# Top **URL:** https://discuss.elastic.co/top.md?page=702&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 703 --- ## [Is it possible to restore a specific index from a datastream to a datastream from snapshot](https://discuss.elastic.co/t/is-it-possible-to-restore-a-specific-index-from-a-datastream-to-a-datastream-from-snapshot/334710)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 3\ **Last updated:** [July 5, 2023, 10:50am UTC](https://discuss.elastic.co/t/is-it-possible-to-restore-a-specific-index-from-a-datastream-to-a-datastream-from-snapshot/334710 "2023-07-05T10:50:47Z")
Recently we migrated our elasticsearch cluster and used snapshot/restore to do this. Unfortunately we forgot about a change we made to the lifecycle policy of a the apm traces datastream. Which meant data older than 90 … --- ## [Elasticsearch failed to start](https://discuss.elastic.co/t/elasticsearch-failed-to-start/65140)
**Author:** [@habeebnet](https://discuss.elastic.co/u/habeebnet)\ **Replies:** 6\ **Last updated:** [November 7, 2016, 5:36am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-start/65140 "2016-11-07T05:36:05Z")
centos 6.7 elasticsearch 5 error: permission denied on key 'vm.max\_map\_count' Starting elasticsearch: /usr/share/elasticsearch/bin/elasticsearch: line 198: 875 Killed exec "$JAVA" $ES\_JAVA\_OPTS -Des.… --- ## [Elasticsearch 5.3 Discovery Issue](https://discuss.elastic.co/t/elasticsearch-5-3-discovery-issue/83934)
**Author:** [@bobby259](https://discuss.elastic.co/u/bobby259)\ **Replies:** 3\ **Last updated:** [May 2, 2017, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-5-3-discovery-issue/83934 "2017-05-02T07:42:47Z")
I have build an ES5.3 cluster with Kibana5.3 (No Logstash). I have my nodes in place and curl works just fine on all the nodes. But the problem is, the nodes are not discovering each other. I have tried several options b… --- ## [How to connect java to local elastic search?](https://discuss.elastic.co/t/how-to-connect-java-to-local-elastic-search/41024)
**Author:** [@Rajnikant](https://discuss.elastic.co/u/Rajnikant)\ **Replies:** 3\ **Last updated:** [February 5, 2016, 8:04am UTC](https://discuss.elastic.co/t/how-to-connect-java-to-local-elastic-search/41024 "2016-02-05T08:04:02Z")
i want to connect my local elastic search to java. --- ## [Docker-compose + fleet + RUM + APM on version\>= 7.16](https://discuss.elastic.co/t/docker-compose-fleet-rum-apm-on-version-7-16/298964)
**Author:** [@jan499](https://discuss.elastic.co/u/jan499)\ **Replies:** 5\ **Last updated:** [March 9, 2022, 10:25am UTC](https://discuss.elastic.co/t/docker-compose-fleet-rum-apm-on-version-7-16/298964 "2022-03-09T10:25:21Z")
We have Elasticsearch, Kibana and APM running happily on version 7. However, we want to move to version 8, and because of that we first try to get a working version 7.17. My kibana claims that the APM agent is running a… --- ## [Where to install Filebeat?](https://discuss.elastic.co/t/where-to-install-filebeat/89069)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 5\ **Last updated:** [June 13, 2017, 11:31am UTC](https://discuss.elastic.co/t/where-to-install-filebeat/89069 "2017-06-13T11:31:02Z")
Hi, Sorry about this, but where would I install filebeat? I have an ELK stack already created and want to track exchange messaging logs: would I install Filebeat on my ELK server or on the Exchange server? Thanks T… --- ## [Drop events to monitoring FTP](https://discuss.elastic.co/t/drop-events-to-monitoring-ftp/84443)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 5\ **Last updated:** [May 4, 2017, 3:02pm UTC](https://discuss.elastic.co/t/drop-events-to-monitoring-ftp/84443 "2017-05-04T15:02:23Z")
Hi, I was trying to use Packetbeat to monitor network traffic of a FTP server. in a specific way, I was trying to log all the attempted connections on local port 21 and 22. Just to start I've enabled http protocol on po… --- ## [Visualize REST API calls?](https://discuss.elastic.co/t/visualize-rest-api-calls/221667)
**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\ **Replies:** 4\ **Last updated:** [March 5, 2020, 12:51pm UTC](https://discuss.elastic.co/t/visualize-rest-api-calls/221667 "2020-03-05T12:51:38Z")
Is it possible to directly visualize REST API calls, without resorting to monitoring methods like metricbeat monitoring or xpack internal collection? E.g. could I just make a visual out of this call: "GET \_cluster/heal… --- ## [IF Statement With RegEx](https://discuss.elastic.co/t/if-statement-with-regex/173538)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 4\ **Last updated:** [April 20, 2019, 7:16am UTC](https://discuss.elastic.co/t/if-statement-with-regex/173538 "2019-04-20T07:16:57Z")
Hi, I'm using an IF statement with RegEx but it's never true and seems to skip the whole IF statement. It doesn't get a far as "\[message\] =~ /(\\QChanges\\E)/" so I assume that probably doesn't work either as the first c… --- ## [Update Script in Elasticsearch Output Parsing Array as String](https://discuss.elastic.co/t/update-script-in-elasticsearch-output-parsing-array-as-string/56910)
**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\ **Replies:** 4\ **Last updated:** [December 29, 2016, 11:22am UTC](https://discuss.elastic.co/t/update-script-in-elasticsearch-output-parsing-array-as-string/56910 "2016-12-29T11:22:30Z")
I have a document with the field "name\_servers" and "past\_name\_servers". If I have the following: script\_type =\> "inline" script =\> ' ctx.\_source.name\_servers = "%{name\_servers}"; ctx.\_source.past\_name\_se… --- ## [How to define multiple index types mapping in single template](https://discuss.elastic.co/t/how-to-define-multiple-index-types-mapping-in-single-template/137370)
**Author:** [@yash\_mangla](https://discuss.elastic.co/u/yash_mangla)\ **Replies:** 8\ **Last updated:** [June 26, 2018, 8:38am UTC](https://discuss.elastic.co/t/how-to-define-multiple-index-types-mapping-in-single-template/137370 "2018-06-26T08:38:42Z")
Hello Guyz, I have default Template file of blueliv which was working on elasticsearch-6.2.3. but in 6.2.4 that mapping is not works. I'm getting following error when i tried following configuration: {"error":{"root… --- ## [Metricbeat data gets into logstash but cannot index logs](https://discuss.elastic.co/t/metricbeat-data-gets-into-logstash-but-cannot-index-logs/97001)
**Author:** [@pshah7](https://discuss.elastic.co/u/pshah7)\ **Replies:** 8\ **Last updated:** [August 17, 2017, 7:02pm UTC](https://discuss.elastic.co/t/metricbeat-data-gets-into-logstash-but-cannot-index-logs/97001 "2017-08-17T19:02:11Z")
Hi there, I’m newbie to elastic and I’m trying to setup topbeat to ship logs to logstash. I have installed filebeat on my client and it can ship logs to logstash. Topbeat logs from client - 2017-08-14T13:04:05-04:00 D… --- ## [Gsub match specific string and replace with blank](https://discuss.elastic.co/t/gsub-match-specific-string-and-replace-with-blank/170225)
**Author:** [@Arnav\_Sengupta](https://discuss.elastic.co/u/Arnav_Sengupta)\ **Replies:** 1\ **Last updated:** [February 27, 2019, 7:20pm UTC](https://discuss.elastic.co/t/gsub-match-specific-string-and-replace-with-blank/170225 "2019-02-27T19:20:42Z")
I am trying to replace a specific string using gsub but it's not working correctly. Input -\> /ICW/PDR/backend Desired Output -\> /ICW/PDR What I have used is, gsub =\> \["backend\_name", "\[\\/backend\]", ""\] However, it… --- ## [CSV Filter - Quote character parse failure](https://discuss.elastic.co/t/csv-filter-quote-character-parse-failure/116611)
**Author:** [@NerdSec](https://discuss.elastic.co/u/NerdSec)\ **Replies:** 1\ **Last updated:** [January 23, 2018, 11:25am UTC](https://discuss.elastic.co/t/csv-filter-quote-character-parse-failure/116611 "2018-01-23T11:25:05Z")
I have a CSV file and the format is something like this: "102","60","Open","I hope this works out for \\"random.guy@gmail.com\\"" When i parse this using the CSV filter i get the following error: \[2018-01-23T13:11:58,52… --- ## [Extract date from message \[SOLVED\]](https://discuss.elastic.co/t/extract-date-from-message-solved/87296)
**Author:** [@javier-lopez](https://discuss.elastic.co/u/javier-lopez)\ **Replies:** 1\ **Last updated:** [May 26, 2017, 9:56pm UTC](https://discuss.elastic.co/t/extract-date-from-message-solved/87296 "2017-05-26T21:56:22Z")
Hello forum, I'm new to logstash and having issues trying to extract a log substring as timestamp. The following set May 22 as the @timestamp value: echo "May 22 12:42:16" | ./logstash-5.4.0/bin/logstash -e "input … --- ## [Matching multiple Grok patterns in a single Logstash config file](https://discuss.elastic.co/t/matching-multiple-grok-patterns-in-a-single-logstash-config-file/84249)
**Author:** [@binky](https://discuss.elastic.co/u/binky)\ **Replies:** 1\ **Last updated:** [May 2, 2017, 11:44am UTC](https://discuss.elastic.co/t/matching-multiple-grok-patterns-in-a-single-logstash-config-file/84249 "2017-05-02T11:44:41Z")
Hi there. I'm trying to send a couple of files through Filebeat to a ELK stack. The thing is that the log syntax is not the same, so I came up with two different patterns that mach each of them separately. I've trie… --- ## [Logstash translate plugin dynamic dictionary path](https://discuss.elastic.co/t/logstash-translate-plugin-dynamic-dictionary-path/129889)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 3\ **Last updated:** [April 30, 2018, 4:44pm UTC](https://discuss.elastic.co/t/logstash-translate-plugin-dynamic-dictionary-path/129889 "2018-04-30T16:44:27Z")
Hi, I am creating a csv file which I want to use as a dictionary inside translate plugin. Since the mapping might change the next day, I named my csv file this way: my-mapping-YYYY-MM-dd.csv where YYYY, MM, dd are ye… --- ## [How to configure different types of logs](https://discuss.elastic.co/t/how-to-configure-different-types-of-logs/53356)
**Author:** [@keya](https://discuss.elastic.co/u/keya)\ **Replies:** 3\ **Last updated:** [June 22, 2016, 6:17am UTC](https://discuss.elastic.co/t/how-to-configure-different-types-of-logs/53356 "2016-06-22T06:17:34Z")
I want to configure two different logs in FIlebeat. I have system logs and JSON logs from my application. Can I configure both these in a single config file? If yes, what would be the configuration required for it? In t… --- ## [Received an event that has a different character encoding than you configured](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured/263792)
**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\ **Replies:** 1\ **Last updated:** [February 9, 2021, 6:32pm UTC](https://discuss.elastic.co/t/received-an-event-that-has-a-different-character-encoding-than-you-configured/263792 "2021-02-09T18:32:01Z")
I have seen several threads related to the same error, but none of them seem to address the issue as we are experiencing it. The messages I get this error for are from ADAudit+ reading logs from an Isilon storage applian… --- ## [Making sense of logstash error logs](https://discuss.elastic.co/t/making-sense-of-logstash-error-logs/98590)
**Author:** [@bm1391](https://discuss.elastic.co/u/bm1391)\ **Replies:** 1\ **Last updated:** [August 30, 2017, 4:12pm UTC](https://discuss.elastic.co/t/making-sense-of-logstash-error-logs/98590 "2017-08-30T16:12:32Z")
Here is logstash.log file when restarting logstash and loading my csv file. It appears to load fine and I can view the contents in Kibana but I can't figure out this error message. \` , "CVSS"=\>"CVSS", "Severity"=\>"Sev… --- ## [Running into deadlock of one index](https://discuss.elastic.co/t/running-into-deadlock-of-one-index/8620)
**Author:** [@ywtsang](https://discuss.elastic.co/u/ywtsang)\ **Replies:** 4\ **Last updated:** [August 8, 2012, 12:16pm UTC](https://discuss.elastic.co/t/running-into-deadlock-of-one-index/8620 "2012-08-08T12:16:44Z")
We have been running elasticsearch (0.19.4) on a cluster of 4 machines for 1 weeks and the cluster is mainly doing this kind of index job by 1 thread: job 1: 1) update the index refresh interval to -1 2) prepare b… --- ## [Unable to fetch system.filesystem.used.pct from metricbeat index](https://discuss.elastic.co/t/unable-to-fetch-system-filesystem-used-pct-from-metricbeat-index/216825)
**Author:** [@Nithani25](https://discuss.elastic.co/u/Nithani25)\ **Replies:** 5\ **Last updated:** [January 28, 2020, 1:56pm UTC](https://discuss.elastic.co/t/unable-to-fetch-system-filesystem-used-pct-from-metricbeat-index/216825 "2020-01-28T13:56:07Z")
Hi Team, I am working on creating watcher alert (which would trigger alert when the threshold percent ins exceeded from the target server). My metricbeat index contains almost 30 hostname's in them,but i am now concer… --- ## [Upgrading to v2.4.6](https://discuss.elastic.co/t/upgrading-to-v2-4-6/104106)
**Author:** [@juanito](https://discuss.elastic.co/u/juanito)\ **Replies:** 5\ **Last updated:** [October 17, 2017, 12:36pm UTC](https://discuss.elastic.co/t/upgrading-to-v2-4-6/104106 "2017-10-17T12:36:08Z")
Hi I am trying to upgrade to 2.4.6 and when I am starting elastic, I am getting this error, Why is that? \[2017-10-16 16:48:46,938\]\[ERROR\]\[gateway \] \[Arkus\] failed to read local state, exiting... java… --- ## [Unable to Ship logs through Grafana Loki plugin](https://discuss.elastic.co/t/unable-to-ship-logs-through-grafana-loki-plugin/296535)
**Author:** [@JPablo1982](https://discuss.elastic.co/u/JPablo1982)\ **Replies:** 2\ **Last updated:** [February 8, 2022, 1:26am UTC](https://discuss.elastic.co/t/unable-to-ship-logs-through-grafana-loki-plugin/296535 "2022-02-08T01:26:25Z")
Hello I am trying to get to work the Grafana loki Plugin for Logstash but I am getting a runtime error, here is the detail. Grafana Loki plugin was installed successfully by executing the following command: sudo /usr/… --- ## [Date difference scripted field](https://discuss.elastic.co/t/date-difference-scripted-field/136611)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 2\ **Last updated:** [June 21, 2018, 5:45am UTC](https://discuss.elastic.co/t/date-difference-scripted-field/136611 "2018-06-21T05:45:02Z")
Hi, I wanted to find the difference between two fields using scripted fields. Here are the two date fields and their format: start\_time - June 17th 2018, 09:44:46.000 end\_time - June 17th 2018, 09:44:49.000 Which will… --- ## [Logging to STDOUT 5.x](https://discuss.elastic.co/t/logging-to-stdout-5-x/82342)
**Author:** [@lukejolly](https://discuss.elastic.co/u/lukejolly)\ **Replies:** 2\ **Last updated:** [April 14, 2017, 7:51pm UTC](https://discuss.elastic.co/t/logging-to-stdout-5-x/82342 "2017-04-14T19:51:07Z")
With any systemd OS or when using containers, logging needs to go to STDOUT, not to a file. After much searching, I am still at a loss of how to do this with 5.X. --- ## [Dec 5th, 2024: \[EN\] Keep track of your Steam Deck gaming with the Elastic Agent](https://discuss.elastic.co/t/dec-5th-2024-en-keep-track-of-your-steam-deck-gaming-with-the-elastic-agent/371088)
**Author:** [@AndersonQ](https://discuss.elastic.co/u/AndersonQ)\ **Replies:** 0\ **Last updated:** [December 5, 2024, 8:00am UTC](https://discuss.elastic.co/t/dec-5th-2024-en-keep-track-of-your-steam-deck-gaming-with-the-elastic-agent/371088 "2024-12-05T08:00:51Z")
Esse artigo também está disponível em Português. Let's take Observability to a different spin and and use our favorite tools to monitor our gaming performance. Today we'll explore how to use the Elastic Agent to monitor… --- ## [Reporting timeout](https://discuss.elastic.co/t/reporting-timeout/289180)
**Author:** [@millie123](https://discuss.elastic.co/u/millie123)\ **Replies:** 3\ **Last updated:** [November 17, 2021, 10:26am UTC](https://discuss.elastic.co/t/reporting-timeout/289180 "2021-11-17T10:26:31Z")
Generating a PDF report in canvas fails when the report is too big. Tried increasing timeout without success. Any suggestions greatly appreciated. --- ## [Validation failed, source is missing? what does this mean](https://discuss.elastic.co/t/validation-failed-source-is-missing-what-does-this-mean/20066)
**Author:** [@bitsofinfo](https://discuss.elastic.co/u/bitsofinfo)\ **Replies:** 3\ **Last updated:** [October 3, 2014, 6:00pm UTC](https://discuss.elastic.co/t/validation-failed-source-is-missing-what-does-this-mean/20066 "2014-10-03T18:00:08Z")
Hi, What does this error mean (es 1.3.2) when I do a delete by query? DELETE such as /myIndex/type/\_query { "query": { "term": { "term": "whatever" } } } RESPONSE { - error: … --- ## [What is elasticsearch best feature to achieve what I need?](https://discuss.elastic.co/t/what-is-elasticsearch-best-feature-to-achieve-what-i-need/266360)
**Author:** [@Nuno\_Oliveira](https://discuss.elastic.co/u/Nuno_Oliveira)\ **Replies:** 3\ **Last updated:** [March 6, 2021, 8:52am UTC](https://discuss.elastic.co/t/what-is-elasticsearch-best-feature-to-achieve-what-i-need/266360 "2021-03-06T08:52:21Z")
Hi, I'm relatively new to elasticsearch and I'm not sure what is the best approach to achieve what I want, but this is what I've been trying: I have a list of dog breeds in an Index and given the input "0293 Corki USA" … --- ## [Logstash count events using ruby filter](https://discuss.elastic.co/t/logstash-count-events-using-ruby-filter/300256)
**Author:** [@gnam](https://discuss.elastic.co/u/gnam)\ **Replies:** 4\ **Last updated:** [March 22, 2022, 4:56am UTC](https://discuss.elastic.co/t/logstash-count-events-using-ruby-filter/300256 "2022-03-22T04:56:58Z")
I have following pipeline (example, not full pipeline) where I need count the number of events for EVERY file I am writing as output. For example, this pipleline creates new file every 30 seconds with the events processe… --- ## [Filebeat is unable to send logs into kafka](https://discuss.elastic.co/t/filebeat-is-unable-to-send-logs-into-kafka/251674)
**Author:** [@Ayush\_Agrahari](https://discuss.elastic.co/u/Ayush_Agrahari)\ **Replies:** 4\ **Last updated:** [October 12, 2020, 5:36am UTC](https://discuss.elastic.co/t/filebeat-is-unable-to-send-logs-into-kafka/251674 "2020-10-12T05:36:56Z")
Earlier we were using Filebeat to logstash setup for logs but to make sure no log is lost during down time so we thought to use kafka in between of logstash and filebeat so that kafka would save logs incase of down time. … --- ## [Metricbeat with Apache Virtual Host](https://discuss.elastic.co/t/metricbeat-with-apache-virtual-host/81861)
**Author:** [@NepaliNightmare](https://discuss.elastic.co/u/NepaliNightmare)\ **Replies:** 4\ **Last updated:** [April 13, 2017, 12:40pm UTC](https://discuss.elastic.co/t/metricbeat-with-apache-virtual-host/81861 "2017-04-13T12:40:13Z")
HI, I am attempting to monitor 2 web servers that run apache with a virtual host. When I open the Kibana Apache HTTPD server status dashboard, I get the familiar error of Saved" field" parameters is now invalid.… --- ## [Logstash 5 Alpha4 to elasticsearch5 Alpha4 communication error](https://discuss.elastic.co/t/logstash-5-alpha4-to-elasticsearch5-alpha4-communication-error/56080)
**Author:** [@gaurav\_S\_javheri](https://discuss.elastic.co/u/gaurav_S_javheri)\ **Replies:** 4\ **Last updated:** [January 15, 2017, 11:08am UTC](https://discuss.elastic.co/t/logstash-5-alpha4-to-elasticsearch5-alpha4-communication-error/56080 "2017-01-15T11:08:48Z")
elasticsearch 5 is secured with xpack security and hooked with ldap which is working fine. Even user has admin right in role\_mapping. Below is configuration output { elasticsearch { hosts =\> \['localhost:9200'\] user =\> … --- ## [Heartbeat and Elastic Agent](https://discuss.elastic.co/t/heartbeat-and-elastic-agent/266001)
**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 12:20am UTC](https://discuss.elastic.co/t/heartbeat-and-elastic-agent/266001 "2021-03-03T00:20:33Z")
Hello, If I install Elastic Agent on a Windows 10 machine, and then I want to see the machine in Uptime, why do I need to ping it using Heartbeat? Should not the agent know already it's uptime? Will not this make sense … --- ## [Installing Canvas](https://discuss.elastic.co/t/installing-canvas/155948)
**Author:** [@jc034240](https://discuss.elastic.co/u/jc034240)\ **Replies:** 5\ **Last updated:** [November 15, 2018, 6:35pm UTC](https://discuss.elastic.co/t/installing-canvas/155948 "2018-11-15T18:35:56Z")
Is there a binary download available for Canvas for offline install? I'm getting cert errors when trying to install per Canvas website. I have tried sudo wget --no-check-certificate https://download.elastic.co/kibana/c… --- ## [HDFS Repository and Name Nodes setting](https://discuss.elastic.co/t/hdfs-repository-and-name-nodes-setting/151242)
**Author:** [@ajay\_bh111](https://discuss.elastic.co/u/ajay_bh111)\ **Replies:** 5\ **Last updated:** [October 26, 2018, 2:45pm UTC](https://discuss.elastic.co/t/hdfs-repository-and-name-nodes-setting/151242 "2018-10-26T14:45:10Z")
I could create and do snapshot /restore successfully with hdfs repo using kerbros authentication. However in the config If I use namenode setting as defined in hadoop hdfs-site.xml file:, it fails with error {"error":… --- ## [SQL Query special chars](https://discuss.elastic.co/t/sql-query-special-chars/148595)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 1\ **Last updated:** [September 17, 2018, 11:49am UTC](https://discuss.elastic.co/t/sql-query-special-chars/148595 "2018-09-17T11:49:08Z")
Hi there I have a index called "index-460". When I do SQL query request like: POST \_xpack/sql { "query":"DESCRIBE index-460" } I get the response: { "error": { "root\_cause": \[ { "typ… --- ## [Issue using role mapping API for AD Group](https://discuss.elastic.co/t/issue-using-role-mapping-api-for-ad-group/219229)
**Author:** [@ElasticUser4](https://discuss.elastic.co/u/ElasticUser4)\ **Replies:** 4\ **Last updated:** [February 14, 2020, 6:13pm UTC](https://discuss.elastic.co/t/issue-using-role-mapping-api-for-ad-group/219229 "2020-02-14T18:13:20Z")
Hello, First, I apologize if this is the wrong section to post in. I was not sure if it should be in stack-security, Elasticsearch, etc. I figured being it was around trying to get this to work on ECE that this would … --- ## [Logstash stops processing requests](https://discuss.elastic.co/t/logstash-stops-processing-requests/64162)
**Author:** [@micahlmartin](https://discuss.elastic.co/u/micahlmartin)\ **Replies:** 1\ **Last updated:** [March 9, 2017, 5:06pm UTC](https://discuss.elastic.co/t/logstash-stops-processing-requests/64162 "2017-03-09T17:06:19Z")
We keep running into issues where after a while some of our logstash nodes that are reading from kafka, parsing the data, and sending to ES stop processing new requests. This is what were seeing in the logs: { "infli… --- ## [Can i filter '\_source' field using filtereditor or using '\_source.field' in 'Discover' tab of Kibana?](https://discuss.elastic.co/t/can-i-filter-source-field-using-filtereditor-or-using-source-field-in-discover-tab-of-kibana/165141)
**Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 3\ **Last updated:** [January 23, 2019, 9:53pm UTC](https://discuss.elastic.co/t/can-i-filter-source-field-using-filtereditor-or-using-source-field-in-discover-tab-of-kibana/165141 "2019-01-23T21:53:24Z")
hi. im using Kibana 6.4.1. i want to filter '\_source' field and sorted by '\_source.date' field in 'Discover' tab of Kibana because, variable fields can be exist in each document. this mean, each documents in one index… --- ## [Parsing Asterisk Logs](https://discuss.elastic.co/t/parsing-asterisk-logs/73176)
**Author:** [@taurs](https://discuss.elastic.co/u/taurs)\ **Replies:** 3\ **Last updated:** [January 30, 2017, 12:25pm UTC](https://discuss.elastic.co/t/parsing-asterisk-logs/73176 "2017-01-30T12:25:00Z")
I am trying to Parse some Asterisk Event Logs. 1124909007|NONE|NONE|NONE|CONFIGRELOAD| Can anyone help me with this logstash grok for the logs mentioned above. --- ## [Unable to convert field to date type with date filter](https://discuss.elastic.co/t/unable-to-convert-field-to-date-type-with-date-filter/137018)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 8\ **Last updated:** [June 23, 2018, 1:45pm UTC](https://discuss.elastic.co/t/unable-to-convert-field-to-date-type-with-date-filter/137018 "2018-06-23T13:45:20Z")
Hi, I am unable to convert a date field to its type to date with date filter. Here's what I wrote for achieving that: mutate { add\_field =\> { "end\_date\_parse" =\> "%{end\_date} %{zimbra\_proc\_end\_time}" … --- ## [Date field type problem in reindexing](https://discuss.elastic.co/t/date-field-type-problem-in-reindexing/212865)
**Author:** [@Sina\_Gholami](https://discuss.elastic.co/u/Sina_Gholami)\ **Replies:** 6\ **Last updated:** [January 16, 2020, 8:08am UTC](https://discuss.elastic.co/t/date-field-type-problem-in-reindexing/212865 "2020-01-16T08:08:43Z")
I am trying to merge multiple indices with same fields in Elasticsearch by using \_reindex API as follow: POST \_reindex { "source": { "index": \["a","b"\] }, "dest": { "index": "ab" } } my problem is the date fiel… --- ## [Understand Cluster HA functionality](https://discuss.elastic.co/t/understand-cluster-ha-functionality/58574)
**Author:** [@rajkumar3v](https://discuss.elastic.co/u/rajkumar3v)\ **Replies:** 2\ **Last updated:** [August 22, 2016, 1:52pm UTC](https://discuss.elastic.co/t/understand-cluster-ha-functionality/58574 "2016-08-22T13:52:23Z")
hi Guys, I need to understand such basic functionality of ES. I have 4 node elastic cluster which is having 2 date node, 2 masters and 1 client node. In client servers i use to run shell scripts and forwarding outpu… --- ## [How to Handle Exceptions?](https://discuss.elastic.co/t/how-to-handle-exceptions/194900)
**Author:** [@cd-agutierrez](https://discuss.elastic.co/u/cd-agutierrez)\ **Replies:** 4\ **Last updated:** [August 12, 2019, 7:58pm UTC](https://discuss.elastic.co/t/how-to-handle-exceptions/194900 "2019-08-12T19:58:06Z")
It seems that if logstash encounters an exception in the elasticsearch output pipeline it will completely halt processing of any further entries. \[2019-08-08T22:14:44,075\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\]… --- ## [Timelion - graphs per day over a week selected in kibana time picker](https://discuss.elastic.co/t/timelion-graphs-per-day-over-a-week-selected-in-kibana-time-picker/159050)
**Author:** [@Isilve28](https://discuss.elastic.co/u/Isilve28)\ **Replies:** 4\ **Last updated:** [December 5, 2018, 6:17am UTC](https://discuss.elastic.co/t/timelion-graphs-per-day-over-a-week-selected-in-kibana-time-picker/159050 "2018-12-05T06:17:05Z")
Hello ! I need to create a dashboard which will always take days from monday to friday in kibana time picker. I want to build 5 timelion graphs to display daily events over selected week in order to compare them. ex :… --- ## [Kibana 5.0.1 used for range filter always EPOCH time](https://discuss.elastic.co/t/kibana-5-0-1-used-for-range-filter-always-epoch-time/70701)
**Author:** [@Alexandr\_Senchenko](https://discuss.elastic.co/u/Alexandr_Senchenko)\ **Replies:** 4\ **Last updated:** [January 18, 2017, 11:09am UTC](https://discuss.elastic.co/t/kibana-5-0-1-used-for-range-filter-always-epoch-time/70701 "2017-01-18T11:09:01Z")
Browser: Chrome (latest) on Mac OSZ Kibana 5.0.1 (Linux Ubuntu) Hi, When I want to build visualization at Kibana it generates request with range filter in UNIX format: { "range": { "Regions.Date… --- ## [Update partial document by query](https://discuss.elastic.co/t/update-partial-document-by-query/67962)
**Author:** [@arno-london](https://discuss.elastic.co/u/arno-london)\ **Replies:** 4\ **Last updated:** [December 5, 2016, 11:01am UTC](https://discuss.elastic.co/t/update-partial-document-by-query/67962 "2016-12-05T11:01:54Z")
Hello, I would like to update a partial document by query using Elasticsearch 2.4. I don't want to use the scripts tag because I don't want to enumerate all the fields, I would like to use a doc property like the simpl… --- ## [Best way to enable GC logging (as of 2.x)](https://discuss.elastic.co/t/best-way-to-enable-gc-logging-as-of-2-x/36784)
**Author:** [@Bruno\_Lavoie](https://discuss.elastic.co/u/Bruno_Lavoie)\ **Replies:** 4\ **Last updated:** [December 14, 2015, 8:09pm UTC](https://discuss.elastic.co/t/best-way-to-enable-gc-logging-as-of-2-x/36784 "2015-12-14T20:09:20Z")
Hello, I looked at many sources for enabling GC logging, so much confusion. What is the best way to enable this? In elasticsearch.yml file via monitor.jvm.\* values? In /etc/sysconfig/elasticsearch ES\_JAVA\_OPTS? Wh… [Previous page](https://discuss.elastic.co/top.md?page=701&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=703&per_page=50&period=all)