pm UTC](https://discuss.elastic.co/t/filtering-json-fields-to-be-outputted-by-logstash/92253 "2017-07-12T13:38:17Z")

</div>

Hello! I am using logstash 5.4 to read a json interaction from kafka and then filter it so that: 1. interaction will be dropped unless field car.name exist 2. only fields car.name and car.model are outputted My confi…

---

## [Modified elasticsearch.yml - now Elasticsearch will not start](https://discuss.elastic.co/t/modified-elasticsearch-yml-now-elasticsearch-will-not-start/32903)

<div class="topic-metadata">

**Author:** [@mojave](https://discuss.elastic.co/u/mojave)\
**Replies:** 2\
**Last updated:** [October 26, 2015, 7:10am UTC](https://discuss.elastic.co/t/modified-elasticsearch-yml-now-elasticsearch-will-not-start/32903 "2015-10-26T07:10:39Z")

</div>

Brand new to Elasticsearch. Running it on AWS. I modified elasticsearch.yml per a YouTube video and now Elasticsearch will not start with this output: \[root@ip-xxx-xx-x-xxx elasticsearch\]# service elasticsearch star…

---

## [Memory size settings](https://discuss.elastic.co/t/memory-size-settings/9784)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 3\
**Last updated:** [November 23, 2012, 10:49pm UTC](https://discuss.elastic.co/t/memory-size-settings/9784 "2012-11-23T22:49:09Z")

</div>

Couple of quick questions: The default setting is for the memory to be allocated outside of the JVM heap. Is there a limit, or will ElasticSearch simply take as much as possible? The node filter cache size is tun…

---

## [Queue is full](https://discuss.elastic.co/t/queue-is-full/284471)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 4\
**Last updated:** [September 29, 2021, 6:54am UTC](https://discuss.elastic.co/t/queue-is-full/284471 "2021-09-29T06:54:52Z")

</div>

Elastic Cloud: 7.14 I have a lot of services that connects to APM and now I have only this message of error: {"accepted":0,"errors":\[{"message":"queue is full"}\]} First of all I want review the messages that we send, …

---

## [Bulk indexing terabytes of time-based data](https://discuss.elastic.co/t/bulk-indexing-terabytes-of-time-based-data/6454)

<div class="topic-metadata">

**Author:** [@derrickburns](https://discuss.elastic.co/u/derrickburns)\
**Replies:** 4\
**Last updated:** [January 23, 2012, 10:20pm UTC](https://discuss.elastic.co/t/bulk-indexing-terabytes-of-time-based-data/6454 "2012-01-23T22:20:01Z")

</div>

I am about to index many terabytes of time-based data using Amazon AWS, so I want to get it right! I would appreciate advice. My current plan is to stream the data into different indices, changing index when it r…

---

## [Filter Aggregation on nested object ... not working as expected!](https://discuss.elastic.co/t/filter-aggregation-on-nested-object-not-working-as-expected/256718)

<div class="topic-metadata">

**Author:** [@Guillaume\_R](https://discuss.elastic.co/u/Guillaume_R)\
**Replies:** 6\
**Last updated:** [November 27, 2020, 6:53pm UTC](https://discuss.elastic.co/t/filter-aggregation-on-nested-object-not-working-as-expected/256718 "2020-11-27T18:53:08Z")

</div>

Hello, I have some product like this { "id\_product" : "180", "name" : "Domane AL 3 femme", "manufacturer" : "TREK", "cat\_path" : "Product\>377~velos~Vélos\>35~route~Route\>44~course…

---

## [Couldn't update x-pack license](https://discuss.elastic.co/t/couldnt-update-x-pack-license/102415)

<div class="topic-metadata">

**Author:** [@moabbas](https://discuss.elastic.co/u/moabbas)\
**Replies:** 6\
**Last updated:** [October 2, 2017, 9:37am UTC](https://discuss.elastic.co/t/couldnt-update-x-pack-license/102415 "2017-10-02T09:37:13Z")

</div>

Hello All, When i update x-pack license using curl -XPUT -u elastic 'http://localhost:9200/\_xpack/license?acknowledge=true' -d @license.json i got this error. {"error":{"root\_cause":\[{"type":"process\_cluster\_event\_ti…

---

## [Watcher Failed to send e-mail to user@mydomain.com](https://discuss.elastic.co/t/watcher-failed-to-send-e-mail-to-user-mydomain-com/126667)

<div class="topic-metadata">

**Author:** [@Unknown\_error](https://discuss.elastic.co/u/Unknown_error)\
**Replies:** 1\
**Last updated:** [April 4, 2018, 7:26am UTC](https://discuss.elastic.co/t/watcher-failed-to-send-e-mail-to-user-mydomain-com/126667 "2018-04-04T07:26:04Z")

</div>

this config on elasticsearch.yml ================================================================ bootstrap.memory\_lock: false cluster.name: elasticsearch http.port: 9200 network.host: 0.0.0.0 node.data: true node…

---

## [Inserting Quotes with mutate, gsub](https://discuss.elastic.co/t/inserting-quotes-with-mutate-gsub/41630)

<div class="topic-metadata">

**Author:** [@maxwell](https://discuss.elastic.co/u/maxwell)\
**Replies:** 1\
**Last updated:** [February 12, 2016, 7:54pm UTC](https://discuss.elastic.co/t/inserting-quotes-with-mutate-gsub/41630 "2016-02-12T19:54:06Z")

</div>

I have a json document which is failing json parse because some of the fields contain quotes, messing up the json. My solution is to remove all of the quotes, and then add them back in myself around relevant fields. How…

---

## [Dockerized Filebeat not sending logs to Logstash](https://discuss.elastic.co/t/dockerized-filebeat-not-sending-logs-to-logstash/143744)

<div class="topic-metadata">

**Author:** [@Derek\_Stevens](https://discuss.elastic.co/u/Derek_Stevens)\
**Replies:** 2\
**Last updated:** [August 10, 2018, 12:19pm UTC](https://discuss.elastic.co/t/dockerized-filebeat-not-sending-logs-to-logstash/143744 "2018-08-10T12:19:32Z")

</div>

Hello! I'm attempting to setup Filebeat to send logs to Logstash. Everything is running in docker, so I'm attempting to use the autodiscover feature. I'm using v6.3.2 across the board. I can see the index in kibana for…

---

## [Old data shown after re-creating an index](https://discuss.elastic.co/t/old-data-shown-after-re-creating-an-index/164714)

<div class="topic-metadata">

**Author:** [@razortt](https://discuss.elastic.co/u/razortt)\
**Replies:** 5\
**Last updated:** [January 18, 2019, 2:21am UTC](https://discuss.elastic.co/t/old-data-shown-after-re-creating-an-index/164714 "2019-01-18T02:21:45Z")

</div>

Hi Apologies if this has been asked before. I'm new with ES (6.3) and i'm working through the process of how I want to index all my documents. What I have found is after I delete the index, tweak the mappings and re-i…

---

## [Pattern for Indexing HTML Documents](https://discuss.elastic.co/t/pattern-for-indexing-html-documents/90880)

<div class="topic-metadata">

**Author:** [@Alex\_Egg](https://discuss.elastic.co/u/Alex_Egg)\
**Replies:** 2\
**Last updated:** [June 28, 2017, 5:24pm UTC](https://discuss.elastic.co/t/pattern-for-indexing-html-documents/90880 "2017-06-28T17:24:41Z")

</div>

I'm looking to index a very large amount of relatively small sized HTML and XML documents. I would, of course, like to query them using search and to receive back highlights in the search results. From what I can gather …

---

## [Sort by time received instead of timestamp](https://discuss.elastic.co/t/sort-by-time-received-instead-of-timestamp/308992)

<div class="topic-metadata">

**Author:** [@MADxHAWK](https://discuss.elastic.co/u/MADxHAWK)\
**Replies:** 7\
**Last updated:** [July 19, 2022, 2:16am UTC](https://discuss.elastic.co/t/sort-by-time-received-instead-of-timestamp/308992 "2022-07-19T02:16:59Z")

</div>

Hello, im using ELK-Stack to search through Cisco logs received by filebeat from our loghost. the problem is, i only can sort the discover by Timestamp from Elasticsearch and not by the timestamp the message was receiv…

---

## [ECK + Istio mTLS](https://discuss.elastic.co/t/eck-istio-mtls/205070)

<div class="topic-metadata">

**Author:** [@Spencer\_Gilbert](https://discuss.elastic.co/u/Spencer_Gilbert)\
**Replies:** 7\
**Last updated:** [November 1, 2019, 11:01am UTC](https://discuss.elastic.co/t/eck-istio-mtls/205070 "2019-11-01T11:01:06Z")

</div>

I saw on the release notes a mention of using ECK with Istio with disabling HTTP level TLS - I've been trying to use mTLS with Istio and ES and running into problems both with the transport layer (which I think I've reso…

---

## [Using logstash](https://discuss.elastic.co/t/using-logstash/32454)

<div class="topic-metadata">

**Author:** [@fereshteh](https://discuss.elastic.co/u/fereshteh)\
**Replies:** 7\
**Last updated:** [November 10, 2015, 3:17pm UTC](https://discuss.elastic.co/t/using-logstash/32454 "2015-11-10T15:17:37Z")

</div>

I am trying to use the logstash documentation to set up a xml filter, but I just cant seem to get it right. My XML format is pretty straigth forward;

---

## [See Y axis as linear in dashboard instead of log scale](https://discuss.elastic.co/t/see-y-axis-as-linear-in-dashboard-instead-of-log-scale/102926)

<div class="topic-metadata">

**Author:** [@Bkt](https://discuss.elastic.co/u/Bkt)\
**Replies:** 8\
**Last updated:** [October 6, 2017, 11:15pm UTC](https://discuss.elastic.co/t/see-y-axis-as-linear-in-dashboard-instead-of-log-scale/102926 "2017-10-06T23:15:09Z")

</div>

I am trying to create a dashboard with log scale for the y axis, I see it on the visualization tab fine, but I cannot see it on the dashboard. Is there something I am missing?

---

## [How do I delete logstash data by query](https://discuss.elastic.co/t/how-do-i-delete-logstash-data-by-query/1226)

<div class="topic-metadata">

**Author:** [@bigfootxxl](https://discuss.elastic.co/u/bigfootxxl)\
**Replies:** 3\
**Last updated:** [May 26, 2015, 8:39am UTC](https://discuss.elastic.co/t/how-do-i-delete-logstash-data-by-query/1226 "2015-05-26T08:39:53Z")

</div>

Hello. I have some hosts that I need to delete all the syslog data of. So I try the query: curl -XGET 'http://log:9200/logstash-2015.05.23/\_query' -d '{ "query": { "filtered": { "query": { "bool": { …

---

## [Cannot see Filebeats - logstash data in Kibana](https://discuss.elastic.co/t/cannot-see-filebeats-logstash-data-in-kibana/89053)

<div class="topic-metadata">

**Author:** [@priyam](https://discuss.elastic.co/u/priyam)\
**Replies:** 4\
**Last updated:** [June 13, 2017, 12:22pm UTC](https://discuss.elastic.co/t/cannot-see-filebeats-logstash-data-in-kibana/89053 "2017-06-13T12:22:00Z")

</div>

I have configured Filebeat to send data to logstash and logstash sends data to elasticsearch. Nothing appears in logstash-\* in kibana .. neither is there any data in filebeats-\*. Filebeat.yml: filebeat.prospectors: …

---

## [How to upgrade?](https://discuss.elastic.co/t/how-to-upgrade/47273)

<div class="topic-metadata">

**Author:** [@Devnull](https://discuss.elastic.co/u/Devnull)\
**Replies:** 4\
**Last updated:** [April 26, 2016, 9:01am UTC](https://discuss.elastic.co/t/how-to-upgrade/47273 "2016-04-26T09:01:01Z")

</div>

In the docs (https://www.elastic.co/guide/en/kibana/current/index.html) there appears to be no reference whatsoever as to how to upgrade from one version to another. Please clarify.

---

## [Service logstash start, but cannot detect and send logs](https://discuss.elastic.co/t/service-logstash-start-but-cannot-detect-and-send-logs/26404)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 4\
**Last updated:** [July 29, 2015, 2:40am UTC](https://discuss.elastic.co/t/service-logstash-start-but-cannot-detect-and-send-logs/26404 "2015-07-29T02:40:16Z")

</div>

Hi all, service logstash start (start ok as following) cannot detect and send logs, but using /opt/logstash/bin/logstash -f /etc/logstash/conf.d/logstashmiki.conf works fine $service logstash start $ps aux | grep log…

---

## [Elasticsearch diagnostic](https://discuss.elastic.co/t/elasticsearch-diagnostic/25138)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 5\
**Last updated:** [July 9, 2015, 2:52am UTC](https://discuss.elastic.co/t/elasticsearch-diagnostic/25138 "2015-07-09T02:52:26Z")

</div>

Hi!! ES periodically crashed under high load. I wonder how to diagnose ES's problems? Is there any ways or some tips for using ES?

---

## [\[SOLVED\] Logstash not parsing UTM logs correctly](https://discuss.elastic.co/t/solved-logstash-not-parsing-utm-logs-correctly/955)

<div class="topic-metadata">

**Author:** [@Wurzelmann](https://discuss.elastic.co/u/Wurzelmann)\
**Replies:** 3\
**Last updated:** [May 28, 2015, 9:06am UTC](https://discuss.elastic.co/t/solved-logstash-not-parsing-utm-logs-correctly/955 "2015-05-28T09:06:06Z")

</div>

I've got some UTM logs I need to process with logstash, but it only parsing half of it. The logs are divided into four parts, so to speak, namely: 1) ulogd 2) aua 3) reverseproxy 4) wlan I've built a config file, whi…

[Previous page](https://discuss.elastic.co/top.md?page=675&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=677&per_page=50&period=all)
